VIRY.CZ

OTL logfile created on: 4.2.2012 17:02:24 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = D:\Documents and Settings\AAA\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,29 Gb Available Physical Memory | 64,42% Memory free
4,86 Gb Paging File | 4,25 Gb Available in Paging File | 87,51% Paging File free
Paging file location(s): D:\pagefile.sys 3080 4104 [binary data]

%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 48,83 Gb Total Space | 33,65 Gb Free Space | 68,91% Space Free | Partition Type: NTFS
Drive D: | 249,26 Gb Total Space | 103,71 Gb Free Space | 41,61% Space Free | Partition Type: NTFS

Computer Name: ALES | User Name: AAA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.02.04 17:00:04 | 000,584,192 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\AAA\Plocha\OTL.exe
PRC - [2012.01.20 06:35:36 | 001,047,024 | ---- | M] (Google Inc.) -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011.10.08 05:50:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010.04.10 10:09:29 | 001,800,464 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2010.04.10 10:08:54 | 000,723,632 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe
PRC - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe


========== Modules (No Company Name) ==========

MOD - [2012.02.04 08:31:51 | 001,689,088 | ---- | M] () -- D:\Program Files\AVAST Software\Avast\defs\12020400\algo.dll
MOD - [2012.01.20 06:35:35 | 000,411,120 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\ppgooglenaclpluginchrome.dll
MOD - [2012.01.20 06:35:34 | 003,767,792 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\pdf.dll
MOD - [2012.01.20 06:34:10 | 000,122,880 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avutil-51.dll
MOD - [2012.01.20 06:34:09 | 000,222,208 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avformat-53.dll
MOD - [2012.01.20 06:34:07 | 001,746,432 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avcodec-53.dll
MOD - [2012.01.20 03:14:40 | 008,593,056 | ---- | M] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\gcswf32.dll
MOD - [2011.10.08 05:50:00 | 000,355,432 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\nView\nvShell.dll
MOD - [2010.04.10 10:11:36 | 001,143,056 | ---- | M] () -- D:\Program Files\COMODO\COMODO Internet Security\scanners\mach32.dll
MOD - [2008.10.11 22:18:46 | 000,319,488 | ---- | M] () -- D:\Program Files\WinRAR\rarlng.dll
MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- D:\Program Files\WinRAR\RarExt.dll
MOD - [2008.07.14 19:26:24 | 000,054,784 | R--- | M] () -- D:\WINDOWS\system32\LF2GRPJL.DLL


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (DAUpdaterSvc)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.10.08 05:50:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010.04.10 10:08:54 | 000,723,632 | ---- | M] (COMODO) [Auto | Running] -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2008.11.11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.04.14 04:22:08 | 000,006,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv)
SRV - [2007.05.28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2003.04.07 06:32:06 | 000,065,795 | R--- | M] (HP) [On_Demand | Stopped] -- D:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


========== Driver Services (SafeList) ==========

DRV - [2012.01.31 19:50:19 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2011.12.23 19:26:49 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2011.11.29 16:38:04 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- D:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- D:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- D:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.10.27 02:25:54 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssudserd.sys -- (ssudserd) SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.)
DRV - [2011.10.27 02:25:54 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.)
DRV - [2011.10.27 02:25:54 | 000,078,136 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV - [2011.10.27 02:25:40 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011.10.27 02:25:40 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2011.10.27 02:25:40 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV - [2011.10.27 02:25:40 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb)
DRV - [2011.10.27 02:25:40 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2011.07.08 00:21:30 | 000,119,656 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2011.03.07 10:20:08 | 000,015,896 | ---- | M] (HandSet Incorporated) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\massfilter_hs.sys -- (massfilter_hs)
DRV - [2010.11.26 18:02:52 | 000,014,776 | ---- | M] () [Kernel | Boot | Running] -- D:\WINDOWS\System32\Drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2010.07.20 10:24:39 | 000,697,328 | ---- | M] () [Kernel | Boot | Running] -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.04.10 10:10:38 | 000,087,104 | ---- | M] (COMODO) [Kernel | Boot | Running] -- D:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2010.04.10 10:10:37 | 000,025,160 | ---- | M] (COMODO) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2010.04.10 10:10:36 | 000,134,344 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmdguard.sys -- (cmdGuard)
DRV - [2009.03.25 14:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009.01.20 19:56:46 | 000,087,536 | ---- | M] (CyberLink Corp.) [2009/02/11 12:29:51] [Kernel | Auto | Running] -- D:\Program Files\CyberLink\PowerDVD8\000.fcl -- ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054})
DRV - [2009.01.20 15:35:39 | 000,278,728 | ---- | M] () [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.01.20 15:35:38 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2008.09.24 10:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.01.16 22:47:06 | 000,033,152 | R--- | M] (OEM) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\XMLDIUSB.sys -- (XMLDIUSB)
DRV - [2006.07.24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- D:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2005.03.15 12:00:00 | 000,277,504 | ---- | M] (Philips Semiconductors) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\SAA713x.sys -- (713xTVCard)
DRV - [2004.10.27 06:24:00 | 000,223,104 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2004.08.04 06:31:32 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2003.12.31 04:58:46 | 000,069,504 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\Rtlnic51.sys -- (RTL8023)
DRV - [2003.03.25 09:55:04 | 000,027,136 | R--- | M] (Mobile Action Tech. Inc.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\MA-620.sys -- (MA-620)
DRV - [2002.09.16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
IE - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found
IE - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1214440339-1220945662-725345543-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "http://www.google.cz/"
FF - prefs.js..extensions.enabledItems: xmlfiller@software602.cz:3.1.7
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.5
FF - prefs.js..extensions.enabledItems: {2832ABCD-4444-1012-2D45-132D5447C445}:1.0.0
FF - prefs.js..extensions.enabledItems: {003D3EDC-99B9-4a34-9C20-60CB94F7E829}:2009
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: d:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: D:\Documents and Settings\All Users\Data aplikací\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: D:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll (Yahoo! Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: D:\Program Files\AVAST Software\Avast\WebRep\FF [2011.12.22 11:22:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.01.28 14:44:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2012.02.04 11:04:40 | 000,000,000 | ---D | M]

[2008.08.10 12:34:11 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Extensions
[2012.01.26 12:03:34 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions
[2009.07.25 19:44:28 | 000,000,000 | ---D | M] (WebTran) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829}
[2009.09.02 13:53:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.01.16 21:00:57 | 000,000,000 | ---D | M] (Rapidlibrary Search ToolBar) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}
[2011.12.25 17:07:29 | 000,000,000 | ---D | M] (DownloadHelper) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.01.26 12:03:34 | 000,000,000 | ---D | M] (Greasemonkey) -- D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2012.01.28 13:56:35 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
[2010.03.04 10:05:52 | 000,000,000 | ---D | M] ("602XML Filler") -- D:\Program Files\Mozilla Firefox\extensions\xmlfiller@software602.cz
File not found (No name found) -- D:\DOCUMENTS AND SETTINGS\AAA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\X1PZLXN6.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
[2011.12.22 11:22:50 | 000,000,000 | ---D | M] (avast! WebRep) -- D:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2012.01.11 09:06:39 | 000,121,816 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.12.17 15:39:34 | 000,090,112 | ---- | M] () -- D:\Program Files\mozilla firefox\plugins\npfiller.dll
[2007.03.10 00:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- D:\Program Files\mozilla firefox\plugins\npyaxmpb.dll
[2012.01.11 09:06:33 | 000,002,208 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.01.11 09:06:33 | 000,000,638 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.03.25 19:23:40 | 000,001,687 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2012.01.11 09:06:33 | 000,001,367 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.01.11 09:06:33 | 000,000,654 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.01.11 09:06:33 | 000,001,179 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = D:\Documents and Settings\AAA\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.5 (861) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = D:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = D:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = D:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = D:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = D:\Documents and Settings\AAA\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = D:\Documents and Settings\AAA\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = D:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npfiller.dll
CHR - plugin: Pando Web Installer (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\AAA\Local Settings\Data aplikac\u00ED\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Nexon Game Controller (Enabled) = D:\Documents and Settings\All Users\Data aplikac\u00ED\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: QUAKE LIVE (Enabled) = D:\Documents and Settings\All Users\Data aplikac\u00ED\id Software\QuakeLive\npquakezero.dll
CHR - plugin: Google Earth Plugin (Enabled) = D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Angry Birds = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.1.2.1_0\
CHR - Extension: YouTube = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: No name found = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gliedaffibdnbhbiaolgkdhhfbjgmhgi\1.0\
CHR - Extension: Bubble Shooter = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\hpakbhbnhkbghdcejiiangcefallmaln\2.0_0\
CHR - Extension: No name found = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\iccigcodfkejfabfbepnfoddhnlmimgo\1.0\
CHR - Extension: avast! WebRep = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\
CHR - Extension: Mapy Google = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.3_0\
CHR - Extension: Charlotte Ronson = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\obakimnhgahiedhcjlcnohielmendpen\3_0\
CHR - Extension: No name found = D:\Documents and Settings\AAA\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pgbdhkpacgdhfabeceekiafonfkipohm\1.0\

