VIRY.CZ

LOG zde

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Mirek [Práva správce]
Mód : Kontrola -- Datum : 04/07/2014 21:40:58
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 1 ¤¤¤
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 2 ¤¤¤
[FF][PUP] nahd6ha2.default : 7Go Games
[FF][PUP] nahd6ha2.default : Speed Analysis 3

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : PUP ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST380011A +++++
--- User ---
[MBR] b7945cbdfa4063a1ef66afd0266919bc
[BSP] 9b49c5994575dcd2192909cefe3ec50e : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 76308 MB
User = LL1 ... OK!
User = LL2 ... OK!

Znovu spustte RogueKiller (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

LOG 1
RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Mirek [Práva správce]
Mód : Odebrat -- Datum : 04/08/2014 10:05:31
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 1 ¤¤¤
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 2 ¤¤¤
[FF][PUP] nahd6ha2.default : 7Go Games
[FF][PUP] nahd6ha2.default : Speed Analysis 3

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : PUP ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST380011A +++++
--- User ---
[MBR] b7945cbdfa4063a1ef66afd0266919bc
[BSP] 9b49c5994575dcd2192909cefe3ec50e : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 76308 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_04082014_100530.txt >>
RKreport[0]_S_04072014_214058.txt

LOG 2

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Mirek [Práva správce]
Mód : Oprava HOSTS -- Datum : 04/08/2014 10:07:49
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : PUP ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[0]_H_04082014_100749.txt >>
RKreport[0]_D_04082014_100530.txt;RKreport[0]_S_04072014_214058.txt

Dejte novy log z RSIT

LOG:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Mirek at 2014-04-09 10:20:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 50 GB (65%) free of 76 GB
Total RAM: 1536 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:20:16, on 9.4.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Mirek\Plocha\Last-World\Last-World.exe
C:\Program Files\Opera\20.0.1387.91_0\opera.exe
C:\Program Files\Opera\20.0.1387.91_0\opera_crashreporter.exe
C:\Program Files\Opera\20.0.1387.91_0\opera.exe
C:\Program Files\Opera\20.0.1387.91_0\opera.exe
C:\Program Files\Opera\20.0.1387.91_0\opera.exe
C:\Documents and Settings\Mirek\Dokumenty\RSIT (1).exe
C:\Program Files\trend micro\Mirek.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=U223
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.o2pripojse.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Printsrv] c:\Windows\System32\Printing_Admin_Scripts\en-US\driverupd.vbs
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [Aeria Ignite] "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: BlackBerry Device Manager (Blackberry Device Manager) - Research In Motion Limited - C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 8351 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CmPCIaudio"=RunDll32 CMICNFG3.cpl,CMICtrlWnd []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2013-01-31 15517472]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2013-01-31 1982312]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"RIMBBLaunchAgent.exe"=C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2013-01-17 267792]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Printsrv"=c:\Windows\System32\Printing_Admin_Scripts\en-US\driverupd.vbs [2013-12-04 559]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-10-14 2793304]
"Aeria Ignite"=C:\Program Files\Aeria Games\Ignite\aeriaignite.exe [2013-06-06 1925656]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2014-02-26 3814736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-01-24 18707048]
"Logitech Vid"=C:\Program Files\Logitech\Logitech Vid\vid.exe [2009-07-16 5458704]
"Akamai NetSession Interface"=C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe [2014-03-06 4672920]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-03-18 4613912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Java\jre7\bin\javaw.exe"="C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe"="C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe:*:Enabled:BlackBerry Desktop Software"
"D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe"="D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant"
"C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module"
"C:\Documents and Settings\Mirek\Plocha\Last-World\lw.bin"="C:\Documents and Settings\Mirek\Plocha\Last-World\lw.bin:*:Enabled:lw"
"C:\Documents and Settings\Mirek\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Mirek\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\GameforgeLive\gfl_client.exe"="C:\Program Files\GameforgeLive\gfl_client.exe:*:Enabled:Gameforge Live"
"C:\Program Files\Logitech\Logitech Vid\Vid.exe"="C:\Program Files\Logitech\Logitech Vid\Vid.exe:*:Enabled:Logitech Vid"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe"="C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"
"C:\Program Files\MondialMt2\mondialmt2.exe"="C:\Program Files\MondialMt2\mondialmt2.exe:*:Enabled:mondialmt2"
"C:\Program Files\QuadCoreM2\pack\core.bin"="C:\Program Files\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\Documents and Settings\Mirek\Plocha\The-Lost-Island\The-Lost-Island\metin2.bin"="C:\Documents and Settings\Mirek\Plocha\The-Lost-Island\The-Lost-Island\metin2.bin:*:Enabled:metin2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.xvid"=xvidvfw.dll
"vidc.lags"=lagarith.dll
"msacm.ac3filter"=ac3filter.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-04-07 17:39:42 ----D---- C:\AdwCleaner
2014-04-06 14:37:11 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Malwarebytes
2014-04-06 13:57:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-04-06 10:51:17 ----D---- C:\Program Files\trend micro
2014-04-06 10:51:16 ----D---- C:\rsit
2014-04-06 00:59:45 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-06 00:46:15 ----SHD---- C:\Config.Msi
2014-04-05 16:01:13 ----D---- C:\Documents and Settings\Mirek\Data aplikací\.minecraft
2014-04-02 16:26:13 ----AH---- C:\WINDOWS\system32\hamachi.sys
2014-04-02 16:25:43 ----D---- C:\Program Files\LogMeIn Hamachi
2014-04-01 22:32:16 ----D---- C:\Program Files\CCleaner
2014-04-01 22:15:45 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Apple Computer
2014-04-01 22:13:58 ----D---- C:\Program Files\Apple Software Update
2014-04-01 22:13:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2014-04-01 21:56:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2014-04-01 15:51:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2014-03-31 01:07:40 ----D---- C:\Program Files\Microsoft.NET
2014-03-27 04:02:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-27 00:47:02 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-03-23 22:26:49 ----D---- C:\Program Files\GIMP 2
2014-03-21 00:58:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Caphyon
2014-03-21 00:52:55 ----D---- C:\Program Files\QuadCoreM2
2014-03-21 00:47:42 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Quadcore Games
2014-03-20 20:03:19 ----D---- C:\Program Files\MondialMt2
2014-03-12 04:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-12 04:02:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$

======List of files/folders modified in the last 1 month======

2014-04-09 10:15:36 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Skype
2014-04-09 10:02:52 ----D---- C:\WINDOWS\Prefetch
2014-04-08 16:44:07 ----D---- C:\WINDOWS\system32
2014-04-08 15:23:34 ----D---- C:\WINDOWS
2014-04-08 12:02:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-04-07 21:40:54 ----D---- C:\WINDOWS\system32\drivers
2014-04-07 21:40:26 ----D---- C:\Program Files\Opera
2014-04-07 18:06:49 ----D---- C:\Program Files\NosTale(CZ)
2014-04-07 17:46:20 ----D---- C:\WINDOWS\Temp
2014-04-07 17:44:47 ----D---- C:\WINDOWS\system32\CatRoot2
2014-04-07 17:39:21 ----RD---- C:\Program Files
2014-04-07 17:38:42 ----SHD---- C:\System Volume Information
2014-04-07 17:38:42 ----D---- C:\WINDOWS\system32\Restore
2014-04-07 11:19:44 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Opera Software
2014-04-07 09:18:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2014-04-07 09:17:44 ----HD---- C:\WINDOWS\inf
2014-04-06 19:11:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2014-04-06 11:36:08 ----D---- C:\WINDOWS\Minidump
2014-04-06 06:25:01 ----SHD---- C:\WINDOWS\Installer
2014-04-06 01:16:04 ----D---- C:\Program Files\Google
2014-04-06 01:15:43 ----SD---- C:\WINDOWS\Tasks
2014-04-06 00:47:54 ----D---- C:\Documents and Settings\Mirek\Data aplikací\Opera
2014-04-06 00:46:27 ----D---- C:\Program Files\Common Files
2014-04-06 00:46:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2014-04-02 03:50:29 ----D---- C:\WINDOWS\Microsoft.NET
2014-04-02 03:50:28 ----RSD---- C:\WINDOWS\assembly
2014-04-02 03:36:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-02 03:36:35 ----D---- C:\WINDOWS\WinSxS
2014-04-01 22:34:00 ----D---- C:\WINDOWS\Debug
2014-03-31 01:19:47 ----D---- C:\WINDOWS\system32\cs-CZ
2014-03-31 01:07:57 ----D---- C:\WINDOWS\system32\en-US
2014-03-31 00:57:41 ----D---- C:\Documents and Settings\Mirek\Data aplikací\vlc
2014-03-27 04:02:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-03-21 00:48:32 ----D---- C:\Documents and Settings\Mirek\Data aplikací\uTorrent
2014-03-19 00:35:55 ----D---- C:\WINDOWS\system32\MRT
2014-03-19 00:32:56 ----A---- C:\WINDOWS\system32\MRT.exe
2014-03-12 04:02:54 ----D---- C:\Program Files\Internet Explorer
2014-03-12 04:01:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2014-03-11 21:45:28 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 tidnet;TID NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\tidnet.sys [2009-09-15 19200]
R3 cmuda3;C-Media PCI Audio Interface; C:\WINDOWS\system32\drivers\cmudax3.sys [2009-05-22 1872320]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2009-10-07 25752]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-01-31 12648960]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial.sys [2012-12-10 35840]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 zumbus;Zune Bus Enumerator Driver; C:\WINDOWS\system32\DRIVERS\zumbus.sys []
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgandnetdiag.sys []
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\WINDOWS\system32\DRIVERS\lgandnetmodem.sys []
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\lgandnetndis.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys [2009-12-15 24448]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-12-15 102528]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [2009-12-15 100736]
S3 LVRS;Logitech RightSound Filter Driver; C:\WINDOWS\system32\DRIVERS\lvrs.sys [2009-05-01 265496]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys [2009-05-01 13976]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-05-01 2687512]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\WINDOWS\System32\Drivers\RimUsb.sys [2013-01-03 67072]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbser;Sony Ericsson USB Serial Port; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WinUSB;WinUSB Driver; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2014-02-26 1678672]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-12-18 182696]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-02-26 375056]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 154136]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2013-01-31 156448]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 Blackberry Device Manager;BlackBerry Device Manager; C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2013-01-18 577536]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-06 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-01-31 1259296]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-24 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-06 257928]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-06 116648]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Pokud nepouzivate, doporucuji odinstalovat Seznam Software a Akamai

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

OTL logfile created on: 9.4.2014 10:35:56 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Mirek\Dokumenty
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,75 Gb Available Physical Memory | 49,99% Memory free
3,23 Gb Paging File | 2,64 Gb Available in Paging File | 81,59% Paging File free
Paging file location(s): C:\pagefile.sys 1920 3840 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 48,40 Gb Free Space | 64,95% Space Free | Partition Type: NTFS

Computer Name: MIREK-48046E266 | User Name: Mirek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.04.09 10:34:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mirek\Dokumenty\OTL.exe
PRC - [2014.04.02 13:19:51 | 001,380,704 | ---- | M] () -- C:\Program Files\Opera\20.0.1387.91_0\opera_crashreporter.exe
PRC - [2014.04.02 13:19:50 | 046,143,840 | ---- | M] (Opera Software) -- C:\Program Files\Opera\20.0.1387.91_0\opera.exe
PRC - [2014.03.18 20:57:00 | 004,613,912 | ---- | M] (Piriform Ltd) -- C:\Program Files\CCleaner\CCleaner.exe
PRC - [2014.03.06 07:18:54 | 004,672,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe
PRC - [2014.02.26 19:57:30 | 001,678,672 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2014.02.26 09:50:00 | 000,375,056 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
PRC - [2013.12.18 22:05:43 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.01.18 17:10:18 | 000,577,536 | ---- | M] (Research In Motion Limited) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
PRC - [2013.01.17 16:08:26 | 000,267,792 | ---- | M] (Research In Motion Limited) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2012.11.17 19:05:00 | 004,121,088 | ---- | M] () -- C:\Documents and Settings\Mirek\Plocha\Last-World\Last-World.exe
PRC - [2009.10.07 02:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2014.04.02 13:19:52 | 000,895,328 | ---- | M] () -- C:\Program Files\Opera\20.0.1387.91_0\ffmpegsumo.dll
MOD - [2014.04.02 13:19:51 | 001,380,704 | ---- | M] () -- C:\Program Files\Opera\20.0.1387.91_0\opera_crashreporter.exe
MOD - [2014.04.02 03:41:29 | 001,801,728 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\d116eda30a35c490e59221b0ebac6fcd\System.Xaml.ni.dll
MOD - [2014.04.02 03:31:14 | 000,755,712 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\67939f4c3d18712bacf74bfc8c75ab40\PresentationFramework.Luna.ni.dll
MOD - [2014.04.02 03:31:11 | 018,003,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9aafa1869d136f77bc483f25d0795229\PresentationFramework.ni.dll
MOD - [2014.04.02 03:30:30 | 011,451,904 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\b307821c69c09ed0a2ee47122fdcdd4d\PresentationCore.ni.dll
MOD - [2014.04.02 03:30:00 | 003,858,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\49605239a73cd565e3a08048a31b442e\WindowsBase.ni.dll
MOD - [2014.04.02 03:18:21 | 001,014,272 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\991c4e11f571a4074b9c4a5841222338\System.Configuration.ni.dll
MOD - [2014.04.02 03:17:41 | 005,628,928 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\850fa7110c7423c324762c1ad3130219\System.Xml.ni.dll
MOD - [2014.04.02 03:16:48 | 009,099,776 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\4c906eb82e6f56aea01b2a7291fab7ea\System.ni.dll
MOD - [2014.04.02 03:16:29 | 014,416,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\4e62d1d9b7dd2c2d14915abb73c22d50\mscorlib.ni.dll
MOD - [2013.12.19 18:36:50 | 000,039,192 | ---- | M] () -- C:\Program Files\CCleaner\branding.dll
MOD - [2013.01.31 13:22:47 | 001,564,008 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nview\nView.dll
MOD - [2013.01.31 13:22:47 | 000,357,224 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nview\nvShell.dll
MOD - [2012.11.17 19:05:00 | 004,121,088 | ---- | M] () -- C:\Documents and Settings\Mirek\Plocha\Last-World\Last-World.exe
MOD - [2012.07.01 20:34:04 | 000,344,064 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2008.04.14 08:51:48 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll

========== Services (SafeList) ==========

SRV - [2014.04.06 01:09:42 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.02.26 19:57:30 | 001,678,672 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014.02.26 09:50:00 | 000,375,056 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013.12.18 22:05:43 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.01.31 13:22:47 | 001,259,296 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.01.24 13:24:06 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.01.18 17:10:18 | 000,577,536 | ---- | M] (Research In Motion Limited) [On_Demand | Running] -- C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe -- (Blackberry Device Manager)
SRV - [2009.10.07 02:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Auto | Stopped] -- system32\DRIVERS\zumbus.sys -- (zumbus)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgandnetndis.sys -- (andnetndis)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgandnetmodem.sys -- (ANDNetModem)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\lgandnetdiag.sys -- (AndNetDiag)
DRV - [2009.12.15 14:05:42 | 000,102,528 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.12.15 14:05:42 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009.12.15 14:05:42 | 000,024,448 | ---- | M] (Huawei Tech. Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewdcsc.sys -- (Huawei)
DRV - [2009.10.07 02:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2009.09.15 11:51:04 | 000,019,200 | ---- | M] (Telefónica I+D) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tidnet.sys -- (tidnet)
DRV - [2009.05.22 09:03:00 | 001,872,320 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmudax3.sys -- (cmuda3)
DRV - [2009.05.01 01:01:34 | 000,265,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2009.05.01 00:55:56 | 002,687,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI)
DRV - [2009.05.01 00:55:32 | 000,013,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006.11.02 08:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=U223
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\fi, = http://www.firmy.cz/phr/%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\ma, = http://www.mapy.cz/?sourceid=quicksearch_6826&query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\se, = http://search.seznam.cz/?sourceid=quicksearch_6826&q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\vi, = http://videa.seznam.cz/?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\zb, = http://www.zbozi.cz/?sourceid=quicksearch_6826&q=%s
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=U223DF& ... -SearchBox
IE - HKCU\..\SearchScopes\{07F767DC-28E3-4CEB-BBED-0A5E009560BE}: "URL" = http://www.search.ask.com/web?p2=%5EB7N ... 6spr%253Da
IE - HKCU\..\SearchScopes\01F1924D31EEDE1A0469E9BAD1CC9371: "URL" = http://www.mapy.cz/?sourceid=quicksearc ... earchTerms}
IE - HKCU\..\SearchScopes\3E10EE804B4C439FA0BA4D096E4F8095: "URL" = http://search.seznam.cz/?sourceid=quick ... earchTerms}
IE - HKCU\..\SearchScopes\42D63FF8BFB7AB6B9C2DF4844399ABC7: "URL" = http://www.firmy.cz/phr/{searchTerms}
IE - HKCU\..\SearchScopes\5AC105D2A9A2A05FA12D806B02ED4537: "URL" = http://videa.seznam.cz/?q={searchTerms}
IE - HKCU\..\SearchScopes\B44E49C5D7DF4546A0829827726A3B99: "URL" = http://search.live.com/results.aspx?q={ ... orm=IE8SRC
IE - HKCU\..\SearchScopes\B6B7D16974EC55DAEEF80EDD99496F77: "URL" = http://www.zbozi.cz/?sourceid=quicksear ... earchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Seznam"
FF - prefs.js..browser.search.selectedEngine: "Seznam"
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/?clid=6826"
FF - prefs.js..extensions.enabledAddons: yasearch%40yandex.ru:7.9.1
FF - prefs.js..extensions.enabledAddons: vb%40yandex.ru:2.7.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

[2013.09.01 14:00:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions
[2013.09.01 14:00:39 | 000,000,000 | ---D | M] (7Go Games) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\7go@7go.com
[2013.09.01 14:00:40 | 000,000,000 | ---D | M] (Speed Analysis 3) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com
[2013.09.01 15:11:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\extensions
[2014.04.06 01:09:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions
[2014.04.06 01:09:56 | 000,000,000 | ---D | M] (Đ’Ń–Đ·ŃĐ°Đ»ŃŚĐ˝Ń‹ŃŹ Đ·Đ°ĐşĐ»Đ°Đ´ĐşŃ–) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru
[2014.04.06 01:09:55 | 000,000,000 | ---D | M] (ĐšĐ°ĐĽĐżĐ°Đ˝ĐµĐ˝Ń‚ "ĐĐ»ĐµĐĽĐµĐ˝Ń‚Ń‹ ĐŻĐ˝Đ´ĐµĐşŃĐ°") -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru
[2013.06.26 19:40:28 | 000,228,503 | ---- | M] () (No name found) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\extensions\ftd@ftd.com.xpi
[2013.06.30 10:44:04 | 000,239,491 | ---- | M] () (No name found) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\extensions\trtv3@trtv.com.xpi
[2014.01.07 00:24:27 | 000,002,015 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\firmy.cz-232427.xml
[2014.01.07 00:24:27 | 000,002,078 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\mapy.cz-232427.xml
[2014.01.07 00:24:27 | 000,002,148 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\seznam.cz-232427.xml
[2014.01.07 00:24:27 | 000,002,019 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\videa.seznam.cz-232427.xml
[2014.04.01 21:57:03 | 000,002,328 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yqs-barff-yandex.xml
[2014.01.07 00:24:27 | 000,000,610 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\zbozi.cz-232427.xml
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIREK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\NAHD6HA2.DEFAULT\EXTENSIONS\VB@YANDEX.RU
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIREK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\NAHD6HA2.DEFAULT\EXTENSIONS\YASEARCH@YANDEX.RU

========== Chrome ==========

CHR - default_search_provider: Yandex (Enabled)
CHR - default_search_provider: search_url = http://yandex.ru/yandsearch?clid=198520 ... earchTerms}
CHR - default_search_provider: suggest_url = http://suggest.yandex.ru/suggest-ff.cgi ... earchTerms},
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Dokumenty Google = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: VyhledĂˇvĂˇnĂ Google = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: PenÄ›Ĺľenka Google = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2014.04.08 10:07:48 | 000,000,741 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {434D452D-5637-006A-76A7-7A786E7484D7} - No CLSID value found.
O4 - HKLM..\Run: [Aeria Ignite] C:\Program Files\Aeria Games\Ignite\aeriaignite.exe (Aeria Games & Entertainment)
O4 - HKLM..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [Printsrv] C:\WINDOWS\system32\Printing_Admin_Scripts\en-US\driverupd.vbs ()
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKLM..\Run: [seznam-listicka-distribuce] C:\Program Files\Seznam.cz\distribution\szninstall.exe ()
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\vid.exe (Logitech Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 5083941734 (WUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95C55844-8A87-4378-B4D0-B9728E872613}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.07.28 21:45:55 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{6c6d9c18-f7c2-11e2-ad4b-000ea634ebf3}\Shell - "" = AutoRun
O33 - MountPoints2\{6c6d9c18-f7c2-11e2-ad4b-000ea634ebf3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f2bc3ca2-4e48-11e3-adb7-000ea634ebf3}\Shell - "" = AutoRun
O33 - MountPoints2\{f2bc3ca2-4e48-11e3-adb7-000ea634ebf3}\Shell\AutoRun\command - "" = E:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\LVCodec2.dll (Logitech Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.lags - C:\WINDOWS\System32\Lagarith.dll ( )
Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.04.09 10:34:41 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Mirek\Dokumenty\OTL.exe
[2014.04.07 21:37:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Plocha\RK_Quarantine
[2014.04.07 17:39:42 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.04.06 14:37:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Data aplikací\Malwarebytes
[2014.04.06 13:57:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2014.04.06 10:51:17 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.04.06 10:51:16 | 000,000,000 | ---D | C] -- C:\rsit
[2014.04.06 01:16:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
[2014.04.06 01:14:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Deployment
[2014.04.06 01:10:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Xpom
[2014.04.06 00:59:45 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014.04.06 00:46:15 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014.04.06 00:40:17 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014.04.06 00:39:31 | 003,089,568 | ---- | C] (Adobe Systems, Inc.) -- C:\Documents and Settings\Mirek\Dokumenty\adobe-flash-player_10.3.183.11.exe
[2014.04.05 16:01:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Data aplikací\.minecraft
[2014.04.04 13:56:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Plocha\hacky,programování a vše okolo
[2014.04.03 16:47:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Plocha\Last-World
[2014.04.02 16:26:13 | 000,026,176 | -H-- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\hamachi.sys
[2014.04.02 16:25:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\LogMeIn Hamachi
[2014.04.02 16:25:43 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2014.04.01 22:33:38 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mirek\Recent
[2014.04.01 22:32:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2014.04.01 22:32:16 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014.04.01 22:15:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Apple Computer
[2014.04.01 22:15:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Data aplikací\Apple Computer
[2014.04.01 22:14:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Apple
[2014.04.01 22:13:58 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2014.04.01 22:13:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2014.04.01 22:13:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Dokumenty\Stažené soubory
[2014.04.01 21:56:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Mozilla
[2014.04.01 21:56:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Mozilla
[2014.04.01 15:51:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\LogMeIn Hamachi
[2014.04.01 15:51:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\LogMeIn
[2014.04.01 15:51:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2014.04.01 15:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
[2014.04.01 04:26:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\PCHealth
[2014.03.31 01:07:40 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2014.03.31 00:51:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Plocha\The-Lost-Island
[2014.03.27 03:53:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Plocha\song
[2014.03.27 00:47:02 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xp_eos.exe
[2014.03.27 00:47:02 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xp_eos.exe
[2014.03.23 22:33:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\gtk-2.0
[2014.03.23 22:33:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\.thumbnails
[2014.03.23 22:31:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\fontconfig
[2014.03.23 22:31:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\.gimp-2.8
[2014.03.23 22:31:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\gegl-0.2
[2014.03.23 22:26:49 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2
[2014.03.21 00:58:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Caphyon
[2014.03.21 00:52:55 | 000,000,000 | ---D | C] -- C:\Program Files\QuadCoreM2
[2014.03.21 00:48:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\QuadcoreM2
[2014.03.21 00:47:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mirek\Data aplikací\Quadcore Games
[2014.03.20 20:05:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\MondialMt2
[2014.03.20 20:03:19 | 000,000,000 | ---D | C] -- C:\Program Files\MondialMt2
[16 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014.04.09 10:40:26 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.04.09 10:34:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mirek\Dokumenty\OTL.exe
[2014.04.09 10:25:00 | 000,000,938 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.04.09 10:20:06 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Mirek\Dokumenty\RSIT (1).exe
[2014.04.09 10:02:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.04.09 06:25:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.04.08 18:07:09 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Mirek\Dokumenty\RSIT.exe
[2014.04.08 16:44:01 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2014.04.08 15:00:06 | 000,000,216 | ---- | M] () -- C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.04.07 21:37:25 | 003,972,608 | ---- | M] () -- C:\Documents and Settings\Mirek\Plocha\RogueKiller.exe
[2014.04.07 17:45:09 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014.04.07 17:44:34 | 000,000,222 | ---- | M] () -- C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.04.07 17:44:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.04.07 17:39:31 | 001,426,178 | ---- | M] () -- C:\Documents and Settings\Mirek\Plocha\adwcleaner.exe
[2014.04.07 11:19:38 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Opera.lnk
[2014.04.06 01:16:34 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2014.04.06 01:09:42 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014.04.06 01:09:41 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014.04.06 00:39:34 | 003,089,568 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\Mirek\Dokumenty\adobe-flash-player_10.3.183.11.exe
[2014.04.05 16:00:38 | 000,675,988 | ---- | M] () -- C:\Documents and Settings\Mirek\Plocha\Minecraft.exe
[2014.04.03 16:45:46 | 1188,572,494 | ---- | M] () -- C:\Documents and Settings\Mirek\Dokumenty\last-world.zip
[2014.04.02 03:36:48 | 000,497,838 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.04.02 03:36:48 | 000,492,822 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.04.02 03:36:48 | 000,100,290 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.04.02 03:36:48 | 000,086,114 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.04.01 22:32:18 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2014.03.25 23:33:36 | 000,008,432 | ---- | M] () -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\recently-used.xbel
[2014.03.21 00:58:46 | 000,000,698 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\QuadcoreM2.lnk
[2014.03.18 20:08:56 | 000,308,737 | ---- | M] () -- C:\Documents and Settings\Mirek\Dokumenty\photo.htm
[2014.03.18 16:52:40 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014.03.17 16:41:04 | 000,034,816 | ---- | M] () -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.03.12 04:19:26 | 000,277,352 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.03.11 21:45:28 | 005,777,288 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[16 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.04.09 10:40:26 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.04.09 10:20:05 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Mirek\Dokumenty\RSIT (1).exe
[2014.04.08 18:07:04 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Mirek\Dokumenty\RSIT.exe
[2014.04.07 21:37:23 | 003,972,608 | ---- | C] () -- C:\Documents and Settings\Mirek\Plocha\RogueKiller.exe
[2014.04.07 17:39:30 | 001,426,178 | ---- | C] () -- C:\Documents and Settings\Mirek\Plocha\adwcleaner.exe
[2014.04.07 11:19:38 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Opera.lnk
[2014.04.07 11:19:38 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Opera.lnk
[2014.04.06 01:16:34 | 000,001,813 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2014.04.06 01:15:43 | 000,000,938 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.04.06 01:15:42 | 000,000,934 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.04.06 00:59:46 | 000,000,914 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.04.05 16:00:37 | 000,675,988 | ---- | C] () -- C:\Documents and Settings\Mirek\Plocha\Minecraft.exe
[2014.04.03 15:46:43 | 1188,572,494 | ---- | C] () -- C:\Documents and Settings\Mirek\Dokumenty\last-world.zip
[2014.04.02 03:52:34 | 000,296,878 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-1844237615-2052111302-839522115-1003-0.dat
[2014.04.01 22:32:18 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2014.04.01 22:14:00 | 000,001,830 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Apple Software Update.lnk
[2014.04.01 04:21:22 | 000,296,878 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2014.03.27 14:37:46 | 000,000,222 | ---- | C] () -- C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.27 14:37:45 | 000,000,216 | ---- | C] () -- C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.25 23:33:36 | 000,008,432 | ---- | C] () -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\recently-used.xbel
[2014.03.23 22:31:02 | 000,000,734 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\GIMP 2.lnk
[2014.03.21 00:58:45 | 000,000,698 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\QuadcoreM2.lnk
[2014.03.18 20:08:55 | 000,308,737 | ---- | C] () -- C:\Documents and Settings\Mirek\Dokumenty\photo.htm
[2014.02.11 18:02:09 | 000,082,289 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2014.01.07 00:22:36 | 000,005,033 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\mtbjfghn.xbe
[2013.12.06 18:17:08 | 000,279,955 | ---- | C] () -- C:\WINDOWS\libidn-11.dll
[2013.12.06 18:17:08 | 000,183,382 | ---- | C] () -- C:\WINDOWS\librtmp.dll
[2013.12.06 18:17:08 | 000,084,992 | ---- | C] () -- C:\WINDOWS\zlib1.dll
[2013.10.19 08:45:18 | 001,691,960 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.09.23 15:06:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Mirek\regbcm
[2013.09.23 15:06:13 | 000,001,094 | ---- | C] () -- C:\Documents and Settings\Mirek\Data aplikací\Minecraft TeamExtreme 1.6.2 Warez Launcher.lnk
[2013.08.31 14:18:49 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin
[2013.07.30 23:53:12 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2013.07.30 23:52:02 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.07.29 17:20:18 | 000,034,816 | ---- | C] () -- C:\Documents and Settings\Mirek\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.07.29 13:24:55 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2013.07.28 23:33:47 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013.07.28 23:30:54 | 000,277,352 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.07.28 22:01:19 | 001,072,544 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013.07.28 22:01:19 | 001,072,544 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013.07.28 22:01:19 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013.07.28 22:00:42 | 002,816,504 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2013.07.28 21:53:39 | 000,000,082 | ---- | C] () -- C:\WINDOWS\Cmicnfg3.ini.cfl
[2013.07.28 21:53:38 | 000,552,960 | R--- | C] () -- C:\WINDOWS\System32\Cmeaupci.exe
[2013.07.28 21:53:11 | 000,000,137 | ---- | C] () -- C:\WINDOWS\Cmicnfg3.ini.imi
[2013.07.28 21:53:10 | 000,303,104 | R--- | C] () -- C:\WINDOWS\System32\CmiInstallResAll.dll
[2013.07.28 21:53:10 | 000,002,123 | R--- | C] () -- C:\WINDOWS\Cmicnfg3.ini.cfg
[2013.07.28 21:53:07 | 000,002,641 | R--- | C] () -- C:\WINDOWS\cmudax3.ini
[2013.07.28 21:49:10 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013.07.28 21:42:07 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== ZeroAccess Check ==========

[2013.08.29 20:54:27 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 08:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 08:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.07.29 17:00:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BVRP Software
[2014.03.21 00:58:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Caphyon
[2014.04.01 15:51:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
[2013.09.03 14:30:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Research In Motion
[2014.04.07 20:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\.minecraft
[2013.07.29 16:24:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\BSplayer Pro
[2014.01.07 00:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Carambis
[2013.09.03 23:09:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\ElevatedDiagnostics
[2013.10.28 14:26:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\ESET
[2013.08.25 10:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\GHISLER
[2014.02.11 18:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Leadertech
[2013.08.25 12:31:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\LG Electronics
[2013.09.01 15:04:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\MDownloader
[2014.04.06 00:47:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Opera
[2014.04.07 11:19:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Opera Software
[2013.07.30 00:11:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\PLANStudio Setup
[2014.03.21 00:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Quadcore Games
[2013.08.29 21:14:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Research In Motion
[2014.01.06 23:55:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Teleca
[2013.07.28 22:16:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Telefónica Móviles
[2014.03.21 00:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\uTorrent

========== Purity Check ==========

========== Custom Scans ==========

< >
[2013.07.28 21:43:24 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2013.07.28 21:50:35 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2014.03.27 14:37:45 | 000,000,216 | ---- | C] () -- C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.27 14:37:46 | 000,000,222 | ---- | C] () -- C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.04.06 00:59:46 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2014.04.06 01:15:42 | 000,000,934 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2014.04.06 01:15:43 | 000,000,938 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: AGP440.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 16:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\$NtUninstallKB932716-v2$\cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\Driver Cache\i386\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 23:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 16:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 08:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 08:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 16:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 16:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.14 00:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 23:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.14 00:11:00 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
[2004.08.03 23:00:14 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\$NtServicePackUninstall$\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.25 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 16:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.04 00:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 16:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 16:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 16:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 16:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.04 00:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 16:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 16:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 16:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[2 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[25 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[16 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014.04.07 20:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\.minecraft
[2013.08.16 17:55:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Adobe
[2014.04.01 22:15:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Apple Computer
[2013.07.29 16:24:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\BSplayer Pro
[2014.01.07 00:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Carambis
[2013.09.03 23:09:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\ElevatedDiagnostics
[2013.10.28 14:26:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\ESET
[2013.08.25 10:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\GHISLER
[2013.07.28 21:52:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Identities
[2014.02.11 18:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Leadertech
[2013.08.25 12:31:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\LG Electronics
[2013.07.30 11:04:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Macromedia
[2014.04.06 14:37:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Malwarebytes
[2013.09.01 15:04:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\MDownloader
[2014.01.05 03:36:48 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Mirek\Data aplikací\Microsoft
[2013.09.01 14:33:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla
[2014.04.06 00:47:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Opera
[2014.04.07 11:19:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Opera Software
[2013.07.30 00:11:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\PLANStudio Setup
[2014.03.21 00:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Quadcore Games
[2013.08.29 21:14:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Research In Motion
[2014.04.09 10:44:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Skype
[2014.01.06 23:52:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Sony Ericsson
[2013.08.05 21:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Sun
[2014.01.06 23:55:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Teleca
[2013.07.28 22:16:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\Telefónica Móviles
[2014.03.21 00:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\uTorrent
[2014.03.31 00:57:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\vlc
[2013.08.02 22:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mirek\Data aplikací\WinRAR

< %APPDATA%\*.exe /s >
[2013.09.02 16:38:59 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Microsoft\Installer\{B67AFE14-FB7B-4866-9757-49077CBA1117}\BlackBerry.exe
[2013.09.03 13:58:05 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Microsoft\Installer\{E847A4F9-2158-4A7F-8712-C86AE2B4DC2F}\BlackBerry.exe
[2014.03.10 21:55:35 | 000,145,408 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Sun\Java\jre1.7.0_51\lzma.exe
[2013.12.29 22:00:00 | 000,393,728 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Mirek\Data aplikací\uTorrent\utorrent.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[16 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2013.07.28 23:29:50 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2013.07.28 23:29:50 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2013.07.28 23:29:49 | 000,454,656 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[16 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2014.04.07 17:45:09 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[16 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 08:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 08:52:38 | 001,695,232 | ---- | M] (Microsoft Corporation)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.01.24 13:28:34 | 018,707,048 | R--- | M] (Skype Technologies S.A.)
"Logitech Vid" = "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode -- [2009.07.16 16:35:42 | 005,458,704 | ---- | M] (Logitech Inc.)
"Akamai NetSession Interface" = "C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe" -- [2014.03.06 07:18:54 | 004,672,920 | ---- | M] (Akamai Technologies, Inc.)
"CCleaner Monitoring" = "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR -- [2014.03.18 20:57:00 | 004,613,912 | ---- | M] (Piriform Ltd)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.04.09 10:40:26 | 000,000,512 | ---- | M] () MD5=B7945CBDFA4063A1EF66AFD0266919BC -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2013.11.04 22:54:38 | 000,062,238 | ---- | M] () -- \Program Files\GIMP 2\share\gimp\2.0\patterns\cracked.pat
[2014.02.15 14:19:28 | 002,782,720 | ---- | M] () -- \Program Files\NosTale(CZ)\Crack 2.0_8039408.dat
[2014.02.15 14:19:28 | 000,000,040 | -HS- | M] () -- \Program Files\NosTale(CZ)\crack maker 2.0 config.ini
[2014.02.15 14:17:23 | 000,570,036 | ---- | M] () -- \Program Files\NosTale(CZ)\Crack_Maker-2.0.exe

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2012.12.04 18:00:50 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2012.12.04 18:00:50 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2012.12.04 18:00:50 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2013.11.11 15:39:40 | 000,072,638 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Data aplikací\Skype\Apps\login\images\loader.gif
[2013.11.11 15:39:40 | 000,003,032 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Data aplikací\Skype\Apps\login\images\loader.png
[2013.11.11 15:39:40 | 000,006,012 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Data aplikací\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.11.11 15:39:40 | 000,021,956 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Data aplikací\Skype\Apps\login\images\normal\loader_30fps.gif
[2013.11.11 15:39:40 | 000,009,772 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2013.01.28 11:58:36 | 000,145,792 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\TempDIR\downloader.exe
[2014.04.02 07:28:31 | 000,112,122 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\C07ORA5C\AdLoader-7b473315d0084c71df83cdee72aab144.min[1].js
[2014.04.01 22:55:00 | 000,000,723 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\C07ORA5C\downloaderror[1].js
[2014.04.01 22:55:55 | 000,001,174 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\C07ORA5C\downloader[1].js
[2014.04.06 00:49:23 | 000,002,942 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\C07ORA5C\rmsloaderdelayed[1].js
[2014.04.06 12:37:52 | 000,001,870 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\N8SQJEEH\AdLoader[1].htm
[2014.04.07 15:52:21 | 000,001,870 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\N8SQJEEH\AdLoader[2].htm
[2014.04.06 01:09:14 | 000,001,174 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\N8SQJEEH\downloader[1].js
[2014.04.06 00:59:22 | 000,000,723 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\OCRN9RQV\downloaderror[1].js
[2014.04.06 01:09:14 | 000,000,723 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\OCRN9RQV\downloaderror[2].js
[2014.04.01 22:59:03 | 000,001,174 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\OCRN9RQV\downloader[1].js
[2014.04.08 17:31:23 | 000,001,870 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\AdLoader[1].htm
[2014.04.01 22:55:55 | 000,000,723 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\downloaderror[1].js
[2014.04.01 22:59:03 | 000,000,723 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\downloaderror[2].js
[2014.04.01 22:55:00 | 000,001,174 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\downloader[1].js
[2014.04.06 00:59:22 | 000,001,174 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\downloader[2].js
[2014.04.06 00:49:39 | 000,003,061 | ---- | M] () -- \Documents and Settings\Mirek\Local Settings\Temporary Internet Files\Content.IE5\WH04RB0Q\rmsloaderdelayeddiv[1].js
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2009.11.04 16:54:00 | 001,586,520 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\application_loader.dll
[2012.12.13 16:05:38 | 011,524,264 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Loader.exe
[2012.12.13 16:05:40 | 000,637,096 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderClient.dll
[2012.12.13 16:05:40 | 000,332,968 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1025.dll
[2012.12.13 16:05:42 | 000,362,664 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1027.dll
[2012.12.13 16:05:42 | 000,285,864 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1028.dll
[2012.12.13 16:05:42 | 000,345,256 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1029.dll
[2012.12.13 16:05:42 | 000,347,304 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1030.dll
[2012.12.13 16:05:44 | 000,364,712 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1031.dll
[2012.12.13 16:05:44 | 000,366,248 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1032.dll
[2012.12.13 16:05:44 | 000,366,760 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1034.dll
[2012.12.13 16:05:46 | 000,345,256 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1035.dll
[2012.12.13 16:05:46 | 000,365,736 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1036.dll
[2012.12.13 16:05:46 | 000,322,728 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1037.dll
[2012.12.13 16:05:46 | 000,353,448 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1038.dll
[2012.12.13 16:05:48 | 000,361,640 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1040.dll
[2012.12.13 16:05:48 | 000,305,320 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1041.dll
[2012.12.13 16:05:48 | 000,301,224 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1042.dll
[2012.12.13 16:05:50 | 000,354,472 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1043.dll
[2012.12.13 16:05:50 | 000,342,696 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1044.dll
[2012.12.13 16:05:50 | 000,356,008 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1045.dll
[2012.12.13 16:05:50 | 000,354,984 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1046.dll
[2012.12.13 16:05:52 | 000,355,496 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1048.dll
[2012.12.13 16:05:52 | 000,350,888 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1049.dll
[2012.12.13 16:05:52 | 000,346,792 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1050.dll
[2012.12.13 16:05:54 | 000,344,232 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1053.dll
[2012.12.13 16:05:54 | 000,338,600 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1054.dll
[2012.12.13 16:05:54 | 000,344,232 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1055.dll
[2012.12.13 16:05:54 | 000,349,352 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1057.dll
[2012.12.13 16:05:56 | 000,361,640 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1066.dll
[2012.12.13 16:05:56 | 000,348,840 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1069.dll
[2012.12.13 16:05:56 | 000,349,352 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1081.dll
[2012.12.13 16:05:58 | 000,357,544 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes1110.dll
[2012.12.13 16:05:58 | 000,281,768 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes2052.dll
[2012.12.13 16:05:58 | 000,344,744 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes2057.dll
[2012.12.13 16:06:00 | 000,361,640 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\LoaderRes2070.dll
[2013.09.08 19:50:15 | 000,061,949 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Loader_CRASH.DMP
[2013.09.08 19:50:15 | 000,024,612 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Loader_ERRORLOG.TXT
[2009.11.04 16:54:00 | 000,005,701 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader.png
[2009.11.04 16:54:00 | 000,005,669 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_add_remove.png
[2009.11.04 16:54:00 | 000,005,351 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_destination_device.png
[2009.11.04 16:54:00 | 000,008,047 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_header.png
[2009.11.04 16:54:00 | 000,002,297 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_small.png
[2009.11.04 16:54:00 | 000,005,351 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_source_device.png
[2009.11.04 16:54:00 | 000,005,982 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_switch_device_options.png
[2009.11.04 16:54:00 | 000,005,904 | ---- | M] () -- \Program Files\Common Files\Research In Motion\AppLoader\Images\application_loader_update.png
[2009.12.02 22:55:56 | 002,883,382 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_100_five_icon_library.cod
[2009.12.02 22:55:56 | 001,873,354 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_480x360_b.cod
[2009.12.02 22:55:52 | 000,336,174 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_accessibility.cod
[2009.12.02 22:55:54 | 004,655,492 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_backgrounds_480x360_b.cod
[2009.12.02 22:56:02 | 003,561,534 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_ringtones_89xx.cod
[2009.12.02 22:55:52 | 007,614,794 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_bb_medialoader_video_89xx_480x360.cod
[2009.12.02 20:01:56 | 000,217,642 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_loader.cod
[2014.01.28 15:14:26 | 000,192,384 | ---- | M] () -- \Program Files\GameforgeLive\MultiHTTPDownloader.exe
[2013.07.25 18:33:12 | 000,006,490 | ---- | M] () -- \Program Files\GameforgeLive\HTML\css\downloader.css
[2011.03.08 09:43:28 | 000,013,734 | ---- | M] () -- \Program Files\GIMP 2\Python\Lib\unittest\loader.py
[2008.09.12 22:03:36 | 000,110,592 | ---- | M] () -- \Program Files\JL_Cmder\JavaLoader.exe
[2013.03.07 19:37:50 | 000,000,500 | ---- | M] () -- \Program Files\Research In Motion\BlackBerry Desktop\DataUploaderConfig.xml
[2013.01.21 16:05:16 | 000,030,608 | ---- | M] () -- \RECYCLER\S-1-5-21-1844237615-2052111302-839522115-1003\Dc127.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2004.08.17 16:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.03 22:59:38 | 000,230,400 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.exe
[2004.08.03 22:59:38 | 000,278,016 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.ntd
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.14 00:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 00:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[16 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >
[2009.12.02 22:48:56 | 000,010,220 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_plazmic_pushactivator.cod

< *serial* /s >
[2013.09.03 14:31:20 | 000,008,684 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Modem Drivers\rimserial.cat
[2013.09.03 14:31:20 | 000,002,697 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Modem Drivers\RimSerial.inf
[2012.12.10 15:48:12 | 000,035,840 | R--- | M] () -- \Program Files\Common Files\Research In Motion\Modem Drivers\RimSerial.sys
[2012.12.11 12:17:44 | 000,286,720 | ---- | M] () -- \Program Files\Common Files\Research In Motion\RIMDeviceManager\rim_serial.dll
[2009.12.02 22:49:08 | 000,053,772 | ---- | M] () -- \Program Files\Common Files\Research In Motion\Shared\Loader Files\8900M_v5.0.0.411_P5.2.0.31\Java\net_rim_serialformats.cod
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2004.08.17 15:43:56 | 000,028,416 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\grserial.sys
[2004.08.17 16:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2014.02.14 08:25:02 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.08.31 03:43:01 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.02.14 09:04:50 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\6c29ee2bedfe88dcd66993f1af135ad8\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.14 09:00:10 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9860da66bf0219612908e7412b0a6e2e\System.Runtime.Serialization.ni.dll
[2014.04.02 03:42:00 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\046c2851963b30d0e14194051c03de33\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.04.02 03:42:43 | 002,658,304 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\fa954900a6cf3a095efadfa4c683a32c\System.Runtime.Serialization.ni.dll
[2010.03.18 13:16:28 | 001,026,936 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\System.Runtime.Serialization.dll.x86
[2014.03.31 01:20:08 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.04.02 03:34:42 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2014.03.31 01:20:07 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2014.04.02 03:34:37 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 06:06:54 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 07:47:26 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 07:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2004.07.19 18:54:20 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2001.10.25 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2001.10.25 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[16 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2001.10.25 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2001.10.25 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2013.08.29 21:11:26 | 000,000,000 | -H-- | M] () -- \WINDOWS\system32\drivers\Msft_Kernel_RimSerial_01007.Wdf
[2012.12.10 15:48:12 | 000,035,840 | R--- | M] () -- \WINDOWS\system32\drivers\RimSerial.sys
[2008.04.14 07:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0002\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0002\DriverFiles\rimserial.inf
[2013.08.29 19:20:43 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0002\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0002\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0004\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0004\DriverFiles\rimserial.inf
[2013.08.29 19:20:39 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0004\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0004\DriverFiles\RimSerial.sys
[2013.08.29 21:10:44 | 000,008,684 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0005\DriverFiles\RimSerial.cat
[2013.08.29 21:10:44 | 000,002,697 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0005\DriverFiles\rimserial.inf
[2013.08.29 21:57:28 | 000,008,340 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0005\DriverFiles\rimserial.PNF
[2012.12.10 15:48:12 | 000,035,840 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0005\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0006\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0006\DriverFiles\rimserial.inf
[2013.08.29 19:42:09 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0006\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0006\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0007\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0007\DriverFiles\rimserial.inf
[2013.08.29 19:48:55 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0007\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0007\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0008\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0008\DriverFiles\rimserial.inf
[2013.08.29 20:59:35 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0008\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0008\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0009\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0009\DriverFiles\rimserial.inf
[2013.08.29 21:07:35 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0009\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0009\DriverFiles\RimSerial.sys
[2013.08.29 21:10:44 | 000,008,684 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0010\DriverFiles\RimSerial.cat
[2013.08.29 21:10:44 | 000,002,697 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0010\DriverFiles\rimserial.inf
[2013.08.29 21:11:28 | 000,008,340 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0010\DriverFiles\rimserial.PNF
[2012.12.10 15:48:12 | 000,035,840 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0010\DriverFiles\RimSerial.sys
[2013.08.29 21:10:44 | 000,008,684 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0011\DriverFiles\RimSerial.cat
[2013.08.29 21:10:44 | 000,002,697 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0011\DriverFiles\rimserial.inf
[2013.08.29 21:30:45 | 000,008,340 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0011\DriverFiles\rimserial.PNF
[2012.12.10 15:48:12 | 000,035,840 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0011\DriverFiles\RimSerial.sys
[2007.01.18 10:24:58 | 000,011,207 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0012\DriverFiles\RimSerial.cat
[2007.01.18 10:24:58 | 000,001,594 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0012\DriverFiles\rimserial.inf
[2013.09.02 16:39:42 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0012\DriverFiles\rimserial.PNF
[2007.01.18 10:24:58 | 000,026,496 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0012\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0013\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0013\DriverFiles\rimserial.inf
[2013.08.31 14:17:53 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0013\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0013\DriverFiles\RimSerial.sys
[2007.01.18 10:24:58 | 000,011,207 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0014\DriverFiles\RimSerial.cat
[2007.01.18 10:24:58 | 000,001,594 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0014\DriverFiles\rimserial.inf
[2013.09.02 16:39:34 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0014\DriverFiles\rimserial.PNF
[2007.01.18 10:24:58 | 000,026,496 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0014\DriverFiles\RimSerial.sys
[2013.08.29 19:20:38 | 000,009,127 | --S- | M] () -- \WINDOWS\system32\ReinstallBackups\0016\DriverFiles\RimSerial.cat
[2013.08.29 19:20:38 | 000,001,594 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0016\DriverFiles\rimserial.inf
[2013.09.03 13:58:52 | 000,006,740 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0016\DriverFiles\rimserial.PNF
[2009.01.09 16:18:02 | 000,027,136 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0016\DriverFiles\RimSerial.sys

< *w7lxe* /s >

< End of report >

OTL Extras logfile created on: 9.4.2014 10:35:56 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Mirek\Dokumenty
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,75 Gb Available Physical Memory | 49,99% Memory free
3,23 Gb Paging File | 2,64 Gb Available in Paging File | 81,59% Paging File free
Paging file location(s): C:\pagefile.sys 1920 3840 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 48,40 Gb Free Space | 64,95% Space Free | Partition Type: NTFS

Computer Name: MIREK-48046E266 | User Name: Mirek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = OperaStable] -- C:\Program Files\Opera\Launcher.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = OperaStable] -- C:\Program Files\Opera\Launcher.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- Reg Error: Key error.
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"4481:TCP" = 4481:TCP:LocalSubNet:Enabled:BlackBerry Desktop Software Wireless Music Sync data transfer
"4481:UDP" = 4481:UDP:LocalSubNet:Enabled:BlackBerry Desktop Software Wireless Music Sync discovery
"4482:TCP" = 4482:TCP:LocalSubNet:Enabled:BlackBerry Desktop Software Wireless Music Sync data transfer
"4482:UDP" = 4482:UDP:LocalSubNet:Enabled:BlackBerry Desktop Software Wireless Music Sync discovery
"1047:TCP" = 1047:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\Program Files\Java\jre7\bin\javaw.exe" = C:\Program Files\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser
"C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe" = C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe:*:Enabled:BlackBerry Desktop Software -- (Research In Motion)
"D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe" = D:\EasySetupAssistant\wr741n\EasySetupAssistant.exe:*:Enabled:TP-LINK Easy Setup Assistant
"C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe" = C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module
"C:\Documents and Settings\Mirek\Plocha\Last-World\lw.bin" = C:\Documents and Settings\Mirek\Plocha\Last-World\lw.bin:*:Enabled:lw -- ()
"C:\Documents and Settings\Mirek\Data aplikací\uTorrent\utorrent.exe" = C:\Documents and Settings\Mirek\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\GameforgeLive\gfl_client.exe" = C:\Program Files\GameforgeLive\gfl_client.exe:*:Enabled:Gameforge Live -- ()
"C:\Program Files\Logitech\Logitech Vid\Vid.exe" = C:\Program Files\Logitech\Logitech Vid\Vid.exe:*:Enabled:Logitech Vid -- (Logitech Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe" = C:\Documents and Settings\Mirek\Local Settings\Data aplikací\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client -- (Akamai Technologies, Inc.)
"C:\Program Files\MondialMt2\mondialmt2.exe" = C:\Program Files\MondialMt2\mondialmt2.exe:*:Enabled:mondialmt2
"C:\Program Files\QuadCoreM2\pack\core.bin" = C:\Program Files\QuadCoreM2\pack\core.bin:*:Enabled:core -- ()
"C:\Documents and Settings\Mirek\Plocha\The-Lost-Island\The-Lost-Island\metin2.bin" = C:\Documents and Settings\Mirek\Plocha\The-Lost-Island\The-Lost-Island\metin2.bin:*:Enabled:metin2 -- ()

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{101F30DF-3204-473B-A0DD-037A53983DEA}" = QuadcoreM2
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 51
"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}" = Logitech Vid
"{6084D914-24D5-AAD0-F752-6ACC22274978}_is1" = Minecraft TeamExtreme 1.6.2 Warez Launcher version for Windows
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91BA5476-8B26-49E4-84B2-9EFE10917B33}" = LogMeIn Hamachi
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1" = Gameforge Live 1.10.0 "Legend"
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 307.83
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 136.53
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B67AFE14-FB7B-4866-9757-49077CBA1117}" = BlackBerry Device Software v4.6.1 pro BlackBerry 8900 Smartphone
"{BE5B0450-DCCB-4FE9-93E2-3B38D88A745B}" = BlackBerry Desktop Software 7.1
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E847A4F9-2158-4A7F-8712-C86AE2B4DC2F}" = BlackBerry Device Software v5.0.0 pro BlackBerry 8900 Smartphone
"{FE2D627E-D7E0-46EA-93A6-8583420285FA}" = Aeria Ignite
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Aeria Ignite" = Aeria Ignite
"Aeria Ignite 1.13.3296" = Aeria Ignite
"AIDA64 Extreme Edition_is1" = AIDA64 Extreme Edition v3.20
"B1FreeArchiver" = B1 Free Archiver
"BlackBerry_Desktop" = BlackBerry Desktop Software 7.1
"CCleaner" = CCleaner
"C-Media PCI Audio Driver" = C-Media PCI Audio Device
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GIMP-2_is1" = GIMP 2.8.8
"Google Chrome" = Google Chrome
"ie8" = Windows Internet Explorer 8
"LogMeIn Hamachi" = LogMeIn Hamachi
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"MINECRAFT 1.7.2" = MINECRAFT 1.7.2
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NosTale(CZ)_is1" = Nostale(CZ)
"NosTale(DE)_is1" = Nostale(DE)
"O2CZ" = O2
"Opera 20.0.1387.91" = Opera Stable 20.0.1387.91
"QuadcoreM2 1.12.2012" = QuadcoreM2
"VLC media player" = VLC media player 2.0.8
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.20 (32-bit)
"winusb0100" = Microsoft WinUsb 1.0
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2.1.2014 15:12:53 | Computer Name = MIREK-48046E266 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace opera.exe, verze 12.16.1860.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 6.1.2014 17:51:34 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11931
Description = Produkt: PC Suite for Sony Ericsson - Chyba 1931. Instalační služba
Windows Installer nemůže aktualizovat systémový soubor C:\WINDOWS\system32\msxml6r.dll,
protože soubor je chráněn systémem Windows. Správná funkčnost tohoto programu bude
pravděpodobně vyžadovat aktualizaci operačního systému. Verze balíčku: 6.0.3883.0,
verze chráněná operačním systémem: 6.0.3883.0

Error - 6.1.2014 18:33:24 | Computer Name = MIREK-48046E266 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace opera.exe, verze 12.16.1860.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 10.1.2014 14:56:48 | Computer Name = MIREK-48046E266 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace opera.exe, verze 12.16.1860.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 20.1.2014 12:29:55 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11500
Description = Product: Java 7 Update 51 -- Error 1500.Another installation is in
progress. You must complete that installation before continuing this one.

Error - 20.1.2014 12:29:59 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11500
Description = Product: Java 7 Update 51 -- Error 1500.Another installation is in
progress. You must complete that installation before continuing this one.

Error - 20.1.2014 12:30:00 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11500
Description = Product: Java 7 Update 51 -- Error 1500.Another installation is in
progress. You must complete that installation before continuing this one.

Error - 20.1.2014 12:30:02 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11500
Description = Product: Java 7 Update 51 -- Error 1500.Another installation is in
progress. You must complete that installation before continuing this one.

Error - 20.1.2014 12:30:05 | Computer Name = MIREK-48046E266 | Source = MsiInstaller | ID = 11500
Description = Product: Java 7 Update 51 -- Error 1500.Another installation is in
progress. You must complete that installation before continuing this one.

Error - 23.1.2014 15:28:25 | Computer Name = MIREK-48046E266 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace 7zFM.exe, verze 9.20.0.0, zablokovaný modul hungapp,
verze 0.0.0.0, adresa bloku 0x00000000.

[ System Events ]
Error - 6.4.2014 13:34:20 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7038
Description = Přihlášení služby nvUpdatusService jako uživatel .\UpdatusUser se
se současně nakonfigurovaným heslem nezdařilo. Došlo k následující chybě: %%1330 Zkontrolujte
konfiguraci služby pomocí modulu snap-in Služby v konzole Microsoft Management Console
(MMC).

Error - 6.4.2014 13:34:20 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7000
Description = Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku
následující chyby: %%1069

Error - 6.4.2014 13:35:09 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby NVSvc.

Error - 7.4.2014 3:20:00 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7000
Description = Služba Zune Bus Enumerator Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.4.2014 3:20:00 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7038
Description = Přihlášení služby nvUpdatusService jako uživatel .\UpdatusUser se
se současně nakonfigurovaným heslem nezdařilo. Došlo k následující chybě: %%1330 Zkontrolujte
konfiguraci služby pomocí modulu snap-in Služby v konzole Microsoft Management Console
(MMC).

Error - 7.4.2014 3:20:00 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7000
Description = Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku
následující chyby: %%1069

Error - 7.4.2014 3:20:44 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby NVSvc.

Error - 7.4.2014 11:45:06 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7000
Description = Služba Zune Bus Enumerator Driver neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 7.4.2014 11:45:07 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7038
Description = Přihlášení služby nvUpdatusService jako uživatel .\UpdatusUser se
se současně nakonfigurovaným heslem nezdařilo. Došlo k následující chybě: %%1330 Zkontrolujte
konfiguraci služby pomocí modulu snap-in Služby v konzole Microsoft Management Console
(MMC).

Error - 7.4.2014 11:45:07 | Computer Name = MIREK-48046E266 | Source = Service Control Manager | ID = 7000
Description = Služba NVIDIA Update Service Daemon neuspěla při spuštění v důsledku
následující chyby: %%1069

< End of report >

Znovu spustte OTL
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
JavaQuickStarterService
gupdate
SkypeUpdate
AdobeFlashPlayerUpdateSvc
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job

:otl
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=U223
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=U223DF&PC=U223&q={searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{07F767DC-28E3-4CEB-BBED-0A5E009560BE}: "URL" = http://www.search.ask.com/web?p2=%5EB7N ... trgb=IE&q={searchTerms}&psv=barid%253D%257BC1921CCD%252D1302%252D11E3%252DAD8E%252D000EA634EBF3%257D%2526cargo%253DCME%252DV7%2526spr%253Da
FF - prefs.js..extensions.enabledAddons: yasearch%40yandex.ru:7.9.1
FF - prefs.js..extensions.enabledAddons: vb%40yandex.ru:2.7.2
[2013.09.01 14:00:40 | 000,000,000 | ---D | M] (Speed Analysis 3) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com
[2014.04.06 01:09:56 | 000,000,000 | ---D | M] (Đ’Ń–Đ·ŃĐ°Đ»ŃŚĐ˝Ń‹ŃŹ Đ·Đ°ĐşĐ»Đ°Đ´ĐşŃ–) -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru
[2014.04.06 01:09:55 | 000,000,000 | ---D | M] (ĐšĐ°ĐĽĐżĐ°Đ˝ĐµĐ˝Ń‚ "ĐĐ»ĐµĐĽĐµĐ˝Ń‚Ń‹ ĐŻĐ˝Đ´ĐµĐşŃĐ°") -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru
[2014.04.01 21:57:03 | 000,002,328 | ---- | M] () -- C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yqs-barff-yandex.xml
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIREK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\NAHD6HA2.DEFAULT\EXTENSIONS\VB@YANDEX.RU
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIREK\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\NAHD6HA2.DEFAULT\EXTENSIONS\YASEARCH@YANDEX.RU
CHR - default_search_provider: Yandex (Enabled)
CHR - default_search_provider: search_url = http://yandex.ru/yandsearch?clid=1985200-10254&text={searchTerms}
CHR - default_search_provider: suggest_url = http://suggest.yandex.ru/suggest-ff.cgi?part={searchTerms},
O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {434D452D-5637-006A-76A7-7A786E7484D7} - No CLSID value found.
[2 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[25 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[16 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp -> ]

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=-
"seznam-listicka-distribuce"=-
"SunJavaUpdateSched"=-
"Aeria Ignite"=-
"KernelFaultCheck"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=-
"Skype"=-
"Akamai NetSession Interface"=-
"CCleaner Monitoring"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 9906258 bytes

User: Mirek
->Temp folder emptied: 195097819 bytes
->Temporary Internet Files folder emptied: 22665018 bytes
->FireFox cache emptied: 38712348 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 3032064 bytes
->Flash cache emptied: 4986 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33237 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 18822664 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 681847 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 641896364 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 15071674 bytes

Total Files Cleaned = 902,00 mb

[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: Mirek
->Flash cache emptied: 0 bytes

User: NetworkService

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job moved successfully.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{07F767DC-28E3-4CEB-BBED-0A5E009560BE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07F767DC-28E3-4CEB-BBED-0A5E009560BE}\ not found.
Prefs.js: yasearch%40yandex.ru:7.9.1 removed from extensions.enabledAddons
Prefs.js: vb%40yandex.ru:2.7.2 removed from extensions.enabledAddons
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com\chrome\skin folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com\chrome\content\mz folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com\chrome\content folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com\chrome folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Extensions\speedanalysis03@SpeedAnalysis.com folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\modules\foundation folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\modules folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\META-INF folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\defaults\vendor folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\defaults\preferences folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\defaults folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\components folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\chrome folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\cbapp\parts\workers folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\cbapp\parts\migration folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\cbapp\parts folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru\cbapp folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\vb@yandex.ru folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\modules\foundation folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\modules folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\META-INF folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\vendor folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\presets folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\preferences folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\dynamic-preferences\brand\ua folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\dynamic-preferences\brand folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults\dynamic-preferences folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\defaults folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\components folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\chrome folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\xb\ui\behaviour folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\xb\ui folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\xb folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\workers folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\platform folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\native folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts\migration folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp\parts folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru\cbapp folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\yasearch@yandex.ru folder moved successfully.
C:\Documents and Settings\Mirek\Data aplikací\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yqs-barff-yandex.xml moved successfully.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{434D452D-5637-006A-76A7-7A786E7484D7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{434D452D-5637-006A-76A7-7A786E7484D7}\ not found.
C:\WINDOWS\AppPatch\SET1A.tmp deleted successfully.
C:\WINDOWS\AppPatch\SET1B.tmp deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP102.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13D.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E3.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP341.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP360.tmp\System.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP360.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP43F.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP52B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP553.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP62A.tmp\mscorlib.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP62A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP70C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP71B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7FA.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81F.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP836.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP84E.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP92E.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP943.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP956.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA3C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA56.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB43.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB4D.tmp\mscorlib.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB4D.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB74.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC23.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC53.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI53.tmp deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D5FEC983-01DB-414a-9456-AF95AC9ED7B5}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Aeria Ignite deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 04092014_111910

Files\Folders moved on Reboot...
C:\WINDOWS\temp\Perflib_Perfdata_d90.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Nainstalujte antivir

vyosek píše: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
Stahnete a spustte

Pro potvrzeni volby mackejte A, Enter

Po pouziti utilitu smazte

Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.piriform.com/ccleaner/download/slim a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.

Pak napiste, jak je na tom pc.

Zdravím,pc podle mě šlape jak má.Videa už se taky nesekají.Je to tedy vše?

Jestli neni zadny problem, je to vse

Dobře,moc vám děkuji za váš čas!

VIRY.CZ

Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome

Re: Sekání videa v google chrome