VIRY.CZ

Ne. On si to opravdu založil. Měl tady už účet předtim, co vim, ale nechal ho smazat. Myslim, že to byl nick nakashi nebo tak nějak. Určitě už tu měl účet předtim...
Co se týče dvou účtů...to by nedávalo logiku. Proč bych si zakládal další, když můžu použít tenhle?

ja myslim, ze rozhodnutie pokracovat/nepokracovat v teme je ciste na kolegovi vyoskovi
nezvolilsi spravny ton na chalana, ktory popri skole pracuje a este pomaha na fore sa drzkovat nepatri

Mám za to, že jsem psal slušně a slušně také žádal. Prosím, mohli bychom vyřešit ten problém s PC a přestat se zabývat malichernostmi? Ten druhý účet si skutečně založil bratr. Jestli někoho urazil tak ho, myslím, můžete zabanovat. Vážim si vaší práce, už minule ste mi pomohli s "policií" a nemam důvod nějak narušovat chod tohodle fora.

Stahnete WIGI http://tigzy.geekstogo.com/Tools/WhyIGotInfected.exe

• Pokud pouzivate Win Vista ci W7, kliknete na WIGI pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Scan
• Po dokonceni scanu (obdelnik vedle bude cely zeleny) kliknete na Report
• Otevre se log, ten sem vlozte

Zdravím.

Doufám, že nevadí, když budu v tomhle vláknu pokračovat po týdnu, kdy jsem byl pryč.

Tedy tady je log z toho programu:
WhyIGotInfected 1.7.1.0(by Tigzy)
********************************

Run : 16.8.2013 17:56:15 [Normal Mode]
Machine : DHARMA-A14GPJLV (1 CPUs) [dharma : ADMIN]
OS: Windows XP Professional Service Pack 3 (x86)

~~ Plugins check: ~~

UPTODATE [Windows XP Professional Service Pack 3] Current : Service Pack 3 -- Latest : Service Pack 3
UPTODATE [Firefox] Current : 23.0 -- Latest : 23.0
UPTODATE [Internet Explorer] Current : 8.0.6001.18702 -- Latest : 8.0.6001.18702
UPTODATE [Java 7] Current : 1.7.0_25 -- Latest : 1.7.0_25
UPTODATE [Adobe Reader] Current : 11 -- Latest : 11
UPTODATE [Adobe Flash] Current : 11.8.800.94 -- Latest : 11.8.800.94
UPTODATE [Adobe Flash ActiveX] Current : 11.8.800.94 -- Latest : 11.8.800.94
UPTODATE [Adobe Flash FF Plugin] Current : 11.8.800.94 -- Latest : 11.8.800.94


Finished
<C:\Documents and Settings\dharma\Plocha\WIGIReport[0].txt>
WIGIReport[0].txt

Zdravim,

problemy stale pretvrvavaji?

Jaka videa se sekaji, bezne filmy nebo treba videa na YouTube apod?

Teď to vypadá líp. Něco s tim někdo evidentně dělal, ale já sem u toho celý týden nebyl, takže nevim co.
Každopádně to jde plynulejc a filmy ve vyšším rozlišení taky jdou. Youtube se seká.

Vypadá to, že se problém vrátil. Navíc mám problémy s připojením k síti. Občas to prostě vypadne a problikává okno prohlížeče. Video se opět zpožďuje. Je možné, že infekce pořád zůstává?
Pomůžete mi prosím?

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

tady je log OTL.txt, ale ten druhý se mi nezobrazil.

OTL logfile created on: 20.8.2013 11:38:14 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\dharma\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,75 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 54,14% Memory free
5,35 Gb Paging File | 4,81 Gb Available in Paging File | 89,96% Paging File free
Paging file location(s): C:\pagefile.sys 2046 3717D:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,27 Gb Total Space | 11,72 Gb Free Space | 31,44% Space Free | Partition Type: NTFS
Drive D: | 465,75 Gb Total Space | 1,75 Gb Free Space | 0,37% Space Free | Partition Type: NTFS
Drive F: | 74,53 Gb Total Space | 0,56 Gb Free Space | 0,75% Space Free | Partition Type: NTFS

Computer Name: DHARMA-A14GPJLV | User Name: dharma | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.08.20 11:29:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\dharma\Plocha\OTL.exe
PRC - [2013.08.17 10:23:22 | 000,276,376 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.05.18 11:27:59 | 000,802,136 | ---- | M] (BitTorrent Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.02.05 10:54:40 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2013.08.19 08:39:48 | 002,094,592 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13081900\algo.dll
MOD - [2013.08.17 10:23:22 | 003,551,640 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013.05.09 10:49:30 | 002,085,376 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13050900\algo.dll
MOD - [2013.03.25 10:57:28 | 000,153,088 | ---- | M] () -- C:\WINDOWS\system32\AiCM32.dll
MOD - [2012.07.01 20:34:04 | 000,344,064 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2011.05.05 00:02:44 | 000,355,432 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nvShell.dll
MOD - [2010.07.04 23:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2007.02.27 05:16:26 | 000,103,936 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdddrpp.dll
MOD - [2007.02.02 11:19:22 | 000,012,288 | ---- | M] () -- C:\WINDOWS\system32\LXF3PMRC.DLL
MOD - [2007.02.02 11:16:20 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\LXF3PMON.DLL
MOD - [2007.02.02 11:11:10 | 000,032,768 | ---- | M] () -- C:\Program Files\Lexmark Fax Solutions\ipcmt.dll
MOD - [2006.11.08 01:02:18 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\lxf3oem.dll