O1 HOSTS File: ([2012.02.04 11:10:22 | 000,000,027 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No CLSID value found.
O3 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - d:\Program Files\Google\GoogleToolbar2.dll (Google Inc.)
O4 - HKLM..\Run: [avast] D:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [COMODO Internet Security] D:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1214440339-1220945662-725345543-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - D:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O15 - HKU\S-1-5-21-1214440339-1220945662-725345543-1004\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} D:\Program Files\Yahoo!\Common\Yinsthelper.dll (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/G ... meHost.cab (Oberon Flash Game Host)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.123.254 81.19.33.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F539BC3-9D84-4393-9391-72E949663D45}: DhcpNameServer = 10.0.123.254 81.19.33.2
O20 - AppInit_DLLs: (D:\WINDOWS\system32\guard32.dll) -D:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) -D:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: D:\Documents and Settings\AAA\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\AAA\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.07.09 14:27:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32: msacm.l3acm - D:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - D:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.sl_anet - D:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - D:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - D:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - D:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - D:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - D:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv31 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - D:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.VP60 - D:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - D:\WINDOWS\system32\vp6vfw.dll (On2.com)
PhysicalDisk0 MBR saved to D:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.02.04 16:59:58 | 000,584,192 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\AAA\Plocha\OTL.exe
[2012.02.04 16:49:44 | 000,000,000 | ---D | C] -- D:\i68Backups
[2012.02.04 13:29:29 | 000,000,000 | -HSD | C] -- D:\RECYCLER
[2012.02.04 13:14:30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Nabídka Start\Programy\MonkeyDragon
[2012.02.04 13:14:30 | 000,000,000 | ---D | C] -- D:\Program Files\FIFA Config Addon
[2012.02.04 12:41:42 | 000,000,000 | ---D | C] -- D:\Documents and Settings\AAA\Nabídka Start\Programy\FIFA 12 REAL PERFORMANCE OPTIMIZER V. 1.0 BY DOCTOR+ PRODUCTIONS
[2012.02.04 12:11:43 | 000,000,000 | ---D | C] -- D:\Program Files\FIFA 12
[2012.02.03 20:43:21 | 000,518,144 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWREG.exe
[2012.02.03 20:43:21 | 000,406,528 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWSC.exe
[2012.02.03 20:43:21 | 000,212,480 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWXCACLS.exe
[2012.02.03 20:43:21 | 000,060,416 | ---- | C] (NirSoft) -- D:\WINDOWS\NIRCMD.exe
[2012.02.03 20:42:45 | 000,000,000 | ---D | C] -- D:\WINDOWS\ERDNT
[2012.02.03 20:42:12 | 000,000,000 | ---D | C] -- D:\Qoobox
[2012.02.03 20:41:46 | 000,000,000 | R--D | C] -- D:\Documents and Settings\AAA\Nabídka Start\Programy\Nástroje pro správu
[2012.02.03 20:41:46 | 000,000,000 | R--D | C] -- D:\Documents and Settings\All Users\Dokumenty\Filmy
[2012.02.03 20:37:42 | 004,394,794 | R--- | C] (Swearware) -- D:\Documents and Settings\AAA\Plocha\ComboFix.exe
[2012.02.03 17:22:04 | 000,000,000 | ---D | C] -- D:\Documents and Settings\AAA\Dokumenty\KONAMI
[2012.02.03 17:13:51 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Nabídka Start\Programy\KONAMI
[2012.02.03 16:52:38 | 000,000,000 | ---D | C] -- D:\Program Files\KONAMI
[2012.02.03 15:02:21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\AAA\Plocha\RK_Quarantine
[2012.02.03 12:54:29 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Nabídka Start\Programy\PESEdit.com 2012 Patch
[2012.02.03 11:19:03 | 000,000,000 | ---D | C] -- D:\Program Files\trend micro
[2012.02.03 11:19:02 | 000,000,000 | ---D | C] -- D:\rsit
[2012.02.02 13:28:41 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Nabídka Start\Programy\Picasa 3
[2012.02.01 18:51:54 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Nabídka Start\Programy\HD Tune
[2012.02.01 18:51:53 | 000,000,000 | ---D | C] -- D:\Program Files\HD Tune
[2012.01.31 20:25:43 | 000,000,000 | ---D | C] -- D:\Program Files\Realtek AC97
[2012.01.31 20:08:36 | 000,130,432 | ---- | C] (Realtek Semiconductor Corporation ) -- D:\WINDOWS\System32\drivers\Rtnicxp.sys
[2012.01.31 19:50:19 | 000,023,456 | ---- | C] (Phoenix Technologies) -- D:\WINDOWS\System32\drivers\DrvAgent32.sys
[2012.01.31 19:50:19 | 000,000,000 | ---D | C] -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\eSupport.com
[2012.01.29 14:14:35 | 000,000,000 | ---D | C] -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\mpress
[2009.02.23 19:27:42 | 000,047,360 | ---- | C] (VSO Software) -- D:\Documents and Settings\AAA\Data aplikací\pcouffin.sys
[2006.09.28 15:55:44 | 002,248,984 | ---- | C] (Microsoft Corporation) -- D:\Program Files\dsetup32.dll
[2006.09.28 15:55:44 | 000,484,632 | ---- | C] (Microsoft Corporation) -- D:\Program Files\DXSETUP.exe
[2006.09.28 15:55:44 | 000,074,520 | ---- | C] (Microsoft Corporation) -- D:\Program Files\DSETUP.dll
[12 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[1 D:\Documents and Settings\AAA\Local Settings\Data aplikací\*.tmp files -> D:\Documents and Settings\AAA\Local Settings\Data aplikací\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.02.04 17:07:41 | 000,000,512 | ---- | M] () -- D:\PhysicalMBR.bin
[2012.02.04 17:00:04 | 000,584,192 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\AAA\Plocha\OTL.exe
[2012.02.04 13:14:33 | 000,000,765 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Config ADDON.lnk
[2012.02.04 12:57:32 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2012.02.04 12:46:13 | 000,494,456 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat
[2012.02.04 12:46:13 | 000,489,370 | ---- | M] () -- D:\WINDOWS\System32\perfh005.dat
[2012.02.04 12:46:13 | 000,098,648 | ---- | M] () -- D:\WINDOWS\System32\perfc005.dat
[2012.02.04 12:46:13 | 000,084,808 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat
[2012.02.04 12:32:19 | 000,000,728 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\FIFA 12.lnk
[2012.02.04 11:10:22 | 000,000,027 | ---- | M] () -- D:\WINDOWS\System32\drivers\etc\hosts
[2012.02.03 20:37:50 | 004,394,794 | R--- | M] (Swearware) -- D:\Documents and Settings\AAA\Plocha\ComboFix.exe
[2012.02.03 11:08:40 | 000,285,192 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb1.bin
[2012.02.03 11:08:40 | 000,000,001 | ---- | M] () -- D:\WINDOWS\System32\nvdrssel.bin
[2012.02.03 10:54:34 | 000,285,192 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb0.bin
[2012.02.03 10:33:59 | 000,021,760 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2012.02.02 22:22:08 | 000,000,069 | ---- | M] () -- D:\WINDOWS\NeroDigital.ini
[2012.02.02 13:29:20 | 000,000,759 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2012.02.01 15:02:53 | 000,000,803 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Fakturky 5.3.1.lnk
[2012.01.31 19:50:19 | 000,023,456 | ---- | M] (Phoenix Technologies) -- D:\WINDOWS\System32\drivers\DrvAgent32.sys
[2012.01.30 20:42:25 | 000,012,756 | ---- | M] () -- D:\Documents and Settings\AAA\Dokumenty\messi.odt
[2012.01.30 19:46:08 | 000,013,634 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\aj.odt
[2012.01.30 13:12:34 | 062,258,618 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\40_January_2011.pdf
[2012.01.28 17:53:03 | 000,001,374 | ---- | M] () -- D:\WINDOWS\imsins.BAK
[12 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[1 D:\Documents and Settings\AAA\Local Settings\Data aplikací\*.tmp files -> D:\Documents and Settings\AAA\Local Settings\Data aplikací\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.02.04 17:07:41 | 000,000,512 | ---- | C] () -- D:\PhysicalMBR.bin
[2012.02.04 13:14:33 | 000,000,765 | ---- | C] () -- D:\Documents and Settings\All Users\Plocha\Config ADDON.lnk
[2012.02.04 12:32:19 | 000,000,728 | ---- | C] () -- D:\Documents and Settings\All Users\Plocha\FIFA 12.lnk
[2012.02.04 12:32:18 | 000,000,734 | ---- | C] () -- D:\Documents and Settings\All Users\Nabídka Start\Programy\FIFA 12.lnk
[2012.02.03 20:43:21 | 000,256,000 | ---- | C] () -- D:\WINDOWS\PEV.exe
[2012.02.03 20:43:21 | 000,208,896 | ---- | C] () -- D:\WINDOWS\MBR.exe
[2012.02.03 20:43:21 | 000,098,816 | ---- | C] () -- D:\WINDOWS\sed.exe
[2012.02.03 20:43:21 | 000,080,412 | ---- | C] () -- D:\WINDOWS\grep.exe
[2012.02.03 20:43:21 | 000,068,096 | ---- | C] () -- D:\WINDOWS\zip.exe
[2012.02.02 13:29:20 | 000,000,759 | ---- | C] () -- D:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2012.02.01 15:02:53 | 000,000,803 | ---- | C] () -- D:\Documents and Settings\All Users\Plocha\Fakturky 5.3.1.lnk
[2012.01.31 20:08:36 | 000,073,728 | ---- | C] () -- D:\WINDOWS\System32\RtNicProp32.dll
[2012.01.30 20:42:24 | 000,012,756 | ---- | C] () -- D:\Documents and Settings\AAA\Dokumenty\messi.odt
[2012.01.30 18:43:07 | 000,013,634 | ---- | C] () -- D:\Documents and Settings\AAA\Plocha\aj.odt
[2012.01.30 13:06:13 | 062,258,618 | ---- | C] () -- D:\Documents and Settings\AAA\Plocha\40_January_2011.pdf
[2012.01.28 13:10:31 | 000,000,012 | ---- | C] () -- D:\WINDOWS\System32\nvModes.dat
[2012.01.22 13:35:10 | 000,014,776 | ---- | C] () -- D:\WINDOWS\System32\drivers\SmartDefragDriver.sys
[2012.01.06 22:00:37 | 000,585,672 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2011.12.25 21:01:49 | 000,207,718 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-1214440339-1220945662-725345543-1004-0.dat
[2011.12.25 21:01:48 | 000,103,838 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.12.25 14:44:08 | 000,000,000 | ---- | C] () -- D:\Documents and Settings\All Users\Data aplikací\LauncherAccess.dt
[2011.12.25 14:35:55 | 000,005,632 | ---- | C] () -- D:\WINDOWS\System32\drivers\StarOpen.sys
[2011.11.29 16:38:18 | 000,030,568 | ---- | C] () -- D:\WINDOWS\MusiccityDownload.exe
[2011.11.29 16:38:12 | 000,974,848 | ---- | C] () -- D:\WINDOWS\System32\cis-2.4.dll
