VIRY.CZ

TL logfile created on: 2.2.2013 21:18:36 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Bartyzal Karel\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,50 Gb Total Physical Memory | 2,75 Gb Available Physical Memory | 78,67% Memory free
13,83 Gb Paging File | 13,24 Gb Available in Paging File | 95,73% Paging File free
Paging file location(s): C:\pagefile.sys 0 0D:\pagefile.sy [Binary data over 200 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34,38 Gb Total Space | 9,02 Gb Free Space | 26,24% Space Free | Partition Type: NTFS
Drive D: | 186,31 Gb Total Space | 3,95 Gb Free Space | 2,12% Space Free | Partition Type: NTFS
Drive E: | 198,50 Gb Total Space | 88,53 Gb Free Space | 44,60% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 38,26 Gb Free Space | 4,11% Space Free | Partition Type: NTFS
Drive J: | 465,75 Gb Total Space | 62,87 Gb Free Space | 13,50% Space Free | Partition Type: NTFS

Computer Name: INTEL-QUAD-CORE | User Name: Bartyzal Karel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.02.02 21:17:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartyzal Karel\Plocha\OTL.exe
PRC - [2013.01.26 03:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2012.12.25 15:11:24 | 001,611,216 | ---- | M] (IObit) -- C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
PRC - [2012.12.10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- D:\páji\hamachi\hamachi-2.exe
PRC - [2012.01.23 20:50:57 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2010.10.27 19:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010.08.25 11:27:44 | 000,309,824 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009.10.07 09:21:14 | 000,020,680 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
PRC - [2009.10.07 09:16:50 | 000,472,280 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009.10.07 09:15:42 | 001,461,080 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2009.01.16 13:01:54 | 001,473,536 | ---- | M] (Motive Communications, Inc.) -- C:\Program Files\TO2SSM\McciTrayApp.exe
PRC - [2008.08.08 13:11:12 | 000,490,952 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\daemon.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.03.25 17:21:56 | 000,219,656 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\GUI.exe
PRC - [2007.01.04 18:48:52 | 000,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
PRC - [2006.03.20 16:34:46 | 000,865,200 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
PRC - [2005.01.31 08:45:20 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2004.08.26 23:43:06 | 000,056,320 | ---- | M] (Doug Fetter Software Wizardry) -- C:\WINDOWS\system32\delttray.exe
PRC - [2004.05.24 11:35:52 | 000,322,104 | ---- | M] (Eastman Kodak Company) -- C:\WINDOWS\system32\drivers\KodakCCS.exe


========== Modules (No Company Name) ==========

MOD - [2013.02.02 11:02:47 | 012,459,888 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\PepperFlash\11.5.31.138\pepflashplayer.dll
MOD - [2013.01.26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013.01.26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013.01.26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013.01.26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013.01.26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2011.08.19 16:33:28 | 000,047,960 | ---- | M] () -- C:\Program Files\IObit\Smart Defrag 2\NtfsData.dll
MOD - [2010.11.25 09:47:34 | 000,796,304 | ---- | M] () -- C:\Program Files\ReaConverter 6.0 Pro\context.dll
MOD - [2009.09.04 12:15:10 | 002,232,391 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\Normal.dll
MOD - [2009.09.04 10:45:28 | 000,331,843 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\work.dll
MOD - [2009.09.04 10:13:56 | 000,262,144 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\MFCCPU.dll
MOD - [2009.08.28 11:28:34 | 000,135,168 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\OCK.dll
MOD - [2009.06.16 16:06:12 | 000,192,512 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\GVTunner.dll
MOD - [2009.04.16 14:31:28 | 000,106,496 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\HM.dll
MOD - [2009.03.13 11:30:44 | 000,109,096 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\ycc.dll
MOD - [2009.02.23 00:21:28 | 004,296,704 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\AODAPI.dll
MOD - [2008.10.11 21:18:46 | 000,319,488 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2008.09.16 19:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2008.09.01 14:26:32 | 000,102,400 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\SF.dll
MOD - [2008.08.08 13:10:48 | 000,086,016 | ---- | M] () -- C:\Program Files\DAEMON Tools Lite\Lang\CSY.dll
MOD - [2008.08.08 13:10:48 | 000,081,920 | ---- | M] () -- C:\Program Files\DAEMON Tools Lite\Lang\ENU.dll
MOD - [2008.05.07 15:22:58 | 000,102,400 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\CIAMIB.dll
MOD - [2008.04.14 08:51:48 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2008.03.25 17:21:56 | 000,219,656 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\GUI.exe
MOD - [2003.02.14 14:11:46 | 000,102,400 | ---- | M] () -- C:\Program Files\Gigabyte\ET6\Sound.dll


