# AdwCleaner v3.016 - Report created 30/12/2013 at 20:34:43
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Adrian a Janička - XY-45B23A6D5226
# Running from : C:\Documents and Settings\Adrian a Janička\Plocha\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\Software\Driver-Soft
***** [ Browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v26.0 (cs)
[ File : C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\prefs.js ]
-\\ Google Chrome v
[ File : C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R1].txt - [1165 octets] - [12/12/2013 00:26:33]
AdwCleaner[R2].txt - [1122 octets] - [14/12/2013 17:44:53]
AdwCleaner[R3].txt - [1600 octets] - [30/12/2013 19:24:06]
AdwCleaner[S1].txt - [1232 octets] - [12/12/2013 00:27:42]
AdwCleaner[S2].txt - [1184 octets] - [14/12/2013 17:47:13]
AdwCleaner[S3].txt - [1531 octets] - [30/12/2013 20:34:43]
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1591 octets] ##########
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Moc prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Moc prosím o kontrolu
Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.) Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc! 
Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte ComboFix.
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte
Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradkuPokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
ComboFix 13-12-29.01 - Adrian a Janička 31.12.2013 11:41:18.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1788.1224 [GMT 1:00]
Spuštěný z: c:\documents and settings\Adrian a JaniŔka\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-28 do 2013-12-31 )))))))))))))))))))))))))))))))
.
.
2013-12-30 16:29 . 2013-12-30 16:29 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Help
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-12-29 13:47 . 2013-12-29 13:47 -------- d-----w- c:\documents and settings\Adrian a JaniŔka
2013-12-29 13:33 . 2013-12-31 10:45 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\LogMeIn
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
2013-12-29 13:31 . 2013-12-29 13:31 -------- d-----w- c:\program files\LogMeIn Hamachi
2013-12-28 21:04 . 2013-12-28 21:05 -------- d-----w- C:\rsit
2013-12-26 21:43 . 2013-12-26 21:43 -------- d-----w- c:\program files\Native Instruments
2013-12-22 14:21 . 2013-12-22 14:21 -------- d-----w- C:\záloha
2013-12-22 14:19 . 2013-12-22 14:19 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
2013-12-22 14:13 . 2013-12-22 23:03 -------- d-----w- C:\Garmin
2013-12-17 13:22 . 2013-12-17 13:22 -------- d-----w- c:\program files\Peter
2013-12-15 11:30 . 2013-12-15 11:32 -------- d-----w- c:\program files\MozBackup
2013-12-13 23:11 . 2013-12-13 23:11 -------- d-----w- c:\program files\CrystalDiskInfo
2013-12-13 20:32 . 2013-12-13 20:32 -------- d-----w- c:\program files\HD Tune
2013-12-12 21:25 . 2013-12-12 21:25 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-11 23:26 . 2013-12-30 19:34 -------- d-----w- C:\AdwCleaner
2013-12-11 22:27 . 2013-12-11 23:12 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Seznam.cz
2013-12-11 22:22 . 2013-12-30 08:04 -------- d-----w- c:\program files\Shopping Suggestion
2013-12-11 22:22 . 2013-12-30 08:04 -------- d-----w- c:\program files\VLC Player GPU+
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-30 17:43 . 2013-12-30 17:43 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 444136 ----a-w- c:\windows\system32\drivers\wdf01000.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 37608 ----a-w- c:\windows\system32\drivers\wdfldr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11520 ----a-w- c:\windows\system32\drivers\wdcsam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5376 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32384 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30336 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 26368 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17152 ----a-w- c:\windows\system32\drivers\usbohci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 144128 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 123008 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 66048 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 242992 ----a-w- c:\windows\system32\drivers\SynTP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 49408 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 357888 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1659283 ----a-w- c:\windows\system32\drivers\sthda.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 33280 ----a-w- c:\windows\system32\drivers\sncduvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1763968 ----a-w- c:\windows\system32\drivers\snp2uvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 96384 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 79232 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 203136 ----a-w- c:\windows\system32\drivers\rmcast.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 39680 ----a-w- c:\windows\system32\drivers\processr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 46592 ----a-w- c:\windows\system32\drivers\p3.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 120064 ----a-w- c:\windows\system32\drivers\pcmcia.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 88320 ----a-w- c:\windows\system32\drivers\nwlnkipx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1548800 ----a-w- c:\windows\system32\drivers\p2usbwdm.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}"= "c:\program files\AVAST Software\Avast\aswWebRepIE.dll" [2013-12-18 1138536]
.
[HKEY_CLASSES_ROOT\clsid\{cc1a175a-e45b-41ed-a30c-c9b1d7a0c02f}]
[HKEY_CLASSES_ROOT\TypeLib\{6B795924-95E7-4D31-8521-407360C3AA0B}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-18 12:11 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE" [2013-06-07 774680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-02-26 1713448]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2009-04-21 737280]
"snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2010-04-27 211840]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-15 98304]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-18 3764024]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Deluge\\Deluge-Python\\deluged.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\Torent\\BitTorrent3.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Dokumenty\\BlackMirror2\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\HOMM3\\Heroes of Might and Magic III Complete\\Heroes3.exe"=
"c:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [29.11.2013 16:52 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [21.7.2013 18:04 180248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.1.2013 16:59 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [23.12.2012 2:06 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.12.2012 2:06 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [29.11.2013 16:52 67824]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [1.10.2013 15:51 1612112]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [26.8.2013 16:46 375056]
R2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [21.1.2010 15:24 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16.6.2009 7:58 20480]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [23.12.2012 0:56 113664]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [22.5.2013 15:52 101904]
S2 aswFsBlk;aswFsBlk;\??\c:\windows\system32\drivers\aswFsBlk.sys --> c:\windows\system32\drivers\aswFsBlk.sys [?]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys --> c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys [?]
S3 iComp;Python2 USB WDM Encoder;c:\windows\system32\drivers\p2usbwdm.sys [16.2.2013 15:59 1548800]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [21.4.2013 20:23 11520]
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-31 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-23 12:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=5
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\sign
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojeplatba.cz\www
TCP: DhcpNameServer = 192.168.15.1
FF - ProfilePath - c:\documents and settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\
FF - prefs.js: browser.search.selectedEngine - Slunečnice
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-12-12 00:22; {D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}; c:\documents and settings\Adrian a JaniĂ„ÂŤka\Data aplikacĂÂ\Mozilla\Firefox\Profiles\5bphcm0e.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Hogs Of War - j:\hogs\uninst.isu
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-12-31 11:45
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(824)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2013-12-31 11:46:47
ComboFix-quarantined-files.txt 2013-12-31 10:46
.
Před spuštěním: Volných bajtů: 81 878 614 016
Po spuštění: Volných bajtů: 81 856 245 760
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 8C25C8D49E3A42347EDA8C3585342B32
413FC2A0C716421B3158746D63736515
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1788.1224 [GMT 1:00]
Spuštěný z: c:\documents and settings\Adrian a JaniŔka\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-28 do 2013-12-31 )))))))))))))))))))))))))))))))
.
.
2013-12-30 16:29 . 2013-12-30 16:29 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Help
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-12-29 13:47 . 2013-12-29 13:47 -------- d-----w- c:\documents and settings\Adrian a JaniŔka
2013-12-29 13:33 . 2013-12-31 10:45 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\LogMeIn
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
2013-12-29 13:31 . 2013-12-29 13:31 -------- d-----w- c:\program files\LogMeIn Hamachi
2013-12-28 21:04 . 2013-12-28 21:05 -------- d-----w- C:\rsit
2013-12-26 21:43 . 2013-12-26 21:43 -------- d-----w- c:\program files\Native Instruments
2013-12-22 14:21 . 2013-12-22 14:21 -------- d-----w- C:\záloha
2013-12-22 14:19 . 2013-12-22 14:19 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
2013-12-22 14:13 . 2013-12-22 23:03 -------- d-----w- C:\Garmin
2013-12-17 13:22 . 2013-12-17 13:22 -------- d-----w- c:\program files\Peter
2013-12-15 11:30 . 2013-12-15 11:32 -------- d-----w- c:\program files\MozBackup
2013-12-13 23:11 . 2013-12-13 23:11 -------- d-----w- c:\program files\CrystalDiskInfo
2013-12-13 20:32 . 2013-12-13 20:32 -------- d-----w- c:\program files\HD Tune
2013-12-12 21:25 . 2013-12-12 21:25 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-11 23:26 . 2013-12-30 19:34 -------- d-----w- C:\AdwCleaner
2013-12-11 22:27 . 2013-12-11 23:12 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Seznam.cz
2013-12-11 22:22 . 2013-12-30 08:04 -------- d-----w- c:\program files\Shopping Suggestion
2013-12-11 22:22 . 2013-12-30 08:04 -------- d-----w- c:\program files\VLC Player GPU+
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-30 17:43 . 2013-12-30 17:43 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 444136 ----a-w- c:\windows\system32\drivers\wdf01000.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 37608 ----a-w- c:\windows\system32\drivers\wdfldr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11520 ----a-w- c:\windows\system32\drivers\wdcsam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5376 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32384 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30336 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 26368 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17152 ----a-w- c:\windows\system32\drivers\usbohci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 144128 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 123008 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 66048 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 242992 ----a-w- c:\windows\system32\drivers\SynTP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 49408 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 357888 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1659283 ----a-w- c:\windows\system32\drivers\sthda.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 33280 ----a-w- c:\windows\system32\drivers\sncduvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1763968 ----a-w- c:\windows\system32\drivers\snp2uvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 96384 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 79232 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 203136 ----a-w- c:\windows\system32\drivers\rmcast.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 39680 ----a-w- c:\windows\system32\drivers\processr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 46592 ----a-w- c:\windows\system32\drivers\p3.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 120064 ----a-w- c:\windows\system32\drivers\pcmcia.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 88320 ----a-w- c:\windows\system32\drivers\nwlnkipx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1548800 ----a-w- c:\windows\system32\drivers\p2usbwdm.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}"= "c:\program files\AVAST Software\Avast\aswWebRepIE.dll" [2013-12-18 1138536]
.
[HKEY_CLASSES_ROOT\clsid\{cc1a175a-e45b-41ed-a30c-c9b1d7a0c02f}]
[HKEY_CLASSES_ROOT\TypeLib\{6B795924-95E7-4D31-8521-407360C3AA0B}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-18 12:11 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"="c:\program files\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE" [2013-06-07 774680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-02-26 1713448]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2009-04-21 737280]
"snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2010-04-27 211840]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-15 98304]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-18 3764024]
"seznam-listicka-distribuce"="c:\program files\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Deluge\\Deluge-Python\\deluged.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\Torent\\BitTorrent3.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Dokumenty\\BlackMirror2\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\HOMM3\\Heroes of Might and Magic III Complete\\Heroes3.exe"=
"c:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [29.11.2013 16:52 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [21.7.2013 18:04 180248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.1.2013 16:59 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [23.12.2012 2:06 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.12.2012 2:06 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [29.11.2013 16:52 67824]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [1.10.2013 15:51 1612112]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [26.8.2013 16:46 375056]
R2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [21.1.2010 15:24 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16.6.2009 7:58 20480]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [23.12.2012 0:56 113664]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [22.5.2013 15:52 101904]
S2 aswFsBlk;aswFsBlk;\??\c:\windows\system32\drivers\aswFsBlk.sys --> c:\windows\system32\drivers\aswFsBlk.sys [?]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys --> c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys [?]
S3 iComp;Python2 USB WDM Encoder;c:\windows\system32\drivers\p2usbwdm.sys [16.2.2013 15:59 1548800]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [21.4.2013 20:23 11520]
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-31 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-23 12:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=5
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\sign
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojeplatba.cz\www
TCP: DhcpNameServer = 192.168.15.1
FF - ProfilePath - c:\documents and settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\
FF - prefs.js: browser.search.selectedEngine - Slunečnice
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-12-12 00:22; {D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}; c:\documents and settings\Adrian a JaniĂ„ÂŤka\Data aplikacĂÂ\Mozilla\Firefox\Profiles\5bphcm0e.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Hogs Of War - j:\hogs\uninst.isu
AddRemove-LSI Soft Modem - c:\windows\agrsmdel
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-12-31 11:45
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(824)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2013-12-31 11:46:47
ComboFix-quarantined-files.txt 2013-12-31 10:46
.
Před spuštěním: Volných bajtů: 81 878 614 016
Po spuštění: Volných bajtů: 81 856 245 760
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 8C25C8D49E3A42347EDA8C3585342B32
413FC2A0C716421B3158746D63736515
Re: Moc prosím o kontrolu
Presunte ComboFix primo na disk C (takze cesta k nemu bude c:\ComboFix.exe )! Otevrete si poznamkovy blok a zkopirujte do nej tento skript
Kód: Vybrat vše
KillAll::
Folder::
c:\program files\Shopping Suggestion
c:\program files\VLC Player GPU+
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=-
"seznam-listicka-distribuce"=-
RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
DDS::
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\sign
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojeplatba.cz\www
Firefox::
FF - ProfilePath - c:\documents and settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\
FF - ExtSQL: 2013-12-12 00:22; {D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}; c:\documents and settings\Adrian a JaniĂ„ÂŤka\Data aplikacĂÂ\Mozilla\Firefox\Profiles\5bphcm0e.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
Reboot::Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte take primo na C (takze cesta k nemu bude c:\CFScript.txt ).
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.
Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradkuPokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
ComboFix 13-12-29.01 - Adrian a Janička 31.12.2013 19:20:59.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1788.1103 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Shopping Suggestion
c:\program files\Shopping Suggestion\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
c:\program files\Shopping Suggestion\Interop.SHDocVw.dll
c:\program files\Shopping Suggestion\Microsoft.mshtml.dll
c:\program files\VLC Player GPU+
c:\program files\VLC Player GPU+\bdb.dll
c:\program files\VLC Player GPU+\coin-chains.xml
c:\program files\VLC Player GPU+\coin.exe.config
c:\program files\VLC Player GPU+\coineng.dll
c:\program files\VLC Player GPU+\dblite.dll
c:\program files\VLC Player GPU+\deinstaller.exe
c:\program files\VLC Player GPU+\guicomp.dll
c:\program files\VLC Player GPU+\Installer.exe
c:\program files\VLC Player GPU+\interop.coineng.dll
c:\program files\VLC Player GPU+\lua5.1.dll
c:\program files\VLC Player GPU+\OpenCL.dll
c:\program files\VLC Player GPU+\openssl.dll
c:\program files\VLC Player GPU+\path.inf
c:\program files\VLC Player GPU+\phatk.cl
c:\program files\VLC Player GPU+\phatk.ptx
c:\program files\VLC Player GPU+\sqlite3.dll
c:\program files\VLC Player GPU+\u.utils.dll
c:\program files\VLC Player GPU+\uninstall.exe
c:\program files\VLC Player GPU+\Uninstall\IRIMG1.JPG
c:\program files\VLC Player GPU+\Uninstall\IRIMG2.JPG
c:\program files\VLC Player GPU+\Uninstall\uninstall.dat
c:\program files\VLC Player GPU+\Uninstall\uninstall.xml
c:\program files\VLC Player GPU+\upgrade4.dat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-28 do 2013-12-31 )))))))))))))))))))))))))))))))
.
.
2013-12-30 16:29 . 2013-12-30 16:29 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Help
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-12-29 13:47 . 2013-12-29 13:47 -------- d-----w- c:\documents and settings\Adrian a JaniŔka
2013-12-29 13:33 . 2013-12-31 18:28 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\LogMeIn
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
2013-12-29 13:31 . 2013-12-29 13:31 -------- d-----w- c:\program files\LogMeIn Hamachi
2013-12-28 21:04 . 2013-12-28 21:05 -------- d-----w- C:\rsit
2013-12-26 21:43 . 2013-12-26 21:43 -------- d-----w- c:\program files\Native Instruments
2013-12-22 14:21 . 2013-12-22 14:21 -------- d-----w- C:\záloha
2013-12-22 14:19 . 2013-12-22 14:19 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
2013-12-22 14:13 . 2013-12-22 23:03 -------- d-----w- C:\Garmin
2013-12-17 13:22 . 2013-12-17 13:22 -------- d-----w- c:\program files\Peter
2013-12-15 11:30 . 2013-12-15 11:32 -------- d-----w- c:\program files\MozBackup
2013-12-13 23:11 . 2013-12-13 23:11 -------- d-----w- c:\program files\CrystalDiskInfo
2013-12-13 20:32 . 2013-12-13 20:32 -------- d-----w- c:\program files\HD Tune
2013-12-12 21:25 . 2013-12-12 21:25 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-11 23:26 . 2013-12-30 19:34 -------- d-----w- C:\AdwCleaner
2013-12-11 22:27 . 2013-12-11 23:12 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Seznam.cz
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-30 17:43 . 2013-12-30 17:43 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 444136 ----a-w- c:\windows\system32\drivers\wdf01000.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 37608 ----a-w- c:\windows\system32\drivers\wdfldr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11520 ----a-w- c:\windows\system32\drivers\wdcsam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5376 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32384 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30336 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 26368 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17152 ----a-w- c:\windows\system32\drivers\usbohci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 144128 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 123008 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 66048 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 242992 ----a-w- c:\windows\system32\drivers\SynTP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 49408 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 357888 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1659283 ----a-w- c:\windows\system32\drivers\sthda.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 33280 ----a-w- c:\windows\system32\drivers\sncduvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1763968 ----a-w- c:\windows\system32\drivers\snp2uvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 96384 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 79232 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 203136 ----a-w- c:\windows\system32\drivers\rmcast.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 39680 ----a-w- c:\windows\system32\drivers\processr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 46592 ----a-w- c:\windows\system32\drivers\p3.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 120064 ----a-w- c:\windows\system32\drivers\pcmcia.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 88320 ----a-w- c:\windows\system32\drivers\nwlnkipx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1548800 ----a-w- c:\windows\system32\drivers\p2usbwdm.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}"= "c:\program files\AVAST Software\Avast\aswWebRepIE.dll" [2013-12-18 1138536]
.
[HKEY_CLASSES_ROOT\clsid\{cc1a175a-e45b-41ed-a30c-c9b1d7a0c02f}]
[HKEY_CLASSES_ROOT\TypeLib\{6B795924-95E7-4D31-8521-407360C3AA0B}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-18 12:11 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-02-26 1713448]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2009-04-21 737280]
"snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2010-04-27 211840]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-15 98304]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-18 3764024]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Deluge\\Deluge-Python\\deluged.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\Torent\\BitTorrent3.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Dokumenty\\BlackMirror2\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\HOMM3\\Heroes of Might and Magic III Complete\\Heroes3.exe"=
"c:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [29.11.2013 16:52 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [21.7.2013 18:04 180248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.1.2013 16:59 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [23.12.2012 2:06 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.12.2012 2:06 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [29.11.2013 16:52 67824]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [1.10.2013 15:51 1612112]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [26.8.2013 16:46 375056]
R2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [21.1.2010 15:24 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16.6.2009 7:58 20480]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [23.12.2012 0:56 113664]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [22.5.2013 15:52 101904]
S2 aswFsBlk;aswFsBlk;\??\c:\windows\system32\drivers\aswFsBlk.sys --> c:\windows\system32\drivers\aswFsBlk.sys [?]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys --> c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys [?]
S3 iComp;Python2 USB WDM Encoder;c:\windows\system32\drivers\p2usbwdm.sys [16.2.2013 15:59 1548800]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [21.4.2013 20:23 11520]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-31 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-23 12:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=5
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.15.1
FF - ProfilePath - c:\documents and settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\
FF - prefs.js: browser.search.selectedEngine - Slunečnice
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-12-12 00:22; {D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}; c:\documents and settings\Adrian a JaniĂ„ÂŤka\Data aplikacĂÂ\Mozilla\Firefox\Profiles\5bphcm0e.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-VLC Player GPU+11.041.44 - c:\program files\VLC Player GPU+\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-12-31 19:28
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(776)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(1500)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\idt\wdm\STacSV.exe
c:\program files\LSI SoftModem\agrsmsvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2013-12-31 19:33:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-12-31 18:32
ComboFix2.txt 2013-12-31 10:46
.
Před spuštěním: Volných bajtů: 81 733 103 616
Po spuštění: Volných bajtů: 81 770 594 304
.
- - End Of File - - 0DD13C7C4607CABF898807B2911BDCDC
413FC2A0C716421B3158746D63736515
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1788.1103 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Shopping Suggestion
c:\program files\Shopping Suggestion\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
c:\program files\Shopping Suggestion\Interop.SHDocVw.dll
c:\program files\Shopping Suggestion\Microsoft.mshtml.dll
c:\program files\VLC Player GPU+
c:\program files\VLC Player GPU+\bdb.dll
c:\program files\VLC Player GPU+\coin-chains.xml
c:\program files\VLC Player GPU+\coin.exe.config
c:\program files\VLC Player GPU+\coineng.dll
c:\program files\VLC Player GPU+\dblite.dll
c:\program files\VLC Player GPU+\deinstaller.exe
c:\program files\VLC Player GPU+\guicomp.dll
c:\program files\VLC Player GPU+\Installer.exe
c:\program files\VLC Player GPU+\interop.coineng.dll
c:\program files\VLC Player GPU+\lua5.1.dll
c:\program files\VLC Player GPU+\OpenCL.dll
c:\program files\VLC Player GPU+\openssl.dll
c:\program files\VLC Player GPU+\path.inf
c:\program files\VLC Player GPU+\phatk.cl
c:\program files\VLC Player GPU+\phatk.ptx
c:\program files\VLC Player GPU+\sqlite3.dll
c:\program files\VLC Player GPU+\u.utils.dll
c:\program files\VLC Player GPU+\uninstall.exe
c:\program files\VLC Player GPU+\Uninstall\IRIMG1.JPG
c:\program files\VLC Player GPU+\Uninstall\IRIMG2.JPG
c:\program files\VLC Player GPU+\Uninstall\uninstall.dat
c:\program files\VLC Player GPU+\Uninstall\uninstall.xml
c:\program files\VLC Player GPU+\upgrade4.dat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-28 do 2013-12-31 )))))))))))))))))))))))))))))))
.
.
2013-12-30 16:29 . 2013-12-30 16:29 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Help
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 18:15 . 2013-12-29 18:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2013-12-29 13:47 . 2013-12-29 13:47 -------- d-----w- c:\documents and settings\Adrian a JaniŔka
2013-12-29 13:33 . 2013-12-31 18:28 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\LogMeIn
2013-12-29 13:33 . 2013-12-29 13:33 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
2013-12-29 13:31 . 2013-12-29 13:31 -------- d-----w- c:\program files\LogMeIn Hamachi
2013-12-28 21:04 . 2013-12-28 21:05 -------- d-----w- C:\rsit
2013-12-26 21:43 . 2013-12-26 21:43 -------- d-----w- c:\program files\Native Instruments
2013-12-22 14:21 . 2013-12-22 14:21 -------- d-----w- C:\záloha
2013-12-22 14:19 . 2013-12-22 14:19 -------- d-----w- c:\documents and settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
2013-12-22 14:13 . 2013-12-22 23:03 -------- d-----w- C:\Garmin
2013-12-17 13:22 . 2013-12-17 13:22 -------- d-----w- c:\program files\Peter
2013-12-15 11:30 . 2013-12-15 11:32 -------- d-----w- c:\program files\MozBackup
2013-12-13 23:11 . 2013-12-13 23:11 -------- d-----w- c:\program files\CrystalDiskInfo
2013-12-13 20:32 . 2013-12-13 20:32 -------- d-----w- c:\program files\HD Tune
2013-12-12 21:25 . 2013-12-12 21:25 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-11 23:26 . 2013-12-30 19:34 -------- d-----w- C:\AdwCleaner
2013-12-11 22:27 . 2013-12-11 23:12 -------- d-----w- c:\documents and settings\Adrian a Janička\Data aplikací\Seznam.cz
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-30 17:43 . 2013-12-30 17:43 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 444136 ----a-w- c:\windows\system32\drivers\wdf01000.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 37608 ----a-w- c:\windows\system32\drivers\wdfldr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11520 ----a-w- c:\windows\system32\drivers\wdcsam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5376 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32384 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30336 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 26368 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS.bak
2013-12-30 17:43 . 2013-12-30 17:43 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17152 ----a-w- c:\windows\system32\drivers\usbohci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 144128 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 123008 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 66048 ----a-w- c:\windows\system32\drivers\udfs.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12928 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 361600 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 242992 ----a-w- c:\windows\system32\drivers\SynTP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 49408 ----a-w- c:\windows\system32\drivers\stream.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 357888 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1659283 ----a-w- c:\windows\system32\drivers\sthda.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 33280 ----a-w- c:\windows\system32\drivers\sncduvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1763968 ----a-w- c:\windows\system32\drivers\snp2uvc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 96384 ----a-w- c:\windows\system32\drivers\scsiport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 79232 ----a-w- c:\windows\system32\drivers\sdbus.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 203136 ----a-w- c:\windows\system32\drivers\rmcast.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 39680 ----a-w- c:\windows\system32\drivers\processr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 46592 ----a-w- c:\windows\system32\drivers\p3.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 120064 ----a-w- c:\windows\system32\drivers\pcmcia.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 88320 ----a-w- c:\windows\system32\drivers\nwlnkipx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2013-12-30 17:43 . 2013-12-30 17:43 1548800 ----a-w- c:\windows\system32\drivers\p2usbwdm.sys.bak
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}"= "c:\program files\AVAST Software\Avast\aswWebRepIE.dll" [2013-12-18 1138536]
.
[HKEY_CLASSES_ROOT\clsid\{cc1a175a-e45b-41ed-a30c-c9b1d7a0c02f}]
[HKEY_CLASSES_ROOT\TypeLib\{6B795924-95E7-4D31-8521-407360C3AA0B}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-18 12:11 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-02-26 1713448]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2009-04-21 737280]
"snp2uvc"="c:\windows\system32\csnp2uvc.dll" [2010-04-27 211840]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-15 98304]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-18 3764024]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2013-10-01 2345296]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Deluge\\Deluge-Python\\deluged.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\Torent\\BitTorrent3.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Java\\jre7\\bin\\javaw.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Dokumenty\\BlackMirror2\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Documents and Settings\\Adrian a Janička\\Plocha\\HOMM3\\Heroes of Might and Magic III Complete\\Heroes3.exe"=
"c:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [29.11.2013 16:52 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [21.7.2013 18:04 180248]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.1.2013 16:59 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [23.12.2012 2:06 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [23.12.2012 2:06 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [29.11.2013 16:52 67824]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [1.10.2013 15:51 1612112]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [26.8.2013 16:46 375056]
R2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [21.1.2010 15:24 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16.6.2009 7:58 20480]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [23.12.2012 0:56 113664]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [22.5.2013 15:52 101904]
S2 aswFsBlk;aswFsBlk;\??\c:\windows\system32\drivers\aswFsBlk.sys --> c:\windows\system32\drivers\aswFsBlk.sys [?]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys --> c:\docume~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys [?]
S3 iComp;Python2 USB WDM Encoder;c:\windows\system32\drivers\p2usbwdm.sys [16.2.2013 15:59 1548800]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [21.4.2013 20:23 11520]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-31 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-12-23 12:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=5
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.15.1
FF - ProfilePath - c:\documents and settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\
FF - prefs.js: browser.search.selectedEngine - Slunečnice
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-12-12 00:22; {D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}; c:\documents and settings\Adrian a JaniĂ„ÂŤka\Data aplikacĂÂ\Mozilla\Firefox\Profiles\5bphcm0e.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-VLC Player GPU+11.041.44 - c:\program files\VLC Player GPU+\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-12-31 19:28
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(776)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(1500)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\idt\wdm\STacSV.exe
c:\program files\LSI SoftModem\agrsmsvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2013-12-31 19:33:00 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-12-31 18:32
ComboFix2.txt 2013-12-31 10:46
.
Před spuštěním: Volných bajtů: 81 733 103 616
Po spuštění: Volných bajtů: 81 770 594 304
.
- - End Of File - - 0DD13C7C4607CABF898807B2911BDCDC
413FC2A0C716421B3158746D63736515
Re: Moc prosím o kontrolu
Dejte novy log z RSIT
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
Logfile of random's system information tool 1.09 (written by random/random)
Run by Adrian a Janička at 2014-01-01 10:19:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 78 GB (26%) free of 305 GB
Total RAM: 1788 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:53, on 1.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\wdm\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\AESTFltr.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Adrian a Janička\Plocha\VIRY CZ\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Adrian a Janička.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=5
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AESTFltr] %SystemRoot%\system32\AESTFltr.exe /NoDlg
O4 - HKLM\..\Run: [snp2uvc] rundll32.exe C:\WINDOWS\system32\csnp2uvc.dll,ResetCIDS
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\wdm\STacSV.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
--
End of file - 7451 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\avast! Emergency Update.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}"=C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-18 1138536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\bin\core.4.dll [2012-04-16 1152024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-18 1138536]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AESTFltr"=C:\WINDOWS\system32\AESTFltr.exe [2009-04-21 737280]
"snp2uvc"=C:\WINDOWS\system32\csnp2uvc.dll [2010-04-27 211840]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-16 98304]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-18 3764024]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2013-10-01 2345296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-03-16 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Deluge\Deluge-Python\deluged.exe"="C:\Program Files\Deluge\Deluge-Python\deluged.exe:*:Disabled:deluged"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe"="C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe:*:Enabled:BitTorrent"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe"="C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe:*:Enabled:Skype "
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe"="C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III"
"C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe"="C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"vidc.mjpg"=pvmjpg30.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2013-12-31 19:33:01 ----A---- C:\ComboFix.txt
2013-12-31 11:37:52 ----A---- C:\Boot.bak
2013-12-31 11:37:47 ----RASHD---- C:\cmdcons
2013-12-31 11:35:23 ----A---- C:\WINDOWS\zip.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWXCACLS.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWSC.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWREG.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\sed.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\PEV.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\NIRCMD.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\MBR.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\grep.exe
2013-12-31 11:35:13 ----D---- C:\Qoobox
2013-12-31 11:34:54 ----D---- C:\WINDOWS\erdnt
2013-12-31 11:33:12 ----R---- C:\ComboFix.exe
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WudfRd.sys.bak
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WudfPf.sys.bak
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\ws2ifsl.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wpdusb.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wmilib.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdf01000.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdcsam.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\vga.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\vdmindvd.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbport.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbd.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbcamd2.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\usbcamd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\update.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\udfs.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tsbvcap.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tosdvd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\termdd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tdi.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tape.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\swenum.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\stream.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sthda.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\srv.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sr.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sptd.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\splitter.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\snp2uvc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sncduvc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\smclib.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\serial.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\serenum.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\scsiport.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\riodrv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rio8drv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\redbook.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rdpcdd.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rawwan.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspti.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\ptilink.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\psched.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\processr.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\portcls.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pcmcia.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pciide.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pci.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\parvdm.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\parport.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\p3.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\p2usbwdm.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\oprghdlr.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkspx.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnknb.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkipx.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkflt.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\null.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\npfs.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nmnt.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nikedrv.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nic1394.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\netbt.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\netbios.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\mup.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\msfs.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\modem.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mnmdd.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\mf.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\mcd.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ks.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\irenum.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipfltdrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imapi.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imagesrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imagedrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\http.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hamachi.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\grmnusb.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\grmngen.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\ftdisk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fsvga.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fs_rec.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fips.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fdc.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\dxgthk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\dxg.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\drmk.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmload.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmio.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmboot.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\disk.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\crusoe.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\cpqdap01.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\cinemst2.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdaudio.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cbidf2k.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwsecfl.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwdndis.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btport.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btkrnl.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\bthport.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btaudio.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\bridge.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\beep.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\BCMWL5.SYS.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\battc.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\audstub.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\atmuni.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmlane.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmepvc.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmarpc.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\AtihdXP3.sys.bak
2013-12-30 18:43:27 ----A---- C:\WINDOWS\system32\drivers\AtiHdmi.sys.bak
2013-12-30 18:43:27 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\atapi.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\arp1394.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\amdk6.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\AGRSM.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\afd.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\AESTAud.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\aec.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\acpiec.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys.bak
2013-12-30 17:29:48 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
2013-12-29 19:15:35 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 19:15:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-12-29 14:33:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2013-12-29 14:31:35 ----D---- C:\Program Files\LogMeIn Hamachi
2013-12-28 22:04:59 ----D---- C:\rsit
2013-12-26 22:43:28 ----D---- C:\Program Files\Native Instruments
2013-12-22 15:21:52 ----D---- C:\záloha
2013-12-22 15:13:56 ----D---- C:\Garmin
2013-12-17 14:22:01 ----D---- C:\Program Files\Peter
2013-12-15 12:39:25 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-15 12:30:31 ----D---- C:\Program Files\MozBackup
2013-12-14 00:11:39 ----D---- C:\Program Files\CrystalDiskInfo
2013-12-13 21:32:31 ----D---- C:\Program Files\HD Tune
2013-12-12 22:25:07 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-12 00:26:30 ----D---- C:\AdwCleaner
2013-12-12 00:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2013-12-12 00:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2013-12-12 00:04:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 00:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 00:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 23:27:35 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
======List of files/folders modified in the last 1 month======
2014-01-01 10:19:52 ----D---- C:\Program Files\trend micro
2014-01-01 10:19:50 ----D---- C:\WINDOWS\Prefetch
2014-01-01 10:19:05 ----D---- C:\WINDOWS\Temp
2013-12-31 19:33:04 ----D---- C:\WINDOWS\system32\drivers
2013-12-31 19:28:08 ----D---- C:\WINDOWS
2013-12-31 19:28:08 ----A---- C:\WINDOWS\system.ini
2013-12-31 19:27:47 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-31 19:27:43 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-31 19:25:57 ----RD---- C:\Program Files
2013-12-31 19:24:10 ----D---- C:\WINDOWS\system32
2013-12-31 19:24:10 ----D---- C:\WINDOWS\AppPatch
2013-12-31 19:24:06 ----D---- C:\Program Files\Common Files
2013-12-31 19:19:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-31 19:15:12 ----D---- C:\WINDOWS\system32\config
2013-12-31 11:37:52 ----RASH---- C:\boot.ini
2013-12-30 18:41:45 ----SHD---- C:\WINDOWS\Installer
2013-12-30 17:52:20 ----A---- C:\WINDOWS\NeroDigital.ini
2013-12-30 09:57:04 ----SHD---- C:\System Volume Information
2013-12-30 09:57:04 ----D---- C:\WINDOWS\system32\Restore
2013-12-30 09:06:55 ----D---- C:\WINDOWS\WBEM
2013-12-30 09:04:56 ----D---- C:\Program Files\Pat & Mat
2013-12-29 14:47:38 ----D---- C:\Documents and Settings
2013-12-29 14:31:50 ----HD---- C:\WINDOWS\inf
2013-12-26 22:50:23 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
2013-12-26 14:01:01 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Media Player Classic
2013-12-26 01:46:20 ----D---- C:\Program Files\VideoLAN
2013-12-23 00:03:07 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-12-22 15:12:20 ----D---- C:\WINDOWS\WinSxS
2013-12-22 15:12:13 ----D---- C:\Program Files\Garmin
2013-12-22 10:07:29 ----SD---- C:\WINDOWS\Tasks
2013-12-22 10:07:21 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-20 16:58:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\xml_param
2013-12-20 16:52:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Wondershare Video Converter Ultimate
2013-12-18 13:11:09 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-12-15 12:40:39 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla
2013-12-15 12:39:21 ----D---- C:\Program Files\Mozilla Firefox
2013-12-15 12:36:17 ----D---- C:\WINDOWS\Debug
2013-12-14 18:47:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-12 00:09:34 ----D---- C:\Program Files\Internet Explorer
2013-12-12 00:07:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-12 00:07:26 ----D---- C:\WINDOWS\ie8updates
2013-12-12 00:07:07 ----D---- C:\WINDOWS\system32\MRT
2013-12-12 00:04:34 ----A---- C:\WINDOWS\system32\MRT.exe
2013-12-11 23:41:10 ----D---- C:\WINDOWS\Minidump
2013-12-11 23:40:34 ----D---- C:\Program Files\Atari
2013-12-11 23:28:26 ----D---- C:\Program Files\Seznam.cz
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-11-29 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-12-18 180248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2013-01-05 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2013-10-27 278984]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2013-10-27 25416]
R3 AESTAud;AE Audio Service; C:\WINDOWS\system32\drivers\AESTAud.sys [2009-04-21 113664]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2009-08-13 1163328]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-03-16 4833792]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2010-11-17 101904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2012-12-23 2696448]
R3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2009-11-19 556200]
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2010-01-15 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2010-04-01 911400]
R3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2009-11-19 118440]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2010-04-15 51752]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2010-04-27 1763968]
R3 STHDA;IDT High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2010-03-17 1659283]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2010-01-28 95232]
S3 ayzpxf0t;ayzpxf0t; C:\WINDOWS\system32\drivers\ayzpxf0t.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 grmnusb;Garmin USB Driver; C:\WINDOWS\system32\drivers\grmnusb.sys [2012-04-18 15720]
S3 iComp;Python2 USB WDM Encoder; C:\WINDOWS\system32\DRIVERS\p2usbwdm.sys [2005-04-27 1548800]
S3 mbr;mbr; \??\C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TrueSight;TrueSight; \??\ []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-03-27 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-03-16 610304]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-18 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2010-04-12 365912]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2013-10-01 1612112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-08 182696]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [2013-08-26 375056]
R2 STacSV;Audio Service; c:\program files\idt\wdm\STacSV.exe [2010-03-17 229458]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-01-21 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Ještě bych se chtěl zeptat... když najíždím na stránku viry.cz tak mi vždy avast vyplivne okno o zastavení nějaké škodlivé reklamy či co.. Je to normální?
Run by Adrian a Janička at 2014-01-01 10:19:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 78 GB (26%) free of 305 GB
Total RAM: 1788 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:53, on 1.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\wdm\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\AESTFltr.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Adrian a Janička\Plocha\VIRY CZ\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Adrian a Janička.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=5
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AESTFltr] %SystemRoot%\system32\AESTFltr.exe /NoDlg
O4 - HKLM\..\Run: [snp2uvc] rundll32.exe C:\WINDOWS\system32\csnp2uvc.dll,ResetCIDS
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\wdm\STacSV.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
--
End of file - 7451 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\avast! Emergency Update.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}"=C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-18 1138536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\bin\core.4.dll [2012-04-16 1152024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-18 1138536]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-26 1713448]
"AESTFltr"=C:\WINDOWS\system32\AESTFltr.exe [2009-04-21 737280]
"snp2uvc"=C:\WINDOWS\system32\csnp2uvc.dll [2010-04-27 211840]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-16 98304]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-18 3764024]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2013-10-01 2345296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-03-16 159744]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Deluge\Deluge-Python\deluged.exe"="C:\Program Files\Deluge\Deluge-Python\deluged.exe:*:Disabled:deluged"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe"="C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe:*:Enabled:BitTorrent"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe"="C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe:*:Enabled:Skype "
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe"="C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III"
"C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe"="C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"vidc.mjpg"=pvmjpg30.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2013-12-31 19:33:01 ----A---- C:\ComboFix.txt
2013-12-31 11:37:52 ----A---- C:\Boot.bak
2013-12-31 11:37:47 ----RASHD---- C:\cmdcons
2013-12-31 11:35:23 ----A---- C:\WINDOWS\zip.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWXCACLS.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWSC.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\SWREG.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\sed.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\PEV.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\NIRCMD.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\MBR.exe
2013-12-31 11:35:23 ----A---- C:\WINDOWS\grep.exe
2013-12-31 11:35:13 ----D---- C:\Qoobox
2013-12-31 11:34:54 ----D---- C:\WINDOWS\erdnt
2013-12-31 11:33:12 ----R---- C:\ComboFix.exe
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WudfRd.sys.bak
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WudfPf.sys.bak
2013-12-30 18:43:52 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\ws2ifsl.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wpdusb.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wmilib.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdf01000.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wdcsam.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys.bak
2013-12-30 18:43:51 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\vga.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\vdmindvd.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbport.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbd.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys.bak
2013-12-30 18:43:50 ----A---- C:\WINDOWS\system32\drivers\usbcamd2.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\usbcamd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\update.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\udfs.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tsbvcap.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tosdvd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\termdd.sys.bak
2013-12-30 18:43:49 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tdi.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\tape.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\swenum.sys.bak
2013-12-30 18:43:48 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\stream.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sthda.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\srv.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sr.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\sptd.sys.bak
2013-12-30 18:43:47 ----A---- C:\WINDOWS\system32\drivers\splitter.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\snp2uvc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sncduvc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\smclib.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys.bak
2013-12-30 18:43:46 ----A---- C:\WINDOWS\system32\drivers\serial.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\serenum.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\scsiport.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\riodrv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rio8drv.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\redbook.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys.bak
2013-12-30 18:43:45 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rdpcdd.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rawwan.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspti.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\ptilink.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\psched.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\processr.sys.bak
2013-12-30 18:43:44 ----A---- C:\WINDOWS\system32\drivers\portcls.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pcmcia.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pciide.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\pci.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\parvdm.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\parport.sys.bak
2013-12-30 18:43:43 ----A---- C:\WINDOWS\system32\drivers\p3.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\p2usbwdm.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\oprghdlr.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkspx.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnknb.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkipx.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkfwd.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\nwlnkflt.sys.bak
2013-12-30 18:43:42 ----A---- C:\WINDOWS\system32\drivers\null.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\npfs.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nmnt.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nikedrv.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\nic1394.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\netbt.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\netbios.sys.bak
2013-12-30 18:43:41 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\ndis.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\mup.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys.bak
2013-12-30 18:43:40 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\msfs.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\modem.sys.bak
2013-12-30 18:43:39 ----A---- C:\WINDOWS\system32\drivers\mnmdd.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\mf.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\mcd.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys.bak
2013-12-30 18:43:38 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ks.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\irenum.sys.bak
2013-12-30 18:43:37 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ipfltdrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imapi.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imagesrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\imagedrv.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys.bak
2013-12-30 18:43:36 ----A---- C:\WINDOWS\system32\drivers\http.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\hamachi.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\grmnusb.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\grmngen.sys.bak
2013-12-30 18:43:35 ----A---- C:\WINDOWS\system32\drivers\ftdisk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fsvga.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fs_rec.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fips.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fdc.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\dxgthk.sys.bak
2013-12-30 18:43:34 ----A---- C:\WINDOWS\system32\drivers\dxg.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\drmk.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmload.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmio.sys.bak
2013-12-30 18:43:33 ----A---- C:\WINDOWS\system32\drivers\dmboot.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\disk.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\crusoe.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\cpqdap01.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys.bak
2013-12-30 18:43:32 ----A---- C:\WINDOWS\system32\drivers\cinemst2.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cdaudio.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\cbidf2k.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwsecfl.sys.bak
2013-12-30 18:43:31 ----A---- C:\WINDOWS\system32\drivers\btwdndis.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btport.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btkrnl.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\bthport.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\btaudio.sys.bak
2013-12-30 18:43:30 ----A---- C:\WINDOWS\system32\drivers\bridge.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\beep.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\BCMWL5.SYS.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\battc.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\audstub.sys.bak
2013-12-30 18:43:29 ----A---- C:\WINDOWS\system32\drivers\atmuni.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmlane.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmepvc.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atmarpc.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys.bak
2013-12-30 18:43:28 ----A---- C:\WINDOWS\system32\drivers\AtihdXP3.sys.bak
2013-12-30 18:43:27 ----A---- C:\WINDOWS\system32\drivers\AtiHdmi.sys.bak
2013-12-30 18:43:27 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\atapi.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys.bak
2013-12-30 18:43:26 ----A---- C:\WINDOWS\system32\drivers\arp1394.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\amdk6.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\AGRSM.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\afd.sys.bak
2013-12-30 18:43:25 ----A---- C:\WINDOWS\system32\drivers\AESTAud.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\aec.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\acpiec.sys.bak
2013-12-30 18:43:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys.bak
2013-12-30 17:29:48 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
2013-12-29 19:15:35 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
2013-12-29 19:15:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-12-29 14:33:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2013-12-29 14:31:35 ----D---- C:\Program Files\LogMeIn Hamachi
2013-12-28 22:04:59 ----D---- C:\rsit
2013-12-26 22:43:28 ----D---- C:\Program Files\Native Instruments
2013-12-22 15:21:52 ----D---- C:\záloha
2013-12-22 15:13:56 ----D---- C:\Garmin
2013-12-17 14:22:01 ----D---- C:\Program Files\Peter
2013-12-15 12:39:25 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-15 12:30:31 ----D---- C:\Program Files\MozBackup
2013-12-14 00:11:39 ----D---- C:\Program Files\CrystalDiskInfo
2013-12-13 21:32:31 ----D---- C:\Program Files\HD Tune
2013-12-12 22:25:07 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
2013-12-12 00:26:30 ----D---- C:\AdwCleaner
2013-12-12 00:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2013-12-12 00:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2013-12-12 00:04:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 00:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 00:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 23:27:35 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
======List of files/folders modified in the last 1 month======
2014-01-01 10:19:52 ----D---- C:\Program Files\trend micro
2014-01-01 10:19:50 ----D---- C:\WINDOWS\Prefetch
2014-01-01 10:19:05 ----D---- C:\WINDOWS\Temp
2013-12-31 19:33:04 ----D---- C:\WINDOWS\system32\drivers
2013-12-31 19:28:08 ----D---- C:\WINDOWS
2013-12-31 19:28:08 ----A---- C:\WINDOWS\system.ini
2013-12-31 19:27:47 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-31 19:27:43 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-31 19:25:57 ----RD---- C:\Program Files
2013-12-31 19:24:10 ----D---- C:\WINDOWS\system32
2013-12-31 19:24:10 ----D---- C:\WINDOWS\AppPatch
2013-12-31 19:24:06 ----D---- C:\Program Files\Common Files
2013-12-31 19:19:43 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-31 19:15:12 ----D---- C:\WINDOWS\system32\config
2013-12-31 11:37:52 ----RASH---- C:\boot.ini
2013-12-30 18:41:45 ----SHD---- C:\WINDOWS\Installer
2013-12-30 17:52:20 ----A---- C:\WINDOWS\NeroDigital.ini
2013-12-30 09:57:04 ----SHD---- C:\System Volume Information
2013-12-30 09:57:04 ----D---- C:\WINDOWS\system32\Restore
2013-12-30 09:06:55 ----D---- C:\WINDOWS\WBEM
2013-12-30 09:04:56 ----D---- C:\Program Files\Pat & Mat
2013-12-29 14:47:38 ----D---- C:\Documents and Settings
2013-12-29 14:31:50 ----HD---- C:\WINDOWS\inf
2013-12-26 22:50:23 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
2013-12-26 14:01:01 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Media Player Classic
2013-12-26 01:46:20 ----D---- C:\Program Files\VideoLAN
2013-12-23 00:03:07 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-12-22 15:12:20 ----D---- C:\WINDOWS\WinSxS
2013-12-22 15:12:13 ----D---- C:\Program Files\Garmin
2013-12-22 10:07:29 ----SD---- C:\WINDOWS\Tasks
2013-12-22 10:07:21 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-20 16:58:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\xml_param
2013-12-20 16:52:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Wondershare Video Converter Ultimate
2013-12-18 13:11:09 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-12-15 12:40:39 ----D---- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla
2013-12-15 12:39:21 ----D---- C:\Program Files\Mozilla Firefox
2013-12-15 12:36:17 ----D---- C:\WINDOWS\Debug
2013-12-14 18:47:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-12 00:09:34 ----D---- C:\Program Files\Internet Explorer
2013-12-12 00:07:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-12 00:07:26 ----D---- C:\WINDOWS\ie8updates
2013-12-12 00:07:07 ----D---- C:\WINDOWS\system32\MRT
2013-12-12 00:04:34 ----A---- C:\WINDOWS\system32\MRT.exe
2013-12-11 23:41:10 ----D---- C:\WINDOWS\Minidump
2013-12-11 23:40:34 ----D---- C:\Program Files\Atari
2013-12-11 23:28:26 ----D---- C:\Program Files\Seznam.cz
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-11-29 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-12-18 180248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2013-01-05 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2008-04-14 12032]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2013-10-27 278984]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2013-10-27 25416]
R3 AESTAud;AE Audio Service; C:\WINDOWS\system32\drivers\AESTAud.sys [2009-04-21 113664]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2009-08-13 1163328]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-03-16 4833792]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2010-11-17 101904]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2012-12-23 2696448]
R3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2009-11-19 556200]
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2010-01-15 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2010-04-01 911400]
R3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2009-11-19 118440]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2010-04-15 51752]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2010-04-27 1763968]
R3 STHDA;IDT High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2010-03-17 1659283]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-02-26 242992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2010-01-28 95232]
S3 ayzpxf0t;ayzpxf0t; C:\WINDOWS\system32\drivers\ayzpxf0t.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 grmnusb;Garmin USB Driver; C:\WINDOWS\system32\drivers\grmnusb.sys [2012-04-18 15720]
S3 iComp;Python2 USB WDM Encoder; C:\WINDOWS\system32\DRIVERS\p2usbwdm.sys [2005-04-27 1548800]
S3 mbr;mbr; \??\C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TrueSight;TrueSight; \??\ []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-03-27 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-03-16 610304]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-18 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2010-04-12 365912]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2013-10-01 1612112]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-08 182696]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [2013-08-26 375056]
R2 STacSV;Audio Service; c:\program files\idt\wdm\STacSV.exe [2010-03-17 229458]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-01-21 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Ještě bych se chtěl zeptat... když najíždím na stránku viry.cz tak mi vždy avast vyplivne okno o zastavení nějaké škodlivé reklamy či co.. Je to normální?
Re: Moc prosím o kontrolu
http://forum.viry.cz/viewtopic.php?f=31&t=135031abdul99 píše:Ještě bych se chtěl zeptat... když najíždím na stránku viry.cz tak mi vždy avast vyplivne okno o zastavení nějaké škodlivé reklamy či co.. Je to normální?
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text
Kód: Vybrat vše
CREATERESTOREPOINT
netsvcs
drivers32
savembr:0
/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop
%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5
*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
OTL logfile created on: 1.1.2014 11:08:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Adrian a Janička\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,75 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 54,37% Memory free
3,60 Gb Paging File | 2,85 Gb Available in Paging File | 79,35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 76,02 Gb Free Space | 25,50% Space Free | Partition Type: NTFS
Computer Name: XY-45B23A6D5226 | User Name: Adrian a Janička | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014.01.01 11:07:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
PRC - [2013.12.18 13:11:06 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.12.18 13:11:06 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.12.05 20:34:42 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.10.08 06:48:23 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.10.01 15:51:14 | 002,345,296 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2013.10.01 15:51:14 | 001,612,112 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2013.08.26 16:46:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
PRC - [2010.03.17 04:48:42 | 000,229,458 | ---- | M] (IDT, Inc.) -- c:\Program Files\IDT\WDM\stacsv.exe
PRC - [2010.01.21 15:24:08 | 000,110,592 | ---- | M] (WDC) -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
PRC - [2009.12.23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009.06.16 07:58:08 | 000,020,480 | ---- | M] (Memeo) -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
PRC - [2009.04.21 21:01:56 | 000,737,280 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\AESTFltr.exe
PRC - [2009.03.27 18:10:56 | 000,014,336 | ---- | M] (LSI Corporation) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.02.20 10:07:40 | 000,199,752 | ---- | M] (Pinnacle Systems GmbH) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
========== Modules (No Company Name) ==========
MOD - [2013.12.31 18:55:00 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13123101\algo.dll
MOD - [2013.12.31 13:30:22 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13123100\algo.dll
MOD - [2013.12.22 10:07:21 | 016,242,056 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013.12.05 20:36:56 | 003,559,024 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013.11.29 16:56:53 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013.10.11 17:30:34 | 000,978,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\1b7600e7fe5e152f21ba6d79f3c0c3b6\System.Configuration.ni.dll
MOD - [2013.10.11 17:28:35 | 012,434,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\02257c6b67db33c194fa3beccf977afb\System.Windows.Forms.ni.dll
MOD - [2013.10.11 07:02:41 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2013.08.15 21:32:15 | 011,816,960 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\972dcf9830a64e9802aaca3a83cae24b\System.Web.ni.dll
MOD - [2013.08.15 21:32:06 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\15fd2d2f4e709154b44187a6915db244\System.ServiceProcess.ni.dll
MOD - [2013.08.15 20:47:32 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll
MOD - [2013.08.15 20:47:12 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b34cb206ab0cec687c3730b14cdff57\System.Drawing.ni.dll
MOD - [2013.08.15 20:41:59 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll
MOD - [2013.07.13 07:52:30 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\8f799a4688381624de3cfb1edbccb163\Accessibility.ni.dll
MOD - [2013.07.13 07:49:13 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll
MOD - [2011.03.16 00:14:52 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2011.03.14 13:20:36 | 000,098,304 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2010.03.16 11:22:12 | 000,014,848 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013.12.18 13:11:06 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.12.05 20:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.10.08 06:48:23 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.10.01 15:51:14 | 001,612,112 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013.08.26 16:46:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2010.03.17 04:48:42 | 000,229,458 | ---- | M] (IDT, Inc.) [Auto | Running] -- c:\Program Files\IDT\WDM\stacsv.exe -- (STacSV)
SRV - [2010.01.21 15:24:08 | 000,110,592 | ---- | M] (WDC) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe -- (WDDMService)
SRV - [2009.12.23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009.06.16 07:58:08 | 000,020,480 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe -- (WDSmartWareBackgroundService)
SRV - [2009.03.27 18:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\mbr.sys -- (mbr)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Running] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ayzpxf0t)
DRV - File not found [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys -- (ALSysIO)
DRV - [2013.12.18 13:11:09 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.12.18 13:11:09 | 000,410,528 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.12.18 13:11:09 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.12.18 13:11:09 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.12.18 13:11:09 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.12.18 13:11:09 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2013.11.29 16:56:55 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.10.27 23:07:31 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2013.10.27 23:07:30 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2013.01.05 16:59:52 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2012.12.23 00:54:39 | 002,696,448 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2011.03.16 01:09:26 | 004,833,792 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.11.17 07:03:56 | 000,101,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2010.04.27 10:24:50 | 001,763,968 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2010.04.15 04:41:12 | 000,051,752 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2010.04.01 00:20:20 | 000,911,400 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2010.03.17 04:48:42 | 001,659,283 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2010.01.28 10:12:02 | 000,095,232 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2010.01.15 05:53:18 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2009.11.19 06:13:04 | 000,556,200 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2009.11.19 06:12:56 | 000,118,440 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2009.08.13 11:07:12 | 001,163,328 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.04.21 22:13:34 | 000,113,664 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AESTAud.sys -- (AESTAud)
DRV - [2009.03.18 18:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.02.13 10:02:52 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2005.09.23 21:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005.04.27 08:26:28 | 001,548,800 | R--- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\p2usbwdm.sys -- (iComp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes,DefaultScope = {7fcefcd4-4185-4e7b-8ff5-a76afa55821b}
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{04de3be5-ca32-4d98-b8ab-9f3cedf8ecc1}: "URL" = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{7fcefcd4-4185-4e7b-8ff5-a76afa55821b}: "URL" = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Slunečnice"
FF - prefs.js..browser.search.selectedEngine: "Slunečnice"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@kb-ext.cz/PKIComponent: C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll (Komerční banka, a.s.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.12.18 13:11:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}: C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\ [2013.04.21 07:26:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2013.12.15 12:40:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Extensions
[2013.12.15 12:42:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions
[2013.12.15 12:42:15 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.12.11 23:22:42 | 000,013,570 | ---- | M] () (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
[2013.11.16 13:01:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013.12.15 12:39:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADRIAN A JANIÄŤKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\GJ27OBTQ.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
========== Chrome ==========
CHR - default_search_provider: Seznam (Enabled)
CHR - default_search_provider: search_url = http://search.seznam.cz/?q={searchTerms}
CHR - default_search_provider: suggest_url = http:///suggest.fulltext.seznam.cz/?dict=fulltext_ff&phrase={searchTerms}&encoding={inputEncoding}&response_encoding=utf-8,
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Dokumenty Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhledvn Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Shopping Suggestion = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll\1.0.0_0\
CHR - Extension: Pen\u011B\u017Eenka Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
CHR - Extension: Gmail = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013.12.31 19:27:43 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Ukazatel S-Rank) - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll ()
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\Toolbar\WebBrowser: (no name) - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No CLSID value found.
O4 - HKLM..\Run: [AESTFltr] C:\WINDOWS\System32\AESTFltr.exe (Andrea Electronics Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\System32\csnp2uvc.dll ( )
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [USBToolTip] C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe (Pinnacle Systems GmbH)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O15 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..Trusted Domains: localhost ([]http in Internet)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.15.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{219DA565-177D-4204-B645-BA019D8B6789}: DhcpNameServer = 192.168.15.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.LAGS - C:\WINDOWS\System32\lagarith.dll ( )
Drivers32: vidc.mjpg - pvmjpg30.dll File not found
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2014.01.01 11:07:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
[2013.12.31 11:37:47 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013.12.31 11:35:23 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2013.12.31 11:35:23 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2013.12.31 11:35:23 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2013.12.31 11:35:23 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2013.12.31 11:35:13 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.12.31 11:34:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2013.12.31 11:33:12 | 005,159,030 | R--- | C] (Swearware) -- C:\ComboFix.exe
[2013.12.30 18:43:51 | 000,081,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2013.12.30 18:43:51 | 000,037,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2013.12.30 18:43:51 | 000,011,520 | ---- | C] (Western Digital Technologies) -- C:\WINDOWS\System32\drivers\wdcsam.sys.bak
[2013.12.30 18:43:51 | 000,004,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2013.12.30 18:43:50 | 000,144,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2013.12.30 18:43:50 | 000,058,112 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2013.12.30 18:43:50 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2013.12.30 18:43:50 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2013.12.30 18:43:50 | 000,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2013.12.30 18:43:49 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2013.12.30 18:43:49 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2013.12.30 18:43:49 | 000,021,376 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2013.12.30 18:43:49 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2013.12.30 18:43:48 | 000,226,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2013.12.30 18:43:48 | 000,019,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2013.12.30 18:43:48 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2013.12.30 18:43:47 | 001,659,283 | ---- | C] (IDT, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys.bak
[2013.12.30 18:43:47 | 000,691,696 | ---- | C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys.bak
[2013.12.30 18:43:47 | 000,049,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2013.12.30 18:43:46 | 000,025,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2013.12.30 18:43:46 | 000,014,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2013.12.30 18:43:45 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys.bak
[2013.12.30 18:43:45 | 000,096,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2013.12.30 18:43:45 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2013.12.30 18:43:44 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2013.12.30 18:43:44 | 000,034,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2013.12.30 18:43:43 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2013.12.30 18:43:42 | 001,548,800 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\p2usbwdm.sys.bak
[2013.12.30 18:43:42 | 000,088,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2013.12.30 18:43:42 | 000,063,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2013.12.30 18:43:42 | 000,055,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2013.12.30 18:43:42 | 000,003,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2013.12.30 18:43:41 | 000,040,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2013.12.30 18:43:41 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2013.12.30 18:43:38 | 000,171,520 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys.bak
[2013.12.30 18:43:38 | 000,063,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2013.12.30 18:43:38 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2013.12.30 18:43:37 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2013.12.30 18:43:36 | 000,127,488 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2013.12.30 18:43:36 | 000,005,888 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2013.12.30 18:43:35 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2013.12.30 18:43:35 | 000,026,176 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2013.12.30 18:43:35 | 000,025,448 | ---- | C] (GARMIN Corp.) -- C:\WINDOWS\System32\drivers\grmngen.sys.bak
[2013.12.30 18:43:35 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2013.12.30 18:43:34 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2013.12.30 18:43:34 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2013.12.30 18:43:34 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2013.12.30 18:43:33 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2013.12.30 18:43:33 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2013.12.30 18:43:32 | 000,262,528 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2013.12.30 18:43:32 | 000,049,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2013.12.30 18:43:32 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2013.12.30 18:43:32 | 000,011,776 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2013.12.30 18:43:31 | 000,118,440 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwdndis.sys.bak
[2013.12.30 18:43:31 | 000,092,072 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwsecfl.sys.bak
[2013.12.30 18:43:31 | 000,051,752 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwusb.sys.bak
[2013.12.30 18:43:30 | 000,911,400 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btkrnl.sys.bak
[2013.12.30 18:43:30 | 000,556,200 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btaudio.sys.bak
[2013.12.30 18:43:30 | 000,037,160 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btport.sys.bak
[2013.12.30 18:43:29 | 002,696,448 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS.bak
[2013.12.30 18:43:29 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2013.12.30 18:43:29 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys.bak
[2013.12.30 18:43:28 | 000,101,904 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AtihdXP3.sys.bak
[2013.12.30 18:43:28 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2013.12.30 18:43:28 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2013.12.30 18:43:27 | 004,833,792 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2013.12.30 18:43:27 | 000,095,232 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\drivers\AtiHdmi.sys.bak
[2013.12.30 18:43:25 | 001,163,328 | ---- | C] (LSI Corporation) -- C:\WINDOWS\System32\drivers\AGRSM.sys.bak
[2013.12.30 18:43:25 | 000,113,664 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\AESTAud.sys.bak
[2013.12.30 18:43:25 | 000,041,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2013.12.30 18:42:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\RK_Quarantine
[2013.12.30 17:29:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Help
[2013.12.30 17:29:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
[2013.12.29 19:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
[2013.12.29 19:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
[2013.12.29 14:31:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\LogMeIn Hamachi
[2013.12.29 14:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2013.12.28 22:04:59 | 000,000,000 | ---D | C] -- C:\rsit
[2013.12.27 15:49:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\knihy
[2013.12.26 22:43:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Nabídka Start\Programy\Native Instruments Traktor DJ Mixer
[2013.12.26 22:43:28 | 000,000,000 | ---D | C] -- C:\Program Files\Native Instruments
[2013.12.26 01:47:02 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Adrian a Janička\Recent
[2013.12.25 21:51:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\BATM
[2013.12.25 20:46:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3
[2013.12.22 15:21:52 | 000,000,000 | ---D | C] -- C:\záloha
[2013.12.22 15:19:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
[2013.12.22 15:14:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Nabídka Start\Programy\Garmin
[2013.12.22 15:13:56 | 000,000,000 | ---D | C] -- C:\Garmin
[2013.12.22 15:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Garmin
[2013.12.17 14:22:01 | 000,000,000 | ---D | C] -- C:\Program Files\Peter
[2013.12.15 12:39:25 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2013.12.15 12:30:31 | 000,000,000 | ---D | C] -- C:\Program Files\MozBackup
[2013.12.15 12:30:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\MozBackup
[2013.12.14 00:11:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CrystalDiskInfo
[2013.12.14 00:11:39 | 000,000,000 | ---D | C] -- C:\Program Files\CrystalDiskInfo
[2013.12.13 21:32:31 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune
[2013.12.13 21:32:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\HD Tune
[2013.12.12 22:25:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2013.12.12 00:26:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.12.11 23:27:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.12.11 22:25:37 | 000,642,632 | ---- | C] (EFD Software ) -- C:\Documents and Settings\Adrian a Janička\Plocha\hdtune_255.exe
[2013.12.02 21:47:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Dokumenty\TABLET
========== Files - Modified Within 30 Days ==========
[2014.01.01 11:10:45 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.01.01 11:07:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
[2013.12.31 19:27:43 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013.12.31 19:27:42 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.12.31 19:27:24 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.12.31 19:27:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.12.31 11:37:52 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
[2013.12.30 19:23:38 | 001,233,962 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\adwcleaner.exe
[2013.12.30 18:43:51 | 000,081,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2013.12.30 18:43:51 | 000,037,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2013.12.30 18:43:51 | 000,011,520 | ---- | M] (Western Digital Technologies) -- C:\WINDOWS\System32\drivers\wdcsam.sys.bak
[2013.12.30 18:43:51 | 000,004,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2013.12.30 18:43:50 | 000,144,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2013.12.30 18:43:50 | 000,058,112 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2013.12.30 18:43:50 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2013.12.30 18:43:50 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2013.12.30 18:43:50 | 000,005,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2013.12.30 18:43:49 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2013.12.30 18:43:49 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2013.12.30 18:43:49 | 000,021,376 | ---- | M] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2013.12.30 18:43:49 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2013.12.30 18:43:48 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2013.12.30 18:43:48 | 000,019,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2013.12.30 18:43:48 | 000,014,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2013.12.30 18:43:47 | 001,659,283 | ---- | M] (IDT, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys.bak
[2013.12.30 18:43:47 | 000,049,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2013.12.30 18:43:46 | 001,763,968 | ---- | M] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys.bak
[2013.12.30 18:43:46 | 000,033,280 | ---- | M] () -- C:\WINDOWS\System32\drivers\sncduvc.sys.bak
[2013.12.30 18:43:46 | 000,025,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2013.12.30 18:43:46 | 000,014,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2013.12.30 18:43:45 | 000,203,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys.bak
[2013.12.30 18:43:45 | 000,096,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2013.12.30 18:43:45 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2013.12.30 18:43:44 | 000,146,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2013.12.30 18:43:44 | 000,034,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2013.12.30 18:43:43 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2013.12.30 18:43:42 | 001,548,800 | ---- | M] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\p2usbwdm.sys.bak
[2013.12.30 18:43:42 | 000,088,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2013.12.30 18:43:42 | 000,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2013.12.30 18:43:42 | 000,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2013.12.30 18:43:42 | 000,003,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2013.12.30 18:43:41 | 000,040,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2013.12.30 18:43:41 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2013.12.30 18:43:38 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys.bak
[2013.12.30 18:43:38 | 000,063,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2013.12.30 18:43:38 | 000,025,416 | ---- | M] () -- C:\WINDOWS\System32\drivers\lirsgt.sys.bak
[2013.12.30 18:43:38 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2013.12.30 18:43:37 | 000,141,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2013.12.30 18:43:36 | 000,127,488 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2013.12.30 18:43:36 | 000,005,888 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2013.12.30 18:43:35 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2013.12.30 18:43:35 | 000,026,176 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2013.12.30 18:43:35 | 000,025,448 | ---- | M] (GARMIN Corp.) -- C:\WINDOWS\System32\drivers\grmngen.sys.bak
[2013.12.30 18:43:35 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2013.12.30 18:43:34 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2013.12.30 18:43:34 | 000,012,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2013.12.30 18:43:34 | 000,003,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2013.12.30 18:43:33 | 000,060,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2013.12.30 18:43:33 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2013.12.30 18:43:33 | 000,010,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2013.12.30 18:43:32 | 000,262,528 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2013.12.30 18:43:32 | 000,049,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2013.12.30 18:43:32 | 000,011,776 | ---- | M] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2013.12.30 18:43:31 | 000,118,440 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwdndis.sys.bak
[2013.12.30 18:43:31 | 000,092,072 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwsecfl.sys.bak
[2013.12.30 18:43:31 | 000,051,752 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwusb.sys.bak
[2013.12.30 18:43:31 | 000,037,160 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btport.sys.bak
[2013.12.30 18:43:30 | 000,911,400 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btkrnl.sys.bak
[2013.12.30 18:43:30 | 000,556,200 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btaudio.sys.bak
[2013.12.30 18:43:29 | 002,696,448 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS.bak
[2013.12.30 18:43:29 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2013.12.30 18:43:29 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys.bak
[2013.12.30 18:43:28 | 000,278,984 | ---- | M] () -- C:\WINDOWS\System32\drivers\atksgt.sys.bak
[2013.12.30 18:43:28 | 000,101,904 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AtihdXP3.sys.bak
[2013.12.30 18:43:28 | 000,095,232 | ---- | M] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\drivers\AtiHdmi.sys.bak
[2013.12.30 18:43:28 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2013.12.30 18:43:28 | 000,031,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2013.12.30 18:43:27 | 004,833,792 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2013.12.30 18:43:25 | 001,163,328 | ---- | M] (LSI Corporation) -- C:\WINDOWS\System32\drivers\AGRSM.sys.bak
[2013.12.30 18:43:25 | 000,113,664 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\AESTAud.sys.bak
[2013.12.30 18:43:25 | 000,041,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2013.12.30 18:41:59 | 003,810,304 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\RogueKiller.exe
[2013.12.30 17:52:20 | 000,000,116 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\default.pls
[2013.12.30 17:52:20 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.12.30 09:55:59 | 004,196,406 | ---- | M] () -- C:\WINDOWS\Wallperizer_Wallpaper.bmp
[2013.12.29 14:31:36 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\LogMeIn Hamachi.lnk
[2013.12.22 10:07:21 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.12.22 10:07:21 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.12.18 21:56:00 | 000,003,023 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\ax_files.xml
[2013.12.18 13:11:19 | 000,001,733 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2013.12.18 13:11:09 | 000,775,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2013.12.18 13:11:09 | 000,410,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2013.12.18 13:11:09 | 000,270,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2013.12.18 13:11:09 | 000,180,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.12.18 13:11:09 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013.12.18 13:11:09 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2013.12.18 13:11:09 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2013.12.18 13:11:09 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2013.12.17 14:22:41 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\Zástupce - ANTS.lnk
[2013.12.15 12:39:30 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2013.12.15 12:30:31 | 000,000,702 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\MozBackup.lnk
[2013.12.14 20:12:24 | 003,679,752 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.12.14 18:47:38 | 000,497,156 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.12.14 18:47:38 | 000,492,302 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2013.12.14 18:47:38 | 000,099,786 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2013.12.14 18:47:38 | 000,085,640 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.12.14 00:11:40 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\CrystalDiskInfo.lnk
[2013.12.13 21:32:31 | 000,000,613 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\HD Tune.lnk
[2013.12.12 16:38:17 | 000,071,214 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\printout.pdf
[2013.12.11 22:25:39 | 000,642,632 | ---- | M] (EFD Software ) -- C:\Documents and Settings\Adrian a Janička\Plocha\hdtune_255.exe
[2013.12.04 20:25:44 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
========== Files Created - No Company Name ==========
[2014.01.01 11:10:45 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.12.31 11:37:52 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2013.12.31 11:37:48 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2013.12.31 11:35:23 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013.12.31 11:35:23 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013.12.31 11:35:23 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013.12.31 11:35:23 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013.12.31 11:35:23 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013.12.30 19:23:38 | 001,233,962 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\adwcleaner.exe
[2013.12.30 18:43:46 | 001,763,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys.bak
[2013.12.30 18:43:46 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys.bak
[2013.12.30 18:43:38 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys.bak
[2013.12.30 18:43:28 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys.bak
[2013.12.30 18:41:59 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\RogueKiller.exe
[2013.12.29 14:31:36 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\LogMeIn Hamachi.lnk
[2013.12.17 14:22:41 | 000,000,833 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\Zástupce - ANTS.lnk
[2013.12.15 12:39:30 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
[2013.12.15 12:39:30 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2013.12.15 12:30:31 | 000,000,702 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\MozBackup.lnk
[2013.12.14 00:11:40 | 000,001,643 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\CrystalDiskInfo.lnk
[2013.12.13 21:32:31 | 000,000,613 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\HD Tune.lnk
[2013.12.12 16:38:16 | 000,071,214 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\printout.pdf
[2013.11.29 16:52:29 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.10.27 23:07:30 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2013.10.27 23:07:30 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2013.10.24 23:22:58 | 000,237,456 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.07.21 18:04:00 | 000,180,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.07.18 23:20:07 | 000,000,209 | ---- | C] () -- C:\WINDOWS\settings.ini
[2013.04.10 19:17:25 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.01.28 18:43:13 | 000,006,656 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.01.23 16:46:24 | 000,000,116 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\default.pls
[2012.12.28 16:37:03 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.12.23 01:33:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.12.23 01:25:14 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.12.23 01:24:03 | 003,679,752 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.12.23 01:21:22 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012.12.23 01:21:22 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2012.12.23 01:21:22 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lagarith.dll
[2012.12.23 01:21:19 | 000,112,640 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.12.23 01:17:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2012.12.23 01:06:52 | 001,763,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2012.12.23 01:06:52 | 000,211,840 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll
[2012.12.23 01:06:52 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys
[2012.12.23 01:06:52 | 000,025,984 | ---- | C] () -- C:\WINDOWS\snuvcdsm.exe
[2012.12.23 01:06:52 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini
[2012.12.23 01:06:48 | 000,255,360 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[2012.12.23 01:03:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012.12.23 01:02:54 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2012.12.23 01:02:54 | 000,203,336 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012.12.23 01:02:54 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2012.12.23 00:36:55 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.12.23 00:32:39 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ==========
[2012.12.23 01:01:44 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 13:00:00 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.09.08 08:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Audacity
[2013.11.29 19:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\AVAST Software
[2013.12.26 22:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
[2012.12.23 02:40:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\deluge
[2013.07.18 23:20:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DikobrazGames
[2013.03.08 19:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DVDVideoSoft
[2013.07.05 11:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\GARMIN
[2013.03.31 21:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Guitar Pro 6
[2013.02.19 23:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\HoolappForAndroid
[2013.12.12 22:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\PDF Writer
[2013.12.12 00:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013.07.18 19:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\u-turn
[2013.04.21 20:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Western Digital
[2013.04.21 07:29:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Wondershare Video Converter Ultimate
[2013.03.24 12:47:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zoner
[2013.07.18 19:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zpevnikator
[2013.04.21 07:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
[2013.11.29 16:53:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2013.07.17 23:02:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacks
[2013.07.17 23:02:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacksSetup
[2013.07.05 14:05:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GARMIN
[2013.03.31 21:49:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
[2013.12.29 14:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2013.08.03 11:51:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PDF Writer
[2013.04.21 21:30:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2013.04.21 21:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
[2013.04.21 21:31:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
[2013.02.05 19:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\regid.1986-12.com.adobe
[2013.04.21 21:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Studio 14
[2013.02.14 12:50:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SuperOvladac
[2013.04.21 20:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Western Digital
[2013.12.20 16:52:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Wondershare Video Converter Ultimate
[2013.12.20 16:58:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\xml_param
[2013.03.24 12:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Zoner
========== Purity Check ==========
========== Custom Scans ==========
< >
[2012.12.23 00:33:44 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2012.12.23 00:38:47 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2013.11.29 16:52:29 | 000,000,364 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
< >
< MD5 for: AGP440.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\erdnt\cache\atapi.sys
[2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 13:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\erdnt\cache\cryptsvc.dll
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\erdnt\cache\eventlog.dll
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\erdnt\cache\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 13:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 13:00:00 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\erdnt\cache\lsass.exe
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\erdnt\cache\ndis.sys
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\erdnt\cache\netlogon.dll
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\erdnt\cache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\erdnt\cache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 13:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\erdnt\cache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\erdnt\cache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\erdnt\cache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\erdnt\cache\ws2_32.dll
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[2 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Adobe
[2013.02.14 08:54:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Ahead
[2012.12.23 01:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\ATI
[2013.09.08 08:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Audacity
[2013.11.29 19:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\AVAST Software
[2013.12.26 22:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
[2012.12.23 02:40:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\deluge
[2013.07.18 23:20:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DikobrazGames
[2013.04.23 18:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\dvdcss
[2013.03.08 19:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DVDVideoSoft
[2013.07.05 11:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\GARMIN
[2013.03.31 21:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Guitar Pro 6
[2013.12.30 17:29:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
[2013.02.19 23:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\HoolappForAndroid
[2012.12.23 00:49:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Identities
[2012.12.23 01:06:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\InstallShield
[2013.12.12 22:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2012.12.23 01:15:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Macromedia
[2013.12.29 19:15:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
[2013.12.26 14:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Media Player Classic
[2013.11.18 15:27:34 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft
[2013.12.15 12:40:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\PDF Writer
[2013.12.12 00:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013.03.29 22:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Sun
[2013.07.18 19:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\u-turn
[2013.04.21 20:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Western Digital
[2012.12.23 02:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\WinRAR
[2013.04.21 07:29:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Wondershare Video Converter Ultimate
[2013.03.24 12:47:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zoner
[2013.07.18 19:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zpevnikator
[2013.04.21 07:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
< %APPDATA%\*.exe /s >
[2013.12.12 22:25:01 | 001,175,960 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext\lib\unins000.exe
[2013.02.16 16:01:23 | 000,169,534 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{1E61538A-D482-4252-BBB7-D892FD52FC50}\_26e91eb.exe
[2013.02.16 16:01:23 | 000,169,534 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{1E61538A-D482-4252-BBB7-D892FD52FC50}\_5af141bb.exe
[2013.04.21 21:32:32 | 000,029,926 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2013.01.05 16:59:52 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2012.12.23 01:23:16 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012.12.23 01:23:16 | 001,069,056 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012.12.23 01:23:16 | 000,507,904 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2013.12.31 19:27:24 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
< %SYSTEMDRIVE%\*.exe >
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 13:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.01.01 11:10:45 | 000,000,512 | ---- | M] () MD5=BDA39C374979ACC45D573F8492709747 -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013.10.27 10:37:31 | 000,016,236 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Euro.Truck.Simulator 2.v1.7.0.Incl.2DLCs.Cracked-.rar.torrent
[2013.12.11 23:18:45 | 000,011,203 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Hard Disk Sentinel Pro 4.40.5+Crack [2014].torrent
[2013.12.03 00:24:48 | 001,384,996 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\Better Cracked Screen PRO v2.3.apk
[2013.12.03 00:18:40 | 000,981,923 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\ComicRack For Android Pro v1.63.apk
[2013.12.03 00:30:41 | 006,230,592 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\sygic_navigator1126cracked.apk
[2013.12.03 00:16:50 | 003,341,961 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\WidgetLocker Lockscreen v2.2.7\WidgetLocker Lockscreen v2.2.7 Final Cracked bobiras2009.apk
[2013.03.13 16:26:48 | 252,989,606 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Konstruktér-mostů-(PC)---Full-Cracked.exe
[2013.10.27 11:05:58 | 820,972,195 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\HRY\Euro.Truck.Simulator 2.v1.7.0.Incl.2DLCs.Cracked-.rar
[2013.04.21 07:32:13 | 000,045,056 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\bin\Aircrack-ng GUI.exe
[2013.04.21 07:38:04 | 001,758,258 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\bin\aircrack-ng.exe
[2013.04.21 07:26:56 | 000,004,934 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\manpages\aircrack-ng.1
[2013.04.21 07:37:39 | 000,123,048 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ng.c
[2013.04.21 07:26:56 | 000,007,537 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ng.h
[2013.04.21 07:36:03 | 000,017,975 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ptw-lib.c
[2013.04.21 07:37:24 | 000,002,219 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ptw-lib.h
[2013.04.21 07:37:26 | 000,000,922 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng.sln
[2013.04.21 07:26:56 | 000,003,341 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng\Aircrack-ng.csproj
[2013.04.21 07:37:26 | 000,000,538 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng\Aircrack-ng.csproj.user
[2013.01.14 19:30:08 | 000,151,546 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\m2_crackle.ogg
[2013.01.14 19:29:34 | 000,009,504 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\scn14_crackers.ogg
[2013.01.14 19:30:08 | 000,008,970 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\scn14_woodpecker_crackers.ogg
< *keygen* /s >
[2012.12.23 02:23:10 | 000,015,146 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Nero 7 Premium 7.8.5.0 CZ + keygen.torrent
[2012.12.23 02:26:28 | 190,316,672 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Nero 7 Premium 7.8.5.0 CZ + keygen.rar
< *AntiWPA* /s >
< *loader* /s >
[2012.12.04 16:00:50 | 000,072,638 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\loader.gif
[2012.12.04 16:00:50 | 000,003,032 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\loader.png
[2012.12.04 16:00:50 | 000,009,772 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\retina\loader@2x.png
[2013.12.03 00:31:14 | 005,368,102 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\iLoader for Facebook v1.6.2.apk
[2013.12.03 00:08:46 | 001,313,528 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\TubeMate YouTube Downloader v1.05.37 AdFree bobiras2009.apk
[2014.01.01 11:00:40 | 000,000,673 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Local Settings\Temporary Internet Files\Content.IE5\PTY6UKS3\loader.white[1].gif
[2007.03.12 13:48:46 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2006.10.26 12:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 12:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.01.09 11:41:56 | 000,030,608 | ---- | M] () -- \Program Files\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2012.12.12 16:00:48 | 000,057,061 | ---- | M] () -- \Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\chrome\wsVideoConvertDownloader.jar
[2013.03.05 10:11:10 | 000,432,128 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSPluginLoader.exe
[2013.03.05 13:03:44 | 000,443,904 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSPluginLoader.exe
[2013.03.05 12:34:20 | 000,192,512 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPluginLoader.exe
[2013.06.07 15:50:44 | 000,103,960 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\8bfLoader.exe
[2013.06.07 15:50:52 | 000,017,944 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\WICLoader.exe
[2013.04.13 11:46:47 | 000,082,784 | ---- | M] () -- \WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.04.01 08:11:42 | 000,070,944 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2004.08.17 15:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2008.08.19 20:22:50 | 000,000,182 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\DVDFab Platinum 5.0.8.5 Final\Serial.txt
[2013.01.27 22:29:57 | 007,312,019 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\my best dnb vyber\TOP DNB\Serial Killaz Ghetto Yout.mp3
[2006.09.02 03:54:14 | 000,000,024 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Zoner Photo Studio 8\serial.txt
[2008.09.04 08:06:40 | 000,079,120 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\HfxSerial.exe
[2008.09.04 08:07:02 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-CHS.dll
[2008.09.04 08:07:04 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-DEU.dll
[2008.09.04 08:07:04 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ESP.dll
[2008.09.04 08:07:06 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-FRA.dll
[2008.09.04 08:07:10 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ITA.dll
[2008.09.04 08:07:14 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-JPN.dll
[2008.09.04 08:07:14 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-KOR.dll
[2008.09.04 08:07:16 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-NLD.dll
[2013.09.13 00:53:56 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.dll
[2013.10.09 19:33:03 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.ni.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009.05.11 11:43:58 | 000,065,580 | ---- | M] () -- \Program Files\TopCD\Posel Smrti 2\GUI\Tokens\T81_SerialMurders.tga
[2013.10.11 07:02:40 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.01.09 23:34:11 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.08.15 21:31:57 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a95e0af6fa5d2e8ffd5e0091f6513271\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.08.15 21:30:15 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ba6670610621b25b1608e457ba0ef305\System.Runtime.Serialization.ni.dll
[2013.08.15 21:33:21 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.09 22:05:16 | 002,658,304 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2010.03.18 12:16:28 | 001,026,936 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\System.Runtime.Serialization.dll.x86
[2013.07.18 19:25:43 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.10 22:06:38 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.07.18 19:25:42 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.10 22:06:34 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 05:06:54 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 01:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 01:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2008.04.14 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 13:00:00 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2013.12.30 18:43:46 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak
< *w7lxe* /s >
< End of report >
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Adrian a Janička\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,75 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 54,37% Memory free
3,60 Gb Paging File | 2,85 Gb Available in Paging File | 79,35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 76,02 Gb Free Space | 25,50% Space Free | Partition Type: NTFS
Computer Name: XY-45B23A6D5226 | User Name: Adrian a Janička | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014.01.01 11:07:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
PRC - [2013.12.18 13:11:06 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.12.18 13:11:06 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.12.05 20:34:42 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.10.08 06:48:23 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.10.01 15:51:14 | 002,345,296 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2013.10.01 15:51:14 | 001,612,112 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2013.08.26 16:46:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
PRC - [2010.03.17 04:48:42 | 000,229,458 | ---- | M] (IDT, Inc.) -- c:\Program Files\IDT\WDM\stacsv.exe
PRC - [2010.01.21 15:24:08 | 000,110,592 | ---- | M] (WDC) -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
PRC - [2009.12.23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009.06.16 07:58:08 | 000,020,480 | ---- | M] (Memeo) -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
PRC - [2009.04.21 21:01:56 | 000,737,280 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\AESTFltr.exe
PRC - [2009.03.27 18:10:56 | 000,014,336 | ---- | M] (LSI Corporation) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.02.20 10:07:40 | 000,199,752 | ---- | M] (Pinnacle Systems GmbH) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
========== Modules (No Company Name) ==========
MOD - [2013.12.31 18:55:00 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13123101\algo.dll
MOD - [2013.12.31 13:30:22 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13123100\algo.dll
MOD - [2013.12.22 10:07:21 | 016,242,056 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll
MOD - [2013.12.05 20:36:56 | 003,559,024 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013.11.29 16:56:53 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013.10.11 17:30:34 | 000,978,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\1b7600e7fe5e152f21ba6d79f3c0c3b6\System.Configuration.ni.dll
MOD - [2013.10.11 17:28:35 | 012,434,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\02257c6b67db33c194fa3beccf977afb\System.Windows.Forms.ni.dll
MOD - [2013.10.11 07:02:41 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2013.08.15 21:32:15 | 011,816,960 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\972dcf9830a64e9802aaca3a83cae24b\System.Web.ni.dll
MOD - [2013.08.15 21:32:06 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\15fd2d2f4e709154b44187a6915db244\System.ServiceProcess.ni.dll
MOD - [2013.08.15 20:47:32 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll
MOD - [2013.08.15 20:47:12 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b34cb206ab0cec687c3730b14cdff57\System.Drawing.ni.dll
MOD - [2013.08.15 20:41:59 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll
MOD - [2013.07.13 07:52:30 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\8f799a4688381624de3cfb1edbccb163\Accessibility.ni.dll
MOD - [2013.07.13 07:49:13 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll
MOD - [2011.03.16 00:14:52 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2011.03.14 13:20:36 | 000,098,304 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2010.03.16 11:22:12 | 000,014,848 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013.12.18 13:11:06 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.12.05 20:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.10.08 06:48:23 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.10.01 15:51:14 | 001,612,112 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013.08.26 16:46:12 | 000,375,056 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2010.03.17 04:48:42 | 000,229,458 | ---- | M] (IDT, Inc.) [Auto | Running] -- c:\Program Files\IDT\WDM\stacsv.exe -- (STacSV)
SRV - [2010.01.21 15:24:08 | 000,110,592 | ---- | M] (WDC) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe -- (WDDMService)
SRV - [2009.12.23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009.06.16 07:58:08 | 000,020,480 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe -- (WDSmartWareBackgroundService)
SRV - [2009.03.27 18:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\mbr.sys -- (mbr)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Running] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ayzpxf0t)
DRV - File not found [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADRIAN~1\LOCALS~1\Temp\ALSysIO.sys -- (ALSysIO)
DRV - [2013.12.18 13:11:09 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.12.18 13:11:09 | 000,410,528 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.12.18 13:11:09 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.12.18 13:11:09 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.12.18 13:11:09 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.12.18 13:11:09 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2013.11.29 16:56:55 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.10.27 23:07:31 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2013.10.27 23:07:30 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2013.01.05 16:59:52 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2012.12.23 00:54:39 | 002,696,448 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2011.03.16 01:09:26 | 004,833,792 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.11.17 07:03:56 | 000,101,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2010.04.27 10:24:50 | 001,763,968 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2010.04.15 04:41:12 | 000,051,752 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2010.04.01 00:20:20 | 000,911,400 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2010.03.17 04:48:42 | 001,659,283 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2010.01.28 10:12:02 | 000,095,232 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2010.01.15 05:53:18 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2009.11.19 06:13:04 | 000,556,200 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2009.11.19 06:12:56 | 000,118,440 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2009.08.13 11:07:12 | 001,163,328 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.04.21 22:13:34 | 000,113,664 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AESTAud.sys -- (AESTAud)
DRV - [2009.03.18 18:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.02.13 10:02:52 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2005.09.23 21:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005.04.27 08:26:28 | 001,548,800 | R--- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\p2usbwdm.sys -- (iComp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes,DefaultScope = {7fcefcd4-4185-4e7b-8ff5-a76afa55821b}
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{04de3be5-ca32-4d98-b8ab-9f3cedf8ecc1}: "URL" = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{7fcefcd4-4185-4e7b-8ff5-a76afa55821b}: "URL" = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Slunečnice"
FF - prefs.js..browser.search.selectedEngine: "Slunečnice"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.21
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@kb-ext.cz/PKIComponent: C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext\lib\x86\npPKIComponentNPAPI-kbext.dll (Komerční banka, a.s.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.12.18 13:11:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}: C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\ [2013.04.21 07:26:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2013.12.15 12:40:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Extensions
[2013.12.15 12:42:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions
[2013.12.15 12:42:15 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.12.11 23:22:42 | 000,013,570 | ---- | M] () (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
[2013.11.16 13:01:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013.12.15 12:39:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ADRIAN A JANIÄŤKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\GJ27OBTQ.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D}
========== Chrome ==========
CHR - default_search_provider: Seznam (Enabled)
CHR - default_search_provider: search_url = http://search.seznam.cz/?q={searchTerms}
CHR - default_search_provider: suggest_url = http:///suggest.fulltext.seznam.cz/?dict=fulltext_ff&phrase={searchTerms}&encoding={inputEncoding}&response_encoding=utf-8,
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Adrian a Jani\u010Dka\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\31.0.1650.57\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Dokumenty Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhledvn Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Shopping Suggestion = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll\1.0.0_0\
CHR - Extension: Pen\u011B\u017Eenka Google = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
CHR - Extension: Gmail = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013.12.31 19:27:43 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Ukazatel S-Rank) - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\core.4.dll ()
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\Toolbar\WebBrowser: (no name) - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No CLSID value found.
O4 - HKLM..\Run: [AESTFltr] C:\WINDOWS\System32\AESTFltr.exe (Andrea Electronics Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [snp2uvc] C:\WINDOWS\System32\csnp2uvc.dll ( )
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [USBToolTip] C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe (Pinnacle Systems GmbH)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O15 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..Trusted Domains: localhost ([]http in Internet)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.15.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{219DA565-177D-4204-B645-BA019D8B6789}: DhcpNameServer = 192.168.15.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.LAGS - C:\WINDOWS\System32\lagarith.dll ( )
Drivers32: vidc.mjpg - pvmjpg30.dll File not found
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2014.01.01 11:07:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
[2013.12.31 11:37:47 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013.12.31 11:35:23 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2013.12.31 11:35:23 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2013.12.31 11:35:23 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2013.12.31 11:35:23 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2013.12.31 11:35:13 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.12.31 11:34:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2013.12.31 11:33:12 | 005,159,030 | R--- | C] (Swearware) -- C:\ComboFix.exe
[2013.12.30 18:43:51 | 000,081,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2013.12.30 18:43:51 | 000,037,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2013.12.30 18:43:51 | 000,011,520 | ---- | C] (Western Digital Technologies) -- C:\WINDOWS\System32\drivers\wdcsam.sys.bak
[2013.12.30 18:43:51 | 000,004,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2013.12.30 18:43:50 | 000,144,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2013.12.30 18:43:50 | 000,058,112 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2013.12.30 18:43:50 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2013.12.30 18:43:50 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2013.12.30 18:43:50 | 000,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2013.12.30 18:43:49 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2013.12.30 18:43:49 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2013.12.30 18:43:49 | 000,021,376 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2013.12.30 18:43:49 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2013.12.30 18:43:48 | 000,226,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2013.12.30 18:43:48 | 000,019,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2013.12.30 18:43:48 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2013.12.30 18:43:47 | 001,659,283 | ---- | C] (IDT, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys.bak
[2013.12.30 18:43:47 | 000,691,696 | ---- | C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys.bak
[2013.12.30 18:43:47 | 000,049,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2013.12.30 18:43:46 | 000,025,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2013.12.30 18:43:46 | 000,014,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2013.12.30 18:43:45 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys.bak
[2013.12.30 18:43:45 | 000,096,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2013.12.30 18:43:45 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2013.12.30 18:43:44 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2013.12.30 18:43:44 | 000,034,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2013.12.30 18:43:43 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2013.12.30 18:43:42 | 001,548,800 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\p2usbwdm.sys.bak
[2013.12.30 18:43:42 | 000,088,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2013.12.30 18:43:42 | 000,063,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2013.12.30 18:43:42 | 000,055,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2013.12.30 18:43:42 | 000,003,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2013.12.30 18:43:41 | 000,040,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2013.12.30 18:43:41 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2013.12.30 18:43:38 | 000,171,520 | ---- | C] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys.bak
[2013.12.30 18:43:38 | 000,063,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2013.12.30 18:43:38 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2013.12.30 18:43:37 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2013.12.30 18:43:36 | 000,127,488 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2013.12.30 18:43:36 | 000,005,888 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2013.12.30 18:43:35 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2013.12.30 18:43:35 | 000,026,176 | ---- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2013.12.30 18:43:35 | 000,025,448 | ---- | C] (GARMIN Corp.) -- C:\WINDOWS\System32\drivers\grmngen.sys.bak
[2013.12.30 18:43:35 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2013.12.30 18:43:34 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2013.12.30 18:43:34 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2013.12.30 18:43:34 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2013.12.30 18:43:33 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2013.12.30 18:43:33 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2013.12.30 18:43:32 | 000,262,528 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2013.12.30 18:43:32 | 000,049,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2013.12.30 18:43:32 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2013.12.30 18:43:32 | 000,011,776 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2013.12.30 18:43:31 | 000,118,440 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwdndis.sys.bak
[2013.12.30 18:43:31 | 000,092,072 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwsecfl.sys.bak
[2013.12.30 18:43:31 | 000,051,752 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwusb.sys.bak
[2013.12.30 18:43:30 | 000,911,400 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btkrnl.sys.bak
[2013.12.30 18:43:30 | 000,556,200 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btaudio.sys.bak
[2013.12.30 18:43:30 | 000,037,160 | ---- | C] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btport.sys.bak
[2013.12.30 18:43:29 | 002,696,448 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS.bak
[2013.12.30 18:43:29 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2013.12.30 18:43:29 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys.bak
[2013.12.30 18:43:28 | 000,101,904 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AtihdXP3.sys.bak
[2013.12.30 18:43:28 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2013.12.30 18:43:28 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2013.12.30 18:43:27 | 004,833,792 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2013.12.30 18:43:27 | 000,095,232 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\drivers\AtiHdmi.sys.bak
[2013.12.30 18:43:25 | 001,163,328 | ---- | C] (LSI Corporation) -- C:\WINDOWS\System32\drivers\AGRSM.sys.bak
[2013.12.30 18:43:25 | 000,113,664 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\AESTAud.sys.bak
[2013.12.30 18:43:25 | 000,041,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2013.12.30 18:42:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\RK_Quarantine
[2013.12.30 17:29:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Help
[2013.12.30 17:29:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
[2013.12.29 19:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
[2013.12.29 19:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn Hamachi
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2013.12.29 14:33:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\LogMeIn
[2013.12.29 14:31:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\LogMeIn Hamachi
[2013.12.29 14:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2013.12.28 22:04:59 | 000,000,000 | ---D | C] -- C:\rsit
[2013.12.27 15:49:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\knihy
[2013.12.26 22:43:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Nabídka Start\Programy\Native Instruments Traktor DJ Mixer
[2013.12.26 22:43:28 | 000,000,000 | ---D | C] -- C:\Program Files\Native Instruments
[2013.12.26 01:47:02 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Adrian a Janička\Recent
[2013.12.25 21:51:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\BATM
[2013.12.25 20:46:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3
[2013.12.22 15:21:52 | 000,000,000 | ---D | C] -- C:\záloha
[2013.12.22 15:19:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Garmin
[2013.12.22 15:14:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Nabídka Start\Programy\Garmin
[2013.12.22 15:13:56 | 000,000,000 | ---D | C] -- C:\Garmin
[2013.12.22 15:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Garmin
[2013.12.17 14:22:01 | 000,000,000 | ---D | C] -- C:\Program Files\Peter
[2013.12.15 12:39:25 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2013.12.15 12:30:31 | 000,000,000 | ---D | C] -- C:\Program Files\MozBackup
[2013.12.15 12:30:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\MozBackup
[2013.12.14 00:11:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CrystalDiskInfo
[2013.12.14 00:11:39 | 000,000,000 | ---D | C] -- C:\Program Files\CrystalDiskInfo
[2013.12.13 21:32:31 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune
[2013.12.13 21:32:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\HD Tune
[2013.12.12 22:25:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2013.12.12 00:26:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013.12.11 23:27:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.12.11 22:25:37 | 000,642,632 | ---- | C] (EFD Software ) -- C:\Documents and Settings\Adrian a Janička\Plocha\hdtune_255.exe
[2013.12.02 21:47:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adrian a Janička\Dokumenty\TABLET
========== Files - Modified Within 30 Days ==========
[2014.01.01 11:10:45 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.01.01 11:07:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adrian a Janička\Plocha\OTL.exe
[2013.12.31 19:27:43 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013.12.31 19:27:42 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.12.31 19:27:24 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.12.31 19:27:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.12.31 11:37:52 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
[2013.12.30 19:23:38 | 001,233,962 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\adwcleaner.exe
[2013.12.30 18:43:51 | 000,081,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2013.12.30 18:43:51 | 000,037,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2013.12.30 18:43:51 | 000,011,520 | ---- | M] (Western Digital Technologies) -- C:\WINDOWS\System32\drivers\wdcsam.sys.bak
[2013.12.30 18:43:51 | 000,004,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2013.12.30 18:43:50 | 000,144,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2013.12.30 18:43:50 | 000,058,112 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2013.12.30 18:43:50 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2013.12.30 18:43:50 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2013.12.30 18:43:50 | 000,005,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2013.12.30 18:43:49 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2013.12.30 18:43:49 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2013.12.30 18:43:49 | 000,021,376 | ---- | M] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2013.12.30 18:43:49 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2013.12.30 18:43:48 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2013.12.30 18:43:48 | 000,019,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2013.12.30 18:43:48 | 000,014,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2013.12.30 18:43:47 | 001,659,283 | ---- | M] (IDT, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys.bak
[2013.12.30 18:43:47 | 000,049,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2013.12.30 18:43:46 | 001,763,968 | ---- | M] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys.bak
[2013.12.30 18:43:46 | 000,033,280 | ---- | M] () -- C:\WINDOWS\System32\drivers\sncduvc.sys.bak
[2013.12.30 18:43:46 | 000,025,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2013.12.30 18:43:46 | 000,014,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2013.12.30 18:43:45 | 000,203,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rmcast.sys.bak
[2013.12.30 18:43:45 | 000,096,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2013.12.30 18:43:45 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2013.12.30 18:43:45 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2013.12.30 18:43:44 | 000,146,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2013.12.30 18:43:44 | 000,034,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2013.12.30 18:43:43 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2013.12.30 18:43:42 | 001,548,800 | ---- | M] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\p2usbwdm.sys.bak
[2013.12.30 18:43:42 | 000,088,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2013.12.30 18:43:42 | 000,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2013.12.30 18:43:42 | 000,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2013.12.30 18:43:42 | 000,003,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2013.12.30 18:43:41 | 000,040,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2013.12.30 18:43:41 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2013.12.30 18:43:38 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) -- C:\WINDOWS\System32\drivers\MarvinBus.sys.bak
[2013.12.30 18:43:38 | 000,063,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2013.12.30 18:43:38 | 000,025,416 | ---- | M] () -- C:\WINDOWS\System32\drivers\lirsgt.sys.bak
[2013.12.30 18:43:38 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2013.12.30 18:43:37 | 000,141,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2013.12.30 18:43:36 | 000,127,488 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2013.12.30 18:43:36 | 000,005,888 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2013.12.30 18:43:35 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2013.12.30 18:43:35 | 000,026,176 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2013.12.30 18:43:35 | 000,025,448 | ---- | M] (GARMIN Corp.) -- C:\WINDOWS\System32\drivers\grmngen.sys.bak
[2013.12.30 18:43:35 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2013.12.30 18:43:34 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2013.12.30 18:43:34 | 000,012,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2013.12.30 18:43:34 | 000,003,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2013.12.30 18:43:33 | 000,060,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2013.12.30 18:43:33 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2013.12.30 18:43:33 | 000,010,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2013.12.30 18:43:32 | 000,262,528 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2013.12.30 18:43:32 | 000,049,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2013.12.30 18:43:32 | 000,011,776 | ---- | M] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2013.12.30 18:43:31 | 000,118,440 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwdndis.sys.bak
[2013.12.30 18:43:31 | 000,092,072 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwsecfl.sys.bak
[2013.12.30 18:43:31 | 000,051,752 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btwusb.sys.bak
[2013.12.30 18:43:31 | 000,037,160 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btport.sys.bak
[2013.12.30 18:43:30 | 000,911,400 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btkrnl.sys.bak
[2013.12.30 18:43:30 | 000,556,200 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\System32\drivers\btaudio.sys.bak
[2013.12.30 18:43:29 | 002,696,448 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS.bak
[2013.12.30 18:43:29 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2013.12.30 18:43:29 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\battc.sys.bak
[2013.12.30 18:43:28 | 000,278,984 | ---- | M] () -- C:\WINDOWS\System32\drivers\atksgt.sys.bak
[2013.12.30 18:43:28 | 000,101,904 | ---- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AtihdXP3.sys.bak
[2013.12.30 18:43:28 | 000,095,232 | ---- | M] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\drivers\AtiHdmi.sys.bak
[2013.12.30 18:43:28 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2013.12.30 18:43:28 | 000,031,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2013.12.30 18:43:27 | 004,833,792 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2013.12.30 18:43:25 | 001,163,328 | ---- | M] (LSI Corporation) -- C:\WINDOWS\System32\drivers\AGRSM.sys.bak
[2013.12.30 18:43:25 | 000,113,664 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\AESTAud.sys.bak
[2013.12.30 18:43:25 | 000,041,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2013.12.30 18:41:59 | 003,810,304 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\RogueKiller.exe
[2013.12.30 17:52:20 | 000,000,116 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\default.pls
[2013.12.30 17:52:20 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.12.30 09:55:59 | 004,196,406 | ---- | M] () -- C:\WINDOWS\Wallperizer_Wallpaper.bmp
[2013.12.29 14:31:36 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\LogMeIn Hamachi.lnk
[2013.12.22 10:07:21 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.12.22 10:07:21 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.12.18 21:56:00 | 000,003,023 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\ax_files.xml
[2013.12.18 13:11:19 | 000,001,733 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2013.12.18 13:11:09 | 000,775,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2013.12.18 13:11:09 | 000,410,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2013.12.18 13:11:09 | 000,270,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2013.12.18 13:11:09 | 000,180,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.12.18 13:11:09 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013.12.18 13:11:09 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2013.12.18 13:11:09 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2013.12.18 13:11:09 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2013.12.17 14:22:41 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\Zástupce - ANTS.lnk
[2013.12.15 12:39:30 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2013.12.15 12:30:31 | 000,000,702 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\MozBackup.lnk
[2013.12.14 20:12:24 | 003,679,752 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.12.14 18:47:38 | 000,497,156 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.12.14 18:47:38 | 000,492,302 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2013.12.14 18:47:38 | 000,099,786 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2013.12.14 18:47:38 | 000,085,640 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.12.14 00:11:40 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\CrystalDiskInfo.lnk
[2013.12.13 21:32:31 | 000,000,613 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Plocha\HD Tune.lnk
[2013.12.12 16:38:17 | 000,071,214 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\printout.pdf
[2013.12.11 22:25:39 | 000,642,632 | ---- | M] (EFD Software ) -- C:\Documents and Settings\Adrian a Janička\Plocha\hdtune_255.exe
[2013.12.04 20:25:44 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
========== Files Created - No Company Name ==========
[2014.01.01 11:10:45 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.12.31 11:37:52 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2013.12.31 11:37:48 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2013.12.31 11:35:23 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013.12.31 11:35:23 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013.12.31 11:35:23 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013.12.31 11:35:23 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013.12.31 11:35:23 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013.12.30 19:23:38 | 001,233,962 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\adwcleaner.exe
[2013.12.30 18:43:46 | 001,763,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys.bak
[2013.12.30 18:43:46 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys.bak
[2013.12.30 18:43:38 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys.bak
[2013.12.30 18:43:28 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys.bak
[2013.12.30 18:41:59 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\RogueKiller.exe
[2013.12.29 14:31:36 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\LogMeIn Hamachi.lnk
[2013.12.17 14:22:41 | 000,000,833 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\Zástupce - ANTS.lnk
[2013.12.15 12:39:30 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
[2013.12.15 12:39:30 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2013.12.15 12:30:31 | 000,000,702 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\MozBackup.lnk
[2013.12.14 00:11:40 | 000,001,643 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\CrystalDiskInfo.lnk
[2013.12.13 21:32:31 | 000,000,613 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Plocha\HD Tune.lnk
[2013.12.12 16:38:16 | 000,071,214 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Dokumenty\printout.pdf
[2013.11.29 16:52:29 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.10.27 23:07:30 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2013.10.27 23:07:30 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2013.10.24 23:22:58 | 000,237,456 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.07.21 18:04:00 | 000,180,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.07.18 23:20:07 | 000,000,209 | ---- | C] () -- C:\WINDOWS\settings.ini
[2013.04.10 19:17:25 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.01.28 18:43:13 | 000,006,656 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.01.23 16:46:24 | 000,000,116 | ---- | C] () -- C:\Documents and Settings\Adrian a Janička\default.pls
[2012.12.28 16:37:03 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.12.23 01:33:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.12.23 01:25:14 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.12.23 01:24:03 | 003,679,752 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.12.23 01:21:22 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012.12.23 01:21:22 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2012.12.23 01:21:22 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lagarith.dll
[2012.12.23 01:21:19 | 000,112,640 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.12.23 01:17:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2012.12.23 01:06:52 | 001,763,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2012.12.23 01:06:52 | 000,211,840 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll
[2012.12.23 01:06:52 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys
[2012.12.23 01:06:52 | 000,025,984 | ---- | C] () -- C:\WINDOWS\snuvcdsm.exe
[2012.12.23 01:06:52 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini
[2012.12.23 01:06:48 | 000,255,360 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[2012.12.23 01:03:01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012.12.23 01:02:54 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2012.12.23 01:02:54 | 000,203,336 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012.12.23 01:02:54 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2012.12.23 00:36:55 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.12.23 00:32:39 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ==========
[2012.12.23 01:01:44 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 13:00:00 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.09.08 08:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Audacity
[2013.11.29 19:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\AVAST Software
[2013.12.26 22:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
[2012.12.23 02:40:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\deluge
[2013.07.18 23:20:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DikobrazGames
[2013.03.08 19:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DVDVideoSoft
[2013.07.05 11:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\GARMIN
[2013.03.31 21:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Guitar Pro 6
[2013.02.19 23:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\HoolappForAndroid
[2013.12.12 22:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\PDF Writer
[2013.12.12 00:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013.07.18 19:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\u-turn
[2013.04.21 20:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Western Digital
[2013.04.21 07:29:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Wondershare Video Converter Ultimate
[2013.03.24 12:47:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zoner
[2013.07.18 19:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zpevnikator
[2013.04.21 07:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
[2013.11.29 16:53:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2013.07.17 23:02:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacks
[2013.07.17 23:02:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacksSetup
[2013.07.05 14:05:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GARMIN
[2013.03.31 21:49:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Guitar Pro 6
[2013.12.29 14:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2013.08.03 11:51:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PDF Writer
[2013.04.21 21:30:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2013.04.21 21:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
[2013.04.21 21:31:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
[2013.02.05 19:57:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\regid.1986-12.com.adobe
[2013.04.21 21:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Studio 14
[2013.02.14 12:50:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SuperOvladac
[2013.04.21 20:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Western Digital
[2013.12.20 16:52:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Wondershare Video Converter Ultimate
[2013.12.20 16:58:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\xml_param
[2013.03.24 12:47:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Zoner
========== Purity Check ==========
========== Custom Scans ==========
< >
[2012.12.23 00:33:44 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2012.12.23 00:38:47 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2013.11.29 16:52:29 | 000,000,364 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
< >
< MD5 for: AGP440.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\erdnt\cache\atapi.sys
[2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 13:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\erdnt\cache\cryptsvc.dll
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 13:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\erdnt\cache\eventlog.dll
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\erdnt\cache\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 13:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 13:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 13:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 13:00:00 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\erdnt\cache\lsass.exe
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\erdnt\cache\ndis.sys
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.14 13:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\erdnt\cache\netlogon.dll
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\erdnt\cache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 13:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\erdnt\cache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 13:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\erdnt\cache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\erdnt\cache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 13:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\erdnt\cache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 13:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\erdnt\cache\ws2_32.dll
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 13:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[2 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Adobe
[2013.02.14 08:54:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Ahead
[2012.12.23 01:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\ATI
[2013.09.08 08:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Audacity
[2013.11.29 19:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\AVAST Software
[2013.12.26 22:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent
[2012.12.23 02:40:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\deluge
[2013.07.18 23:20:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DikobrazGames
[2013.04.23 18:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\dvdcss
[2013.03.08 19:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\DVDVideoSoft
[2013.07.05 11:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\GARMIN
[2013.03.31 21:52:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Guitar Pro 6
[2013.12.30 17:29:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Help
[2013.02.19 23:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\HoolappForAndroid
[2012.12.23 00:49:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Identities
[2012.12.23 01:06:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\InstallShield
[2013.12.12 22:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext
[2012.12.23 01:15:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Macromedia
[2013.12.29 19:15:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Malwarebytes
[2013.12.26 14:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Media Player Classic
[2013.11.18 15:27:34 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft
[2013.12.15 12:40:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla
[2013.01.29 14:51:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\PDF Writer
[2013.12.12 00:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Seznam.cz
[2013.02.05 20:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2013.03.29 22:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Sun
[2013.07.18 19:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\u-turn
[2013.04.21 20:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Western Digital
[2012.12.23 02:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\WinRAR
[2013.04.21 07:29:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Wondershare Video Converter Ultimate
[2013.03.24 12:47:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zoner
[2013.07.18 19:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Zpevnikator
[2013.04.21 07:29:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adrian a Janička\Data aplikací\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
< %APPDATA%\*.exe /s >
[2013.12.12 22:25:01 | 001,175,960 | ---- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\KB-ext\lib\unins000.exe
[2013.02.16 16:01:23 | 000,169,534 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{1E61538A-D482-4252-BBB7-D892FD52FC50}\_26e91eb.exe
[2013.02.16 16:01:23 | 000,169,534 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{1E61538A-D482-4252-BBB7-D892FD52FC50}\_5af141bb.exe
[2013.04.21 21:32:32 | 000,029,926 | R--- | M] () -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2013.01.05 16:59:52 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
[2012.12.23 01:23:16 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012.12.23 01:23:16 | 001,069,056 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012.12.23 01:23:16 | 000,507,904 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2013.12.31 19:27:24 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
< %SYSTEMDRIVE%\*.exe >
[2013.12.31 11:33:51 | 005,159,030 | R--- | M] (Swearware) -- C:\ComboFix.exe
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 13:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.01.01 11:10:45 | 000,000,512 | ---- | M] () MD5=BDA39C374979ACC45D573F8492709747 -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013.10.27 10:37:31 | 000,016,236 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Euro.Truck.Simulator 2.v1.7.0.Incl.2DLCs.Cracked-.rar.torrent
[2013.12.11 23:18:45 | 000,011,203 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Hard Disk Sentinel Pro 4.40.5+Crack [2014].torrent
[2013.12.03 00:24:48 | 001,384,996 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\Better Cracked Screen PRO v2.3.apk
[2013.12.03 00:18:40 | 000,981,923 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\ComicRack For Android Pro v1.63.apk
[2013.12.03 00:30:41 | 006,230,592 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\sygic_navigator1126cracked.apk
[2013.12.03 00:16:50 | 003,341,961 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\WidgetLocker Lockscreen v2.2.7\WidgetLocker Lockscreen v2.2.7 Final Cracked bobiras2009.apk
[2013.03.13 16:26:48 | 252,989,606 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Konstruktér-mostů-(PC)---Full-Cracked.exe
[2013.10.27 11:05:58 | 820,972,195 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\HRY\Euro.Truck.Simulator 2.v1.7.0.Incl.2DLCs.Cracked-.rar
[2013.04.21 07:32:13 | 000,045,056 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\bin\Aircrack-ng GUI.exe
[2013.04.21 07:38:04 | 001,758,258 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\bin\aircrack-ng.exe
[2013.04.21 07:26:56 | 000,004,934 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\manpages\aircrack-ng.1
[2013.04.21 07:37:39 | 000,123,048 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ng.c
[2013.04.21 07:26:56 | 000,007,537 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ng.h
[2013.04.21 07:36:03 | 000,017,975 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ptw-lib.c
[2013.04.21 07:37:24 | 000,002,219 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\aircrack-ptw-lib.h
[2013.04.21 07:37:26 | 000,000,922 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng.sln
[2013.04.21 07:26:56 | 000,003,341 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng\Aircrack-ng.csproj
[2013.04.21 07:37:26 | 000,000,538 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\wifi\aircrack-ng-1.1-win\src\GUI\Aircrack-ng\Aircrack-ng.csproj.user
[2013.01.14 19:30:08 | 000,151,546 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\m2_crackle.ogg
[2013.01.14 19:29:34 | 000,009,504 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\scn14_crackers.ogg
[2013.01.14 19:30:08 | 000,008,970 | ---- | M] () -- \GAMES\Mahjong Secrets BFG UPD8\sounds\scn14_woodpecker_crackers.ogg
< *keygen* /s >
[2012.12.23 02:23:10 | 000,015,146 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Data aplikací\BitTorrent\Nero 7 Premium 7.8.5.0 CZ + keygen.torrent
[2012.12.23 02:26:28 | 190,316,672 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Nero 7 Premium 7.8.5.0 CZ + keygen.rar
< *AntiWPA* /s >
< *loader* /s >
[2012.12.04 16:00:50 | 000,072,638 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\loader.gif
[2012.12.04 16:00:50 | 000,003,032 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\loader.png
[2012.12.04 16:00:50 | 000,009,772 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\login\images\retina\loader@2x.png
[2013.12.03 00:31:14 | 005,368,102 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\iLoader for Facebook v1.6.2.apk
[2013.12.03 00:08:46 | 001,313,528 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\TABLET\Top Paid Android Apps September 2012\TubeMate YouTube Downloader v1.05.37 AdFree bobiras2009.apk
[2014.01.01 11:00:40 | 000,000,673 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Local Settings\Temporary Internet Files\Content.IE5\PTY6UKS3\loader.white[1].gif
[2007.03.12 13:48:46 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2006.10.26 12:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 12:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2009.05.31 03:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.01.09 11:41:56 | 000,030,608 | ---- | M] () -- \Program Files\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2012.12.12 16:00:48 | 000,057,061 | ---- | M] () -- \Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\chrome\wsVideoConvertDownloader.jar
[2013.03.05 10:11:10 | 000,432,128 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Facebook\ZPSPluginLoader.exe
[2013.03.05 13:03:44 | 000,443,904 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Flickr\ZPSPluginLoader.exe
[2013.03.05 12:34:20 | 000,192,512 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Plugins\Picasa\ZPSPluginLoader.exe
[2013.06.07 15:50:44 | 000,103,960 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\8bfLoader.exe
[2013.06.07 15:50:52 | 000,017,944 | ---- | M] () -- \Program Files\Zoner\Photo Studio 15\Program32\WICLoader.exe
[2013.04.13 11:46:47 | 000,082,784 | ---- | M] () -- \WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.04.01 08:11:42 | 000,070,944 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[2008.04.14 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2004.08.17 15:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2008.08.19 20:22:50 | 000,000,182 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Dokumenty\DVDFab Platinum 5.0.8.5 Final\Serial.txt
[2013.01.27 22:29:57 | 007,312,019 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\my best dnb vyber\TOP DNB\Serial Killaz Ghetto Yout.mp3
[2006.09.02 03:54:14 | 000,000,024 | ---- | M] () -- \Documents and Settings\Adrian a Janička\Plocha\Torent\Zoner Photo Studio 8\serial.txt
[2008.09.04 08:06:40 | 000,079,120 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\HfxSerial.exe
[2008.09.04 08:07:02 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-CHS.dll
[2008.09.04 08:07:04 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-DEU.dll
[2008.09.04 08:07:04 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ESP.dll
[2008.09.04 08:07:06 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-FRA.dll
[2008.09.04 08:07:10 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ITA.dll
[2008.09.04 08:07:14 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-JPN.dll
[2008.09.04 08:07:14 | 000,010,512 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-KOR.dll
[2008.09.04 08:07:16 | 000,011,024 | ---- | M] () -- \Documents and Settings\All Users\Dokumenty\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-NLD.dll
[2013.09.13 00:53:56 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.dll
[2013.10.09 19:33:03 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.ni.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009.05.11 11:43:58 | 000,065,580 | ---- | M] () -- \Program Files\TopCD\Posel Smrti 2\GUI\Tokens\T81_SerialMurders.tga
[2013.10.11 07:02:40 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.01.09 23:34:11 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.08.15 21:31:57 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a95e0af6fa5d2e8ffd5e0091f6513271\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.08.15 21:30:15 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ba6670610621b25b1608e457ba0ef305\System.Runtime.Serialization.ni.dll
[2013.08.15 21:33:21 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.09 22:05:16 | 002,658,304 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2010.03.18 12:16:28 | 001,026,936 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\System.Runtime.Serialization.dll.x86
[2013.07.18 19:25:43 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.10 22:06:38 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.07.18 19:25:42 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.10 22:06:34 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 05:06:54 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 01:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 01:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2008.04.14 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2008.04.14 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 13:00:00 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2013.12.30 18:43:46 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak
< *w7lxe* /s >
< End of report >
Re: Moc prosím o kontrolu
OTL Extras logfile created on: 1.1.2014 11:08:46 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Adrian a Janička\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,75 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 54,37% Memory free
3,60 Gb Paging File | 2,85 Gb Available in Paging File | 79,35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 76,02 Gb Free Space | 25,50% Space Free | Partition Type: NTFS
Computer Name: XY-45B23A6D5226 | User Name: Adrian a Janička | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Deluge\Deluge-Python\deluged.exe" = C:\Program Files\Deluge\Deluge-Python\deluged.exe:*:Disabled:deluged -- ()
"C:\Program Files\BitTorrent\BitTorrent.exe" = C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent Inc.)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)
"C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe" = C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Mozilla Firefox\plugin-container.exe" = C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox -- (Mozilla Corporation)
"C:\Program Files\Java\jre7\bin\javaw.exe" = C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)
"C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe" = C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager -- (Pinnacle Systems)
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio -- (Pinnacle Systems)
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi -- (Pinnacle Systems)
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe" = C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III -- (The 3DO Company)
"C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" = C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi -- (LogMeIn Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{19BE540F-2A2E-CF4C-F601-5AC5FF9FEB90}" = CCC Help Japanese
"{1DD56C9F-E323-8D7C-EAA4-09EC1085464F}" = CCC Help Swedish
"{1E61538A-D482-4252-BBB7-D892FD52FC50}" = Grabster AV 400
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{232DB76D-4751-41A9-9EC2-CDC0DAC1FAB6}" = WD SmartWare
"{24385EE9-2701-721B-EB46-27D59DED2297}" = Skins
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 45
"{2AD994D1-8C1F-E468-175C-785635E658BC}" = CCC Help Norwegian
"{2D50752B-F9D7-81FC-D030-4F06156C8133}" = CCC Help English
"{2F632C07-3A47-E11F-06F8-E2AF237AF4EE}" = CCC Help Polish
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = HP Webcam Driver
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{42358881-F906-264B-CE0D-11E597781C0D}" = ATI Catalyst Install Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1
"{4F2CE68F-EDBB-4592-BF07-5AC930A51029}" = Nero 7 Premium
"{5183F49F-B76D-D44E-904D-1713B978F1F7}" = Catalyst Control Center Localization All
"{56203A94-9AA5-5AA6-2F12-D73DC8CFED21}" = CCC Help Czech
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6048DAB7-39F5-10A9-D07F-578CA95ACB51}" = CCC Help Hungarian
"{641C323C-EB78-F52F-3A50-C6203F97EAE0}" = CCC Help Korean
"{647BB978-2876-487B-9B0E-FDB73F0EA4A2}" = Garmin Communicator Plugin
"{692986FB-5943-E25B-1C48-EEF3132042D4}" = ccc-utility
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{707EA61C-4294-39AE-630C-2140C98EFB17}" = CCC Help Spanish
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71754905-3493-CE5E-5BCA-46AE6B07EF02}" = CCC Help German
"{71C5EA91-C62B-03F3-070D-3E430360327C}" = CCC Help Italian
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{797FCA5B-246E-4DE3-D1BB-7CC5B94A8EAF}" = CCC Help Chinese Traditional
"{7FE84B67-1C14-42E1-8749-101A0B0B7B34}" = ATLAS Czech 2013 NT
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F0475A-A906-5925-17D7-DD35728FB6F0}" = CCC Help Dutch
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{99A016E1-0840-43AE-8434-A18CEDFA833B}" = LogMeIn Hamachi
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FD45917-95E6-449D-ACC9-01E634A34CBD}_is1" = MPEG Video Wizard DVD 5.0.1.103 (09/2011)
"{A1EB743B-6F98-27E0-0FEF-7989687169A1}" = CCC Help Greek
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3D4DEE3-2CFA-F53A-E9E8-73EDFEA3D382}" = CCC Help Turkish
"{AADD1C8F-D59F-4D55-A726-768C71A205A8}" = Pinnacle Studio 14
"{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}" = Garmin USB Drivers
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Czech
"{B320AEBD-B296-A177-1B98-B622F60BAC3E}" = CCC Help Danish
"{B8B19BC5-7288-20EE-1EE0-204C7270B6E5}" = Catalyst Control Center InstallProxy
"{BCEA752C-EA6A-880A-855B-135B3B3ECE85}" = CCC Help Chinese Standard
"{BFF7D162-0705-B71D-2AF7-17D602BD6588}" = CCC Help Finnish
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4D26D60-7B43-4CE9-AE19-A380D9DF126B}" = Garmin MapSource
"{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DA9660B6-F1DD-41D3-BA3C-E7F7BF9921B2}" = Catalyst Control Center - Branding
"{E39CFEE2-008E-459A-ADFD-60852A445D48}_is1" = Pazera Free 3GP to AVI Converter 1.4
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4D217D2-8C82-B39A-06B6-5DAACF67BA5B}" = ccc-core-static
"{E74286A4-764A-3063-A471-9EFA8DC2F9AD}" = CCC Help Thai
"{EC4BBC09-D38F-01A7-33E3-472C599E66E4}" = CCC Help Portuguese
"{ECB6004B-190C-40AB-6B12-DF6DE7C77608}" = CCC Help Russian
"{ECC27E62-C2E4-3A7A-87CA-4D8B4B3753CC}" = CCC Help French
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F48BE301-EC78-4686-B580-EE4934558798}" = Broadcom 2070 Bluetooth 3.0
"{F5C372A1-40F3-49DA-A049-F75CDE9177DC}" = Pinnacle Studio Ultimate Collection Plugins
"{F956C0BB-D2FA-4BA5-80D7-AC08E7CD611B}" = Garmin City Navigator Europe NT 2014.30 Update
"7-Zip" = 7-Zip 9.20
"98157A226B40B173301B0F53C8E98C47805D5152" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0)
"AbsoluteShield File Shredder_is1" = AbsoluteShield File Shredder
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Audacity_is1" = Audacity 2.0.3
"avast" = avast! Free Antivirus
"Bezdrátový adaptér Broadcom 802.11 LAN" = Bezdrátový adaptér Broadcom 802.11 LAN
"BitTorrent" = BitTorrent
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 9.8.0.1599
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"CrystalDiskInfo_is1" = CrystalDiskInfo 6.0.2
"CzechRep_by_Dave_Luv" = CzechRep_by_Dave_Luv
"Daniusoft MP3 WAV Converter_is1" = Daniusoft MP3 WAV Converter(Build 2.3.1.0)
"DVD Shrink_is1" = DVD Shrink 3.2
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Free Video Flip and Rotate_is1" = Free Video Flip and Rotate version 2.1.5.1212
"Free Video to MP3 Converter_is1" = Free Video to MP3 Converter version 5.0.19.1015
"HD Tune_is1" = HD Tune 2.55
"ie8" = Windows Internet Explorer 8
"InstallShield_{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.6.0
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 26.0 (x86 cs)" = Mozilla Firefox 26.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mpeg Video Wizard DVD 5.0" = MPEG Video Wizard DVD 5.0.1.103 (09/2011)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Native Instruments Traktor DJ Mixer v1.0" = Native Instruments Traktor DJ Mixer v1.0
"PakkISO_is1" = PakkISO 0.4
"Posel Smrti 2" = Posel Smrti 2
"Posel Smrti 2_is1" = Posel Smrti 2
"Recuva" = Recuva
"Speccy" = Speccy
"ST6UNST #1" = Vypnutí PC
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Trapcode 3DStroke Studio" = Trapcode 3DStroke Studio
"Trapcode Particular Studio" = Trapcode Particular Studio
"Trapcode Shine Studio" = Trapcode Shine Studio
"Wallperizer" = Wallperizer
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR 4.20 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wondershare Video Converter Ultimate_is1" = Wondershare Video Converter Ultimate(Build 6.0.3.2)
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"ZonerPhotoStudio15_CZ_is1" = Zoner Photo Studio 15
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 22.12.2013 10:18:03 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace mapsource.exe, verze 6.15.7.0, chybující modul
mapsource.exe, verze 6.15.7.0, adresa chyby 0x006b8867.