[2011.11.29 16:38:12 | 000,081,920 | ---- | C] () -- D:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.11.29 16:38:12 | 000,065,536 | ---- | C] () -- D:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.11.29 16:38:12 | 000,057,344 | ---- | C] () -- D:\WINDOWS\System32\issacapi_se-2.3.dll
[2011.11.06 11:01:52 | 000,000,012 | ---- | C] () -- D:\Documents and Settings\All Users\Data aplikací\ReminderNextRun
[2011.10.28 12:24:24 | 000,000,135 | ---- | C] () -- D:\WINDOWS\wcx_ftp.ini
[2011.10.28 12:23:44 | 000,001,689 | ---- | C] () -- D:\WINDOWS\WINCMD.INI
[2011.08.17 10:33:15 | 000,000,130 | ---- | C] () -- D:\WINDOWS\cfplogvw.INI
[2011.08.10 08:45:14 | 000,584,584 | ---- | C] () -- D:\WINDOWS\adb.exe
[2011.08.10 08:45:14 | 000,001,386 | ---- | C] () -- D:\WINDOWS\InnoTipLanguage.ini
[2011.05.21 06:01:00 | 002,130,002 | ---- | C] () -- D:\WINDOWS\System32\nvdata.data
[2010.11.28 16:54:17 | 000,000,125 | ---- | C] () -- D:\WINDOWS\wininit.ini
[2010.11.22 15:32:07 | 000,000,004 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\steam_md4.dat
[2010.11.13 20:10:45 | 000,002,692 | ---- | C] () -- D:\WINDOWS\Ascd_tmp.ini
[2010.11.13 13:39:32 | 000,579,599 | ---- | C] () -- D:\Program Files\Feb2005_d3dx9_24_x64.cab
[2010.10.11 13:25:57 | 000,285,192 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb0.bin
[2010.10.11 13:25:53 | 000,285,192 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb1.bin
[2010.10.11 13:25:53 | 000,000,001 | ---- | C] () -- D:\WINDOWS\System32\nvdrssel.bin
[2010.09.20 13:27:20 | 000,000,056 | -H-- | C] () -- D:\WINDOWS\System32\ezsidmv.dat
[2010.07.11 12:23:38 | 000,005,248 | ---- | C] () -- D:\WINDOWS\System32\drivers\giveio.sys
[2010.07.08 08:52:00 | 000,001,324 | ---- | C] () -- D:\WINDOWS\System32\d3d9caps.dat
[2010.07.01 15:53:34 | 000,000,000 | ---- | C] () -- D:\WINDOWS\PowerReg.dat
[2010.06.29 13:41:27 | 000,319,488 | R--- | C] () -- D:\WINDOWS\System32\MafiaSetup.exe
[2009.11.08 21:10:08 | 000,002,399 | ---- | C] () -- D:\WINDOWS\MAILTRAN.INI
[2009.11.06 09:58:04 | 000,178,975 | ---- | C] () -- D:\WINDOWS\System32\xlive.dll.cat
[2009.10.17 17:26:47 | 000,001,025 | ---- | C] () -- D:\WINDOWS\System32\clauth2.dll
[2009.10.17 17:26:47 | 000,001,025 | ---- | C] () -- D:\WINDOWS\System32\clauth1.dll
[2009.10.17 17:26:47 | 000,000,073 | ---- | C] () -- D:\WINDOWS\System32\ssprs.dll
[2009.10.17 17:26:46 | 000,001,025 | ---- | C] () -- D:\WINDOWS\System32\sysprs7.dll
[2009.10.17 17:26:46 | 000,000,205 | ---- | C] () -- D:\WINDOWS\System32\lsprst7.dll
[2009.10.06 08:16:02 | 000,819,200 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll
[2009.07.25 19:43:41 | 000,002,957 | ---- | C] () -- D:\WINDOWS\TRNCOM.INI
[2009.02.23 19:28:13 | 000,000,671 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\vso_ts_preview.xml
[2009.02.23 19:27:42 | 000,087,608 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\inst.exe
[2009.02.23 19:27:42 | 000,007,887 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\pcouffin.cat
[2009.02.23 19:27:42 | 000,001,144 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\pcouffin.inf
[2009.02.16 15:53:59 | 000,302,592 | ---- | C] () -- D:\WINDOWS\mauninst.exe
[2009.02.11 13:15:32 | 000,007,680 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2009.01.20 15:35:39 | 000,278,728 | ---- | C] () -- D:\WINDOWS\System32\drivers\atksgt.sys
[2009.01.20 15:35:38 | 000,025,416 | ---- | C] () -- D:\WINDOWS\System32\drivers\lirsgt.sys
[2009.01.19 10:30:22 | 000,003,208 | ---- | C] () -- D:\WINDOWS\im32st.dat
[2008.12.29 13:04:44 | 000,054,784 | R--- | C] () -- D:\WINDOWS\System32\LF2GRPJL.DLL
[2008.12.29 13:04:44 | 000,016,896 | R--- | C] () -- D:\WINDOWS\System32\LF2GRPOW.EXE
[2008.12.29 13:04:44 | 000,013,312 | R--- | C] () -- D:\WINDOWS\System32\LF2GRCOI.DLL
[2008.12.07 13:06:52 | 000,000,138 | ---- | C] () -- D:\WINDOWS\cdplayer.ini
[2008.11.09 10:20:35 | 002,250,024 | ---- | C] () -- D:\WINDOWS\System32\pbsvc.exe
[2008.10.22 18:11:54 | 000,491,520 | ---- | C] () -- D:\WINDOWS\WebIE.dll
[2008.10.22 18:11:47 | 000,000,033 | ---- | C] () -- D:\WINDOWS\WTRDCTM.INI
[2008.10.22 18:11:22 | 000,516,096 | ---- | C] () -- D:\WINDOWS\UN32.EXE
[2008.10.22 18:11:22 | 000,002,575 | ---- | C] () -- D:\WINDOWS\UN32P.INI
[2008.10.16 18:31:22 | 000,225,280 | ---- | C] () -- D:\WINDOWS\K500iphmgunin.exe
[2008.10.09 18:15:17 | 000,000,045 | -H-- | C] () -- D:\WINDOWS\dsez5400.dat
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelFrench.dll
[2008.09.15 18:08:48 | 000,004,096 | ---- | C] () -- D:\WINDOWS\d3dx.dat
[2008.09.15 16:41:39 | 000,000,151 | ---- | C] () -- D:\WINDOWS\PhotoSnapViewer.INI
[2008.09.07 15:19:37 | 000,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini
[2008.08.31 07:24:48 | 000,043,520 | ---- | C] () -- D:\WINDOWS\System32\CmdLineExt03.dll
[2008.08.19 19:32:18 | 000,000,050 | ---- | C] () -- D:\WINDOWS\System32\imon1.dat
[2008.08.17 14:33:07 | 000,000,169 | ---- | C] () -- D:\WINDOWS\RtlRack.ini
[2008.08.17 08:51:37 | 000,138,160 | ---- | C] () -- D:\WINDOWS\System32\drivers\PnkBstrK.sys
[2008.08.17 08:51:36 | 000,022,328 | ---- | C] () -- D:\Documents and Settings\AAA\Data aplikací\PnkBstrK.sys
[2008.08.17 08:51:20 | 000,271,200 | ---- | C] () -- D:\WINDOWS\System32\PnkBstrB.exe
[2008.08.17 08:51:18 | 000,075,136 | ---- | C] () -- D:\WINDOWS\System32\PnkBstrA.exe
[2008.08.17 08:51:16 | 000,000,319 | ---- | C] () -- D:\WINDOWS\game.ini
[2008.08.12 14:02:28 | 000,000,225 | ---- | C] () -- D:\WINDOWS\level.ini
[2008.08.11 17:20:50 | 000,020,458 | ---- | C] () -- D:\WINDOWS\hpoins01.dat
[2008.08.11 17:20:50 | 000,016,622 | ---- | C] () -- D:\WINDOWS\hpomdl01.dat
[2008.08.11 17:20:12 | 000,561,152 | R--- | C] () -- D:\WINDOWS\System32\hpotscl.dll
[2008.08.10 15:57:38 | 000,215,552 | ---- | C] () -- D:\WINDOWS\System32\RTCOMDLL.dll
[2008.08.10 15:57:38 | 000,147,456 | ---- | C] () -- D:\WINDOWS\System32\RtlCPAPI.dll
[2008.08.10 15:57:38 | 000,049,152 | ---- | C] () -- D:\WINDOWS\System32\ChCfg.exe
[2008.08.10 15:30:21 | 000,005,824 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008.08.10 14:23:10 | 000,004,569 | ---- | C] () -- D:\WINDOWS\System32\secupd.dat
[2008.08.10 13:50:35 | 000,004,265 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI
[2008.08.10 13:48:19 | 000,119,744 | ---- | C] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2008.08.10 13:31:26 | 000,115,200 | ---- | C] () -- D:\Documents and Settings\AAA\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.08.10 12:34:12 | 000,000,000 | ---- | C] () -- D:\WINDOWS\nsreg.dat
[2008.08.10 11:59:39 | 000,002,048 | --S- | C] () -- D:\WINDOWS\bootstat.dat
[2008.08.10 11:56:13 | 000,021,812 | ---- | C] () -- D:\WINDOWS\System32\emptyregdb.dat
[2006.09.28 16:22:02 | 000,049,149 | ---- | C] () -- D:\Program Files\OCT2006_xinput_x86.cab
[2006.09.28 16:21:46 | 000,041,996 | ---- | C] () -- D:\Program Files\dxdllreg_x86.cab
[2006.09.28 15:55:44 | 000,082,374 | ---- | C] () -- D:\Program Files\dxupdate.cab
[2006.09.28 15:55:42 | 001,358,864 | ---- | C] () -- D:\Program Files\Dec2005_d3dx9_28_x64.cab
[2006.09.28 15:55:42 | 001,080,344 | ---- | C] () -- D:\Program Files\Dec2005_d3dx9_28_x86.cab
[2006.09.28 15:55:42 | 000,088,102 | ---- | C] () -- D:\Program Files\AUG2006_xinput_x64.cab
[2006.09.28 15:55:42 | 000,047,018 | ---- | C] () -- D:\Program Files\AUG2006_xinput_x86.cab
[2006.09.28 15:55:40 | 004,163,518 | ---- | C] () -- D:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2006.09.28 15:55:40 | 001,398,718 | ---- | C] () -- D:\Program Files\Apr2006_d3dx9_30_x64.cab
[2006.09.28 15:55:40 | 001,351,430 | ---- | C] () -- D:\Program Files\Aug2005_d3dx9_27_x64.cab
[2006.09.28 15:55:40 | 001,116,109 | ---- | C] () -- D:\Program Files\Apr2006_d3dx9_30_x86.cab
[2006.09.28 15:55:40 | 001,078,532 | ---- | C] () -- D:\Program Files\Aug2005_d3dx9_27_x86.cab
[2006.09.28 15:55:40 | 000,917,318 | ---- | C] () -- D:\Program Files\Apr2006_MDX1_x86.cab
[2006.09.28 15:55:40 | 000,183,863 | ---- | C] () -- D:\Program Files\AUG2006_XACT_x64.cab
[2006.09.28 15:55:40 | 000,180,021 | ---- | C] () -- D:\Program Files\Apr2006_XACT_x64.cab
[2006.09.28 15:55:40 | 000,138,195 | ---- | C] () -- D:\Program Files\AUG2006_XACT_x86.cab
[2006.09.28 15:55:40 | 000,133,991 | ---- | C] () -- D:\Program Files\Apr2006_XACT_x86.cab
[2006.09.28 15:55:40 | 000,087,989 | ---- | C] () -- D:\Program Files\Apr2006_xinput_x64.cab
[2006.09.28 15:55:40 | 000,046,898 | ---- | C] () -- D:\Program Files\Apr2006_xinput_x86.cab
[2006.09.28 15:55:38 | 001,348,242 | ---- | C] () -- D:\Program Files\Apr2005_d3dx9_25_x64.cab
[2006.09.28 15:55:38 | 001,079,850 | ---- | C] () -- D:\Program Files\Apr2005_d3dx9_25_x86.cab
[2006.09.28 15:55:36 | 013,265,040 | ---- | C] () -- D:\Program Files\dxnt.cab
[2006.09.28 15:55:34 | 015,493,481 | ---- | C] () -- D:\Program Files\DirectX.cab
[2006.09.28 15:55:34 | 001,156,363 | ---- | C] () -- D:\Program Files\BDANT.cab
[2006.09.28 15:55:34 | 000,976,020 | ---- | C] () -- D:\Program Files\BDAXP.cab
[2006.09.28 15:55:34 | 000,703,080 | ---- | C] () -- D:\Program Files\BDA.cab
[2003.03.20 12:51:38 | 000,001,280 | ---- | C] () -- D:\WINDOWS\System32\OEMINFO.INI
[2002.09.20 18:19:36 | 000,001,804 | ---- | C] () -- D:\WINDOWS\System32\dcache.bin
[2002.09.06 11:36:16 | 000,233,472 | ---- | C] () -- D:\WINDOWS\System32\lame_enc.dll
[2002.04.02 18:03:30 | 013,107,200 | ---- | C] () -- D:\WINDOWS\System32\oembios.bin
[2002.04.02 18:02:34 | 000,004,688 | ---- | C] () -- D:\WINDOWS\System32\oembios.dat
[2001.10.25 13:00:00 | 000,673,088 | ---- | C] () -- D:\WINDOWS\System32\mlang.dat
[2001.10.25 13:00:00 | 000,494,456 | ---- | C] () -- D:\WINDOWS\System32\perfh009.dat
[2001.10.25 13:00:00 | 000,489,370 | ---- | C] () -- D:\WINDOWS\System32\perfh005.dat
[2001.10.25 13:00:00 | 000,272,128 | ---- | C] () -- D:\WINDOWS\System32\perfi009.dat
[2001.10.25 13:00:00 | 000,269,162 | ---- | C] () -- D:\WINDOWS\System32\perfi005.dat
[2001.10.25 13:00:00 | 000,218,003 | ---- | C] () -- D:\WINDOWS\System32\dssec.dat
[2001.10.25 13:00:00 | 000,098,648 | ---- | C] () -- D:\WINDOWS\System32\perfc005.dat
[2001.10.25 13:00:00 | 000,084,808 | ---- | C] () -- D:\WINDOWS\System32\perfc009.dat
[2001.10.25 13:00:00 | 000,046,258 | ---- | C] () -- D:\WINDOWS\System32\mib.bin
[2001.10.25 13:00:00 | 000,032,072 | ---- | C] () -- D:\WINDOWS\System32\perfd005.dat
[2001.10.25 13:00:00 | 000,028,626 | ---- | C] () -- D:\WINDOWS\System32\perfd009.dat
[2001.10.25 13:00:00 | 000,000,741 | ---- | C] () -- D:\WINDOWS\System32\noise.dat
[2001.01.12 10:49:38 | 000,021,504 | ---- | C] () -- D:\WINDOWS\System32\zlib.dll
[1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- D:\WINDOWS\System32\giveio.sys

