Re: Prosím o kontrolu
Napsal: 26 zář 2013 18:10
OTL.Txt
OTL logfile created on: 26. 9. 2013 18:59:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\user\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d. M. yyyy
1023,17 Mb Total Physical Memory | 523,24 Mb Available Physical Memory | 51,14% Memory free
2,40 Gb Paging File | 2,01 Gb Available in Paging File | 83,53% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 50,02 Gb Total Space | 16,98 Gb Free Space | 33,94% Space Free | Partition Type: NTFS
Drive D: | 139,89 Gb Total Space | 98,38 Gb Free Space | 70,33% Space Free | Partition Type: NTFS
Computer Name: USER-D55BF56392 | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013.09.26 18:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
PRC - [2013.09.17 16:50:45 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.03.23 01:22:24 | 001,259,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2013.03.21 15:19:40 | 005,078,504 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2011.09.14 14:15:59 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\explorer.exe
========== Modules (No Company Name) ==========
MOD - [2013.04.04 01:09:40 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
========== Services (SafeList) ==========
SRV - [2013.09.19 23:55:11 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.09.19 20:37:42 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.09.17 16:50:45 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.03.23 01:22:24 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2013.03.09 00:10:32 | 030,798,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013.07.30 19:55:28 | 005,788,672 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2013.07.30 19:55:24 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2013.07.30 19:55:22 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2013.02.25 07:27:48 | 000,128,672 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2013.02.14 13:21:04 | 000,062,512 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2013.01.10 10:25:22 | 000,150,080 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS.0\system32\drivers\epfw.sys -- (epfw)
DRV - [2013.01.10 10:25:22 | 000,040,376 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2013.01.10 10:25:20 | 000,161,368 | ---- | M] (ESET) [File_System | System | Running] -- C:\WINDOWS.0\system32\drivers\eamon.sys -- (eamon)
DRV - [2013.01.10 10:25:20 | 000,122,240 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2011.09.14 14:31:20 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mvxxmm.sys -- (mvxxmm)
DRV - [2011.09.14 14:31:20 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mv61xxmm.sys -- (mv61xxmm)
DRV - [2011.09.14 14:31:20 | 000,005,632 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mv64xxmm.sys -- (mv64xxmm)
DRV - [2010.06.30 07:01:10 | 000,011,832 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\system32\drivers\amdide.sys -- (amdide)
DRV - [2008.10.30 21:14:00 | 000,117,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6B528F7B-1290-4F85-BA27-8515B393FF4B}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes\{6BA4BBC5-3A34-465E-A7AD-CA216AD72022}: "URL" = http://en.wikipedia.org/w/index.php?tit ... earchTerms}
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.sk/ [binary data]
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 8A 91 92 99 4B 8D CE 01 [binary data]
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1004\..\SearchScopes,DefaultScope =
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledAddons: %7B0538E3E3-7E9B-4d49-8831-A227C80A7AD3%7D:2.2.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\WINDOWS.0\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.09.19 23:54:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013.07.30 18:49:00 | 000,000,000 | ---D | M]
[2013.07.30 18:25:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions
[2013.09.08 21:45:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\9pmm0c8i.default\extensions
[2013.08.03 14:47:54 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\9pmm0c8i.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2013.09.19 23:54:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013.09.19 23:55:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O1 HOSTS File: ([2013.09.24 13:54:09 | 000,000,741 | ---- | M]) - C:\WINDOWS.0\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS.0\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS.0\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS.0\System32\sti_ci.dll (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-796845957-1897051121-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Od&oslať do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 5204719224 (MUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3BEC8E37-D0FA-4AC9-80FF-2B9E3685D57A}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS.0\system32\userinit.exe) - C:\WINDOWS.0\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS.0\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS.0\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2013.07.11 20:53:54 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013.09.26 18:55:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
[2013.09.25 23:43:23 | 000,000,000 | ---D | C] -- C:\rsit
[2013.09.20 12:20:50 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\System32\appmgmt
[2013.09.20 12:11:38 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.09.19 23:54:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.09.18 18:40:05 | 002,465,888 | ---- | C] (Lavalys, Inc.) -- C:\Documents and Settings\user\Desktop\everest.exe
[2013.09.18 09:04:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\WMTools Downloaded Files
[2013.09.17 18:17:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\SharePoint
[2013.09.17 18:17:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Microsoft Office
[2013.09.17 18:13:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Microsoft