========== Services (SafeList) ==========

SRV - [2013.08.17 10:23:22 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.02.05 10:54:40 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2012.12.19 10:49:34 | 000,732,648 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011.05.25 09:25:59 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010.09.25 22:19:52 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.02.28 18:39:08 | 000,053,032 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe -- (NeroRegInCDSrv)
SRV - [2008.02.28 18:38:58 | 001,440,552 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe -- (InCDsrvR)
SRV - [2007.05.25 09:41:38 | 000,537,520 | ---- | M] ( ) [Disabled | Stopped] -- C:\WINDOWS\system32\lxddcoms.exe -- (lxdd_device)
SRV - [2007.03.06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
SRV - [2005.05.25 16:49:58 | 000,163,840 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe -- (Adobe Version Cue CS2)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vdrive.sys -- (vdrive)
DRV - [2013.08.20 11:33:56 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.08.20 11:33:56 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.08.20 11:33:56 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.07.31 00:52:03 | 000,466,008 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2013.05.09 10:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.05.09 10:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.05.09 10:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.05.09 10:59:09 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2013.05.09 10:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013.05.02 06:23:50 | 000,181,912 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013.05.02 06:23:50 | 000,083,864 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2013.04.15 11:50:32 | 000,113,608 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2013.03.28 19:50:04 | 000,033,624 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eve.sys -- (Eve)
DRV - [2013.02.05 18:52:46 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2013.02.05 10:54:40 | 000,037,344 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2012.11.09 16:33:32 | 000,137,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2012.11.09 16:33:32 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2012.11.09 16:33:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2012.11.09 16:33:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2012.11.09 16:33:30 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2012.11.09 16:33:30 | 000,018,560 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2012.10.17 14:53:46 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2012.03.02 12:14:54 | 000,145,280 | R--- | M] (ITE ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IT9135BDA.sys -- (IT9135BDA)
DRV - [2011.07.07 17:39:06 | 006,367,848 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2010.12.31 01:14:31 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2010.09.22 21:19:02 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2010.07.16 02:45:44 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2010.07.04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2009.11.18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.08.10 16:45:53 | 000,278,728 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.08.10 16:45:52 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.07.01 11:53:34 | 000,013,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2009.07.01 11:53:30 | 000,066,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2009.06.30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts)
DRV - [2009.06.17 18:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2009.06.17 18:56:24 | 000,079,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2009.06.17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009.06.17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009.06.17 18:55:34 | 000,010,384 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2009.06.17 18:55:26 | 000,063,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2009.06.17 18:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2009.02.12 11:23:18 | 000,058,536 | ---- | M] (Sony Ericsson) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE1008mdm.sys -- (SE1008mdm)
DRV - [2008.04.14 01:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2008.04.14 01:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.02.28 18:38:58 | 000,040,360 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2006.11.11 02:25:20 | 000,066,944 | ---- | M] (TOSHIBA Corporation) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\thdudf.sys -- (thdudf)
DRV - [2006.11.02 08:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)
DRV - [2006.07.01 22:42:58 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005.11.03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02)
DRV - [2005.02.09 11:59:00 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI)
DRV - [2003.12.05 11:46:36 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2003.04.16 14:00:00 | 000,008,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidgame.sys -- (hidgame)
DRV - [2003.04.16 14:00:00 | 000,004,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\loop.sys -- (msloop)
DRV - [2002.11.18 17:05:00 | 000,116,924 | ---- | M] (NVIDIA Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\NVCAP.SYS -- (nvcap)
DRV - [2002.11.18 17:05:00 | 000,010,814 | ---- | M] (NVIDIA Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\NVXBAR.SYS -- (NVXBAR)
DRV - [2001.08.18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\..\SearchScopes,DefaultScope = search13
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\..\SearchScopes\search13: "URL" = http://search13.net/search.php?q={searchTerms}
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;<local>
IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 210.169.168.85:80

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google SSL"
FF - prefs.js..browser.search.selectedEngine: "Google SSL"
FF - prefs.js..browser.search.useDBForOrder: "false"
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:2.0.2
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.17
FF - prefs.js..extensions.enabledAddons: https-everywhere%40eff.org:3.4.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..network.proxy.backup.ftp_port: ""
FF - prefs.js..network.proxy.backup.socks_port: ""
FF - prefs.js..network.proxy.backup.ssl_port: ""
FF - prefs.js..network.proxy.http: "210.169.168.85"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Plus Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013.08.02 16:44:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.08.17 10:23:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.20\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013.07.15 08:52:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.20\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2013.03.29 15:57:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

[2010.07.07 17:57:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Extensions
[2010.07.07 17:57:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2009.11.11 17:19:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Extensions\MediaCoder-Setup-Wizard
[2013.08.20 11:28:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions
[2013.07.20 01:08:10 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009.05.14 15:26:37 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2)
[2009.05.14 15:26:41 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}(2)
[2010.05.03 18:21:39 | 000,000,000 | ---D | M] (ÄŚeskĂ© slovnĂ­ky pro kontrolu pravopisu) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\cs@dictionaries.addons.mozilla(2).org
[2013.07.23 11:31:20 | 000,000,000 | ---D | M] (FlashFirebug) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\flashfirebug@o-minds.com
[2013.08.20 01:19:20 | 000,000,000 | ---D | M] (HTTPS-Everywhere) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\https-everywhere@eff.org
[2011.02.15 15:37:21 | 000,000,000 | ---D | M] (LinkyLook) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\linkylook@dniflima.about.tc
[2013.08.20 11:28:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\staged
[2013.07.10 12:41:14 | 000,354,970 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\client@anonymox.net.xpi
[2013.07.23 11:30:17 | 002,168,615 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\firebug@software.joehewitt.com.xpi
[2013.08.05 15:05:42 | 000,053,391 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{065ee92a-ad57-42a2-b6d5-466b6fd8e24d}.xpi
[2013.08.04 15:05:29 | 000,350,663 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
[2013.01.24 23:56:08 | 000,004,233 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}.xpi
[2013.07.31 17:59:42 | 000,824,302 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2011.10.29 20:48:07 | 000,434,392 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2013.08.03 18:12:26 | 000,275,449 | ---- | M] () (No name found) -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.08.20 00:02:40 | 000,002,421 | ---- | M] () -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\searchplugins\google-esk-republika.xml
[2013.07.09 15:44:18 | 000,005,598 | ---- | M] () -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\searchplugins\google-ssl.xml
[2013.08.20 00:02:39 | 000,005,519 | ---- | M] () -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\searchplugins\startpage-https.xml
[2013.08.17 10:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.08.17 10:23:04 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky(2).ru
[2013.08.17 10:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㔰䄭䍂䕄䙆䑅䉃絁
[2013.08.17 10:23:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013.08.17 10:23:24 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\DHARMA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\U4ANJG9U.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\DHARMA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\U4ANJG9U.DEFAULT\EXTENSIONS\HTTPS-EVERYWHERE@EFF.ORG
[2011.07.11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll

O1 HOSTS File: ([2013.06.02 12:16:59 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - Startup: C:\Documents and Settings\Administrator.DHARMA-A14GPJLV\Nabídka Start\Programy\Po spuštění\Uninstall LastPass RunOnce.lnk = C:\Program Files\Common Files\lpuninstall.exe (LastPass)
O4 - Startup: C:\Documents and Settings\Administrator.DHARMA-A14GPJLV.000\Nabídka Start\Programy\Po spuštění\Uninstall LastPass RunOnce.lnk = C:\Program Files\Common Files\lpuninstall.exe (LastPass)
O4 - Startup: C:\Documents and Settings\Administrator.DHARMA-A14GPJLV.001\Nabídka Start\Programy\Po spuštění\Uninstall LastPass RunOnce.lnk = C:\Program Files\Common Files\lpuninstall.exe (LastPass)
O4 - Startup: C:\Documents and Settings\Administrator.DHARMA-A14GPJLV.002\Nabídka Start\Programy\Po spuštění\Uninstall LastPass RunOnce.lnk = C:\Program Files\Common Files\lpuninstall.exe (LastPass)
O4 - Startup: C:\Documents and Settings\UpdatusUser\Nabídka Start\Programy\Po spuštění\Uninstall LastPass RunOnce.lnk = C:\Program Files\Common Files\lpuninstall.exe (LastPass)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést cíl vazby do existujícího PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do Adobe PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do existujícího PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do Adobe PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést výběr do existujícího PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do Adobe PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést vybrané vazby do existujícího PDF - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 4167169078 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {A4639D2F-774E-11D3-A490-00C04F6843FB} http://download.microsoft.com/download/ ... msorun.cab (IEAnimBehaviorFactory Class)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E079419-B3D2-46B1-9168-298CC19266ED}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{54F59F51-FE44-4E5A-8841-B67CA6A27F70}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D535C484-1F1E-41D8-9FFF-A96EBC8FABE1}: DhcpNameServer = 10.0.0.138
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\dharma\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\dharma\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\Ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\Ir32_32.dll ()
Drivers32: vidc.iv50 - C:\WINDOWS\System32\Ir50_32.dll (Intel Corporation)
Drivers32: vidc.VP60 - C:\WINDOWS\System32\vp6vfw.dll (EA.com/On2.com)
Drivers32: vidc.VP61 - C:\WINDOWS\System32\vp6vfw.dll (EA.com/On2.com)
Drivers32: vidc.VP62 - C:\WINDOWS\System32\vp6vfw.dll (EA.com/On2.com)
Drivers32: vidc.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013.08.20 11:33:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
[2013.08.20 11:33:51 | 000,029,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2013.08.20 11:33:50 | 000,369,584 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2013.08.20 11:33:48 | 000,049,760 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2013.08.20 11:33:47 | 000,056,080 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2013.08.20 11:33:46 | 000,770,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2013.08.20 11:33:44 | 000,066,336 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013.08.20 11:33:03 | 000,041,664 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2013.08.20 11:29:50 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\dharma\Plocha\OTL.exe
[2013.08.20 11:26:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
[2013.08.17 10:23:02 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.08.16 17:37:07 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\dharma\Recent
[2013.08.08 23:18:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\mbar-1.06.0.1004
[2013.08.08 21:43:01 | 000,000,000 | ---D | C] -- C:\rsit
[2013.08.08 21:30:31 | 000,229,648 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2013.08.07 17:57:24 | 000,343,216 | ---- | C] (KeyWorks Software) -- C:\WINDOWS\System32\KeyHelp.ocx
[2013.08.07 17:57:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Nabídka Start\Programy\MRP Daňová evidence
[2013.08.07 17:57:03 | 000,000,000 | ---D | C] -- C:\MrpWin
[2013.08.07 17:57:00 | 000,000,000 | ---D | C] -- C:\Program Files\MRP
[2013.08.07 09:38:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\Memmes
[2013.08.06 11:30:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\Typersi
[2013.08.06 11:29:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\Vyúčtování
[2013.08.05 17:23:27 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2013.08.04 14:55:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Dokumenty\Aimersoft Video Converter Ultimate
[2013.08.04 14:55:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
[2013.08.04 14:54:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Local Settings\Data aplikací\Aimersoft
[2013.08.04 14:54:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Aimersoft
[2013.08.04 14:53:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Aimersoft Video Converter Ultimate
[2013.08.04 14:53:17 | 000,000,000 | ---D | C] -- C:\Program Files\Aimersoft
[2013.08.04 14:51:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\YTD Video Downloader
[2013.08.04 14:51:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\YTD Video Downloader
[2013.08.04 14:51:26 | 000,000,000 | ---D | C] -- C:\Program Files\GreenTree Applications
[2013.08.03 20:12:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\ImVehFt_Upd_01052013
[2013.08.03 20:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1320747410_Bugatti Veyron Super Sport Final
[2013.08.03 19:59:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1357228272_Bugatti_Veyron_16.4
[2013.08.02 20:44:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\DB 180 010-1
[2013.08.02 18:22:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1279648220_Aprilia
[2013.08.02 12:15:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1373899408_2012_lamborghini_aventador
[2013.08.02 12:11:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1365313168_Aston Martin Vanquish V12
[2013.08.02 12:02:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Plocha\1308661850_2011BugattiVeyronGrandSport
[2013.07.31 01:21:21 | 000,066,944 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\drivers\thdudf.sys