========== LOP Check ==========

[2011.06.27 14:45:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\.minecraft
[2009.06.28 12:32:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Allstar
[2011.03.25 17:08:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\AnvSoft
[2008.08.31 07:24:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Atari
[2008.08.16 08:22:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DAEMON Tools
[2010.01.25 15:03:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DAEMON Tools Lite
[2009.07.03 16:38:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DeepBurner
[2012.01.28 14:30:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\GameRanger
[2009.01.01 14:10:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Happy Foto
[2011.05.15 17:55:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\id Software
[2012.01.27 22:49:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\IObit
[2009.10.05 14:10:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\LangSoft
[2008.08.31 07:23:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Leadertech
[2009.01.05 11:17:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\MailWasherPro
[2009.12.05 19:18:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Memeo
[2008.10.16 18:29:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\MobileAction
[2011.09.27 16:47:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Need for Speed World
[2009.05.30 19:44:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Nokia
[2008.12.25 10:11:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\PC Suite
[2009.07.02 19:53:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Publish Providers
[2011.12.27 14:39:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Samsung
[2010.03.28 15:38:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Soldat
[2009.07.02 19:53:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Sony
[2008.09.06 08:27:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Summer Athletics 2008
[2011.12.25 18:24:12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Temp
[2011.12.29 14:47:29 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\The Creative Assembly
[2011.05.09 18:56:30 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\TS3Client
[2010.04.06 17:07:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Ubisoft
[2009.06.21 16:22:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\VitySoft
[2012.01.03 20:19:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Vso
[2011.02.16 12:33:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\wargaming.net
[2009.12.05 19:18:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\WD
[2011.02.27 10:14:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\WeGame
[2008.12.06 15:14:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Zoner
[2011.12.22 11:21:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2010.01.29 18:11:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\BioWare
[2010.01.13 17:53:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Clarus
[2011.07.06 18:59:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Codemasters
[2010.01.24 19:11:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2012.01.27 22:48:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Electronic Arts
[2011.09.15 15:32:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\ESET
[2011.07.05 13:40:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\FileServe Limited
[2009.05.30 19:34:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Installations
[2012.01.21 14:30:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\IObit
[2012.02.03 16:52:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\KONAMI
[2009.07.25 19:43:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\LangSoft
[2009.09.14 12:43:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\NexonUS
[2009.05.30 19:39:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Nokia
[2008.11.19 18:43:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\PC Suite
[2009.09.14 03:29:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\PMB Files
[2009.12.06 15:12:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\RTL Winter Sports 2008
[2011.12.25 15:16:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Samsung
[2009.09.12 18:42:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\SmartSound Software Inc
[2009.07.02 19:42:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Sony
[2009.08.30 17:56:00 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Temp
[2010.12.11 21:13:11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\TmForever
[2010.04.06 17:07:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Ubisoft
[2009.03.10 11:25:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\vsosdk
[2009.01.24 11:32:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Data aplikací\Winter Sports 2009