[2013.09.17 18:10:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2013.09.17 18:08:14 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2013.09.17 18:08:01 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\SHELLNEW
[2013.09.17 18:07:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Microsoft Help
[2013.09.17 18:06:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013.09.17 18:06:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Microsoft Help
[2013.09.17 18:03:55 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2013.09.17 16:55:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Malwarebytes
[2013.09.17 16:55:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Malwarebytes
[2013.09.17 16:51:06 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaws.exe
[2013.09.17 16:51:06 | 000,144,896 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javacpl.cpl
[2013.09.17 16:51:00 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\WindowsAccessBridge.dll
[2013.09.17 16:51:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Java
[2013.09.17 16:50:59 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaw.exe
[2013.09.17 16:50:59 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\java.exe
[2013.09.17 16:50:37 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013.09.17 16:41:36 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent
[2013.09.17 16:36:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\CCleaner
[2013.09.08 21:29:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\My Documents\Any Audio Converter
[2013.09.08 21:28:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\AnvSoft
[2013.09.08 21:28:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\AnvSoft
[2013.09.08 21:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\AnvSoft
[2013.09.03 21:26:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Google
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.09.26 19:03:33 | 000,003,366 | ---- | M] () -- C:\WINDOWS.0\System32\nvAppTimestamps
[2013.09.26 18:58:50 | 000,523,390 | ---- | M] () -- C:\WINDOWS.0\System32\perfh009.dat
[2013.09.26 18:58:50 | 000,095,306 | ---- | M] () -- C:\WINDOWS.0\System32\perfc009.dat
[2013.09.26 18:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
[2013.09.26 18:54:36 | 000,000,202 | ---- | M] () -- C:\WINDOWS.0\tasks\AutoKMS.job
[2013.09.26 18:54:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS.0\bootstat.dat
[2013.09.25 23:43:14 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\user\Desktop\RSIT.exe
[2013.09.25 23:41:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS.0\System32\wpa.dbl
[2013.09.24 23:37:15 | 000,000,834 | ---- | M] () -- C:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
[2013.09.24 14:32:18 | 000,000,542 | RHS- | M] () -- C:\boot.ini
[2013.09.23 20:30:26 | 000,922,112 | ---- | M] () -- C:\Documents and Settings\user\Desktop\RogueKiller.exe
[2013.09.20 11:49:15 | 001,039,554 | ---- | M] () -- C:\Documents and Settings\user\Desktop\adwcleaner.exe
[2013.09.19 20:37:41 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS.0\System32\FlashPlayerApp.exe
[2013.09.19 20:37:41 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS.0\System32\FlashPlayerCPLApp.cpl
[2013.09.19 17:49:55 | 000,000,678 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2013.09.19 17:49:55 | 000,000,660 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS.0\Desktop\Winamp.lnk
[2013.09.19 17:36:44 | 000,002,555 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Microsoft Word 2010.lnk
[2013.09.18 19:07:51 | 000,002,459 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Microsoft Office Picture Manager.lnk
[2013.09.18 19:07:39 | 000,000,135 | ---- | M] () -- C:\WINDOWS.0\AutoKMS.ini
[2013.09.17 22:49:37 | 000,269,392 | ---- | M] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2013.09.17 16:50:47 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\WindowsAccessBridge.dll
[2013.09.17 16:50:43 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaws.exe
[2013.09.17 16:50:43 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaw.exe
[2013.09.17 16:50:42 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\java.exe
[2013.09.17 16:50:42 | 000,144,896 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javacpl.cpl
[2013.09.17 16:50:41 | 000,868,264 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\npDeployJava1.dll
[2013.09.17 16:50:41 | 000,790,440 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\deployJava1.dll
[2013.09.15 21:07:28 | 1892,134,912 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Krúdovci.avi
[2013.09.14 16:41:41 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.09.11 00:10:45 | 944,740,606 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Čistá duša.avi
[2013.09.08 21:28:46 | 000,000,805 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Any Audio Converter.lnk
[2013.08.29 00:53:05 | 000,000,422 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Lokálne pripojenie.lnk
[2013.08.27 19:26:21 | 732,012,544 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Zbaľ prachy a vypadni!.avi
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.09.25 23:43:15 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\user\Desktop\RSIT.exe
[2013.09.23 20:30:24 | 000,922,112 | ---- | C] () -- C:\Documents and Settings\user\Desktop\RogueKiller.exe
[2013.09.20 11:49:05 | 001,039,554 | ---- | C] () -- C:\Documents and Settings\user\Desktop\adwcleaner.exe
[2013.09.18 19:07:39 | 000,000,202 | ---- | C] () -- C:\WINDOWS.0\tasks\AutoKMS.job
[2013.09.18 19:07:39 | 000,000,135 | ---- | C] () -- C:\WINDOWS.0\AutoKMS.ini
[2013.09.17 18:17:05 | 000,002,555 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Microsoft Word 2010.lnk
[2013.09.17 18:17:05 | 000,002,459 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Microsoft Office Picture Manager.lnk
[2013.09.16 21:28:34 | 1892,134,912 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Krúdovci.avi
[2013.09.10 23:01:35 | 944,740,606 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Čistá duša.avi