[2013.07.31 01:13:41 | 000,000,000 | ---D | C] -- C:\Program Files\DVDFab Virtual Drive
[2013.07.31 00:40:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\PowerISO
[2013.07.27 10:20:12 | 011,019,776 | ---- | C] (LastPass) -- C:\Program Files\Common Files\lpuninstall.exe
[2013.07.25 16:37:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\AstroViewer 3.1.6
[2013.07.25 16:36:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\applogs
[2013.07.25 16:36:41 | 000,000,000 | -H-D | C] -- C:\jexepackres
[2013.07.22 17:24:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dharma\Dokumenty\Movie Temp
[2013.05.15 17:00:00 | 004,411,440 | ---- | C] (AVG Technologies) -- C:\Program Files\avg_avct_stb_all_2013_2667_cm10.exe
[2013.04.17 13:08:24 | 014,630,632 | ---- | C] (VSO Software ) -- C:\Documents and Settings\dharma\Data aplikací\vso_downloader_setup.exe
[2011.03.23 16:07:13 | 000,048,128 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\dharma\SETUP32.DLL
[2009.09.21 15:19:44 | 000,438,240 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\dharma\setup.exe
[1 C:\Documents and Settings\dharma\Dokumenty\*.tmp files -> C:\Documents and Settings\dharma\Dokumenty\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.08.20 11:40:38 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.08.20 11:33:56 | 000,770,344 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2013.08.20 11:33:56 | 000,369,584 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2013.08.20 11:33:56 | 000,175,176 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.08.20 11:33:56 | 000,000,175 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
[2013.08.20 11:33:56 | 000,000,175 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
[2013.08.20 11:33:56 | 000,000,175 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2013.08.20 11:33:52 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2013.08.20 11:33:45 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.08.20 11:33:44 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2013.08.20 11:29:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\dharma\Plocha\OTL.exe
[2013.08.20 11:26:52 | 000,000,615 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
[2013.08.20 10:56:36 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.08.20 10:56:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.08.19 15:55:24 | 000,000,078 | ---- | M] () -- C:\WINDOWS\WatsonsBlockGame.ini
[2013.08.19 11:40:19 | 000,138,992 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2013.08.19 11:40:05 | 000,281,152 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2013.08.19 10:29:27 | 000,203,264 | ---- | M] () -- C:\Documents and Settings\dharma\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.08.17 16:16:20 | 000,000,716 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\Zástupce - samp.lnk
[2013.08.17 15:11:13 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET
[2013.08.17 15:10:29 | 000,000,062 | ---- | M] () -- C:\WINDOWS\KeyScript.ini
[2013.08.15 15:39:46 | 000,000,785 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\Zástupce - 06 Kyoto (feat. Sirah).mp3.lnk
[2013.08.15 15:39:29 | 000,000,834 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\Zástupce - 1463256_Scary_Monsters_And_Nice_Sprites_Original_Mix.mp3.lnk
[2013.08.12 20:10:30 | 000,191,097 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\cvManage.pdf
[2013.08.09 19:03:35 | 010,486,412 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\GF3.mp4
[2013.08.08 21:15:55 | 000,004,169 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2013.08.08 07:19:17 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2013.08.07 18:46:37 | 000,370,226 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\export csv.dbf
[2013.08.07 17:57:24 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\MRP Daňová evidence + sklad - zkušební verze.lnk
[2013.08.04 14:51:30 | 000,000,942 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\YTD Video Downloader.lnk
[2013.08.04 09:15:11 | 000,000,716 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\GGMM.lnk
[2013.08.03 23:39:56 | 000,000,657 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\GTA San Andreas.lnk
[2013.08.02 17:11:12 | 000,426,046 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\DataStore - záloha 2.8.2013.rar
[2013.08.02 16:45:01 | 000,001,439 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\DivX Movies.lnk
[2013.08.02 16:44:26 | 000,000,777 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\DivX Plus Player.lnk
[2013.08.02 16:43:43 | 000,000,817 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\DivX Plus Converter.lnk
[2013.07.31 00:43:19 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.07.31 00:43:19 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.07.31 00:40:16 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\PowerISO.lnk
[2013.07.27 10:27:05 | 011,019,776 | ---- | M] (LastPass) -- C:\Program Files\Common Files\lpuninstall.exe
[2013.07.26 01:08:06 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2013.07.25 16:37:04 | 000,000,036 | ---- | M] () -- C:\Documents and Settings\dharma\AstroViewer 3.1.6-Path
[2013.07.23 20:46:42 | 000,273,344 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013.07.23 20:46:42 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013.07.23 20:45:55 | 000,273,344 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013.07.23 18:08:32 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\dharma\Plocha\Tor.lnk
[2013.07.23 11:31:35 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\dharma\mm_backup.cfg
[2013.07.23 02:59:26 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Speccy.lnk
[1 C:\Documents and Settings\dharma\Dokumenty\*.tmp files -> C:\Documents and Settings\dharma\Dokumenty\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.08.20 11:33:52 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2013.08.20 11:33:45 | 000,175,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.08.20 11:33:45 | 000,000,316 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.08.20 11:33:44 | 000,049,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.08.20 11:26:52 | 000,000,615 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\VLC media player.lnk