========== Purity Check ==========



========== Custom Scans ==========


< netsvc >


< MD5 for: ATAPI.SYS >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\sp2.cab:atapi.sys
[2002.08.29 01:27:50 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- D:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- D:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- D:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- D:\WINDOWS\system32\drivers\atapi.sys
[2004.08.04 06:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- D:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.04 06:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- D:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- D:\WINDOWS\system32\autochk.exe
[2004.08.17 23:49:21 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- D:\WINDOWS\$NtServicePackUninstall$\autochk.exe
[2004.08.17 23:49:21 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\autochk.exe

< MD5 for: CDROM.SYS >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\sp2.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- D:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- D:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- D:\WINDOWS\system32\dllcache\cdrom.sys
[2004.08.04 06:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- D:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
[2004.08.04 06:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- D:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- D:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- D:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 23:49:22 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- D:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2004.08.17 23:49:22 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\explorer.exe

< MD5 for: HAL.DLL >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2009.01.20 11:20:02 | 023,890,583 | ---- | M] () .cab file -- D:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.08.11 19:49:38 | 022,286,602 | ---- | M] () .cab file -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\sp2.cab:hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- D:\WINDOWS\system32\HAL.DLL
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- D:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.04 06:59:19 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=C321C95318495909A0066FB0EDC97287 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\hal.dll
[2004.08.04 06:59:12 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- D:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 23:49:16 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- D:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2004.08.17 23:49:16 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- D:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- D:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- D:\WINDOWS\system32\scecli.dll

< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- D:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- D:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- D:\WINDOWS\system32\svchost.exe
[2004.08.17 23:49:27 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- D:\WINDOWS\$NtServicePackUninstall$\svchost.exe
[2004.08.17 23:49:27 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\svchost.exe

< MD5 for: TCPIP.SYS >
[2006.04.20 12:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- D:\WINDOWS\$hf_mig$\KB917953\SP2GDR\tcpip.sys
[2006.04.20 12:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- D:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2002.08.29 01:58:12 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- D:\WINDOWS\$NtUninstallKB917953_0$\tcpip.sys
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- D:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- D:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- D:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- D:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- D:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- D:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- D:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- D:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.04 07:14:40 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- D:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2004.08.04 07:14:40 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- D:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- D:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 13:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- D:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- D:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- D:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- D:\WINDOWS\system32\userinit.exe
[2004.08.17 23:49:27 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- D:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2004.08.17 23:49:27 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 23:49:27 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- D:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2004.08.17 23:49:27 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- D:\WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- D:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- D:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- D:\WINDOWS\system32\winlogon.exe

< %systemroot%*.* /U /s >
[12 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[17 D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[9 D:\WINDOWS\Installer\*.tmp files -> D:\WINDOWS\Installer\*.tmp -> ]
[1 D:\WINDOWS\system32\*.tmp files -> D:\WINDOWS\system32\*.tmp -> ]
[1 D:\WINDOWS\twain_32\*.tmp files -> D:\WINDOWS\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2008.08.20 19:12:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Agnitum

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.06.27 14:45:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\.minecraft
[2008.09.21 13:01:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Adobe
[2008.11.23 10:52:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Ahead
[2009.06.28 12:32:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Allstar
[2011.03.25 17:08:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\AnvSoft
[2009.09.01 13:50:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Apple Computer
[2008.08.31 07:24:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Atari
[2009.12.05 19:24:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Comodo
[2009.08.30 18:02:33 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\CyberLink
[2008.08.16 08:22:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DAEMON Tools
[2010.01.25 15:03:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DAEMON Tools Lite
[2009.07.03 16:38:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\DeepBurner
[2009.12.05 20:53:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Download Manager
[2012.02.02 22:20:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\dvdcss
[2012.01.28 14:30:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\GameRanger
[2008.09.16 17:50:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Google
[2011.12.23 19:38:04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Hamachi
[2009.01.01 14:10:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Happy Foto
[2010.01.14 15:48:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Help
[2008.08.11 17:25:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Hewlett-Packard
[2011.05.15 17:55:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\id Software
[2008.08.10 12:04:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Identities
[2012.01.27 22:49:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\IObit
[2009.10.05 14:10:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\LangSoft
[2008.08.31 07:23:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Leadertech
[2008.12.13 17:33:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Macromedia
[2009.01.05 11:17:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\MailWasherPro
[2008.11.22 14:27:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Media Player Classic
[2009.12.05 19:18:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Memeo
[2011.12.27 15:27:59 | 000,000,000 | --SD | M] -- D:\Documents and Settings\AAA\Data aplikací\Microsoft
[2008.10.16 18:29:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\MobileAction
[2008.08.10 12:34:11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Mozilla
[2011.09.27 16:47:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Need for Speed World
[2009.05.30 19:44:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Nokia
[2011.05.21 09:26:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\NVIDIA
[2012.02.02 18:23:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\OpenOffice.org2
[2008.12.25 10:11:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\PC Suite
[2009.07.02 19:53:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Publish Providers
[2011.12.27 14:39:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Samsung
[2009.09.05 08:20:12 | 000,000,000 | RH-D | M] -- D:\Documents and Settings\AAA\Data aplikací\SecuROM
[2012.02.02 19:51:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Skype
[2011.11.21 19:58:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\skypePM
[2010.03.28 15:38:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Soldat
[2009.07.02 19:53:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Sony
[2008.09.06 08:27:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Summer Athletics 2008
[2008.08.10 12:28:52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Sun
[2009.11.21 12:08:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\teamspeak2
[2011.12.25 18:24:12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Temp
[2011.12.29 14:47:29 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\The Creative Assembly
[2011.05.09 18:56:30 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\TS3Client
[2010.01.27 18:39:28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\U3
[2010.04.06 17:07:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Ubisoft
[2010.08.25 10:45:33 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Ventrilo
[2009.06.21 16:22:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\VitySoft
[2012.02.04 17:26:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\vlc
[2012.01.03 20:19:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Vso
[2011.02.16 12:33:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\wargaming.net
[2009.12.05 19:18:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\WD
[2011.02.27 10:14:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\WeGame
[2008.08.16 08:20:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\WinRAR
[2008.12.06 15:14:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\AAA\Data aplikací\Zoner

< %APPDATA%\*.exe /s >
[2009.02.23 19:27:42 | 000,087,608 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\inst.exe
[2009.06.14 05:16:53 | 000,010,134 | R--- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2012.01.22 19:06:44 | 003,154,792 | ---- | M] (Microsoft Corporation) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\NDP40-KB2461678-x86.exe
[2011.11.29 20:58:44 | 000,935,312 | ---- | M] (Samsung) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\Kies.exe
[2011.11.29 20:58:48 | 000,278,928 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\KiesDriverInstaller.exe
[2011.11.29 16:44:38 | 000,292,864 | ---- | M] (Samsung) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\KiesLogger.exe
[2011.11.29 20:58:46 | 003,508,624 | ---- | M] (Samsung Electronics Co., Ltd.) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\KiesTrayAgent.exe
[2011.11.29 16:40:26 | 000,140,800 | ---- | M] (Mobileleader Co., Ltd.) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\DeviceModules\ConnectionManager.exe
[2011.11.29 16:40:26 | 000,284,672 | ---- | M] (Mobileleader Co., Ltd.) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\DeviceModules\DeviceDataService.exe
[2011.11.29 16:40:28 | 000,691,200 | ---- | M] (Mobileleader Co., Ltd.) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\DeviceModules\DeviceManager.exe
[2011.11.29 16:40:26 | 000,110,080 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\DeviceModules\ErrorReport.exe
[2011.11.29 20:58:52 | 000,067,472 | ---- | M] (Samsung) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\DeviceModules\Kies_Tutorial.exe
[2011.11.29 16:39:44 | 000,106,408 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\FirmwareUpdate\AgentInstaller.exe
[2011.11.29 16:39:44 | 000,101,288 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\FirmwareUpdate\AgentUpdate.exe
[2011.11.29 20:58:56 | 000,131,984 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2011.11.29 20:58:56 | 000,021,392 | ---- | M] () -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\FirmwareUpdate\KiesPDLR.exe
[2011.11.29 20:58:58 | 003,569,984 | ---- | M] (Freeware) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\MediaModules\MyFreeCodecPack.exe
[2011.11.29 16:37:46 | 024,114,392 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2011.11.29 20:59:00 | 000,392,080 | ---- | M] (ml) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\Temp\Kies.Update.exe
[2012.01.04 07:07:42 | 000,371,088 | ---- | M] (ml) -- D:\Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\Updater\Kies.Update.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 D:\WINDOWS\system32\*.tmp files -> D:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.07.20 10:24:39 | 000,697,328 | ---- | M] () Unable to obtain MD5 -- D:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2008.08.10 13:47:30 | 000,094,208 | ---- | M] () -- D:\WINDOWS\System32\config\default.sav
[2008.08.10 13:47:30 | 000,606,208 | ---- | M] () -- D:\WINDOWS\System32\config\software.sav
[2008.08.10 13:47:30 | 000,405,504 | ---- | M] () -- D:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 D:\WINDOWS\system32\*.tmp files -> D:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.02.03 10:54:34 | 000,285,192 | ---- | M] () -- D:\WINDOWS\system32\nvdrsdb0.bin
[2012.02.03 11:08:40 | 000,285,192 | ---- | M] () -- D:\WINDOWS\system32\nvdrsdb1.bin
[2012.02.03 11:08:40 | 000,000,001 | ---- | M] () -- D:\WINDOWS\system32\nvdrssel.bin
[2012.02.04 12:46:13 | 000,098,648 | ---- | M] () -- D:\WINDOWS\system32\perfc005.dat
[2012.02.04 12:46:13 | 000,084,808 | ---- | M] () -- D:\WINDOWS\system32\perfc009.dat
[2012.02.04 12:46:13 | 000,489,370 | ---- | M] () -- D:\WINDOWS\system32\perfh005.dat
[2012.02.04 12:46:13 | 000,494,456 | ---- | M] () -- D:\WINDOWS\system32\perfh009.dat
[2012.02.04 12:46:12 | 001,184,746 | ---- | M] () -- D:\WINDOWS\system32\PerfStringBackup.INI
[2012.02.03 10:33:59 | 000,021,760 | ---- | M] () -- D:\WINDOWS\system32\wpa.dbl
[1 D:\WINDOWS\system32\*.tmp files -> D:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %userprofile%\Plocha\*.* >
[2011.12.10 19:31:09 | 000,003,430 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\2592_1323541863545.pdf
[2012.01.30 13:12:34 | 062,258,618 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\40_January_2011.pdf
[2012.01.16 15:56:36 | 000,112,305 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\950369_302217_A029845_F_001.jpg
[2012.01.30 19:46:08 | 000,013,634 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\aj.odt
[2008.08.10 14:14:40 | 000,001,560 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\CCleaner.lnk
[2011.11.22 18:50:29 | 000,658,849 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\Cenik_C.pdf
[2012.02.03 20:37:50 | 004,394,794 | R--- | M] (Swearware) -- D:\Documents and Settings\AAA\Plocha\ComboFix.exe
[2012.01.06 19:22:39 | 000,160,071 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\Faktura_6811.PDF
[2012.01.25 17:36:45 | 000,002,241 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\Google Chrome.lnk
[2011.02.11 15:32:00 | 000,000,738 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\JDownloader.lnk
[2012.02.04 17:00:04 | 000,584,192 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\AAA\Plocha\OTL.exe
[2012.01.10 14:31:40 | 000,151,831 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\pojistovna 2 0033.jpg
[2008.10.05 10:02:10 | 000,000,917 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\Revo Uninstaller.lnk
[2012.02.03 15:03:15 | 000,001,897 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\RKreport[1].txt
[2012.02.03 18:43:03 | 000,001,915 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\RKreport[2].txt
[2012.02.03 18:43:16 | 000,001,974 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\RKreport[3].txt
[2012.02.03 18:44:39 | 000,001,098 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\RKreport[4].txt
[2012.02.03 19:45:13 | 000,000,717 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\RKreport[5].txt
[2011.12.10 18:39:19 | 000,038,697 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\STM_CZ1006000000000172003048_20111031_2011000010.PDF
[2012.01.15 16:14:52 | 000,039,942 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\STM_CZ1006000000000172003048_20111130_2011000011.PDF
[2012.01.15 16:15:35 | 000,039,021 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\STM_CZ1006000000000172003048_20111231_2011000012.PDF
[2008.08.10 12:35:37 | 000,000,104 | ---- | M] () -- D:\Documents and Settings\AAA\Plocha\Tento počítač.lnk
[2011.12.10 09:58:30 | 000,081,920 | -HS- | M] () -- D:\Documents and Settings\AAA\Plocha\Thumbs.db

< %userprofile%\Desktop\*.* >

< %ALLUSERSPROFILE%\Plocha\*.* >
[2011.12.22 11:27:03 | 000,001,695 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2012.02.04 13:14:33 | 000,000,765 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Config ADDON.lnk
[2011.11.09 16:27:34 | 000,000,803 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Fakturky 5.2.4.lnk
[2012.02.01 15:02:53 | 000,000,803 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Fakturky 5.3.1.lnk
[2012.02.04 12:32:19 | 000,000,728 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\FIFA 12.lnk
[2011.12.17 09:28:25 | 000,001,921 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Google Earth.lnk
[2009.06.21 10:09:46 | 000,001,602 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2012.02.02 13:29:20 | 000,000,759 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2010.12.11 20:21:32 | 000,000,799 | ---- | M] () -- D:\Documents and Settings\All Users\Plocha\TmNationsForever.lnk

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[2008.12.07 17:27:38 | 000,000,556 | ---- | M] () -- \Documents and Settings\AAA\Dokumenty\ZPS10\Alba\Staniči 2007\cs_crackhouse.bsp.lnk
[2008.12.07 17:27:38 | 000,000,556 | ---- | M] () -- \Documents and Settings\AAA\Dokumenty\ZPS10\Alba\Staniči 2007\cs_crackhouse.res.lnk
[2008.12.07 17:27:38 | 000,000,556 | ---- | M] () -- \Documents and Settings\AAA\Dokumenty\ZPS10\Alba\Staniči 2007\cs_crackhouse.txt.lnk
[2010.11.20 09:20:46 | 008,451,745 | ---- | M] () -- \lukas veci\patche\Nová složka\call-of-duty-black-ops-mp-bots-crack-by-bpmrec0rds.rar
[2010.11.21 16:45:49 | 633,398,397 | ---- | M] () -- \lukas veci\patche\Nová složka\call-of-duty-modern-warfare-2-mp-crack-zdokonalim-navodem-i-foto-navodem.rar
[2010.11.13 11:39:46 | 007,988,050 | ---- | M] () -- \lukas veci\patche\Nová složka\Call.of.Duty.Black.Ops.Crackfix-RELOADED.rar
[2011.04.06 15:00:14 | 007,738,396 | ---- | M] () -- \lukas veci\patche\Nová složka\crack 1,01.rar
[2011.02.05 16:24:37 | 016,045,186 | ---- | M] () -- \lukas veci\patche\Nová složka\CrackedBFBC2_Multiplayer.rar
[2011.08.15 13:01:27 | 019,109,079 | ---- | M] () -- \lukas veci\patche\Nová složka\Crack_GTA_San_Andreas.rar
[2011.06.08 15:45:29 | 026,429,326 | ---- | M] () -- \lukas veci\patche\Nová složka\fifa-11-patch-10-1-crack.rar
[2010.11.28 17:00:26 | 000,291,259 | ---- | M] () -- \lukas veci\patche\Nová složka\GTA IV 1.0.3.0 Crack.rar
[2011.08.16 12:38:39 | 004,768,328 | ---- | M] () -- \lukas veci\patche\Nová složka\Gta-sa-crack-i-na-vistu.rar
[2011.08.16 13:08:20 | 004,761,648 | ---- | M] () -- \lukas veci\patche\Nová složka\gta-sa-crack.rar
[2011.08.15 13:26:04 | 004,763,628 | ---- | M] () -- \lukas veci\patche\Nová složka\GTA-San-Andreas-Crack-RAZOR-1911.rar
[2011.08.15 13:34:14 | 004,761,656 | ---- | M] () -- \lukas veci\patche\Nová složka\gta-san-andreas-crack.rar
[2011.08.15 13:31:14 | 004,764,609 | ---- | M] () -- \lukas veci\patche\Nová složka\GTA-San-Andreas-NO-CD-CRACK-v1.0-by-Kropovez.rar
[2010.08.26 10:09:59 | 024,591,863 | ---- | M] () -- \lukas veci\patche\Nová složka\Mafia-2-CRACK-SKIDROW.rar
[2010.08.26 09:57:04 | 022,656,882 | ---- | M] () -- \lukas veci\patche\Nová složka\Mafia2.Crack.version2.CW.CrOwN..rar
[2010.08.26 09:37:04 | 022,702,128 | ---- | M] () -- \lukas veci\patche\Nová složka\Mafia_2_crack_v3.rar
[2011.02.11 17:54:03 | 000,004,328 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\CrackedCom.class

< *keygen* /s >

< *loader* /s >
[2011.06.01 15:00:11 | 000,000,465 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\.minecraft\ModLoader.txt
[2011.06.01 15:00:10 | 000,000,107 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\.minecraft\config\ModLoader.cfg
[2011.11.29 18:24:24 | 000,069,120 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2011.11.29 20:58:56 | 000,131,984 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\backup\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.01.22 19:13:09 | 000,028,629 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\Sub\CabFile\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll.cab
[2012.01.22 19:12:14 | 000,058,835 | ---- | M] () -- \Documents and Settings\AAA\Data aplikací\Samsung\Kies\UpdateTemp\Sub\CabFile\External\FirmwareUpdate\BinaryLoaderMgr.exe.cab
[2011.02.11 15:32:00 | 000,000,322 | ---- | M] () -- \Documents and Settings\AAA\Nabídka Start\Programy\JDownloader\JDownloader Support.lnk
[2011.02.11 15:32:00 | 000,000,806 | ---- | M] () -- \Documents and Settings\AAA\Nabídka Start\Programy\JDownloader\JDownloader.lnk
[2011.02.11 15:32:58 | 000,000,794 | ---- | M] () -- \Documents and Settings\AAA\Nabídka Start\Programy\JDownloader\Uninstall JDownloader.lnk
[2011.02.11 15:32:00 | 000,000,738 | ---- | M] () -- \Documents and Settings\AAA\Plocha\JDownloader.lnk
[1999.11.04 15:06:48 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2007.06.27 19:03:00 | 000,177,448 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2011.07.13 12:42:12 | 000,000,147 | ---- | M] () -- \Program Files\Common Files\Blizzard Entertainment\BlizzardDownloader.ini
[2009.07.27 17:24:06 | 002,475,304 | ---- | M] () -- \Program Files\CyberLink\Shared Files\Plugin\6.0\CES_3DLoaderFBX.dll
[2011.12.20 18:45:12 | 001,015,128 | ---- | M] () -- \Program Files\IObit\Game Booster 3\Freeware\GB_FreeSoftwareDownloader.exe
[2009.10.26 21:52:34 | 000,214,528 | ---- | M] () -- \Program Files\JDownloader\JDownloader.exe
[2011.02.11 17:51:54 | 000,593,293 | ---- | M] () -- \Program Files\JDownloader\JDownloader.jar
[2009.10.06 23:48:58 | 000,000,113 | ---- | M] () -- \Program Files\JDownloader\jd\img\hosterlogos\uploader.pl.png
[2009.10.30 19:18:06 | 000,003,264 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\IPAUploaderCom.class
[2011.02.11 17:52:56 | 000,007,069 | ---- | M] () -- \Program Files\JDownloader\jd\plugins\hoster\UploaderPl.class
[2009.10.26 21:48:22 | 000,032,222 | ---- | M] () -- \Program Files\JDownloader\licenses\jdownloader.license
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2006.06.27 16:30:46 | 000,023,552 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\javaloader.uno.dll
[2006.06.28 19:48:18 | 000,005,226 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\pythonloader.py
[2010.06.07 15:22:41 | 000,005,218 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\pythonloader.pyc
[2006.06.27 22:31:48 | 000,015,872 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\pythonloader.uno.dll
[2006.06.28 21:58:48 | 000,000,145 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\pythonloader.uno.ini
[2006.06.27 16:30:46 | 000,018,432 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\shlibloader.uno.dll
[2006.06.27 22:05:30 | 000,003,198 | ---- | M] () -- \Program Files\OpenOffice.org 2.0\program\classes\unoloader.jar
[2012.01.04 02:09:24 | 000,069,120 | ---- | M] () -- \Program Files\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.01.04 07:07:38 | 000,131,984 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2008.06.20 19:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2011.07.12 15:35:08 | 003,734,648 | ---- | M] () -- \Program Files\World of Warcraft CATA\BackgroundDownloader.exe
[2011.07.13 12:43:43 | 000,004,381 | ---- | M] () -- \Program Files\World of Warcraft CATA\Logs\Downloader.log
[2011.07.12 15:34:37 | 005,127,168 | ---- | M] () -- \Program Files\World of Warcraft CATA\Temp\wow-4.2.0.2506-enUS-tools-downloader.exe
[2011.07.12 15:33:52 | 000,000,096 | ---- | M] () -- \Program Files\World of Warcraft CATA\Temp\Logs\Downloader Termination.log
[2011.07.12 15:34:42 | 000,005,281 | ---- | M] () -- \Program Files\World of Warcraft CATA\Temp\Logs\Downloader.log
[2004.08.17 23:49:04 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.04 06:59:37 | 000,230,400 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.exe
[2004.08.04 06:59:37 | 000,278,016 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.ntd
[2008.09.21 12:48:56 | 000,000,986 | ---- | M] () -- \WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 19:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 19:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2004.08.17 23:49:04 | 000,035,840 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\dmloader.dll
[2004.08.04 06:59:37 | 000,230,400 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\osloader.exe
[2004.08.04 06:59:37 | 000,278,016 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\osloader.ntd
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2009.01.16 18:34:14 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2008.12.04 00:59:30 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr

< *RemoveWAT* /s >

< *minodlogin* /s >

< *tnod* /s >

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >

< *serial* /s >
[2012.02.02 14:59:23 | 000,000,044 | ---- | M] () -- \Documents and Settings\AAA\Local Settings\Data aplikací\Google\Picasa2\cache\cacheindex_serial.pmp
[2007.06.21 19:54:29 | 000,000,097 | ---- | M] () -- \fotky\Obrázky\Nová složka\Crack\Serial.txt
[2011.10.27 11:52:16 | 000,000,161 | ---- | M] () -- \lukas veci\patche\k\AIDA64 Extreme Edition 2.00.1700\AIDA64 Extreme Edition 2.00.1700\Serial Number....txt
[2011.09.19 18:57:40 | 052,512,219 | ---- | M] () -- \Program Files\FIFA 12\Game\data\fifarna\debug\rnaSerial1.bin
[2011.09.19 18:57:42 | 015,901,225 | ---- | M] () -- \Program Files\FIFA 12\Game\data\fifarna\debug\rnaSerial1_gpucrash.bin
[2011.09.19 18:57:42 | 008,388,608 | ---- | M] () -- \Program Files\FIFA 12\Game\data\fifarna\debug\rnaSerial2.bin
[2011.08.30 16:58:34 | 000,413,696 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.60831.0\System.Runtime.Serialization.dll
[2011.10.28 21:16:40 | 001,186,816 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.60831.0\System.Runtime.Serialization.ni.dll
[2010.04.07 22:48:30 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2012.02.03 21:44:35 | 000,000,948 | ---- | M] () -- \Qoobox\Quarantine\Registry_backups\AddRemove-18_Zinia_Serial_Driver.reg.dat
[2004.08.17 23:43:54 | 000,028,416 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\grserial.sys
[2004.08.17 23:44:15 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2011.04.16 12:05:51 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.01.10 09:51:36 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.04.16 12:06:38 | 000,086,016 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2010.06.12 08:00:25 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011.10.13 11:54:28 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011.10.13 12:15:40 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
[2012.01.07 17:42:50 | 002,637,312 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\32c0d8ec285dd7764f74ee4578fdfd53\System.Runtime.Serialization.ni.dll
[2012.01.07 17:42:03 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\6b006c60270cd9fcd3ae3820ab8a98e9\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2012.01.22 19:34:45 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.01.22 19:15:05 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.01.22 19:34:42 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2012.01.22 19:14:48 | 001,026,936 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2008.07.25 10:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2007.10.26 02:16:32 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.04.07 22:48:30 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 001,026,936 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 01:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 01:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 03:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2004.08.17 23:43:54 | 000,028,416 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\grserial.sys
[2004.08.17 23:44:15 | 000,064,640 | ---- | M] () -- \WINDOWS\SoftwareDistribution\Download\4df038d60d071da9e4afe55fba7cbfbf\serial.sys
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"COMODO Internet Security" = "D:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h -- [2010.04.10 10:09:29 | 001,800,464 | ---- | M] (COMODO)
"avast" = "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui -- [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software)
"NvCplDaemon" = RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup -- [2008.04.14 04:22:43 | 000,033,280 | ---- | M] (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
"" =
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed" = 1
"" =
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"NoChange" = 1
"Installed" = 1
"" =
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed" = 1
"" =

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = D:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 04:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.02.04 17:07:41 | 000,000,512 | ---- | M] () MD5=DA4E95ABC26EC7F7B26ABFF6D4E60463 -- D:\PhysicalMBR.bin

< End of report >

Chtěl bych Tě upozornit, že cracky nejsou zrovna nejlepší cestou.

Znovu spusť OTL.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: AAA
->Temp folder emptied: 33072 bytes
->Temporary Internet Files folder emptied: 1994995 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 49553612 bytes
->Google Chrome cache emptied: 245262527 bytes
->Flash cache emptied: 2341 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 18286351 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33728 bytes
RecycleBin emptied: 10814455 bytes

Total Files Cleaned = 311,00 mb


[EMPTYFLASH]

User: AAA
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

D:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore points cleared and new OTL Restore Point set!
========== OTL ==========
Service DAUpdaterSvc stopped successfully!
Service DAUpdaterSvc deleted successfully!
Service AppMgmt stopped successfully!
Service AppMgmt deleted successfully!
Registry value HKEY_USERS\S-1-5-21-1214440339-1220945662-725345543-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
Prefs.js: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1\ deleted successfully.
D:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}\defaults\preferences folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}\defaults folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}\chrome\skin folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}\chrome\content folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445}\chrome folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\Mozilla\Firefox\Profiles\x1pzlxn6.default\extensions\{2832ABCD-4444-1012-2D45-132D5447C445} folder moved successfully.
File D:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll not found.
File D:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFC32E1D-EE75-4A48-BC60-104E11EE2431}\ not found.
Starting removal of ActiveX control {30528230-99f7-4bb4-88d8-fa1d4f56a2ab}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}\ not found.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1431.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP151A.tmp\Microsoft.Build.Utilities.dll deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP151A.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15FD.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1619.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C9.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2041.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP258.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C9.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3D.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F2.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4C2.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP604C.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP721.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9C8.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA5C.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB58.tmp folder deleted successfully.
D:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBD9.tmp folder deleted successfully.
D:\WINDOWS\Installer\MSI10FE.tmp deleted successfully.
D:\WINDOWS\Installer\MSI118.tmp deleted successfully.
D:\WINDOWS\Installer\MSI11F5.tmp deleted successfully.
D:\WINDOWS\Installer\MSI1458.tmp deleted successfully.
D:\WINDOWS\Installer\MSI1F3.tmp deleted successfully.
D:\WINDOWS\Installer\MSI7F.tmp deleted successfully.
D:\WINDOWS\Installer\MSI85.tmp deleted successfully.
D:\WINDOWS\Installer\MSIEA.tmp deleted successfully.
D:\WINDOWS\Installer\MSIF4.tmp deleted successfully.
D:\WINDOWS\twain_32\hpqgends.tmp deleted successfully.
========== FILES ==========
D:\Documents and Settings\AAA\Data aplikací\IObit\Smart Defrag 2 folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\IObit Uninstaller\Log folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\IObit Uninstaller folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\IObit Malware Fighter folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\InternetBooster folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\Advanced SystemCare\Backup\Registry folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\Advanced SystemCare\Backup folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit\Advanced SystemCare folder moved successfully.
D:\Documents and Settings\AAA\Data aplikací\IObit folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus\SysInspector folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\ESET\ESET NOD32 Antivirus folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\ESET folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\IObit\Game Booster 3\Opt folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\IObit\Game Booster 3\BackLnk folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\IObit\Game Booster 3 folder moved successfully.
D:\Documents and Settings\All Users\Data aplikací\IObit folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Skins\White folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Skins\Black folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Skins folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Log folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\LatestNews folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Language folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Help\Images folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\Help folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wxp_x86 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wxp_x64 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wnet_x86 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wnet_x64 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wlh_x86 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\wlh_x64 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\win7_x86 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers\win7_x64 folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2\drivers folder moved successfully.
D:\Program Files\IObit\Smart Defrag 2 folder moved successfully.
D:\Program Files\IObit\IObit Malware Fighter\Quarantine Zone folder moved successfully.
D:\Program Files\IObit\IObit Malware Fighter\log\scan folder moved successfully.
D:\Program Files\IObit\IObit Malware Fighter\log\realtime folder moved successfully.
D:\Program Files\IObit\IObit Malware Fighter\log folder moved successfully.
D:\Program Files\IObit\IObit Malware Fighter folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Update folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Tweak folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Scroll folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Performance folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\News folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Defrag folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\button folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Border folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default\Boost folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin\Default folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Skin folder moved successfully.
D:\Program Files\IObit\Game Booster 3\LatestNews folder moved successfully.
D:\Program Files\IObit\Game Booster 3\LatestGames folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Language folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Freeware\Languages folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Freeware\FreeSoftwareDownload folder moved successfully.
D:\Program Files\IObit\Game Booster 3\Freeware folder moved successfully.
D:\Program Files\IObit\Game Booster 3 folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Update\Skin\White folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Update\Skin\Black folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Update\Skin folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Update\Language folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Update folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Skin\White folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Skin\Black folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Skin folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\News\Css folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\News folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Language folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Images folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3\Backup folder moved successfully.
D:\Program Files\IObit\Advanced SystemCare 3 folder moved successfully.
D:\Program Files\IObit folder moved successfully.
D:\fotky\Obrázky\Nová složka\Crack\Serial.txt deleted successfully.
D:\fotky\Obrázky\Nová složka\Crack folder deleted successfully.
D:\lukas veci\patche\Nová složka\call-of-duty-black-ops-mp-bots-crack-by-bpmrec0rds.rar deleted successfully.
D:\lukas veci\patche\Nová složka\call-of-duty-modern-warfare-2-mp-crack-zdokonalim-navodem-i-foto-navodem.rar deleted successfully.
D:\lukas veci\patche\Nová složka\Call.of.Duty.Black.Ops.Crackfix-RELOADED.rar deleted successfully.
D:\lukas veci\patche\Nová složka\crack 1,01.rar deleted successfully.
D:\lukas veci\patche\Nová složka\CrackedBFBC2_Multiplayer.rar deleted successfully.
D:\lukas veci\patche\Nová složka\Crack_GTA_San_Andreas.rar deleted successfully.
D:\lukas veci\patche\Nová složka\fifa-11-patch-10-1-crack.rar deleted successfully.
D:\lukas veci\patche\Nová složka\GTA IV 1.0.3.0 Crack.rar deleted successfully.
D:\lukas veci\patche\Nová složka\Gta-sa-crack-i-na-vistu.rar deleted successfully.
D:\lukas veci\patche\Nová složka\gta-sa-crack.rar deleted successfully.
D:\lukas veci\patche\Nová složka\GTA-San-Andreas-Crack-RAZOR-1911.rar deleted successfully.
D:\lukas veci\patche\Nová složka\gta-san-andreas-crack.rar deleted successfully.
D:\lukas veci\patche\Nová složka\GTA-San-Andreas-NO-CD-CRACK-v1.0-by-Kropovez.rar deleted successfully.
D:\lukas veci\patche\Nová složka\Mafia-2-CRACK-SKIDROW.rar deleted successfully.
D:\lukas veci\patche\Nová složka\Mafia2.Crack.version2.CW.CrOwN..rar deleted successfully.
D:\lukas veci\patche\Nová složka\Mafia_2_crack_v3.rar deleted successfully.
D:\lukas veci\patche\k\AIDA64 Extreme Edition 2.00.1700\AIDA64 Extreme Edition 2.00.1700\aida64extreme200.exe deleted successfully.
D:\lukas veci\patche\k\AIDA64 Extreme Edition 2.00.1700\AIDA64 Extreme Edition 2.00.1700\Serial Number....txt deleted successfully.
D:\lukas veci\patche\k\AIDA64 Extreme Edition 2.00.1700\AIDA64 Extreme Edition 2.00.1700 folder deleted successfully.
File/Folder D:\WINDOWS\system32\*.tmp.dll not found.
File/Folder D:\WINDOWS\system32\SET*.tmp not found.
File/Folder D:\WINDOWS\*.tmp not found.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\"57700:TCP"|-57700:TCP:*:Enabled:Pando Media Booster /E :invalid edit format. Invalid data type.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\57700:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\D:\Program Files\Pando Networks\Media Booster\PMB.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS\\ deleted successfully.

OTL by OldTimer - Version 3.2.31.0 log created on 02042012_194842

Files\Folders moved on Reboot...
File move failed. D:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Výborně, OTL provedlo, co mělo. Jen jsem napsal ve scriptu jednu věc špatně, tak prosím, aplikuj podle stejného postupu ještě tento malý script: Po provedení mi sem hoď zase log a napiš mi, jak je na tom počítač.

All processes killed
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\57700:TCP deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: AAA
->Temp folder emptied: 152 bytes
->Temporary Internet Files folder emptied: 1035701 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 93854421 bytes
->Google Chrome cache emptied: 48333443 bytes
->Flash cache emptied: 1633 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 49152 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 137,00 mb


OTL by OldTimer - Version 3.2.31.0 log created on 02052012_193942

Files\Folders moved on Reboot...
File move failed. D:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...



myslim že se cítí dobře ,budeme jseste neco s PC delat nebo uz je to všechno vymazano vyčištěno

Myslím si, že máme čisto, takže jen uklidíme po utilitách, abys tam neměl zbytky a je hotovo.

Nejprve toto:

Odinstaluj ComboFix.

• Přejmenuj ComboFix na Uninstall.
• Spusť jej.
• Tohle smaže ComboFix a jeho složky.

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stáhni a spusť.
• Pro potvrzení volby mačkej A, Enter.
• Po použití utilitu smaž.
• Antiviry mohou tuto utilitu chybně označit jako vir - jedná se o falešný poplach - takže v pohodě stáhni (případně vypni při stahování antivir).

A ještě další...

Spusť znovu OTL a klikni na tlačítko [CleanUp!], čímž po sobě program uklidí.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a může (nemusí) restartovat PC.
• Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.