[2013.09.08 21:28:46 | 000,000,805 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Any Audio Converter.lnk
[2013.08.29 00:53:05 | 000,000,422 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Lokálne pripojenie.lnk
[2013.07.31 20:17:33 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\fusioncache.dat
[2013.07.30 22:17:02 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.07.12 09:04:09 | 001,098,236 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb0.bin
[2013.07.12 09:04:08 | 001,098,236 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb1.bin
[2013.07.12 09:04:08 | 000,000,001 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrssel.bin
[2013.07.12 09:03:19 | 002,289,288 | ---- | C] () -- C:\WINDOWS.0\System32\nvdata.data
[2013.07.12 08:47:15 | 000,003,072 | ---- | C] () -- C:\WINDOWS.0\System32\iacenc.dll
[2013.07.11 22:37:44 | 000,004,249 | ---- | C] () -- C:\WINDOWS.0\ODBCINST.INI
[2013.07.11 22:35:56 | 000,269,392 | ---- | C] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2013.07.11 20:56:50 | 000,002,048 | --S- | C] () -- C:\WINDOWS.0\bootstat.dat
[2013.07.11 20:49:30 | 000,021,640 | ---- | C] () -- C:\WINDOWS.0\System32\emptyregdb.dat
[2011.05.25 23:55:40 | 000,092,552 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
========== ZeroAccess Check ==========
[2013.07.11 21:34:13 | 000,000,227 | RHS- | M] () -- C:\WINDOWS.0\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2011.09.14 14:17:10 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS.0\system32\wbem\fastprox.dll -- [2011.09.14 14:16:00 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS.0\system32\wbem\wbemess.dll -- [2008.04.14 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2007.01.27 18:52:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2011.08.05 00:09:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Applian
[2010.08.18 13:53:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo
[2007.11.10 00:53:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ConeXware
[2009.12.26 03:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010.06.06 23:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DFX
[2011.03.03 11:36:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2008.06.01 19:05:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2011.04.05 20:36:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ICQ
[2010.12.23 00:21:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2011.05.22 12:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
[2008.02.27 21:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Last.fm
[2011.07.31 23:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Mirillis
[2009.07.03 02:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010.09.23 11:16:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia
[2009.10.24 01:10:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NokiaMusic
[2010.09.30 22:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters Inc
[2009.10.24 00:59:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2008.03.25 03:54:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SiComponents
[2011.05.25 23:03:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Soluto
[2009.06.07 13:06:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SRS Labs
[2011.08.29 18:54:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2007.07.21 00:14:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2007.08.16 18:13:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2011.03.31 16:02:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2009.09.18 20:00:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013.07.30 18:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\ESET
[2012.04.21 23:30:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Common Files
[2013.06.02 17:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\ESET
[2013.01.26 17:54:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Freemake
[2012.11.26 23:10:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\ICQ
[2012.08.08 15:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Installations
[2012.11.16 00:39:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Samsung
[2012.06.13 16:25:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\TuneUp Software
[2012.06.13 16:24:24 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2007.07.18 19:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Opera
[2012.10.25 20:04:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2007.01.27 18:53:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ACD Systems
[2011.01.23 16:14:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\AnvSoft
[2010.08.18 13:53:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Ashampoo
[2009.12.10 20:28:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Audacity
[2011.08.09 10:01:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Broad Intelligence
[2007.07.06 11:40:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\BSplayer Pro
[2009.06.13 14:24:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009.03.07 11:50:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\COWON
[2009.01.30 17:30:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools
[2011.07.07 00:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools Lite
[2011.07.07 00:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools Pro
[2007.08.25 15:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DataCast
[2009.11.08 13:57:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DiscoSW
[2007.12.13 19:02:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\easycdda
[2008.01.16 16:09:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ESET
[2009.10.10 23:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\FrostWire
[2011.06.19 12:54:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\GetRightToGo
[2011.08.08 15:00:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\GrabPro
[2010.08.10 20:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Happy Foto
[2010.07.25 00:11:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\HD Tune Pro
[2011.08.22 12:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQ
[2007.09.20 15:08:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQ Toolbar
[2007.04.10 09:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQLite
[2007.09.21 14:38:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Image Zone Express
[2011.06.04 13:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\IObit
[2010.05.22 17:54:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Leadertech
[2007.09.07 18:18:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\LimeWireTurbo
[2011.07.31 23:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Mirillis
[2011.08.24 01:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\mkvtoolnix
[2008.01.18 16:54:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MoyeaFLV2Video
[2007.09.28 15:26:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MSNInstaller
[2007.04.24 17:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MusicIP
[2010.09.23 11:05:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Nokia
[2007.01.29 21:41:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\OLYMPUS
[2007.07.03 21:42:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Opera
[2011.08.08 15:05:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Orbit
[2010.05.21 18:24:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\PC Suite
[2008.07.17 16:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Pegasys Inc
[2011.08.08 14:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ProgSense
[2008.06.01 03:02:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Smart PC Solutions
[2010.08.03 21:29:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Software Informer
[2008.10.02 20:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\SoundSpectrum
[2011.01.19 19:25:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\SystemRequirementsLab
[2007.07.02 21:44:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Thunderbird
[2007.07.21 00:16:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\TuneUp Software
[2007.12.05 17:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\TV JOJ Media Player
[2007.08.16 18:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Ulead Systems
[2011.01.06 19:18:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\uTorrent
[2011.04.02 01:30:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Vso
[2009.11.08 03:14:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\WaveMax Sound Editor
[2008.07.05 17:23:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\WeatherWatcher
[2009.06.14 16:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Desktop Search
[2010.07.24 18:42:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Live Writer
[2009.06.14 16:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Search
[2010.10.10 14:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Xtend2
[2011.08.09 00:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\YouTube Downloader
[2011.09.28 18:13:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\All Free Video Converter
[2012.04.09 00:42:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\AnvSoft
[2012.06.18 13:21:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\com.AccuWeather.air.stratus.6AF67E59E785A9A644FCA43BED05A7731922EF40.1
[2011.10.13 16:48:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\DataCast
[2012.04.03 20:34:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\DVDVideoSoft
[2011.11.11 00:13:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ElevatedDiagnostics
[2011.09.08 19:39:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ESET
[2012.02.26 03:26:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\FLAC to MP3 Converter
[2012.08.06 00:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Free Sound Recorder
[2011.09.08 22:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\GHISLER
[2012.12.29 20:59:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\gtk-2.0
[2012.10.29 16:51:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ICQ
[2012.08.08 15:23:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\PC Suite
[2011.10.16 00:15:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\rockbox.org
[2012.11.16 01:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Samsung
[2012.09.18 13:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\TeamViewer
[2012.06.13 16:25:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\TuneUp Software
[2012.02.07 19:12:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\URSoft
[2011.10.12 18:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\WeatherDesktop
[2011.12.30 14:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Windows Desktop Search
[2012.01.13 20:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Windows Search
[2012.05.24 18:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Youtube Downloader HD
[2011.12.20 16:52:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\YoWindow
[2012.10.29 16:50:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UpdatusUser.PETER\Application Data\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2013.09.08 21:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\AnvSoft
[2013.07.30 18:51:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\ESET
[2013.08.11 17:55:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\GHISLER
[2013.07.31 19:15:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Windows Desktop Search
[2013.07.31 19:16:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Windows Search
[2013.07.30 22:27:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Youtube Downloader HD
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 498 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 155 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
OTL logfile created on: 26. 9. 2013 18:59:29 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\user\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d. M. yyyy
1023,17 Mb Total Physical Memory | 523,24 Mb Available Physical Memory | 51,14% Memory free