[2013.08.15 15:39:46 | 000,000,785 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\Zástupce - 06 Kyoto (feat. Sirah).mp3.lnk
[2013.08.15 15:39:29 | 000,000,834 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\Zástupce - 1463256_Scary_Monsters_And_Nice_Sprites_Original_Mix.mp3.lnk
[2013.08.12 20:10:30 | 000,191,097 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\cvManage.pdf
[2013.08.09 19:03:15 | 010,486,412 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\GF3.mp4
[2013.08.08 21:30:44 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
[2013.08.08 21:30:43 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
[2013.08.08 21:30:43 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2013.08.07 18:46:37 | 000,370,226 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\export csv.dbf
[2013.08.07 18:05:06 | 000,000,062 | ---- | C] () -- C:\WINDOWS\KeyScript.ini
[2013.08.07 17:57:24 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\MRP Daňová evidence + sklad - zkušební verze.lnk
[2013.08.07 17:56:49 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\BDEADMIN.CPL
[2013.08.04 14:53:51 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\AiCM32.dll
[2013.08.04 14:51:30 | 000,000,942 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\YTD Video Downloader.lnk
[2013.08.03 23:39:56 | 000,000,657 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\GTA San Andreas.lnk
[2013.08.03 20:14:03 | 000,018,483 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\Super Sport Spolier.cs
[2013.08.02 17:11:11 | 000,426,046 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\DataStore - záloha 2.8.2013.rar
[2013.08.02 16:45:01 | 000,001,439 | ---- | C] () -- C:\Documents and Settings\dharma\Plocha\DivX Movies.lnk
[2013.08.02 16:44:26 | 000,000,777 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\DivX Plus Player.lnk
[2013.08.02 16:43:43 | 000,000,817 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\DivX Plus Converter.lnk
[2013.07.25 16:37:04 | 000,000,036 | ---- | C] () -- C:\Documents and Settings\dharma\AstroViewer 3.1.6-Path
[2013.07.23 11:31:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\mm_backup.cfg
[2013.07.11 18:05:16 | 000,033,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\eve.sys
[2013.05.23 11:09:36 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013.05.23 11:09:36 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013.05.23 11:09:36 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013.05.23 11:09:36 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013.05.23 11:09:36 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013.05.17 09:12:18 | 000,125,440 | ---- | C] () -- C:\WINDOWS\System32\lua5.1a.dll
[2013.05.14 07:44:07 | 095,023,320 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\odhdzot.pad
[2013.05.14 07:44:01 | 095,023,320 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\ofvwl.pad
[2013.03.31 12:06:53 | 000,000,418 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2013.03.05 19:26:41 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2013.03.05 19:26:41 | 000,037,344 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2013.02.05 18:52:54 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2013.01.01 14:16:06 | 000,000,101 | ---- | C] () -- C:\WINDOWS\System32\ud-boot-time.ini
[2012.12.26 13:59:57 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\SysInfo_6.dll
[2012.12.25 20:02:24 | 000,000,245 | ---- | C] () -- C:\WINDOWS\System32\AF15IRTBL.bin
[2012.08.10 22:04:48 | 003,529,824 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.07.30 14:16:18 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2012.07.30 14:16:18 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2012.07.30 14:16:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2012.07.30 14:16:18 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2012.06.21 21:48:09 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\wintab32.dll
[2012.04.05 20:47:02 | 000,003,368 | ---- | C] () -- C:\Documents and Settings\dharma\Data aplikací\coreldrw.tpa
[2012.02.08 23:11:45 | 000,645,632 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012.02.08 23:11:45 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011.12.29 14:33:09 | 000,001,042 | ---- | C] () -- C:\Documents and Settings\dharma\Data aplikací\coreavc.ini
[2011.09.12 23:50:38 | 000,037,921 | -H-- | C] () -- C:\Documents and Settings\dharma\992GCAHG.bat
[2011.08.25 20:33:07 | 000,273,344 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011.08.25 20:33:07 | 000,273,344 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011.08.25 20:33:07 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011.08.25 20:32:00 | 002,123,582 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011.03.23 16:07:06 | 000,006,137 | ---- | C] () -- C:\Documents and Settings\dharma\EPSETUP.EIF
[2011.03.23 16:07:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\EPDISK4
[2011.03.23 16:07:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\EPDISK3
[2011.03.23 16:07:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\EPDISK2
[2011.03.23 16:07:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\EPDISK1
[2011.03.22 19:32:47 | 000,000,105 | ---- | C] () -- C:\Documents and Settings\dharma\Data aplikací\netstat.bat
[2011.02.19 15:05:33 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\dharma\Data aplikací\PnkBstrK.sys
[2010.09.26 19:20:38 | 000,184,969 | ---- | C] () -- C:\Documents and Settings\dharma\Steam_2010_09_26__17_20_38_875.mdmp
[2010.09.26 16:09:24 | 000,207,509 | ---- | C] () -- C:\Documents and Settings\dharma\Steam_2010_09_26__14_09_24_796.mdmp
[2010.07.12 19:43:48 | 000,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe
[2010.02.21 16:10:39 | 000,000,126 | ---- | C] () -- C:\Documents and Settings\dharma\Local Settings\Data aplikací\fusioncache.dat
[2010.01.19 16:50:34 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\dharma\defogger_reenable
[2010.01.09 20:17:36 | 000,203,264 | ---- | C] () -- C:\Documents and Settings\dharma\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.09.21 15:19:30 | 134,926,662 | ---- | C] () -- C:\Documents and Settings\dharma\Data1.cab
[2009.03.05 17:05:32 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\dharma\intlname.ols
[2006.01.02 18:53:07 | 000,007,441 | -H-- | C] () -- C:\Documents and Settings\dharma\Data aplikací\dharmalog.dat

========== ZeroAccess Check ==========

[2009.05.27 18:37:10 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 09:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 09:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.08.04 14:56:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Aimersoft Video Converter Ultimate
[2011.12.19 23:47:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
[2011.12.24 10:18:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Applian
[2012.06.14 22:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Autodesk
[2013.08.20 11:32:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2013.05.19 21:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVG
[2011.12.19 23:45:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AWEM
[2013.01.22 15:23:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlazeVideo
[2010.11.17 14:59:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2011.12.19 23:49:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CropBusters
[2013.07.31 00:56:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.03.31 07:39:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Hitman Pro
[2011.04.25 10:00:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2011.12.29 23:59:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\install_clap
[2011.03.24 11:47:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LangSoft
[2011.06.16 10:08:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LGMOBILEAX
[2013.06.26 10:17:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2011.08.13 20:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MyHeritage
[2011.10.21 20:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NCH Swift Sound
[2013.05.28 12:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nokia
[2011.08.20 09:06:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2011.04.25 10:26:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaMusic
[2011.04.25 10:08:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.12.29 23:55:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PDVD
[2011.11.08 04:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2013.03.05 21:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2011.12.28 16:14:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SecTaskMan
[2011.11.08 12:01:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sony
[2012.07.19 09:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.03.23 09:34:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\UDL
[2013.07.11 18:05:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VSO
[2013.08.04 14:51:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\YTD Video Downloader
[2013.05.19 21:41:43 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}
[2011.07.19 18:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\.expertlotto
[2011.08.25 21:33:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\3v
[2009.02.19 23:13:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\ACD Systems
[2009.03.03 19:59:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ashampoo
[2012.06.14 22:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Autodesk
[2013.05.19 21:43:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\AVG
[2013.05.25 13:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Azureus
[2013.05.25 13:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\BitTorrent
[2011.12.06 13:27:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\BlackBean
[2009.07.29 18:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\CÍGLER SOFTWARE, a.s
[2013.07.31 01:44:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\DAEMON Tools Lite
[2012.08.31 21:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\DDMSettings
[2013.04.27 17:14:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\dp3d
[2011.03.23 09:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\EPSON
[2013.05.03 19:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Fuir
[2011.03.22 20:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\KillProcess
[2010.05.06 16:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\LangSoft
[2012.02.24 21:50:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Leadertech
[2011.03.23 18:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Lexmark Imaging Studio
[2011.08.13 20:21:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\MyHeritage
[2011.10.14 20:50:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\NCH Swift Sound
[2013.01.04 22:37:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Nokia
[2011.02.17 22:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\OpenOffice.org
[2012.07.28 11:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Oracle
[2013.03.29 13:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\PC Suite
[2012.06.21 21:51:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\progeSOFT
[2011.11.08 12:10:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Publish Providers
[2013.05.14 20:18:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Qayq
[2012.08.31 16:23:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Samsung
[2011.11.08 12:09:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Sony
[2010.07.07 17:56:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Thunderbird
[2011.06.11 07:22:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\TS3Client
[2013.05.15 17:12:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\TuneUp Software
[2013.05.13 20:09:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ukty
[2013.06.22 02:36:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ulozto File Manager
[2013.08.20 11:38:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\uTorrent
[2012.02.09 16:26:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\VitySoft
[2012.03.28 19:56:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\wargaming.net
[2013.08.16 11:22:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\YouTube Downloader
[2011.10.28 19:48:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Zoner
[2013.08.04 14:55:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
[2013.05.28 10:42:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.02.15 20:06:08 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2009.02.15 20:09:05 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2013.08.20 11:33:45 | 000,000,316 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job

< >

< MD5 for: ATAPI.SYS >
[2003.04.16 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2003.04.16 14:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2008.04.14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2003.04.16 14:00:00 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=82CD2AA659D68781D29BA87421BE0E40 -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe

< MD5 for: CDROM.SYS >
[2003.04.16 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.14 01:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.14 01:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2003.04.16 14:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=6506E033AD04CFEC9EE56DBEFD1083DD -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2003.04.16 14:00:00 | 001,004,544 | ---- | M] (Microsoft Corporation) MD5=11D80755545CFB5EB9659EE88440EAE2 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

< MD5 for: HAL.DLL >
[2003.04.16 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 10:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 01:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.14 01:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2003.04.16 14:00:00 | 000,127,872 | ---- | M] (Microsoft Corporation) MD5=E8D2B5D5186A9B93D7019D7A74D77A1E -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2008.04.14 09:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 09:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
[2003.04.16 14:00:00 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B2666CAB5E8C8A741D63F18D551A47FB -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 13:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 09:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe
[2003.04.16 14:00:00 | 000,101,376 | ---- | M] (Microsoft Corporation) MD5=F4D2C4AF666E0224E961AA744A1B47E3 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe

< MD5 for: SVCHOST.EXE >
[2003.04.16 14:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=329945887A0C684C38A4845330BC9100 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2008.04.14 09:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 09:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2003.04.16 14:00:00 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.04.14 01:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2013.03.31 12:02:56 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=CBEEBEB899E31EF52B962CB31FC8CA5C -- C:\WINDOWS\system32\drivers\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 09:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 09:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2003.04.16 14:00:00 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B26871B5CE92F9D95AE6E62119799EB9 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008.04.14 09:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 09:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
[2003.04.16 14:00:00 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=FF8857D1AF59071F172C0FAD0FD33E87 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\WINDOWS\SoftwareDistribution\Download\a61dcfd7f1fe3a041bc138dc48cd562b\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a61dcfd7f1fe3a041bc138dc48cd562b\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.07.19 18:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\.expertlotto
[2011.08.25 21:33:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\3v
[2009.02.19 23:13:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\ACD Systems
[2013.01.02 16:46:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Adobe
[2010.02.11 10:57:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\AdobeUM
[2009.03.03 19:59:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ashampoo
[2012.06.14 22:34:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Autodesk
[2013.05.19 21:43:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\AVG
[2013.05.25 13:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Azureus
[2013.05.25 13:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\BitTorrent
[2011.12.06 13:27:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\BlackBean
[2012.03.18 22:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Corel
[2011.12.29 23:56:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\CyberLink
[2009.07.29 18:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\CÍGLER SOFTWARE, a.s
[2013.07.31 01:44:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\DAEMON Tools Lite
[2012.08.31 21:05:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\DDMSettings
[2010.06.29 00:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\DivX
[2013.04.27 17:14:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\dp3d
[2013.07.31 01:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\dvdcss
[2011.03.23 09:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\EPSON
[2011.10.14 16:05:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\FastStone
[2011.03.24 17:40:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\FaxCtr
[2013.05.03 19:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Fuir
[2013.04.14 16:08:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Google
[2009.05.14 16:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Help
[2009.07.10 17:12:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\InstallShield
[2011.03.22 20:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\KillProcess
[2010.05.06 16:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\LangSoft
[2012.02.24 21:50:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Leadertech
[2011.03.23 18:13:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Lexmark Imaging Studio
[2011.05.27 19:04:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Logitech
[2011.03.22 19:54:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Macromedia
[2011.05.01 10:17:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Malwarebytes
[2013.08.18 17:22:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Media Player Classic
[2013.07.13 10:47:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Microsoft
[2012.04.29 01:23:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\mIRC
[2009.02.15 20:31:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Mozilla
[2011.08.13 20:21:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\MyHeritage
[2012.04.14 00:56:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\NCH Software
[2011.10.14 20:50:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\NCH Swift Sound
[2013.01.04 22:37:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Nokia
[2011.02.17 22:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\OpenOffice.org
[2012.07.28 11:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Oracle
[2013.03.29 13:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\PC Suite
[2012.06.21 21:51:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\progeSOFT
[2011.11.08 12:10:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Publish Providers
[2013.05.14 20:18:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Qayq
[2011.03.23 11:04:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Real
[2012.08.31 16:23:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Samsung
[2012.01.27 17:42:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Skype
[2011.11.08 12:09:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Sony
[2012.12.15 04:50:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Sony Corporation
[2009.02.15 20:32:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Sun
[2011.11.05 20:23:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Sunbelt
[2010.07.07 17:56:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Thunderbird
[2011.06.11 07:22:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\TS3Client
[2013.05.15 17:12:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\TuneUp Software
[2013.05.13 20:09:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ukty
[2013.06.22 02:36:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Ulozto File Manager
[2013.08.20 11:38:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\uTorrent
[2012.02.09 16:26:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\VitySoft
[2013.08.13 12:25:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\vlc
[2012.03.28 19:56:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\wargaming.net
[2013.08.16 17:37:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Winamp
[2009.06.10 13:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\WinRAR
[2013.08.16 11:22:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\YouTube Downloader
[2011.10.28 19:48:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\Zoner
[2013.08.04 14:55:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\dharma\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}