========== Services (SafeList) ==========

SRV - [2013.01.10 18:44:37 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.12.10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\páji\hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.06.20 16:49:20 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2010.03.18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009.10.07 09:21:14 | 000,020,680 | ---- | M] (ESET) [On_Demand | Running] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.10.07 09:16:50 | 000,472,280 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2008.09.08 17:19:46 | 000,098,488 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2007.11.06 21:22:26 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2007.01.04 18:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
SRV - [2005.01.31 08:45:20 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2004.05.24 11:35:52 | 000,322,104 | ---- | M] (Eastman Kodak Company) [Auto | Running] -- C:\WINDOWS\system32\drivers\KodakCCS.exe -- (KodakCCS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WPRO_40_1340)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS -- (MRESP50a64)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS -- (MRENDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS -- (MREMPR5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS -- (MREMP50a64)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (acu19whm)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a90g0i4y)
DRV - [2013.02.02 20:58:43 | 000,024,944 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GVTDrv.sys -- (GVTDrv)
DRV - [2013.02.02 20:58:28 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2013.01.04 14:11:03 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\etdrv.sys -- (etdrv)
DRV - [2011.10.18 02:43:42 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2011.10.18 01:43:42 | 000,078,136 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2010.11.26 18:02:52 | 000,014,776 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2010.09.03 15:20:18 | 006,139,496 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2009.11.18 06:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 06:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.10.07 09:18:34 | 000,055,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2009.10.07 09:18:34 | 000,032,072 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009.10.07 09:18:30 | 000,073,760 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2009.10.07 09:12:22 | 000,054,184 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv)
DRV - [2009.10.07 09:11:10 | 000,040,824 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.02.23 00:16:22 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Gigabyte\ET6\i386\AODDriver.sys -- (AODDriver)
DRV - [2008.10.16 20:37:23 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2008.07.29 12:35:18 | 000,021,920 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2008.05.02 10:58:14 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.05.02 09:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.05.02 09:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.04.14 00:23:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008.03.29 10:20:55 | 000,021,248 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MREMP50.sys -- (MREMP50)
DRV - [2008.03.29 10:20:55 | 000,020,096 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRESP50.sys -- (MRESP50)
DRV - [2008.01.03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.11.06 21:22:06 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2006.06.01 16:47:40 | 000,334,976 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\dumant.sys -- (DumaNT)
DRV - [2006.01.13 14:00:52 | 000,015,872 | ---- | M] (Flint Incorporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\vd_filedisk.sys -- (VD_FileDisk)
DRV - [2005.10.06 14:31:54 | 000,292,992 | ---- | M] (Midiman/M-Audio) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\delta.sys -- (DELTA)
DRV - [2004.07.07 09:27:28 | 000,070,070 | ---- | M] (Eastman Kodak Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DcPtp.sys -- (DcPTP)
DRV - [2004.07.07 07:55:12 | 000,152,049 | ---- | M] (Eastman Kodak Company) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ExportIt.sys -- (Exportit)
DRV - [2004.06.02 12:19:00 | 000,038,705 | ---- | M] (Eastman Kodak Company) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\DCFS2k.sys -- (DCFS2K)
DRV - [2004.05.20 07:41:54 | 000,061,564 | ---- | M] (Eastman Kodak Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DcFpoint.sys -- (DcFpoint)
DRV - [2004.05.20 07:39:42 | 000,008,022 | ---- | M] (Eastman Kodak Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DcLps.sys -- (DcLps)
DRV - [2004.05.20 07:21:10 | 000,036,918 | ---- | M] (Eastman Kodak Company) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\DcCam.sys -- (DcCam)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKLM\..\SearchScopes\{D6374747-A4C0-4782-BC3A-716280AD2566}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\SearchScopes,DefaultScope = {D6374747-A4C0-4782-BC3A-716280AD2566}
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\SearchScopes\{51812357-9347-4062-8F27-AFD52E4086AB}: "URL" = http://search.yahoo.com/search?ei=utf-8 ... earchTerms}
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\SearchScopes\{D6374747-A4C0-4782-BC3A-716280AD2566}: "URL" = http://www.google.com/search?q={searchT ... FB_csCZ496
IE - HKU\S-1-5-21-1085031214-113007714-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: {14323AEE-F6B8-4DC8-BCE3-E62645830585}:1.0.1
FF - prefs.js..extensions.enabledAddons: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.2.5
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.0.0.5
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: quickstores@quickstores.de:1.0.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:15.0.1
FF - prefs.js..extensions.enabledItems: crossriderapp498@crossrider.com:0.76.37
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {ba14329e-9550-4989-b3f2-9732e92d17cc}:2.5.8.6
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\páji\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.1.13: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.1.13: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.1.13: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\crossriderapp498@crossrider.com: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\RewardsArcade\498\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.01.23 20:51:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.02.02 20:55:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.01.09 14:45:30 | 000,000,000 | ---D | M]

[2008.10.16 17:45:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Extensions
[2013.02.02 20:55:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions
[2008.10.16 17:56:26 | 000,000,000 | ---D | M] ("Magic's Video - Downloader") -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions\video-dowloader@magic-imv.ro
[2012.12.15 12:59:48 | 000,002,101 | ---- | M] () (No name found) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions\{14323AEE-F6B8-4DC8-BCE3-E62645830585}.xpi
[2012.06.20 16:48:17 | 000,020,591 | ---- | M] () (No name found) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
[2013.01.28 23:19:57 | 000,316,778 | ---- | M] () (No name found) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}.xpi
[2013.02.02 21:01:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.08.14 19:45:55 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2012.09.04 14:10:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012.11.13 14:22:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\BARTYZAL KAREL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\MLGH7NQY.DEFAULT\EXTENSIONS\{14323AEE-F6B8-4DC8-BCE3-E62645830585}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\BARTYZAL KAREL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\MLGH7NQY.DEFAULT\EXTENSIONS\{C50CA3C4-5656-43C2-A061-13E717F73FC8}.XPI
[2012.06.20 16:49:21 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.06.20 16:49:18 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.06.20 16:49:18 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.06.20 16:46:13 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2012.06.20 16:49:18 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.06.20 16:49:18 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.08.11 13:09:04 | 000,003,243 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
[2012.06.20 16:49:18 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage: http://www.google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\24.0.1312.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Data aplikac\u00ED\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Data aplikac\u00ED\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikac\u00ED\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Picasa (Enabled) = D:\p\u00E1ji\Picasa3\npPicasa3.dll
CHR - Extension: YouTube = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Gmail = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: YouTube = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Gmail = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2008.10.16 17:09:30 | 000,000,784 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {a5760690-a6e6-d4d0-cd1c-fa5a7141523a} - No CLSID value found.
O2 - BHO: (gFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll ()
O3 - HKLM\..\Toolbar: (FlashGet Bar) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll (Amaze Soft)
O3 - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1085031214-113007714-839522115-1003\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [DeltTray] C:\WINDOWS\System32\delttray.exe (Doug Fetter Software Wizardry)
O4 - HKLM..\Run: [EasyTuneVI] C:\Program Files\Gigabyte\ET6\ETcall.exe ()
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\páji\hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [M-Audio Delta Taskbar Icon] C:\WINDOWS\system32\delttray.exe (Doug Fetter Software Wizardry)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe (Motive Communications, Inc.)
O4 - HKU\S-1-5-21-1085031214-113007714-839522115-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1085031214-113007714-839522115-1003..\Run: [Facebook Update] C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-1085031214-113007714-839522115-1003..\Run: [MediaGet2] C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\MediaGet2\mediaget.exe (MediaGet LLC)
O4 - HKU\S-1-5-21-1085031214-113007714-839522115-1003..\Run: [Uniblue RegistryBooster 2009] C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe (Uniblue Software)
O4 - HKLM..\RunOnceEx: [] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-113007714-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm ()
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm ()
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_37)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A4C7C19C-C9E9-47F2-8C59-CF0EF86C5E4C}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.10.16 17:03:38 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (SmartDefragBootTime.exe)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Unable to save MBR. Invalid drive designation: 0

========== Files/Folders - Created Within 7 Days ==========

[2013.02.02 21:17:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Bartyzal Karel\Plocha\OTL.exe
[2013.02.02 20:34:28 | 000,384,928 | ---- | C] (Bleeping Computer, LLC) -- C:\Documents and Settings\Bartyzal Karel\Plocha\sc-cleaner.exe
[2013.02.02 13:22:54 | 000,000,000 | ---D | C] -- C:\rsit
[2013.02.01 14:14:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Bartyzal Karel\Plocha\Nová složka
[2008.10.16 20:31:57 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\pcouffin.sys
[2007.09.21 18:42:42 | 000,019,008 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\Program Files\markfun.a64
[2007.08.21 18:49:28 | 000,017,912 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\Program Files\markfun.w32
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\Documents and Settings\All Users\Data aplikací\*.tmp files -> C:\Documents and Settings\All Users\Data aplikací\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2013.02.02 21:25:00 | 000,000,306 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2013.02.02 21:17:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Bartyzal Karel\Plocha\OTL.exe
[2013.02.02 21:15:39 | 000,000,484 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{9D1355F4-AD37-4CD4-B298-177C2292EDFC}.job
[2013.02.02 20:58:43 | 000,024,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2013.02.02 20:58:42 | 000,000,004 | ---- | M] () -- C:\WINDOWS\System32\GVTunner.ref
[2013.02.02 20:58:28 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
[2013.02.02 20:58:07 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013.02.02 20:57:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.02.02 20:57:42 | 000,000,952 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.02.02 20:57:40 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2013.02.02 20:57:39 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2013.02.02 20:57:38 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefragUpdate.job
[2013.02.02 20:57:37 | 000,000,298 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag_Startup.job
[2013.02.02 20:57:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.02.02 20:44:00 | 000,001,062 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2013.02.02 20:44:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.02.02 20:34:25 | 000,384,928 | ---- | M] (Bleeping Computer, LLC) -- C:\Documents and Settings\Bartyzal Karel\Plocha\sc-cleaner.exe
[2013.02.02 20:33:53 | 000,580,235 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\adwcleaner (1).exe
[2013.02.02 20:27:00 | 000,000,304 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2013.02.02 20:26:00 | 000,000,956 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.02.02 20:13:18 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2013.02.02 17:13:00 | 000,001,006 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2013.02.02 15:44:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2013.02.01 19:40:06 | 000,007,817 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\22106_406871056069532_1068133773_n.jpg
[2013.02.01 14:33:58 | 001,244,446 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010499.jpg
[2013.02.01 14:31:36 | 000,429,888 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010500.jpg
[2013.01.31 19:50:50 | 000,029,845 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\VNĚJŠÍ.png
[2013.01.31 19:44:08 | 000,032,539 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\VNITŘNÍ.png
[2013.01.31 14:20:39 | 002,954,963 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\tumblr_mcxc4sa7KS1rrq6qso1.mp3
[2013.01.31 13:51:23 | 008,435,229 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\james_arthur_-_impossible_(www.freshmp3music.ru).mp3
[2013.01.31 09:44:00 | 000,001,010 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2013.01.30 23:25:14 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.01.30 20:11:55 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.01.30 20:11:11 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini
[2013.01.30 19:20:26 | 000,003,127 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2013.01.29 16:12:37 | 000,002,561 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\Microsoft Office Word 2003.lnk
[2013.01.29 13:27:01 | 000,000,000 | ---- | M] () -- C:\asc_rdflag
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\Documents and Settings\All Users\Data aplikací\*.tmp files -> C:\Documents and Settings\All Users\Data aplikací\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.02.02 20:34:14 | 000,580,235 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\adwcleaner (1).exe
[2013.02.01 19:50:52 | 000,007,817 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\22106_406871056069532_1068133773_n.jpg
[2013.02.01 15:54:48 | 000,032,539 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\VNITŘNÍ.png
[2013.02.01 15:54:47 | 000,029,845 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\VNĚJŠÍ.png
[2013.02.01 14:33:58 | 001,244,446 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010499.jpg
[2013.02.01 14:31:36 | 000,429,888 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010500.jpg
[2013.02.01 14:30:38 | 000,516,974 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010502.jpg
[2013.02.01 14:28:46 | 000,379,755 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\28012010512.jpg
[2013.01.31 13:54:26 | 002,954,963 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\tumblr_mcxc4sa7KS1rrq6qso1.mp3
[2013.01.31 13:51:09 | 008,435,229 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Plocha\james_arthur_-_impossible_(www.freshmp3music.ru).mp3
[2013.01.30 19:46:36 | 000,250,048 | ---- | C] () -- C:\NTLDR
[2013.01.30 19:46:36 | 000,047,564 | ---- | C] () -- C:\NTDETECT.COM
[2013.01.29 13:27:01 | 000,000,000 | ---- | C] () -- C:\asc_rdflag
[2013.01.22 11:21:54 | 000,014,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\SmartDefragDriver.sys
[2013.01.01 21:32:30 | 000,078,791 | ---- | C] () -- C:\WINDOWS\hpfins05.dat
[2013.01.01 21:32:30 | 000,001,395 | ---- | C] () -- C:\WINDOWS\hpfmdl05.dat
[2012.09.17 09:52:17 | 000,043,769 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\.TransferManager.db
[2012.02.16 12:12:03 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.02.13 14:34:09 | 000,079,476 | ---- | C] () -- C:\WINDOWS\hpfins05.dat.temp
[2012.02.13 14:34:09 | 000,001,395 | ---- | C] () -- C:\WINDOWS\hpfmdl05.dat.temp
[2012.01.29 13:22:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2012.01.03 05:25:39 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.11.29 18:59:56 | 000,000,135 | ---- | C] () -- C:\WINDOWS\d.ini
[2011.09.25 10:54:29 | 000,437,758 | ---- | C] () -- C:\WINDOWS\System32\prfh0405.dat
[2011.09.25 10:54:29 | 000,083,064 | ---- | C] () -- C:\WINDOWS\System32\prfc0405.dat
[2009.10.31 12:54:05 | 000,000,709 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\CommandDispatchers.xml
[2009.10.31 12:54:04 | 000,001,370 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\cleaner-config.xml
[2008.12.12 17:28:58 | 000,000,095 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\default.pls
[2008.10.16 22:41:31 | 000,194,048 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.10.16 20:55:47 | 001,048,576 | ---- | C] () -- C:\Program Files\6a89og0g.0
[2008.10.16 20:55:30 | 000,075,473 | ---- | C] () -- C:\Program Files\bios.ini
[2008.10.16 20:55:00 | 000,000,029 | ---- | C] () -- C:\Program Files\new_ver.ini
[2008.10.16 20:31:57 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ezpinst.exe
[2008.10.16 20:31:57 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\pcouffin.cat
[2008.10.16 20:31:57 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\pcouffin.inf
[2008.10.16 20:06:32 | 007,925,760 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\sandra.mda
[2008.10.16 20:03:24 | 000,000,134 | ---- | C] () -- C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\fusioncache.dat
[2008.02.14 13:28:56 | 000,000,029 | ---- | C] () -- C:\Program Files\version.ini
[2008.02.14 13:23:12 | 000,231,944 | ---- | C] () -- C:\Program Files\gwflash.exe
[2007.04.05 03:31:22 | 000,248,640 | ---- | C] () -- C:\Program Files\update.exe
[2007.03.30 03:36:28 | 000,000,301 | ---- | C] () -- C:\Program Files\update.ini
[2007.03.02 03:48:50 | 000,240,448 | ---- | C] () -- C:\Program Files\gwf32.exe
[2006.11.23 22:47:50 | 000,207,680 | ---- | C] () -- C:\Program Files\BIOS_Run.exe
[2006.11.03 17:09:40 | 000,000,528 | ---- | C] () -- C:\Program Files\CONFIG.INI
[2005.04.27 18:40:26 | 000,006,800 | ---- | C] () -- C:\Program Files\W95_HUA.vxd

========== ZeroAccess Check ==========

[2008.10.16 18:22:23 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 08:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 08:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2010.07.24 20:57:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Opera
[2012.02.15 19:23:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2008.10.16 18:50:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Azureus
[2011.02.05 17:57:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Cakewalk
[2011.08.23 19:08:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2008.10.16 17:22:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2013.01.22 11:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2008.12.12 17:25:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LightScribe
[2011.09.02 23:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Media Get LLC
[2012.01.28 17:02:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PopCap Games
[2012.12.04 16:42:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ReaConverter
[2012.11.14 19:50:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\regid.1986-12.com.adobe
[2009.06.16 17:07:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sony
[2012.12.07 20:35:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\StatSoft
[2012.09.12 23:07:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2008.10.17 16:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ulead Systems
[2012.12.31 19:48:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\YTD Video Downloader
[2013.01.22 11:12:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{366D64A1-C409-4eaa-B3BD-7A75D9FEA7B2}
[2009.04.14 18:23:52 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}
[2009.10.31 12:37:26 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
[2013.01.22 11:20:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2012.10.29 19:58:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\AIMP
[2012.08.10 22:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Azureus
[2009.10.31 16:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BitSpirit
[2012.05.25 21:00:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BSplayer
[2012.05.25 20:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BSplayer Pro
[2011.02.05 18:00:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Cakewalk
[2012.11.14 19:36:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\com.adobe.downloadassistant.AdobeDownloadAssistant
[2008.10.16 20:37:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\DAEMON Tools
[2011.08.23 19:08:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\DAEMON Tools Lite
[2008.10.16 17:22:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ESET
[2009.10.15 17:22:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\fretsonfire
[2009.04.14 18:38:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\GetRightToGo
[2008.10.16 18:14:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\HEXelon
[2008.10.23 18:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ImgBurn
[2013.01.19 23:31:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\InterVideo
[2013.01.22 11:21:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\IObit
[2012.08.11 13:09:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\KC Softwares
[2009.10.31 14:08:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Leadertech
[2011.09.02 23:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Media Get LLC
[2009.12.14 18:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\OpenOffice.org
[2009.06.16 16:49:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Opera
[2011.11.04 21:04:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\PhotoFiltre
[2009.06.16 17:12:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Publish Providers
[2012.01.12 20:34:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Raptr
[2012.12.19 22:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\RCP 6
[2011.10.29 18:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Rovio
[2012.12.07 20:36:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Softland
[2009.06.16 17:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Sony
[2012.12.07 20:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\StatSoft
[2011.02.05 19:48:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\TeamViewer
[2008.10.16 19:54:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\u-turn
[2008.10.17 16:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Ulead Systems
[2012.01.29 12:43:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Uniblue
[2008.10.16 20:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Vso
[2010.01.11 18:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\XnView
[2012.03.09 21:01:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\YoudaGames
[2012.12.07 20:36:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Softland

========== Purity Check ==========



========== Custom Scans ==========

< >
[2008.10.16 17:01:55 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2008.10.16 17:06:23 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2009.07.10 11:14:07 | 000,001,010 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2009.07.10 11:14:07 | 000,001,062 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2009.08.18 20:45:37 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2010.02.17 17:49:31 | 000,000,306 | -H-- | C] () -- C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010.04.01 17:50:52 | 000,000,354 | ---- | C] () -- C:\WINDOWS\Tasks\Driver Fetch.job
[2010.06.25 16:17:44 | 000,000,484 | -H-- | C] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{9D1355F4-AD37-4CD4-B298-177C2292EDFC}.job
[2011.06.09 16:20:02 | 000,000,304 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2011.09.10 14:31:11 | 000,000,286 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2011.09.10 14:31:12 | 000,000,278 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2012.04.17 19:13:04 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.08.01 17:44:39 | 000,000,296 | ---- | C] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2012.08.11 00:06:42 | 000,000,952 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2012.08.11 00:06:42 | 000,000,956 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2012.08.11 12:26:31 | 000,000,298 | ---- | C] () -- C:\WINDOWS\Tasks\SmartDefrag_Startup.job
[2012.10.05 20:21:41 | 000,001,006 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2012.10.05 20:21:42 | 000,001,028 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2012.12.24 17:36:58 | 000,000,440 | ---- | C] () -- C:\WINDOWS\Tasks\ReclaimerResumeInstall_Bartyzal Karel.job
[2013.01.22 11:21:55 | 000,000,296 | ---- | C] () -- C:\WINDOWS\Tasks\SmartDefragUpdate.job

< >

< MD5 for: ATAPI.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.03 21:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2004.08.17 14:49:28 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=6E401E61F952FBBF708AFBECEFAFAE81 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 08:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 08:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[15 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.11.14 19:52:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Adobe
[2010.11.14 20:54:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Ahead
[2012.10.29 19:58:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\AIMP
[2013.01.29 13:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Apple Computer
[2011.02.20 16:16:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ArcSoft
[2012.08.10 22:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Azureus
[2009.10.31 16:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BitSpirit
[2012.05.25 21:00:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BSplayer
[2012.05.25 20:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\BSplayer Pro
[2011.02.05 18:00:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Cakewalk
[2012.11.14 19:36:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\com.adobe.downloadassistant.AdobeDownloadAssistant
[2008.10.16 20:37:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\DAEMON Tools
[2011.08.23 19:08:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\DAEMON Tools Lite
[2008.10.16 17:22:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ESET
[2009.10.15 17:22:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\fretsonfire
[2009.04.14 18:38:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\GetRightToGo
[2012.08.11 10:41:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Google
[2008.10.16 18:14:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\HEXelon
[2008.11.02 18:55:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\HP
[2011.08.09 11:41:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Identities
[2008.10.23 18:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ImgBurn
[2008.10.16 17:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\InstallShield
[2013.01.19 23:31:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\InterVideo
[2013.01.22 11:21:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\IObit
[2012.08.11 13:09:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\KC Softwares
[2009.10.31 14:08:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Leadertech
[2008.10.16 17:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Macromedia
[2011.09.02 23:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Media Get LLC
[2008.10.16 18:09:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Media Player Classic
[2012.05.18 18:39:00 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft
[2012.11.15 18:07:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft Games
[2010.07.28 17:32:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Motive
[2008.10.16 17:45:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla
[2009.12.14 18:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\OpenOffice.org
[2009.06.16 16:49:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Opera
[2011.11.04 21:04:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\PhotoFiltre
[2009.06.16 17:12:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Publish Providers
[2012.01.12 20:34:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Raptr
[2012.12.19 22:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\RCP 6
[2013.01.02 20:48:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real
[2012.04.08 23:41:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\RealNetworks
[2009.04.18 20:30:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\RealWorld
[2011.10.29 18:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Rovio
[2013.02.02 20:59:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Skype
[2013.02.02 20:59:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\skypePM
[2012.12.07 20:36:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Softland
[2009.06.16 17:46:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Sony
[2012.12.07 20:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\StatSoft
[2008.10.16 18:17:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Sun
[2011.02.05 19:48:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\TeamViewer
[2008.10.16 19:54:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\u-turn
[2008.12.03 18:42:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\U3
[2008.10.17 16:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Ulead Systems
[2012.01.29 12:43:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Uniblue
[2008.10.16 20:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Vso
[2008.10.16 20:27:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\WinRAR
[2010.01.11 18:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\XnView
[2012.03.09 21:01:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\YoudaGames

< %APPDATA%\*.exe /s >
[2008.10.16 20:31:57 | 000,081,920 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\ezpinst.exe
[2012.11.14 19:36:20 | 000,055,424 | ---- | M] (Adobe Systems Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2009.04.18 20:29:59 | 000,029,926 | R--- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft\Installer\{6153B658-1CC9-404F-8F9E-2F93CD20EB66}\_37E68263F08599419C91CC.exe
[2009.04.18 20:29:59 | 000,111,091 | R--- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft\Installer\{6153B658-1CC9-404F-8F9E-2F93CD20EB66}\_60D0EF8CF64354ABF2161C.exe
[2009.04.18 20:29:59 | 000,010,134 | R--- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft\Installer\{6153B658-1CC9-404F-8F9E-2F93CD20EB66}\_6FEFF9B68218417F98F549.exe
[2009.04.18 20:29:59 | 000,111,091 | R--- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft\Installer\{6153B658-1CC9-404F-8F9E-2F93CD20EB66}\_AC07786753C2FA5F800EC8.exe
[2010.03.27 18:06:14 | 000,439,816 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.10\setup.exe
[2010.12.07 14:38:58 | 000,506,024 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.13\setup.exe
[2011.01.31 18:34:27 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\setup.exe
[2010.05.13 12:09:52 | 000,220,272 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\gtb\GOOGLE_TOOLBAR\GoogleToolbarInstaller.exe
[2010.10.22 18:10:16 | 000,190,632 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\gtb_helper\LaunchHelper.exe
[2010.03.25 11:08:26 | 013,407,072 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\chr\ChromeInstaller.exe
[2010.10.22 18:10:16 | 000,190,632 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\chr_helper\LaunchHelper.exe
[2010.12.22 13:52:17 | 025,809,040 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\rp\RealPlayer.exe
[2010.11.04 18:05:08 | 000,092,328 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\setup3.14\ui_data\vista.exe
[2012.10.04 19:06:51 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\temp\~Upg0\rnupgagent.exe
[2012.12.24 17:36:56 | 000,449,176 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe
[2011.11.05 20:38:00 | 029,622,600 | ---- | M] (Rovio) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Rovio\Angry Birds Seasons\updates\Update\AngryBirdsSeasonsInstaller_2.0.0.exe
[2012.01.20 20:17:46 | 055,193,120 | ---- | M] (Rovio) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\Rovio\Angry Birds Seasons\updates\Update\AngryBirdsSeasonsInstaller_2.2.0.exe
[2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\U3\temp\cleanup.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2013.02.02 21:44:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.01.21 15:24:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2012.07.22 02:26:00 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\Driver Fetch.job
[2013.02.02 17:13:00 | 000,001,006 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2013.02.02 20:13:18 | 000,001,028 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2013.02.02 20:57:42 | 000,000,952 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.02.02 21:26:01 | 000,000,956 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.01.31 09:44:00 | 000,001,010 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003Core.job
[2013.02.02 21:44:01 | 000,001,062 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-113007714-839522115-1003UA.job
[2013.02.02 20:57:40 | 000,000,296 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2013.02.02 20:57:39 | 000,000,278 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2013.02.02 20:27:00 | 000,000,304 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1003.job
[2013.02.02 15:44:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-113007714-839522115-1007.job
[2012.12.24 17:36:58 | 000,000,440 | ---- | M] () -- C:\WINDOWS\Tasks\ReclaimerResumeInstall_Bartyzal Karel.job
[2013.02.02 20:57:38 | 000,000,296 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefragUpdate.job
[2013.02.02 20:57:37 | 000,000,298 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag_Startup.job
[2013.02.02 21:30:22 | 000,000,484 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{9D1355F4-AD37-4CD4-B298-177C2292EDFC}.job
[2013.02.02 21:25:00 | 000,000,306 | -H-- | M] () -- C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2008.10.16 20:37:23 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >
[2008.10.16 18:51:13 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2008.10.16 18:51:13 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2008.10.16 18:51:13 | 000,495,616 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >
[2013.02.02 20:58:43 | 000,024,944 | ---- | M] () -- C:\WINDOWS\system32\drivers\GVTDrv.sys

< %systemroot%\system32\*.* /3 >
[2013.01.30 23:25:14 | 000,000,664 | ---- | M] () -- C:\WINDOWS\system32\d3d9caps.dat
[2013.02.02 20:58:42 | 000,000,004 | ---- | M] () -- C:\WINDOWS\system32\GVTunner.ref
[2013.02.02 20:58:07 | 000,200,819 | ---- | M] () -- C:\WINDOWS\system32\nvapps.xml
[2013.02.02 20:57:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun -- [2008.08.08 13:11:12 | 000,490,952 | ---- | M] (DT Soft Ltd)
"Uniblue RegistryBooster 2009" = C:\Program Files\Uniblue\RegistryBooster\RegistryBooster.exe /S -- [2008.08.26 17:48:09 | 002,019,624 | ---- | M] (Uniblue Software)
"Google Update" = "C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c -- [2008.10.16 17:25:49 | 000,133,104 | ---- | M] (Google Inc.)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 08:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [2010.05.13 16:57:20 | 026,192,168 | R--- | M] (Skype Technologies S.A.)
"MediaGet2" = C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\MediaGet2\mediaget.exe --minimized -- [2013.01.02 10:21:38 | 010,559,720 | ---- | M] (MediaGet LLC)
"Facebook Update" = "C:\Documents and Settings\Bartyzal Karel\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver -- [2012.11.07 17:08:00 | 000,138,096 | ---- | M] (Facebook Inc.)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.06.20 16:49:20 | 000,913,888 | ---- | M] (Mozilla Corporation) MD5=D3C0837346C49095B8AF9EF54AD7E90A -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.03.08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >

< >

< *crack* /s >
[2006.09.02 10:03:45 | 000,001,414 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\-[mininova[1].org]- ZoomPlayer v4.51 WMV-Professional + Crack.torrent
[53 \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\*.tmp files -> \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\*.tmp -> ]
[2004.10.27 12:46:54 | 000,000,126 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\AVG CRACKAZOID cracks for software protection and online security metasearch engine for AVG.url
[2009.11.18 18:02:19 | 000,000,117 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\AVG CRACKAZOID cracks for software protection and online security metasearch engine for AVG.URL
[2003.12.12 08:51:18 | 000,000,144 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\Crack.url
[2004.04.14 13:58:36 | 000,000,120 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\CRACKAZOID cracks for software protection and online security metasearch engine for.url
[2009.11.18 18:02:19 | 000,000,111 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\CRACKAZOID cracks for software protection and online security metasearch engine for.URL
[2004.10.27 12:45:34 | 000,000,120 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\Cracks.com - cracks, computer security, and password protection.url
[2005.04.23 18:37:46 | 000,000,219 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\crackspider.us! Search results crack, serial number, keygen, patch for clone cd.url
[2003.12.02 08:37:42 | 000,000,152 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\   [  c r a c k  ]   MikroB.url
[2005.09.01 17:40:14 | 000,967,724 | ---- | M] () -- \Program Files\Cakewalk\VstPlugins\Perfect Space\Kick and Snare\Cracker Plate.wav
[2010.06.18 12:28:14 | 000,002,623 | ---- | M] () -- \Program Files\StatSoft\STATISTICA 10 Trial verze\Examples\Datasets\Cracker promotion.sta
[2007.08.26 12:52:50 | 000,001,242 | ---- | M] () -- \Program Files\Torrent Harvester\Engines\Engine - cracks.am.xml

< *keygen* /s >
[2006.08.23 21:21:06 | 000,002,444 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\[Snarf-It] Xilisoft[1].3GP.Video.Converter.v2.1.53.901b.Incl.Keygen.[www.extreme-torrent.dl.am].rar.torrent
[53 \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\*.tmp files -> \Documents and Settings\Bartyzal Karel\Data aplikací\Azureus\torrents\*.tmp -> ]
[2005.04.23 18:37:46 | 000,000,219 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Oblíbené položky\počítače,crack\crack\crackspider.us! Search results crack, serial number, keygen, patch for clone cd.url

< *loader* /s >
[1999.04.05 08:02:08 | 000,019,948 | ---- | M] () -- \Bentley\Program\MicroStation\jmdl\docs\java\api\java.lang.ClassLoader.html
[1999.04.05 08:02:28 | 000,005,336 | ---- | M] () -- \Bentley\Program\MicroStation\jmdl\docs\java\api\java.rmi.server.LoaderHandler.html
[1999.04.05 08:02:28 | 000,005,615 | ---- | M] () -- \Bentley\Program\MicroStation\jmdl\docs\java\api\java.rmi.server.RMIClassLoader.html
[4 \Documents and Settings\All Users\Data aplikací\*.tmp files -> \Documents and Settings\All Users\Data aplikací\*.tmp -> ]
[2012.01.23 20:51:16 | 000,007,715 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2012.01.23 20:51:16 | 000,000,319 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2009.10.15 18:26:24 | 000,000,676 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VDOWNLOADER\VDownloader.lnk
[2012.12.31 19:48:45 | 000,000,072 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\YTD Video Downloader\YTD Video Downloader Help.url
[2012.12.31 19:48:45 | 000,000,722 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\YTD Video Downloader\YTD Video Downloader.lnk
[2012.12.31 19:48:44 | 000,000,634 | ---- | M] () -- \Documents and Settings\All Users\Plocha\YTD Video Downloader.lnk
[2009.10.15 18:26:25 | 000,000,682 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Data aplikací\Microsoft\Internet Explorer\Quick Launch\VDownloader.lnk
[2007.11.27 11:33:22 | 000,000,169 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Data aplikací\Mozilla\Firefox\Profiles\mlgh7nqy.default\extensions\video-dowloader@magic-imv.ro\defaults\preferences\videodownloader.js
[2009.10.15 18:26:25 | 000,000,664 | ---- | M] () -- \Documents and Settings\Bartyzal Karel\Plocha\zástupci\VDownloader.lnk
[2007.11.13 02:54:34 | 000,070,944 | ---- | M] () -- \Program Files\AGEIA Technologies\demos\physxloader.dll
[2007.05.16 09:26:06 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2001.01.16 05:55:36 | 000,053,248 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\COLOADER.DLL
[2001.01.16 03:22:34 | 000,002,560 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\COLOADER.TLB
[2008.11.04 19:17:16 | 000,001,826 | ---- | M] () -- \Program Files\Frets on Fire\data\PyOpenGL-3.0.0a5-py2.5.egg\OpenGL\platform\ctypesloader.py
[2008.11.04 19:17:16 | 000,002,382 | ---- | M] () -- \Program Files\Frets on Fire\data\PyOpenGL-3.0.0a5-py2.5.egg\OpenGL\platform\ctypesloader.pyc
[2009.10.15 17:22:33 | 000,002,307 | ---- | M] () -- \Program Files\Frets on Fire\data\PyOpenGL-3.0.0a5-py2.5.egg\OpenGL\platform\ctypesloader.pyo
[2013.01.22 11:21:56 | 000,002,797 | ---- | M] () -- \Program Files\IObit\Advanced SystemCare 6\Downloader.log
[2011.12.20 18:45:14 | 001,015,128 | ---- | M] () -- \Program Files\IObit\Smart Defrag 2\Freeware\ASC_FreeSoftwareDownloader.exe
[2011.12.20 18:45:14 | 001,015,128 | ---- | M] () -- \Program Files\IObit\Smart Defrag 2\Freeware\SD_FreeSoftwareDownloader.exe
[2007.03.17 18:59:58 | 000,001,067 | ---- | M] () -- \Program Files\MediaCoder\extensions\_include\loader.html
[2006.02.08 11:46:40 | 000,405,504 | ---- | M] () -- \Program Files\TC UP\PLUGINS\wcx\Audioconverter\Amazon Cover Downloader\Amazon Cover Downloader.exe
[2007.08.26 12:52:22 | 000,002,708 | ---- | M] () -- \Program Files\Torrent Harvester\Engines\Engine - myDownloader.xml
[2005.10.17 16:11:00 | 000,024,576 | ---- | M] () -- \Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\accLoader.exe
[2006.03.20 10:43:36 | 000,000,273 | ---- | M] () -- \Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\accLoader.ini
[2009.08.20 10:30:00 | 002,675,464 | ---- | M] () -- \Program Files\VDOWNLOADER\VDownloader.exe
[2008.06.20 18:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.14 00:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 00:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.08.29 07:57:16 | 000,070,936 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]

========== Files - Unicode (All) ==========
[2012.03.04 14:24:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Bartyzal Karel\Data aplikací\???????sAppData) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\敎潲䍄敔灭慬整sAppData
[2012.03.04 14:24:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Bartyzal Karel\Data aplikací\???????sAppData) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\敎潲䍄敔灭慬整sAppData
(C:\Documents and Settings\Bartyzal Karel\Data aplikací\???????sAppData) -- C:\Documents and Settings\Bartyzal Karel\Data aplikací\敎潲䍄敔灭慬整sAppData

========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:888AFB86
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:9FA5EC55

< End of report >

Nedivim se ze je to zaliskane, kdyz to krmite crackama a podobnyma dobrotama

Ty Windows moc legalni nejsou co

Já vůbec nevím. Problém co byl, je snad už vyřešen. Můj počítač to není a internet už maká. Tím bych to nějak uzavřel. Já ti moc a moc děkuju za vřelou pomoc a přínosné rady .

Ja tam jeste nejake chyby vidim, ale tez vidim prvky nelegalniho windows - a temi se dle pravidel fora nezabvyma