2,40 Gb Paging File | 2,01 Gb Available in Paging File | 83,53% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 50,02 Gb Total Space | 16,98 Gb Free Space | 33,94% Space Free | Partition Type: NTFS
Drive D: | 139,89 Gb Total Space | 98,38 Gb Free Space | 70,33% Space Free | Partition Type: NTFS
Computer Name: USER-D55BF56392 | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013.09.26 18:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
PRC - [2013.09.17 16:50:45 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.03.23 01:22:24 | 001,259,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2013.03.21 15:19:40 | 005,078,504 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2011.09.14 14:15:59 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\explorer.exe
========== Modules (No Company Name) ==========
MOD - [2013.04.04 01:09:40 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
========== Services (SafeList) ==========
SRV - [2013.09.19 23:55:11 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.09.19 20:37:42 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.09.17 16:50:45 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.03.23 01:22:24 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.03.21 15:19:46 | 001,341,664 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2013.03.09 00:10:32 | 030,798,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013.07.30 19:55:28 | 005,788,672 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2013.07.30 19:55:24 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2013.07.30 19:55:22 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2013.02.25 07:27:48 | 000,128,672 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2013.02.14 13:21:04 | 000,062,512 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2013.01.10 10:25:22 | 000,150,080 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS.0\system32\drivers\epfw.sys -- (epfw)
DRV - [2013.01.10 10:25:22 | 000,040,376 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2013.01.10 10:25:20 | 000,161,368 | ---- | M] (ESET) [File_System | System | Running] -- C:\WINDOWS.0\system32\drivers\eamon.sys -- (eamon)
DRV - [2013.01.10 10:25:20 | 000,122,240 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS.0\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2011.09.14 14:31:20 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mvxxmm.sys -- (mvxxmm)
DRV - [2011.09.14 14:31:20 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mv61xxmm.sys -- (mv61xxmm)
DRV - [2011.09.14 14:31:20 | 000,005,632 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\mv64xxmm.sys -- (mv64xxmm)
DRV - [2010.06.30 07:01:10 | 000,011,832 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\WINDOWS.0\system32\drivers\amdide.sys -- (amdide)
DRV - [2008.10.30 21:14:00 | 000,117,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6B528F7B-1290-4F85-BA27-8515B393FF4B}: "URL" = http://www.google.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes\{6BA4BBC5-3A34-465E-A7AD-CA216AD72022}: "URL" = http://en.wikipedia.org/w/index.php?tit ... earchTerms}
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.sk/ [binary data]
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 8A 91 92 99 4B 8D CE 01 [binary data]
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-796845957-1897051121-682003330-1004\..\SearchScopes,DefaultScope =
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledAddons: %7B0538E3E3-7E9B-4d49-8831-A227C80A7AD3%7D:2.2.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:24.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\WINDOWS.0\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.09.19 23:54:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013.07.30 18:49:00 | 000,000,000 | ---D | M]
[2013.07.30 18:25:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Extensions
[2013.09.08 21:45:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\9pmm0c8i.default\extensions
[2013.08.03 14:47:54 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\9pmm0c8i.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2013.09.19 23:54:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013.09.19 23:55:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
O1 HOSTS File: ([2013.09.24 13:54:09 | 000,000,741 | ---- | M]) - C:\WINDOWS.0\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS.0\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS.0\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS.0\System32\sti_ci.dll (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-796845957-1897051121-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-796845957-1897051121-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Od&oslať do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 5204719224 (MUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3BEC8E37-D0FA-4AC9-80FF-2B9E3685D57A}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS.0\system32\userinit.exe) - C:\WINDOWS.0\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS.0\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS.0\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2013.07.11 20:53:54 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013.09.26 18:55:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
[2013.09.25 23:43:23 | 000,000,000 | ---D | C] -- C:\rsit
[2013.09.20 12:20:50 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\System32\appmgmt
[2013.09.20 12:11:38 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.09.19 23:54:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.09.18 18:40:05 | 002,465,888 | ---- | C] (Lavalys, Inc.) -- C:\Documents and Settings\user\Desktop\everest.exe
[2013.09.18 09:04:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\WMTools Downloaded Files
[2013.09.17 18:17:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\SharePoint
[2013.09.17 18:17:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Microsoft Office
[2013.09.17 18:13:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2013.09.17 18:12:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Microsoft
[2013.09.17 18:10:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2013.09.17 18:08:14 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2013.09.17 18:08:01 | 000,000,000 | ---D | C] -- C:\WINDOWS.0\SHELLNEW
[2013.09.17 18:07:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Local Settings\Application Data\Microsoft Help
[2013.09.17 18:06:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013.09.17 18:06:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Microsoft Help
[2013.09.17 18:03:55 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2013.09.17 16:55:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Malwarebytes
[2013.09.17 16:55:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Malwarebytes
[2013.09.17 16:51:06 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaws.exe
[2013.09.17 16:51:06 | 000,144,896 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javacpl.cpl
[2013.09.17 16:51:00 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\WindowsAccessBridge.dll
[2013.09.17 16:51:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Java
[2013.09.17 16:50:59 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaw.exe
[2013.09.17 16:50:59 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS.0\System32\java.exe
[2013.09.17 16:50:37 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013.09.17 16:41:36 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent
[2013.09.17 16:36:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\CCleaner
[2013.09.08 21:29:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\My Documents\Any Audio Converter
[2013.09.08 21:28:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\AnvSoft
[2013.09.08 21:28:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\AnvSoft
[2013.09.08 21:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\AnvSoft
[2013.09.03 21:26:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Application Data\Google
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.09.26 19:03:33 | 000,003,366 | ---- | M] () -- C:\WINDOWS.0\System32\nvAppTimestamps
[2013.09.26 18:58:50 | 000,523,390 | ---- | M] () -- C:\WINDOWS.0\System32\perfh009.dat
[2013.09.26 18:58:50 | 000,095,306 | ---- | M] () -- C:\WINDOWS.0\System32\perfc009.dat
[2013.09.26 18:55:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Desktop\OTL.exe
[2013.09.26 18:54:36 | 000,000,202 | ---- | M] () -- C:\WINDOWS.0\tasks\AutoKMS.job
[2013.09.26 18:54:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS.0\bootstat.dat
[2013.09.25 23:43:14 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\user\Desktop\RSIT.exe
[2013.09.25 23:41:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS.0\System32\wpa.dbl
[2013.09.24 23:37:15 | 000,000,834 | ---- | M] () -- C:\WINDOWS.0\tasks\Adobe Flash Player Updater.job
[2013.09.24 14:32:18 | 000,000,542 | RHS- | M] () -- C:\boot.ini
[2013.09.23 20:30:26 | 000,922,112 | ---- | M] () -- C:\Documents and Settings\user\Desktop\RogueKiller.exe
[2013.09.20 11:49:15 | 001,039,554 | ---- | M] () -- C:\Documents and Settings\user\Desktop\adwcleaner.exe
[2013.09.19 20:37:41 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS.0\System32\FlashPlayerApp.exe
[2013.09.19 20:37:41 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS.0\System32\FlashPlayerCPLApp.cpl
[2013.09.19 17:49:55 | 000,000,678 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2013.09.19 17:49:55 | 000,000,660 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS.0\Desktop\Winamp.lnk
[2013.09.19 17:36:44 | 000,002,555 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Microsoft Word 2010.lnk
[2013.09.18 19:07:51 | 000,002,459 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Microsoft Office Picture Manager.lnk
[2013.09.18 19:07:39 | 000,000,135 | ---- | M] () -- C:\WINDOWS.0\AutoKMS.ini
[2013.09.17 22:49:37 | 000,269,392 | ---- | M] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2013.09.17 16:50:47 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\WindowsAccessBridge.dll
[2013.09.17 16:50:43 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaws.exe
[2013.09.17 16:50:43 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javaw.exe
[2013.09.17 16:50:42 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\java.exe
[2013.09.17 16:50:42 | 000,144,896 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\javacpl.cpl
[2013.09.17 16:50:41 | 000,868,264 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\npDeployJava1.dll
[2013.09.17 16:50:41 | 000,790,440 | ---- | M] (Oracle Corporation) -- C:\WINDOWS.0\System32\deployJava1.dll
[2013.09.15 21:07:28 | 1892,134,912 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Krúdovci.avi
[2013.09.14 16:41:41 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.09.11 00:10:45 | 944,740,606 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Čistá duša.avi
[2013.09.08 21:28:46 | 000,000,805 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Any Audio Converter.lnk
[2013.08.29 00:53:05 | 000,000,422 | ---- | M] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Lokálne pripojenie.lnk
[2013.08.27 19:26:21 | 732,012,544 | ---- | M] () -- C:\Documents and Settings\user\Desktop\Zbaľ prachy a vypadni!.avi
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.09.25 23:43:15 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\user\Desktop\RSIT.exe
[2013.09.23 20:30:24 | 000,922,112 | ---- | C] () -- C:\Documents and Settings\user\Desktop\RogueKiller.exe
[2013.09.20 11:49:05 | 001,039,554 | ---- | C] () -- C:\Documents and Settings\user\Desktop\adwcleaner.exe
[2013.09.18 19:07:39 | 000,000,202 | ---- | C] () -- C:\WINDOWS.0\tasks\AutoKMS.job
[2013.09.18 19:07:39 | 000,000,135 | ---- | C] () -- C:\WINDOWS.0\AutoKMS.ini
[2013.09.17 18:17:05 | 000,002,555 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Microsoft Word 2010.lnk
[2013.09.17 18:17:05 | 000,002,459 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Microsoft Office Picture Manager.lnk
[2013.09.16 21:28:34 | 1892,134,912 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Krúdovci.avi