< %APPDATA%\*.exe /s >
[2013.04.17 13:08:24 | 014,630,632 | ---- | M] (VSO Software ) -- C:\Documents and Settings\dharma\Data aplikací\vso_downloader_setup.exe
[2013.03.31 13:42:46 | 000,310,208 | ---- | M] (Georgia Institute of Technology) -- C:\Documents and Settings\dharma\Data aplikací\Azureus\plugins\mlab\ShaperProbeC.exe
[2013.03.31 23:40:08 | 001,119,568 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\dharma\Data aplikací\BitTorrent\BitTorrent.exe
[2013.08.04 15:05:58 | 000,158,000 | ---- | M] () -- C:\Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\FlashGot.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013.08.20 11:33:45 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2009.12.21 18:28:24 | 003,932,160 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2009.12.21 18:11:56 | 000,045,056 | ---- | M] () -- C:\WINDOWS\System32\config\security.sav
[2009.12.21 18:28:24 | 034,078,720 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2009.12.21 18:28:24 | 006,029,312 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >
[2013.08.20 11:33:56 | 000,770,344 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSnx.sys
[2013.08.20 11:33:56 | 000,369,584 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSP.sys
[2013.08.20 11:33:56 | 000,175,176 | ---- | M] () -- C:\WINDOWS\system32\drivers\aswVmm.sys
[2013.08.19 11:40:19 | 000,138,992 | ---- | M] () -- C:\WINDOWS\system32\drivers\PnkBstrK.sys

< %systemroot%\system32\*.* /3 >
[2013.08.20 11:33:44 | 000,002,504 | ---- | M] () -- C:\WINDOWS\system32\CONFIG.NT
[2013.08.19 11:40:05 | 000,281,152 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.exe
[2013.08.19 11:40:05 | 000,281,152 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.xtr
[2013.08.20 10:56:36 | 000,012,598 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2013.08.17 10:23:22 | 000,276,376 | ---- | M] (Mozilla Corporation) MD5=B4CF3FB7E9B8EA69757541DCE6CA20ED -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.03.08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.08.20 11:40:38 | 000,000,512 | ---- | M] () MD5=797893B98CBCF3F268DDEE706325D747 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[1999.06.11 20:18:36 | 000,092,827 | ---- | M] () -- \Program Files\Corel\Corel Graphics 11\Custom Data\Bumpmap\Cracks.cpt
[2002.01.30 18:31:34 | 000,016,068 | ---- | M] () -- \Program Files\Corel\Corel Graphics 11\Custom Data\Canvas\cracks2c.pcx
[2002.01.30 19:15:39 | 000,010,560 | ---- | M] () -- \Program Files\Corel\Corel Graphics 11\Custom Data\Tiles\CRACKS2M.CPT

< *keygen* /s >
[2010.04.24 09:02:36 | 000,000,458 | ---- | M] () -- \Program Files\Adobe\Adobe Help Center\AdobeHelpData\Cache\GoLive\8.0\en_US\binary\page\f_keygen.png

< *loader* /s >
[2012.11.10 00:22:57 | 000,000,545 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy\Recovery\WinDownloaderbltu.zip
[2013.08.09 13:49:18 | 000,000,429 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy\Recovery\WinDownloadergen.zip
[2013.07.11 18:33:18 | 000,013,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\VSO\VSO Downloader\3\log\downloader_log.20130711.180647.718.log
[2013.07.11 21:01:00 | 000,010,247 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\VSO\VSO Downloader\3\log\downloader_log.20130711.210100.125.log
[2013.08.04 14:49:58 | 000,032,831 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\VSO\VSO Downloader\3\log\downloader_log.20130804.143534.500.log
[2013.08.04 18:37:05 | 000,027,627 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\VSO\VSO Downloader\3\log\downloader_log.20130804.150456.234.log
[2013.07.11 18:05:09 | 000,000,097 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VSO\VSO Downloader 3\Aplikace VSO Downloader 3 na internetu.url
[2013.07.11 18:05:09 | 000,000,862 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VSO\VSO Downloader 3\Odinstalovat aplikaci VSO Downloader 3.lnk
[2013.07.11 18:05:09 | 000,001,234 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VSO\VSO Downloader 3\Překlad VSO Downloader 3.lnk
[2013.07.11 18:05:09 | 000,000,887 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VSO\VSO Downloader 3\VSO Downloader 3.lnk
[2013.08.04 14:51:31 | 000,001,880 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\YTD Video Downloader\YTD Video Downloader.lnk
[2013.08.04 14:51:30 | 000,000,942 | ---- | M] () -- \Documents and Settings\All Users\Plocha\YTD Video Downloader.lnk
[2013.04.17 13:08:24 | 014,630,632 | ---- | M] () -- \Documents and Settings\dharma\Data aplikací\vso_downloader_setup.exe
[2013.07.11 18:05:09 | 000,000,887 | ---- | M] () -- \Documents and Settings\dharma\Data aplikací\Microsoft\Internet Explorer\Quick Launch\VSO Downloader 3.lnk
[2013.01.25 04:51:35 | 000,000,621 | ---- | M] () -- \Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\flashfirebug@o-minds.com\chrome\content\themes\default\images\UIComponents\UILoader.gif
[2013.01.25 04:51:35 | 000,000,621 | ---- | M] () -- \Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\flashfirebug@o-minds.com\chrome\content\themes\default\inspector\UIComponents\UILoader.gif
[2013.01.25 04:51:36 | 000,000,621 | ---- | M] () -- \Documents and Settings\dharma\Data aplikací\Mozilla\Firefox\Profiles\u4anjg9u.default\extensions\flashfirebug@o-minds.com\chrome\skin\classic\inspector\UIComponents\UILoader.gif
[1 \Documents and Settings\dharma\Dokumenty\*.tmp files -> \Documents and Settings\dharma\Dokumenty\*.tmp -> ]
[2009.04.14 23:19:15 | 000,003,208 | ---- | M] () -- \Documents and Settings\dharma\Dokumenty\Platby\SCIO\objedOdeslano.asp_soubory\loader.gif
[2008.09.09 21:27:16 | 000,000,544 | ---- | M] () -- \Documents and Settings\dharma\Local Settings\Data aplikací\Adobe\Flash CS4\cs\Configuration\Classes\FP7\MovieClipLoader.as
[2008.09.09 21:27:16 | 000,000,544 | ---- | M] () -- \Documents and Settings\dharma\Local Settings\Data aplikací\Adobe\Flash CS4\cs\Configuration\Classes\FP8\MovieClipLoader.as
[2008.09.09 21:27:16 | 000,000,576 | ---- | M] () -- \Documents and Settings\dharma\Local Settings\Data aplikací\Adobe\Flash CS4\cs\Configuration\Classes\FP9\MovieClipLoader.as
[2008.09.09 21:27:18 | 000,010,454 | ---- | M] () -- \Documents and Settings\dharma\Local Settings\Data aplikací\Adobe\Flash CS4\cs\Configuration\Classes\mx\controls\Loader.as
[2013.07.11 18:05:09 | 000,000,903 | ---- | M] () -- \Documents and Settings\dharma\Plocha\VSO Downloader 3.lnk
[2005.03.16 19:16:00 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2008.07.30 11:06:58 | 000,072,192 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7Debug\coloader80.dll
[2008.07.29 04:43:16 | 000,004,096 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7Debug\coloader80.tlb
[2003.04.11 15:45:42 | 000,348,160 | ---- | M] () -- \Program Files\GameSpy Arcade\Services\_common\PortraitLoader.dll
[2010.06.07 22:11:08 | 000,006,262 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2011.02.17 22:13:06 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.06.07 22:19:10 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2011.02.17 22:13:35 | 000,029,184 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.06.09 17:21:40 | 000,003,874 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2013.05.23 08:13:44 | 000,069,120 | ---- | M] () -- \Program Files\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.12.27 18:54:36 | 000,002,722 | ---- | M] () -- \Program Files\Sanny Builder 3\tools\CLEO3\ASI_Loader_ReadMe.txt
[2008.02.25 08:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2013.01.03 16:48:38 | 000,063,744 | ---- | M] () -- \Program Files\VSO\VSO Downloader\3\eula_VsoDownloader_en.rtf
[2013.04.16 10:54:42 | 013,075,784 | ---- | M] () -- \Program Files\VSO\VSO Downloader\3\VsoDownloader.exe
[2013.04.16 10:54:42 | 013,075,784 | ---- | M] () -- \Program Files\VSO\VSO Downloader\3\VsoDownloader.exe.BAK
[2002.12.12 00:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2002.12.12 01:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll
[2008.04.14 09:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.14 01:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 01:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 09:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2009.08.14 14:36:18 | 000,070,936 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[2008.09.25 21:44:58 | 000,004,178 | ---- | M] () -- \WINDOWS\system32\tnczsporicobrazovky_loader.gif
[2013.06.26 09:23:10 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2002.12.12 01:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
[2010.08.18 08:02:24 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr

< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
  IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\..\SearchScopes,DefaultScope = search13
  IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\..\SearchScopes\search13: "URL" = http://search13.net/search.php?q={searchTerms}
  IE - HKU\S-1-5-21-842925246-1580436667-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 210.169.168.85:80
  F - prefs.js..network.proxy.backup.ftp_port: ""
  FF - prefs.js..network.proxy.backup.socks_port: ""
  FF - prefs.js..network.proxy.backup.ssl_port: ""
  FF - prefs.js..network.proxy.http: "210.169.168.85"
  FF - prefs.js..network.proxy.http_port: 80
  FF - prefs.js..network.proxy.no_proxies_on: ""
  FF - prefs.js..network.proxy.type: 0
  [2013.08.17 10:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㔰䄭䍂䕄䙆䑅䉃絁)
  File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\DHARMA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\U4ANJG9U.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
  File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\DHARMA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\U4ANJG9U.DEFAULT\EXTENSIONS\HTTPS-EVERYWHERE@EFF.ORG
  [2013.05.19 21:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVG
  [1 C:\WINDOWS\SoftwareDistribution\Download\a61dcfd7f1fe3a041bc138dc48cd562b\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a61dcfd7f1fe3a041bc138dc48cd562b\*.tmp -> ]
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem