Nenacítaní stranek - Trojan BHO

Zpráva

#16 Příspěvek od **vyosek** » 29 pro 2012 08:14

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

S1T1N · #17 Příspěvek od **S1T1N** » 29 pro 2012 15:50

OTL Extras logfile created on: 29.12.2012 15:38:00 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PCDOMA\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,24 Gb Total Physical Memory | 2,15 Gb Available Physical Memory | 66,39% Memory free
6,48 Gb Paging File | 5,33 Gb Available in Paging File | 82,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 698,64 Gb Total Space | 659,00 Gb Free Space | 94,33% Space Free | Partition Type: NTFS

Computer Name: PCDOMA-PC | User Name: PCDOMA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-513475392-4076455294-1627338119-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07A8B384-7922-414F-9EEB-DE8BDFFF1ECD}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{162F00F9-3D00-44C7-942F-25C99B5AE9D7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{255AC653-6444-4440-8003-60C781EBE96E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{395AF8B8-2E13-440F-B0D5-E23BC331B5FE}" = rport=137 | protocol=17 | dir=out | app=system |
"{3B0B2F20-ED4A-47B3-AC1F-0BD19EBFCA91}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3F6022EF-C712-4516-A05E-002E95CDAEC8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{40E56A96-86FD-4E89-9CC1-304B254ECE0C}" = lport=58165 | protocol=17 | dir=in | name=pando media booster |
"{579DD4B5-2483-4655-A323-F6E2FF583981}" = lport=138 | protocol=17 | dir=in | app=system |
"{58261CE8-90C9-46C1-A4CE-5AB27E26138A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5B512A1B-47F8-4904-A87E-A7E5599E1CD8}" = lport=58165 | protocol=17 | dir=in | name=pando media booster |
"{5CE54A6E-08D3-435E-9411-0AB462CE5EE7}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{5D177866-4FC4-4576-AD97-D1CAA52DB1ED}" = lport=10243 | protocol=6 | dir=in | app=system |
"{69A5AA09-A928-49E2-A082-3E85A1526228}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{71FD0837-F847-4CDA-AD62-D88B8C124798}" = lport=58165 | protocol=6 | dir=in | name=pando media booster |
"{73A39BC4-4B79-472B-8CDE-6D5553116D69}" = lport=139 | protocol=6 | dir=in | app=system |
"{8BD92EE0-DB0F-40A4-8ACC-7F330277DDA9}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A470BE93-543D-4E08-A01A-7CAF340BE218}" = rport=445 | protocol=6 | dir=out | app=system |
"{A7750CA2-C6B3-45AD-BDA6-8173C9A5DF70}" = rport=10243 | protocol=6 | dir=out | app=system |
"{B80F7FE9-550B-4BC3-BC64-4A35F9E8F953}" = lport=137 | protocol=17 | dir=in | app=system |
"{BBD85DA8-9DE0-4D31-9A7B-D43EFFE0E7D4}" = lport=445 | protocol=6 | dir=in | app=system |
"{BEFA93A3-4818-4D07-A6F8-C3CD52DE4B13}" = rport=138 | protocol=17 | dir=out | app=system |
"{C9A24529-5472-45D6-87C3-7ADD9E523BF4}" = lport=58165 | protocol=6 | dir=in | name=pando media booster |
"{CE3D2094-DBBD-4615-8090-34DA320FEC6A}" = rport=139 | protocol=6 | dir=out | app=system |
"{E3FC0320-DE23-4717-8756-630AD5985317}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F5ED7031-514F-47C5-A672-A8F53B9BC1A3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B1397C1-EE3B-4EE0-8DDB-4C2B00826ADC}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{0C26EF01-BB22-496D-99D6-279853510882}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{0FE4A048-3CA5-4132-9F38-6E8D641EC3D4}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\panprocess.exe |
"{104BBBE8-9A2E-43A7-B646-55E5883049A9}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\age of empires online\aoeonline.exe |
"{1226EFAC-763E-4D24-BBDB-AD5885642DDF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{16072999-ED07-442D-9881-FF4EC7FF609C}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{16603576-3092-4B46-9AF8-CABF3F621F15}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1B1852FE-10DE-4801-9852-700402B269D2}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{20331C90-565E-4D5D-B97E-8378E2A46ECB}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\trancesugest\counter-strike\hl.exe |
"{23088B8E-B750-4214-B664-A0635B34C099}" = protocol=6 | dir=out | app=system |
"{39C29994-7B70-49C8-99C3-FBCA4DD6DACC}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{477F69A3-C550-463C-BC9C-9BF5FDA803BE}" = protocol=6 | dir=in | app=c:\users\pcdoma\appdata\local\temp\dsoclient\dlcache\app.n3app |
"{4A1B84FD-E5E3-4C3A-9A4A-0BDC8C694F4B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{4F620056-3ECD-4AEE-A127-64B14E9302C0}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{52734EBA-33A3-4CC4-9751-ECA134A8ACD9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5BD18D14-D180-4C29-9D0A-ED094119E972}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5CC777CE-9113-4BCB-AC8C-34973D9C7460}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{5D7FAEB2-12C8-4FB2-8B56-E6B571EB2FDF}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{5D990F91-904C-4AC8-98EA-B938202859C0}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{61EC66C6-7E1C-4924-826A-DCC12A0E2120}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{6503AD54-F197-4925-A54E-048D0D2B66B4}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{669B3CFB-C825-4111-82A9-451E05E7DD95}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\panprocess.exe |