[2013.09.10 23:01:35 | 944,740,606 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Čistá duša.avi
[2013.09.08 21:28:46 | 000,000,805 | ---- | C] () -- C:\Documents and Settings\user\Desktop\Any Audio Converter.lnk
[2013.08.29 00:53:05 | 000,000,422 | ---- | C] () -- C:\Documents and Settings\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Lokálne pripojenie.lnk
[2013.07.31 20:17:33 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\fusioncache.dat
[2013.07.30 22:17:02 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\user\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.07.12 09:04:09 | 001,098,236 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb0.bin
[2013.07.12 09:04:08 | 001,098,236 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb1.bin
[2013.07.12 09:04:08 | 000,000,001 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrssel.bin
[2013.07.12 09:03:19 | 002,289,288 | ---- | C] () -- C:\WINDOWS.0\System32\nvdata.data
[2013.07.12 08:47:15 | 000,003,072 | ---- | C] () -- C:\WINDOWS.0\System32\iacenc.dll
[2013.07.11 22:37:44 | 000,004,249 | ---- | C] () -- C:\WINDOWS.0\ODBCINST.INI
[2013.07.11 22:35:56 | 000,269,392 | ---- | C] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2013.07.11 20:56:50 | 000,002,048 | --S- | C] () -- C:\WINDOWS.0\bootstat.dat
[2013.07.11 20:49:30 | 000,021,640 | ---- | C] () -- C:\WINDOWS.0\System32\emptyregdb.dat
[2011.05.25 23:55:40 | 000,092,552 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
========== ZeroAccess Check ==========
[2013.07.11 21:34:13 | 000,000,227 | RHS- | M] () -- C:\WINDOWS.0\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2011.09.14 14:17:10 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS.0\system32\wbem\fastprox.dll -- [2011.09.14 14:16:00 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS.0\system32\wbem\wbemess.dll -- [2008.04.14 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2007.01.27 18:52:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2011.08.05 00:09:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Applian
[2010.08.18 13:53:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo
[2007.11.10 00:53:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ConeXware
[2009.12.26 03:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010.06.06 23:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DFX
[2011.03.03 11:36:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2008.06.01 19:05:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2011.04.05 20:36:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ICQ
[2010.12.23 00:21:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2011.05.22 12:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit
[2008.02.27 21:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Last.fm
[2011.07.31 23:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Mirillis
[2009.07.03 02:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010.09.23 11:16:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia
[2009.10.24 01:10:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NokiaMusic
[2010.09.30 22:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters Inc
[2009.10.24 00:59:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2008.03.25 03:54:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SiComponents
[2011.05.25 23:03:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Soluto
[2009.06.07 13:06:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SRS Labs
[2011.08.29 18:54:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2007.07.21 00:14:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2007.08.16 18:13:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2011.03.31 16:02:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2009.09.18 20:00:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2013.07.30 18:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.0\Application Data\ESET
[2012.04.21 23:30:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Common Files
[2013.06.02 17:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\ESET
[2013.01.26 17:54:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Freemake
[2012.11.26 23:10:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\ICQ
[2012.08.08 15:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Installations
[2012.11.16 00:39:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Samsung
[2012.06.13 16:25:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\TuneUp Software
[2012.06.13 16:24:24 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2007.07.18 19:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Opera
[2012.10.25 20:04:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2007.01.27 18:53:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ACD Systems
[2011.01.23 16:14:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\AnvSoft
[2010.08.18 13:53:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Ashampoo
[2009.12.10 20:28:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Audacity
[2011.08.09 10:01:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Broad Intelligence
[2007.07.06 11:40:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\BSplayer Pro
[2009.06.13 14:24:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009.03.07 11:50:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\COWON
[2009.01.30 17:30:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools
[2011.07.07 00:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools Lite
[2011.07.07 00:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DAEMON Tools Pro
[2007.08.25 15:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DataCast
[2009.11.08 13:57:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\DiscoSW
[2007.12.13 19:02:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\easycdda
[2008.01.16 16:09:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ESET
[2009.10.10 23:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\FrostWire
[2011.06.19 12:54:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\GetRightToGo