Error - 22.12.2013 10:18:42 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace mapsource.exe, verze 6.15.7.0, chybující modul
mapsource.exe, verze 6.15.7.0, adresa chyby 0x006b8867.
Error - 22.12.2013 10:18:44 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1001
Description = Chybný blok 1503939921
Error - 25.12.2013 16:57:05 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 25.12.2013 16:57:37 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 25.12.2013 16:58:32 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 26.12.2013 16:44:10 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 11.0.5721.5145, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 26.12.2013 16:44:11 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 11.0.5721.5145, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 26.12.2013 17:48:16 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace traktordjmixer.exe, verze 1.0.0.1, chybující modul
traktordjmixer.exe, verze 1.0.0.1, adresa chyby 0x000773e3.
Error - 30.12.2013 16:55:39 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace Heroes3.exe, verze 3.2.0.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
[ System Events ]
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba WD SmartWare Background Service byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Služba brány aplikačního rozhraní byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Adaptér výkonu služby WMI byla neočekávaně ukončena. Tento
stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba LMIGuardianSvc byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Audio Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba WD SmartWare Drive Manager byla neočekávaně ukončena. Tento
stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba StarWind AE Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Java Quick Starter byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba LogMeIn Hamachi Tunneling Engine byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:27:40 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7000
Description = Služba aswFsBlk neuspěla při spuštění v důsledku následující chyby:
%%2
< End of report >
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Adrian a Janička\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,75 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 54,37% Memory free
3,60 Gb Paging File | 2,85 Gb Available in Paging File | 79,35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 76,02 Gb Free Space | 25,50% Space Free | Partition Type: NTFS
Computer Name: XY-45B23A6D5226 | User Name: Adrian a Janička | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Deluge\Deluge-Python\deluged.exe" = C:\Program Files\Deluge\Deluge-Python\deluged.exe:*:Disabled:deluged -- ()
"C:\Program Files\BitTorrent\BitTorrent.exe" = C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent Inc.)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)
"C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe" = C:\Documents and Settings\Adrian a Janička\Plocha\Torent\BitTorrent3.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Mozilla Firefox\plugin-container.exe" = C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox -- (Mozilla Corporation)
"C:\Program Files\Java\jre7\bin\javaw.exe" = C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)
"C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe" = C:\Documents and Settings\Adrian a Janička\Dokumenty\BlackMirror2\SkypePortable\App\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager -- (Pinnacle Systems)
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio -- (Pinnacle Systems)
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe" = C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi -- (Pinnacle Systems)
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe" = C:\Documents and Settings\Adrian a Janička\Plocha\HOMM3\Heroes of Might and Magic III Complete\Heroes3.exe:*:Enabled:Heroes of Might and Magic® III -- (The 3DO Company)
"C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" = C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi -- (LogMeIn Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{19BE540F-2A2E-CF4C-F601-5AC5FF9FEB90}" = CCC Help Japanese
"{1DD56C9F-E323-8D7C-EAA4-09EC1085464F}" = CCC Help Swedish
"{1E61538A-D482-4252-BBB7-D892FD52FC50}" = Grabster AV 400
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{232DB76D-4751-41A9-9EC2-CDC0DAC1FAB6}" = WD SmartWare
"{24385EE9-2701-721B-EB46-27D59DED2297}" = Skins
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 45
"{2AD994D1-8C1F-E468-175C-785635E658BC}" = CCC Help Norwegian
"{2D50752B-F9D7-81FC-D030-4F06156C8133}" = CCC Help English
"{2F632C07-3A47-E11F-06F8-E2AF237AF4EE}" = CCC Help Polish
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = HP Webcam Driver
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{42358881-F906-264B-CE0D-11E597781C0D}" = ATI Catalyst Install Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F0C7CCF-5666-474B-B02E-AC514A95EC93}" = NVIDIA GAME System Software 2.8.1
"{4F2CE68F-EDBB-4592-BF07-5AC930A51029}" = Nero 7 Premium
"{5183F49F-B76D-D44E-904D-1713B978F1F7}" = Catalyst Control Center Localization All
"{56203A94-9AA5-5AA6-2F12-D73DC8CFED21}" = CCC Help Czech
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6048DAB7-39F5-10A9-D07F-578CA95ACB51}" = CCC Help Hungarian
"{641C323C-EB78-F52F-3A50-C6203F97EAE0}" = CCC Help Korean
"{647BB978-2876-487B-9B0E-FDB73F0EA4A2}" = Garmin Communicator Plugin
"{692986FB-5943-E25B-1C48-EEF3132042D4}" = ccc-utility
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{707EA61C-4294-39AE-630C-2140C98EFB17}" = CCC Help Spanish
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71754905-3493-CE5E-5BCA-46AE6B07EF02}" = CCC Help German
"{71C5EA91-C62B-03F3-070D-3E430360327C}" = CCC Help Italian
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{797FCA5B-246E-4DE3-D1BB-7CC5B94A8EAF}" = CCC Help Chinese Traditional
"{7FE84B67-1C14-42E1-8749-101A0B0B7B34}" = ATLAS Czech 2013 NT
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F0475A-A906-5925-17D7-DD35728FB6F0}" = CCC Help Dutch
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{99A016E1-0840-43AE-8434-A18CEDFA833B}" = LogMeIn Hamachi
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FD45917-95E6-449D-ACC9-01E634A34CBD}_is1" = MPEG Video Wizard DVD 5.0.1.103 (09/2011)
"{A1EB743B-6F98-27E0-0FEF-7989687169A1}" = CCC Help Greek
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3D4DEE3-2CFA-F53A-E9E8-73EDFEA3D382}" = CCC Help Turkish
"{AADD1C8F-D59F-4D55-A726-768C71A205A8}" = Pinnacle Studio 14
"{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}" = Garmin USB Drivers
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Czech
"{B320AEBD-B296-A177-1B98-B622F60BAC3E}" = CCC Help Danish
"{B8B19BC5-7288-20EE-1EE0-204C7270B6E5}" = Catalyst Control Center InstallProxy
"{BCEA752C-EA6A-880A-855B-135B3B3ECE85}" = CCC Help Chinese Standard
"{BFF7D162-0705-B71D-2AF7-17D602BD6588}" = CCC Help Finnish
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4D26D60-7B43-4CE9-AE19-A380D9DF126B}" = Garmin MapSource
"{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DA9660B6-F1DD-41D3-BA3C-E7F7BF9921B2}" = Catalyst Control Center - Branding
"{E39CFEE2-008E-459A-ADFD-60852A445D48}_is1" = Pazera Free 3GP to AVI Converter 1.4
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4D217D2-8C82-B39A-06B6-5DAACF67BA5B}" = ccc-core-static
"{E74286A4-764A-3063-A471-9EFA8DC2F9AD}" = CCC Help Thai
"{EC4BBC09-D38F-01A7-33E3-472C599E66E4}" = CCC Help Portuguese
"{ECB6004B-190C-40AB-6B12-DF6DE7C77608}" = CCC Help Russian
"{ECC27E62-C2E4-3A7A-87CA-4D8B4B3753CC}" = CCC Help French
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F48BE301-EC78-4686-B580-EE4934558798}" = Broadcom 2070 Bluetooth 3.0
"{F5C372A1-40F3-49DA-A049-F75CDE9177DC}" = Pinnacle Studio Ultimate Collection Plugins
"{F956C0BB-D2FA-4BA5-80D7-AC08E7CD611B}" = Garmin City Navigator Europe NT 2014.30 Update
"7-Zip" = 7-Zip 9.20
"98157A226B40B173301B0F53C8E98C47805D5152" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0)
"AbsoluteShield File Shredder_is1" = AbsoluteShield File Shredder
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Audacity_is1" = Audacity 2.0.3
"avast" = avast! Free Antivirus
"Bezdrátový adaptér Broadcom 802.11 LAN" = Bezdrátový adaptér Broadcom 802.11 LAN
"BitTorrent" = BitTorrent
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 9.8.0.1599
"CCleaner" = CCleaner
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"CrystalDiskInfo_is1" = CrystalDiskInfo 6.0.2
"CzechRep_by_Dave_Luv" = CzechRep_by_Dave_Luv
"Daniusoft MP3 WAV Converter_is1" = Daniusoft MP3 WAV Converter(Build 2.3.1.0)
"DVD Shrink_is1" = DVD Shrink 3.2
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Free Video Flip and Rotate_is1" = Free Video Flip and Rotate version 2.1.5.1212
"Free Video to MP3 Converter_is1" = Free Video to MP3 Converter version 5.0.19.1015
"HD Tune_is1" = HD Tune 2.55
"ie8" = Windows Internet Explorer 8
"InstallShield_{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.6.0
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 26.0 (x86 cs)" = Mozilla Firefox 26.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mpeg Video Wizard DVD 5.0" = MPEG Video Wizard DVD 5.0.1.103 (09/2011)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Native Instruments Traktor DJ Mixer v1.0" = Native Instruments Traktor DJ Mixer v1.0
"PakkISO_is1" = PakkISO 0.4
"Posel Smrti 2" = Posel Smrti 2
"Posel Smrti 2_is1" = Posel Smrti 2
"Recuva" = Recuva
"Speccy" = Speccy
"ST6UNST #1" = Vypnutí PC
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Trapcode 3DStroke Studio" = Trapcode 3DStroke Studio
"Trapcode Particular Studio" = Trapcode Particular Studio
"Trapcode Shine Studio" = Trapcode Shine Studio
"Wallperizer" = Wallperizer
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR 4.20 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wondershare Video Converter Ultimate_is1" = Wondershare Video Converter Ultimate(Build 6.0.3.2)
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"ZonerPhotoStudio15_CZ_is1" = Zoner Photo Studio 15
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 22.12.2013 10:18:03 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace mapsource.exe, verze 6.15.7.0, chybující modul
mapsource.exe, verze 6.15.7.0, adresa chyby 0x006b8867.
Error - 22.12.2013 10:18:42 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace mapsource.exe, verze 6.15.7.0, chybující modul
mapsource.exe, verze 6.15.7.0, adresa chyby 0x006b8867.
Error - 22.12.2013 10:18:44 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1001
Description = Chybný blok 1503939921
Error - 25.12.2013 16:57:05 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 25.12.2013 16:57:37 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 25.12.2013 16:58:32 | Computer Name = XY-45B23A6D5226 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 youtubesave.exe, P2 1.0.0.0, P3 496cc2be, P4
mscorlib, P5 2.0.0.0, P6 5174dd4c, P7 361d, P8 34, P9 system.argumentexception,
P10 NIL.
Error - 26.12.2013 16:44:10 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 11.0.5721.5145, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 26.12.2013 16:44:11 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 11.0.5721.5145, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 26.12.2013 17:48:16 | Computer Name = XY-45B23A6D5226 | Source = Application Error | ID = 1000
Description = Chybující aplikace traktordjmixer.exe, verze 1.0.0.1, chybující modul
traktordjmixer.exe, verze 1.0.0.1, adresa chyby 0x000773e3.
Error - 30.12.2013 16:55:39 | Computer Name = XY-45B23A6D5226 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace Heroes3.exe, verze 3.2.0.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
[ System Events ]
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba WD SmartWare Background Service byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Služba brány aplikačního rozhraní byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Adaptér výkonu služby WMI byla neočekávaně ukončena. Tento
stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba LMIGuardianSvc byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Audio Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba WD SmartWare Drive Manager byla neočekávaně ukončena. Tento
stav nastal již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba StarWind AE Service byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba Java Quick Starter byla neočekávaně ukončena. Tento stav nastal
již 1krát.
Error - 31.12.2013 14:20:56 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7034
Description = Služba LogMeIn Hamachi Tunneling Engine byla neočekávaně ukončena.
Tento stav nastal již 1krát.
Error - 31.12.2013 14:27:40 | Computer Name = XY-45B23A6D5226 | Source = Service Control Manager | ID = 7000
Description = Služba aswFsBlk neuspěla při spuštění v důsledku následující chyby:
%%2
< End of report >
Re: Moc prosím o kontrolu
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne Znovu spustte OTLDo spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)
Kód: Vybrat vše
:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]
:services
JavaQuickStarterService
:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
:otl
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
[2013.12.11 23:22:42 | 000,013,570 | ---- | M] () (No name found) -- C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi
CHR - Extension: Shopping Suggestion = C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll\1.0.0_0\
O3 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..\Toolbar\WebBrowser: (no name) - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No CLSID value found.
O15 - HKU\S-1-5-21-1960408961-789336058-682003330-1004\..Trusted Domains: localhost ([]http in Internet)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
[2 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[3 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Po restartu se objevi novy log, ten sem dejte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
All processes killed
========== COMMANDS ==========
[EMPTYTEMP]
User: Adrian a Janička
->Temp folder emptied: 339 bytes
->Temporary Internet Files folder emptied: 6217094 bytes
->FireFox cache emptied: 15857487 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 492 bytes
User: Adrian a JaniŔka
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 319488 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 21,00 mb
[EMPTYFLASH]
User: Adrian a Janička
->Flash cache emptied: 0 bytes
User: Adrian a JaniŔka
User: All Users
User: Default User
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0,00 mb
Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi moved successfully.
C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll\1.0.0_0 folder moved successfully.
Registry value HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65}\ not found.
Registry key HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP434.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP45B.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI66.tmp deleted successfully.
C:\WINDOWS\Installer\MSI68.tmp deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}\ deleted successfully.
OTL by OldTimer - Version 3.2.69.0 log created on 01012014_130123
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\BtwEventTrace_5_6_0_4500.etl scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
========== COMMANDS ==========
[EMPTYTEMP]
User: Adrian a Janička
->Temp folder emptied: 339 bytes
->Temporary Internet Files folder emptied: 6217094 bytes
->FireFox cache emptied: 15857487 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 492 bytes
User: Adrian a JaniŔka
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 319488 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 21,00 mb
[EMPTYFLASH]
User: Adrian a Janička
->Flash cache emptied: 0 bytes
User: Adrian a JaniŔka
User: All Users
User: Default User
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0,00 mb
Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
C:\Documents and Settings\Adrian a Janička\Data aplikací\Mozilla\Firefox\Profiles\gj27obtq.default\extensions\{D394D188-BAC7-4e03-8FAF-389A4D7EC6F4}.xpi moved successfully.
C:\Documents and Settings\Adrian a Janička\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejbpjlaagejfakeobljhgplbgklgemll\1.0.0_0 folder moved successfully.
Registry value HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34AB3C4C-DA1A-4067-96F4-31452C7CFE65}\ not found.
Registry key HKEY_USERS\S-1-5-21-1960408961-789336058-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost\ deleted successfully.
Starting removal of ActiveX control {31435657-9980-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\wvc1dmo.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{31435657-9980-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{31435657-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{31435657-9980-0010-8000-00AA00389B71}\ not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP434.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP45B.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI66.tmp deleted successfully.
C:\WINDOWS\Installer\MSI68.tmp deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}\ deleted successfully.
OTL by OldTimer - Version 3.2.69.0 log created on 01012014_130123
Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\BtwEventTrace_5_6_0_4500.etl scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Re: Moc prosím o kontrolu
Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat. vyosek píše:
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.
Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustteKliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat
Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
Defragmentujte disk(y)Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.
Pak napiste, jak je na tom pc.Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Moc prosím o kontrolu
CF jsem prejmenoval ale on se asi tak 10 spoustel a zacal rozbalovat. Vzdy se rozbalil a zacal znovu, tak jsem ho pres spravce uloh vypnul.
Re: Moc prosím o kontrolu
Dobra, CF nechte tak a pokracujte dalsim krokem
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Přispějete na provoz fóra?