"{6A7CDF19-FB6A-4078-B7F3-4B33C5C930CF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{6B679CB7-3A88-4576-8E62-4E2FED872893}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{6BB9CEF3-5F41-4F8D-907D-B478CD79DA20}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{73D58133-FCD5-4F87-8BEF-50F261FD6BC0}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{7F57938F-E8AC-4150-A455-26F86F47A03F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{96BD53C8-FE3A-4B69-B74F-5E639F9B962D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9E92F741-D22A-4AB3-A5B3-6D374040DCB3}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{A97440AE-AE2A-4887-995C-2C2FCE982E7A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ABACE680-8FD3-4A18-98CD-5C25967F9418}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B341E085-F42D-4EF4-B29A-CFF39084CB1C}" = protocol=17 | dir=in | app=c:\users\pcdoma\appdata\local\temp\dsoclient\dlcache\app.n3app |
"{BB76B116-D0DE-413C-8AE8-291DE671099F}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\trancesugest\counter-strike\hl.exe |
"{C11B8311-D4FB-4FD7-8D55-021FF7D4F1D2}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{C29ED25A-56ED-48A1-889C-E91108B5A0FD}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D404377E-CB51-42F4-B73A-A7653E6B044A}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{E39EED9C-DA9F-4852-A959-E91AD816B415}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E6E05247-6F1F-4153-9F92-105E0094AF39}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{EF0412DC-37FD-4190-ACB2-17179F03D5C8}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{FD45FF56-4067-47C1-99D8-962B97EA76D5}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\age of empires online\aoeonline.exe |
"TCP Query User{343BB72C-3CED-46D5-9A53-905FA33DA38C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe |
"TCP Query User{77D5AF33-F160-43EF-A3BE-3889BE815D50}C:\program files\ea games\battlefield play4free\bfp4f.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield play4free\bfp4f.exe |
"TCP Query User{C8AA6FC6-E77D-4983-B858-F3B866E75BDB}C:\program files\heroes of newerth\hon.exe" = protocol=6 | dir=in | app=c:\program files\heroes of newerth\hon.exe |
"TCP Query User{CFC2BA41-95B0-4414-A8D9-B8DEADC9B3DC}C:\program files\warcraft iii\war3.exe" = protocol=6 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"TCP Query User{D12E3535-7B97-47C4-92AE-CCCACA90EE40}C:\program files\steam\steamapps\common\age of empires online\spartan.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\age of empires online\spartan.exe |
"UDP Query User{5BDC4E91-5DF5-4CB5-A4C2-ECE66DAAF437}C:\program files\heroes of newerth\hon.exe" = protocol=17 | dir=in | app=c:\program files\heroes of newerth\hon.exe |
"UDP Query User{8C3A4373-84C4-4AB7-98D3-1AEE3F82E7AE}C:\program files\steam\steamapps\common\age of empires online\spartan.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\age of empires online\spartan.exe |
"UDP Query User{A6698539-8E85-4DF2-BC93-6939972239A6}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe |
"UDP Query User{B6BD8763-A2C4-4F15-BC9B-27B18FD203DA}C:\program files\warcraft iii\war3.exe" = protocol=17 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"UDP Query User{CAEAC951-08DB-4C85-8E8B-40AA679A7B7E}C:\program files\ea games\battlefield play4free\bfp4f.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield play4free\bfp4f.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5B3A354B-C059-4861-A85B-CA46F1089E15}" = Creative USB Headsets
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7E659C5C-4DF1-499B-B802-77BAE9ABE4D4}" = Razer Diamondback 3G
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{98EABC7F-B1A1-43A5-B505-5B4EC3908DCD}" = Microsoft Security Client
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI - Czech
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"ALchemy" = Creative ALchemy
"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.7
"AudioCS" = Creative Audio Control Panel
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"DAEMON Tools Lite" = DAEMON Tools Lite
"Doctor Alex" = Doctor Alex
"Fraps" = Fraps
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Host OpenAL" = Host OpenAL
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.70.0.1100
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 17.0.1 (x86 cs)" = Mozilla Firefox 17.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Steam App 10" = Counter-Strike
"Steam App 105430" = Age of Empires Online
"SysInfo" = Creative System Information
"The KMPlayer" = The KMPlayer (remove only)
"Totalcmd" = Total Commander (Remove or Repair)
"TVWiz" = Intel(R) TV Wizard
"Warcraft III" = Warcraft III

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-513475392-4076455294-1627338119-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"UnityWebPlayer" = Unity Web Player
"Warcraft III" = Warcraft III: All Products

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 28.12.2012 12:03:53 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2012 14:12:25 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2012 14:22:59 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2012 14:54:35 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2012 16:36:38 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

Error - 28.12.2012 18:03:42 | Computer Name = PCDOMA-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Název chybujícího modulu: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Kód výjimky: 0x40000015 Posun chyby: 0x006223e0 ID chybujícího procesu:
0xacc Čas spuštění chybující aplikace: 0x01cde5472fd3057c Cesta k chybující aplikaci:
C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\dlcache\app.n3app Cesta k chybujícímu
modulu: C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\dlcache\app.n3app ID zprávy:
70c2f061-513a-11e2-ad34-001d7d0cd65e

Error - 28.12.2012 18:08:06 | Computer Name = PCDOMA-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: FlashPlayerPlugin_11_5_502_135.exe, verze:
11.5.502.135, časové razítko: 0x50b849af Název chybujícího modulu: unknown, verze:
0.0.0.0, časové razítko: 0x00000000 Kód výjimky: 0xc0000005 Posun chyby: 0x685992cd
ID
chybujícího procesu: 0x938 Čas spuštění chybující aplikace: 0x01cde547cf9c6050 Cesta
k chybující aplikaci: C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
Cesta
k chybujícímu modulu: unknown ID zprávy: 0df4317b-513b-11e2-ad34-001d7d0cd65e

Error - 28.12.2012 18:08:33 | Computer Name = PCDOMA-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Název chybujícího modulu: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Kód výjimky: 0x40000015 Posun chyby: 0x006223e0 ID chybujícího procesu:
0xfb0 Čas spuštění chybující aplikace: 0x01cde547dd102d3d Cesta k chybující aplikaci:
C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\dlcache\app.n3app Cesta k chybujícímu
modulu: C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\dlcache\app.n3app ID zprávy:
1e1749f8-513b-11e2-ad34-001d7d0cd65e

Error - 28.12.2012 18:09:42 | Computer Name = PCDOMA-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Název chybujícího modulu: app.n3app, verze: 0.0.0.0, časové razítko:
0x50cf6587 Kód výjimky: 0x40000015 Posun chyby: 0x006223e0 ID chybujícího procesu:
0xcf8 Čas spuštění chybující aplikace: 0x01cde548082f5240 Cesta k chybující aplikaci:
C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\app.n3app Cesta k chybujícímu modulu:
C:\Users\PCDOMA\AppData\Local\Temp\DSOClient\app.n3app ID zprávy: 47118b22-513b-11e2-ad34-001d7d0cd65e

Error - 29.12.2012 10:35:21 | Computer Name = PCDOMA-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 24.12.2012 18:23:42 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:23:48 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:23:55 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:02 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:08 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:14 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:21 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:27 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 24.12.2012 18:24:34 | Computer Name = PCDOMA-PC | Source = cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 29.12.2012 10:34:47 | Computer Name = PCDOMA-PC | Source = Microsoft-Windows-Application-Experience | ID = 205
Description = Službě Pomocník s kompatibilitou programů se nepodařilo provést inicializaci
druhé fáze.

< End of report >

S1T1N · #18 Příspěvek od **S1T1N** » 29 pro 2012 15:51

OTL logfile created on: 29.12.2012 15:38:00 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PCDOMA\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,24 Gb Total Physical Memory | 2,15 Gb Available Physical Memory | 66,39% Memory free
6,48 Gb Paging File | 5,33 Gb Available in Paging File | 82,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 698,64 Gb Total Space | 659,00 Gb Free Space | 94,33% Space Free | Partition Type: NTFS

Computer Name: PCDOMA-PC | User Name: PCDOMA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.12.29 15:35:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PCDOMA\Desktop\OTL.exe
PRC - [2012.12.25 16:44:57 | 003,093,624 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2012.12.24 20:09:22 | 000,541,760 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe
PRC - [2012.12.24 20:08:21 | 001,354,736 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2012.09.23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.09.12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2012.09.12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012.09.12 17:19:44 | 000,947,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 22:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.01.27 16:14:10 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2009.07.14 02:14:46 | 000,115,200 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
PRC - [2008.05.05 09:30:20 | 000,221,300 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
PRC - [2007.08.01 14:07:06 | 000,147,456 | ---- | M] () -- C:\Program Files\Razer\Diamondback 3G\razerhid.exe
PRC - [2007.02.14 11:11:18 | 000,163,840 | ---- | M] (Razer Inc.) -- C:\Program Files\Razer\Diamondback 3G\razerofa.exe

========== Modules (No Company Name) ==========

MOD - [2012.12.25 16:44:57 | 003,093,624 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
MOD - [2012.12.24 20:09:30 | 000,647,168 | ---- | M] () -- C:\Program Files\Steam\sdl.dll
MOD - [2012.12.24 20:09:21 | 020,320,240 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2012.12.24 20:09:20 | 001,100,800 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll
MOD - [2012.12.24 20:09:20 | 000,969,280 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2012.12.24 20:09:20 | 000,192,000 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll
MOD - [2012.12.24 20:09:20 | 000,124,416 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll
MOD - [2010.04.29 14:03:00 | 000,128,512 | ---- | M] () -- C:\Windows\System32\APOMngr.DLL
MOD - [2008.03.11 10:55:54 | 000,069,120 | ---- | M] () -- C:\Windows\System32\CmdRtr.DLL
MOD - [2007.08.01 14:07:06 | 000,147,456 | ---- | M] () -- C:\Program Files\Razer\Diamondback 3G\razerhid.exe

========== Services (SafeList) ==========

SRV - [2012.12.25 03:55:29 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.12.24 20:09:22 | 000,541,760 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.12.24 19:55:08 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2012.12.24 19:30:22 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTHOALLicensing.exe -- (Creative HOAL Licensing Service)
SRV - [2012.12.24 19:29:11 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2012.11.29 19:14:39 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2012.11.29 09:26:17 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.09.23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.09.12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012.09.12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2010.01.27 16:14:10 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - [2012.12.24 20:33:28 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012.08.30 22:03:50 | 000,099,272 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2012.08.23 15:46:55 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2012.08.23 15:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012.08.23 15:41:34 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2012.08.23 15:40:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 22:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 22:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010.11.20 22:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010.11.20 22:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010.11.20 22:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 22:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 22:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 22:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2008.08.14 14:48:22 | 000,017,408 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\skfiltv.sys -- (skfiltv)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-513475392-4076455294-1627338119-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
IE - HKU\S-1-5-21-513475392-4076455294-1627338119-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-513475392-4076455294-1627338119-1001\..\SearchScopes\{1B7BC5FA-D16A-4F64-ABBC-3AFB2F1C9642}: "URL" = http://websearch.ask.com/redirect?clien ... 8D40D5312C
IE - HKU\S-1-5-21-513475392-4076455294-1627338119-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.cz"
FF - prefs.js..extensions.enabledAddons: battlefieldplay4free%40ea.com:1.0.80.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\PCDOMA\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\PCDOMA\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\PCDOMA\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.12.24 19:51:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012.12.24 19:52:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PCDOMA\AppData\Roaming\Mozilla\Extensions
[2012.12.28 23:37:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PCDOMA\AppData\Roaming\Mozilla\Firefox\Profiles\9n99dayc.default\extensions
[2012.12.27 21:53:56 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\PCDOMA\AppData\Roaming\Mozilla\Firefox\Profiles\9n99dayc.default\extensions\battlefieldplay4free@ea.com
[2012.12.28 23:17:48 | 000,002,308 | ---- | M] () -- C:\Users\PCDOMA\AppData\Roaming\Mozilla\Firefox\Profiles\9n99dayc.default\searchplugins\askcom.xml
[2012.12.24 19:51:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.11.29 09:26:57 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.11.29 12:32:34 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.11.29 12:32:34 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.11.29 12:32:34 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.11.29 12:32:34 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.11.29 12:32:35 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\PCDOMA\AppData\Local\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\PCDOMA\AppData\Local\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\PCDOMA\AppData\Local\Google\Chrome\Application\23.0.1271.97\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Users\PCDOMA\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Disk Google = C:\Users\PCDOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Users\PCDOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\PCDOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\PCDOMA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.12.28 19:09:02 | 000,000,841 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3G\razerhid.exe ()
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-513475392-4076455294-1627338119-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-513475392-4076455294-1627338119-1001..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O13 - gopher Prefix: missing
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwar ... TSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F288086A-6953-4820-9BA6-407282E2A891}: DhcpNameServer = 192.168.1.20
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.12.29 15:35:46 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\PCDOMA\Desktop\OTL.exe
[2012.12.28 23:32:06 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Roaming\Unity
[2012.12.28 23:19:55 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\Unity
[2012.12.28 23:07:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Ask
[2012.12.28 23:07:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012.12.28 23:07:14 | 000,779,704 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012.12.28 23:07:13 | 000,859,072 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012.12.28 19:51:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2012.12.28 13:34:38 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.12.28 00:41:44 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\Programs
[2012.12.27 22:18:26 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\PunkBuster
[2012.12.27 04:03:37 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Documents\My Games
[2012.12.27 01:49:37 | 000,000,000 | ---D | C] -- C:\ProgramData\hanbitsoft
[2012.12.26 03:07:00 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Desktop\The-Prodigy---Full-Discography-(320-Kbps)
[2012.12.26 01:58:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
[2012.12.26 01:58:05 | 000,000,000 | ---D | C] -- C:\Fraps
[2012.12.26 01:37:05 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Documents\Games for Windows - LIVE Demos
[2012.12.26 01:30:12 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Documents\Spartan
[2012.12.26 01:29:26 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2012.12.26 01:29:26 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2012.12.26 01:29:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\xlive
[2012.12.26 01:29:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2012.12.26 01:29:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2012.12.25 22:26:07 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Roaming\LolClient
[2012.12.25 20:10:48 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2012.12.25 20:10:48 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
[2012.12.25 20:10:48 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2012.12.25 20:10:48 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
[2012.12.25 20:10:47 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2012.12.25 20:05:17 | 000,000,000 | ---D | C] -- C:\Riot Games
[2012.12.25 20:05:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewFeature1
[2012.12.25 19:33:32 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll
[2012.12.25 19:33:32 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2012.12.25 19:33:32 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll
[2012.12.25 19:33:32 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2012.12.25 19:33:32 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
[2012.12.25 19:33:31 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2012.12.25 19:33:31 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2012.12.25 19:33:31 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll
[2012.12.25 19:33:31 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll
[2012.12.25 19:33:30 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2012.12.25 19:33:30 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
[2012.12.25 19:33:30 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
[2012.12.25 19:33:30 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
[2012.12.25 19:33:29 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
[2012.12.25 19:33:29 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
[2012.12.25 19:33:28 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
[2012.12.25 19:33:28 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
[2012.12.25 19:33:28 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
[2012.12.25 19:33:28 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
[2012.12.25 19:33:28 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
[2012.12.25 19:33:28 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
[2012.12.25 19:33:27 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
[2012.12.25 19:33:27 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
[2012.12.25 19:33:27 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
[2012.12.25 19:33:27 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
[2012.12.25 19:33:27 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
[2012.12.25 19:33:27 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
[2012.12.25 19:33:27 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
[2012.12.25 19:33:26 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
[2012.12.25 19:33:26 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
[2012.12.25 19:33:26 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
[2012.12.25 19:33:26 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
[2012.12.25 19:33:26 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
[2012.12.25 19:33:25 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2012.12.25 19:33:25 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2012.12.25 19:33:25 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
[2012.12.25 19:33:25 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
[2012.12.25 19:33:25 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
[2012.12.25 19:33:25 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
[2012.12.25 19:33:25 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
[2012.12.25 19:33:25 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
[2012.12.25 19:33:24 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll
[2012.12.25 19:33:24 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
[2012.12.25 19:33:24 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
[2012.12.25 19:33:24 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
[2012.12.25 19:33:23 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2012.12.25 19:33:23 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
[2012.12.25 19:33:23 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
[2012.12.25 19:33:23 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
[2012.12.25 19:33:22 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2012.12.25 19:33:22 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
[2012.12.25 19:33:22 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll
[2012.12.25 19:33:22 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll
[2012.12.25 19:33:22 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll
[2012.12.25 19:33:22 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll
[2012.12.25 19:33:22 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
[2012.12.25 19:33:21 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll
[2012.12.25 19:33:16 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2012.12.25 19:33:16 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll
[2012.12.25 19:33:16 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll
[2012.12.25 19:33:16 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll
[2012.12.25 19:33:16 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll
[2012.12.25 19:33:15 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll
[2012.12.25 19:33:15 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll
[2012.12.25 19:33:15 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll
[2012.12.25 19:18:53 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll
[2012.12.25 17:33:35 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Desktop\CZ+cinematicsCZ
[2012.12.25 17:11:31 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\Diagnostics
[2012.12.25 17:05:48 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2012.12.25 16:45:00 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\PMB Files
[2012.12.25 16:44:59 | 000,000,000 | ---D | C] -- C:\ProgramData\PMB Files
[2012.12.25 16:44:50 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2012.12.25 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\.swt
[2012.12.25 03:55:46 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\Macromedia
[2012.12.25 03:55:36 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012.12.24 23:10:57 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2012.12.24 23:08:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012.12.24 23:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2012.12.24 20:48:51 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Desktop\save
[2012.12.24 20:33:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2012.12.24 20:33:28 | 000,242,240 | ---- | C] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2012.12.24 20:33:25 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Roaming\DAEMON Tools Lite
[2012.12.24 20:33:22 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2012.12.24 20:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2012.12.24 20:06:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam
[2012.12.24 20:06:46 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2012.12.24 19:58:23 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2012.12.24 19:58:23 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2012.12.24 19:57:10 | 000,181,760 | ---- | C] (Creative Technology Limited) -- C:\Windows\System32\ctdvinst.dll
[2012.12.24 19:51:58 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Roaming\Mozilla
[2012.12.24 19:51:58 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\AppData\Local\Mozilla
[2012.12.24 19:51:36 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012.12.24 19:51:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012.12.24 19:51:22 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012.12.24 19:41:14 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mscomct2.ocx
[2012.12.24 19:41:14 | 000,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe
[2012.12.24 19:39:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Creative
[2012.12.24 19:39:38 | 000,000,000 | -H-D | C] -- C:\Program Files\Creative Installation Information
[2012.12.24 19:31:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2012.12.24 19:30:47 | 000,497,664 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\CTAPO32.dll
[2012.12.24 19:30:47 | 000,047,104 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\ctppld.dll
[2012.12.24 19:30:47 | 000,017,408 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\drivers\skfiltv.sys
[2012.12.24 19:30:47 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\ResDefE.exe
[2012.12.24 19:30:43 | 000,181,248 | ---- | C] (Creative Technology Limited) -- C:\Windows\System32\skInst.dll
[2012.12.24 19:30:29 | 002,902,498 | ---- | C] (Creative) -- C:\Windows\System32\Sens_oal.dll
[2012.12.24 19:30:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative Labs
[2012.12.24 19:29:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2012.12.24 19:29:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Creative Labs Shared
[2012.12.24 19:28:46 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2012.12.24 19:28:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012.12.24 17:26:57 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012.12.24 17:26:57 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012.12.24 17:26:15 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.12.24 17:26:14 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.12.24 17:26:14 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.12.24 17:26:14 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.12.24 17:26:14 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.12.24 17:26:13 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.12.24 17:26:13 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.12.24 17:26:12 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.12.24 17:23:42 | 000,139,264 | ---- | C] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe
[2012.12.24 17:21:09 | 000,000,000 | ---D | C] -- C:\Users\PCDOMA\Desktop\hry
[2012.12.24 17:20:39 | 000,000,000 | ---D | C] -- C:\Program Files\Warcraft III
[2012.12.24 17:17:22 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012.12.24 17:17:19 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2012.12.24 17:17:19 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012.12.24 17:17:19 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2012.12.24 17:17:19 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2012.12.24 17:17:18 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2012.12.24 17:17:18 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2012.12.24 17:17:18 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2012.12.24 17:17:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2012.12.24 17:17:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2012.12.24 17:17:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2012.12.24 17:17:18 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2012.12.24 17:17:18 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2012.12.24 17:16:53 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2012.12.24 17:16:51 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.12.29 15:39:13 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.12.29 15:39:01 | 000,026,576 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.29 15:39:01 | 000,026,576 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.29 15:38:55 | 000,631,054 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.12.29 15:38:55 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.12.29 15:38:55 | 000,121,708 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.12.29 15:38:55 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.12.29 15:35:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PCDOMA\Desktop\OTL.exe
[2012.12.29 15:34:02 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2012.12.29 15:33:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.12.29 15:33:30 | 2608,979,968 | -HS- | M] () -- C:\hiberfil.sys
[2012.12.29 06:03:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.12.29 05:43:00 | 000,000,966 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001UA.job
[2012.12.28 23:06:56 | 000,859,072 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012.12.28 23:06:56 | 000,779,704 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012.12.28 19:43:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001Core.job
[2012.12.28 14:45:04 | 000,404,080 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.12.28 00:42:00 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.12.27 22:44:40 | 000,282,104 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2012.12.27 22:23:11 | 000,282,104 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2012.12.27 22:16:28 | 000,138,056 | ---- | M] () -- C:\Users\PCDOMA\AppData\Roaming\PnkBstrK.sys
[2012.12.25 03:55:29 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.12.25 03:55:29 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.12.24 20:34:25 | 000,001,896 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2012.12.24 20:33:28 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2012.12.24 20:20:27 | 000,052,532 | ---- | M] () -- C:\Windows\War3Unin.dat
[2012.12.24 20:20:25 | 000,139,264 | ---- | M] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe
[2012.12.24 20:20:25 | 000,002,829 | ---- | M] () -- C:\Windows\War3Unin.pif
[2012.12.24 20:06:49 | 000,000,875 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2012.12.24 19:58:23 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2012.12.24 19:58:23 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2012.12.24 19:57:18 | 000,000,234 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2012.12.24 19:51:38 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.12.24 19:30:22 | 000,002,147 | ---- | M] () -- C:\Users\Public\Desktop\OpenAL License Activation.lnk
[2012.12.24 17:18:55 | 000,002,489 | ---- | M] () -- C:\Users\PCDOMA\Desktop\Google Chrome.lnk
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.12.29 15:39:12 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.12.27 22:18:56 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.xtr
[2012.12.27 22:16:28 | 000,138,056 | ---- | C] () -- C:\Users\PCDOMA\AppData\Roaming\PnkBstrK.sys
[2012.12.27 22:16:05 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.ex0
[2012.12.26 01:28:59 | 000,001,338 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2012.12.24 20:34:25 | 000,001,896 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2012.12.24 20:06:49 | 000,000,875 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2012.12.24 19:57:10 | 000,001,209 | ---- | C] () -- C:\Windows\skSPcfg.ini
[2012.12.24 19:57:10 | 000,000,381 | ---- | C] () -- C:\Windows\skMCcfg.ini
[2012.12.24 19:57:09 | 000,128,512 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2012.12.24 19:57:09 | 000,069,120 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2012.12.24 19:51:38 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.12.24 19:41:37 | 000,007,062 | ---- | C] () -- C:\Windows\System32\audiopid.vxd
[2012.12.24 19:30:48 | 000,025,262 | ---- | C] () -- C:\Windows\System32\xfisk.ini
[2012.12.24 19:30:43 | 000,000,052 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini
[2012.12.24 19:30:40 | 000,000,234 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2012.12.24 19:30:22 | 000,002,147 | ---- | C] () -- C:\Users\Public\Desktop\OpenAL License Activation.lnk
[2012.12.24 17:23:42 | 000,052,532 | ---- | C] () -- C:\Windows\War3Unin.dat
[2012.12.24 17:23:42 | 000,002,829 | ---- | C] () -- C:\Windows\War3Unin.pif
[2012.11.29 19:37:04 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011.06.10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll

========== ZeroAccess Check ==========

[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.11.29 20:59:34 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Ashampoo
[2012.12.24 20:35:58 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\DAEMON Tools Lite
[2012.11.29 20:34:54 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\GHISLER
[2012.12.25 22:26:07 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\LolClient
[2012.12.28 23:32:06 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Unity

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 05:53:46 | 000,010,694 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 05:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2012.11.29 19:38:03 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001Core.job
[2012.11.29 19:38:04 | 000,000,966 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001UA.job
[2012.11.29 20:20:28 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.11.29 20:56:50 | 000,000,266 | ---- | C] () -- C:\Windows\Tasks\AutoKMS.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 22:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 22:29:06 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 22:29:03 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010.11.20 22:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 22:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 22:29:19 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 22:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\System32\services.exe
[2009.07.14 02:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SVCHOST.EXE >
[2012.12.14 16:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2012.08.22 18:05:21 | 001,306,992 | ---- | M] (Microsoft Corporation) MD5=23790A44D9A6B67F8690C34D4F516446 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22097_none_b55b785ade04500f\tcpip.sys
[2011.04.25 05:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2010.11.20 22:29:20 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.04.25 07:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2012.03.30 11:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2012.03.30 10:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2012.08.22 18:16:54 | 001,292,144 | ---- | M] (Microsoft Corporation) MD5=A5EBB8F648000E88B7D9390B514976BF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17939_none_b514e56fc4b40532\tcpip.sys
[2012.10.03 17:44:01 | 001,308,040 | ---- | M] (Microsoft Corporation) MD5=D490DD0A91B4EAC3B4EE08D11EE37C31 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_b5a428d6ddce3d9a\tcpip.sys
[2012.10.03 17:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\System32\drivers\tcpip.sys
[2012.10.03 17:58:30 | 001,293,680 | ---- | M] (Microsoft Corporation) MD5=E23A56F843E2AEBBB209D0ACCA73C640 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_b4ef7439c4d0da52\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 22:29:06 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

< MD5 for: WINLOGON.EXE >
[2012.12.14 16:49:28 | 000,216,424 | ---- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 22:29:06 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe

< >

< %systemroot%*.* /U /s >
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[11 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.11.29 20:20:40 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Adobe
[2012.11.29 20:59:34 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Ashampoo
[2012.12.24 20:35:58 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\DAEMON Tools Lite
[2012.11.29 20:34:54 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\GHISLER
[2012.11.29 00:13:30 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Identities
[2012.12.18 21:03:12 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\InstallShield
[2012.12.25 22:26:07 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\LolClient
[2012.11.29 20:20:40 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Macromedia
[2012.11.29 20:21:47 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Malwarebytes
[2010.11.21 02:24:45 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Media Center Programs
[2012.12.25 03:55:46 | 000,000,000 | --SD | M] -- C:\Users\PCDOMA\AppData\Roaming\Microsoft
[2012.12.24 19:52:02 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Mozilla
[2012.12.28 23:32:06 | 000,000,000 | ---D | M] -- C:\Users\PCDOMA\AppData\Roaming\Unity

< %APPDATA%\*.exe /s >
[2012.06.28 00:03:24 | 001,034,224 | ---- | M] (EA Digital Illusions CE AB) -- C:\Users\PCDOMA\AppData\Roaming\Mozilla\Firefox\Profiles\9n99dayc.default\extensions\battlefieldplay4free@ea.com\plugins\BP4FUpdater.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.12.29 06:03:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.12.29 15:34:02 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2012.12.28 19:43:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001Core.job
[2012.12.29 15:43:05 | 000,000,966 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-513475392-4076455294-1627338119-1001UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.12.29 15:39:01 | 000,026,576 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.12.29 15:39:01 | 000,026,576 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.12.28 23:06:56 | 000,779,704 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\deployJava1.dll
[2012.12.28 14:45:04 | 000,404,080 | ---- | M] () -- C:\Windows\system32\FNTCACHE.DAT
[2012.12.28 23:06:56 | 000,859,072 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\npDeployJava1.dll
[2012.12.29 15:38:55 | 000,121,708 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2012.12.29 15:38:55 | 000,106,190 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2012.12.29 15:38:55 | 000,631,054 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2012.12.29 15:38:55 | 000,615,810 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2012.12.29 15:38:55 | 001,470,062 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2012.12.27 22:23:11 | 000,282,104 | ---- | M] () -- C:\Windows\system32\PnkBstrB.ex0
[2012.12.27 22:44:40 | 000,282,104 | ---- | M] () -- C:\Windows\system32\PnkBstrB.xtr
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Google Update" = "C:\Users\PCDOMA\AppData\Local\Google\Update\GoogleUpdate.exe" /c -- [2012.11.29 19:38:03 | 000,116,648 | ---- | M] (Google Inc.)
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2012.11.06 11:46:46 | 003,673,728 | ---- | M] (DT Soft Ltd)
"Pando Media Booster" = C:\Program Files\Pando Networks\Media Booster\PMB.exe -- [2012.12.25 16:44:57 | 003,093,624 | ---- | M] ()

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.11.29 09:26:08 | 000,916,960 | ---- | M] (Mozilla Corporation) MD5=5744FFF8E72D105C138DAE9E17BB29FE -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2012.11.16 17:33:24 | 000,757,280 | ---- | M] (Microsoft Corporation) MD5=B201AF83DF2E85323E29EB83E4046810 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.12.29 15:39:13 | 000,000,512 | ---- | M] () MD5=CEABFFE21E8744640BD8870F3C7626D6 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2012.12.24 22:57:20 | 000,000,309 | ---- | M] () -- \Users\PCDOMA\AppData\Roaming\Microsoft\Windows\Recent\crack.lnk
[2012.12.27 18:31:03 | 000,000,762 | ---- | M] () -- \Users\PCDOMA\AppData\Roaming\Microsoft\Windows\Recent\Torchlight---Full-game-(PC)-Crack+CZ.lnk

< *keygen* /s >

< *loader* /s >
[2008.02.25 07:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2012.02.16 17:16:58 | 000,000,404 | ---- | M] () -- \Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.0.229\deploy\assets\storeImages\layout\small_loader.gif
[2012.12.24 20:34:24 | 000,057,728 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\img\dt_dadget_loader.png
[2012.12.24 20:34:24 | 000,057,728 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin1\dt_dadget_loader.png
[2012.12.24 20:34:25 | 000,057,728 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin2\dt_dadget_loader.png
[2012.12.24 20:34:25 | 000,057,728 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin3\dt_dadget_loader.png
[2012.12.24 20:34:25 | 000,057,728 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin4\dt_dadget_loader.png
[2012.12.24 20:34:25 | 000,061,770 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin5\dt_dadget_loader.png
[2012.12.24 20:34:25 | 000,061,770 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows Sidebar\Gadgets\DT.gadget\skins\skin6\dt_dadget_loader.png
[2012.12.28 02:37:13 | 000,005,708 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5X7HP1HK\queryLoader[1].js
[2012.12.28 02:37:13 | 000,000,374 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2QAOWNS\queryLoader[1].css
[2012.12.27 03:36:21 | 005,799,334 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Temp\Hellgate_Global_Downloader.exe.log
[2012.12.25 20:30:14 | 001,436,582 | ---- | M] () -- \Users\PCDOMA\AppData\Local\Temp\Mythos_Downloader_ENG_120130.exe.log
[57 \Users\PCDOMA\AppData\Local\Temp\*.tmp files -> \Users\PCDOMA\AppData\Local\Temp\*.tmp -> ]
[2009.07.14 14:25:34 | 002,202,645 | ---- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2012.10.04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2009.07.14 05:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2010.11.21 02:16:08 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2010.11.21 02:16:08 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2010.11.21 02:16:08 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2010.11.20 22:31:02 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2010.11.20 22:31:02 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2010.11.20 22:31:02 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 03:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2010.11.21 02:15:24 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2010.11.20 22:23:54 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 02:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 18:32:13 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.08.20 18:23:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 17:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

#19 Příspěvek od **vyosek** » 29 pro 2012 16:31

A proc je v originalni instalaci pouzity crack na samotne windows

S1T1N · #20 Příspěvek od **S1T1N** » 29 pro 2012 17:33

Netuším ... Takže jsou cracklé ? jestli jo tak udělam pro jistotu formát a nahraju nové . Kde se dá zjistit aktivní cdkey ?

#21 Příspěvek od **vyosek** » 29 pro 2012 17:49

S1T1N píše:Kde se dá zjistit aktivní cdkey ?

Ze by na tom orginal baleni co mate

S1T1N · #22 Příspěvek od **S1T1N** » 30 pro 2012 15:21

Myslel sem v pocítaci , abych si oveřil že je to ten cdkey a ne nejakej jinej .
Pro jistotu sem udelal format a nahral novej win ...

Moc díky za pomoc až budu mít zase problém tak napíšu

#23 Příspěvek od **vyosek** » 30 pro 2012 23:05

Ohledne licence a CD key se obratte na technickou podporu microsoftu...

Nemate zac

VIRY.CZ

Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO

Re: Nenacítaní stranek - Trojan BHO