[2011.08.08 15:00:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\GrabPro
[2010.08.10 20:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Happy Foto
[2010.07.25 00:11:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\HD Tune Pro
[2011.08.22 12:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQ
[2007.09.20 15:08:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQ Toolbar
[2007.04.10 09:47:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ICQLite
[2007.09.21 14:38:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Image Zone Express
[2011.06.04 13:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\IObit
[2010.05.22 17:54:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Leadertech
[2007.09.07 18:18:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\LimeWireTurbo
[2011.07.31 23:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Mirillis
[2011.08.24 01:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\mkvtoolnix
[2008.01.18 16:54:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MoyeaFLV2Video
[2007.09.28 15:26:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MSNInstaller
[2007.04.24 17:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\MusicIP
[2010.09.23 11:05:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Nokia
[2007.01.29 21:41:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\OLYMPUS
[2007.07.03 21:42:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Opera
[2011.08.08 15:05:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Orbit
[2010.05.21 18:24:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\PC Suite
[2008.07.17 16:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Pegasys Inc
[2011.08.08 14:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\ProgSense
[2008.06.01 03:02:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Smart PC Solutions
[2010.08.03 21:29:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Software Informer
[2008.10.02 20:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\SoundSpectrum
[2011.01.19 19:25:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\SystemRequirementsLab
[2007.07.02 21:44:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Thunderbird
[2007.07.21 00:16:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\TuneUp Software
[2007.12.05 17:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\TV JOJ Media Player
[2007.08.16 18:13:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Ulead Systems
[2011.01.06 19:18:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\uTorrent
[2011.04.02 01:30:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Vso
[2009.11.08 03:14:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\WaveMax Sound Editor
[2008.07.05 17:23:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\WeatherWatcher
[2009.06.14 16:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Desktop Search
[2010.07.24 18:42:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Live Writer
[2009.06.14 16:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Windows Search
[2010.10.10 14:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\Xtend2
[2011.08.09 00:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Peter\Application Data\YouTube Downloader
[2011.09.28 18:13:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\All Free Video Converter
[2012.04.09 00:42:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\AnvSoft
[2012.06.18 13:21:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\com.AccuWeather.air.stratus.6AF67E59E785A9A644FCA43BED05A7731922EF40.1
[2011.10.13 16:48:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\DataCast
[2012.04.03 20:34:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\DVDVideoSoft
[2011.11.11 00:13:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ElevatedDiagnostics
[2011.09.08 19:39:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ESET
[2012.02.26 03:26:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\FLAC to MP3 Converter
[2012.08.06 00:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Free Sound Recorder
[2011.09.08 22:36:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\GHISLER
[2012.12.29 20:59:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\gtk-2.0
[2012.10.29 16:51:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\ICQ
[2012.08.08 15:23:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\PC Suite
[2011.10.16 00:15:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\rockbox.org
[2012.11.16 01:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Samsung
[2012.09.18 13:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\TeamViewer
[2012.06.13 16:25:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\TuneUp Software
[2012.02.07 19:12:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\URSoft
[2011.10.12 18:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\WeatherDesktop
[2011.12.30 14:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Windows Desktop Search
[2012.01.13 20:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Windows Search
[2012.05.24 18:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\Youtube Downloader HD
[2011.12.20 16:52:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peter1\Application Data\YoWindow
[2012.10.29 16:50:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UpdatusUser.PETER\Application Data\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2013.09.08 21:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\AnvSoft
[2013.07.30 18:51:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\ESET
[2013.08.11 17:55:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\GHISLER
[2013.07.31 19:15:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Windows Desktop Search
[2013.07.31 19:16:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Windows Search
[2013.07.30 22:27:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Application Data\Youtube Downloader HD
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 498 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 155 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >