OTL logfile created on: 7.10.2014 19:49:17 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Paja\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1013,03 Mb Total Physical Memory | 523,45 Mb Available Physical Memory | 51,67% Memory free
2,38 Gb Paging File | 1,60 Gb Available in Paging File | 67,36% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 134,05 Gb Total Space | 92,95 Gb Free Space | 69,34% Space Free | Partition Type: NTFS
Drive D: | 4,00 Gb Total Space | 2,66 Gb Free Space | 66,48% Space Free | Partition Type: FAT32
Computer Name: PAVEL | User Name: Paja | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014.10.07 19:32:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paja\Plocha\OTL.exe
PRC - [2014.08.26 19:44:28 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2014.07.31 13:44:18 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2014.07.15 11:24:50 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2014.07.01 19:04:15 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.03.06 03:21:50 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2013.02.03 11:43:06 | 000,791,560 | ---- | M] (KoshyJohn.com) -- C:\Documents and Settings\Paja\Data aplikací\KoshyJohn.com\MemClean\MemClean.exe
PRC - [2010.06.22 14:34:48 | 000,321,104 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\dsiwmis.exe
PRC - [2010.06.22 14:34:48 | 000,305,744 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LMworker.exe
PRC - [2010.06.22 14:34:46 | 000,968,272 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
PRC - [2010.06.10 15:57:20 | 000,548,744 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe
PRC - [2010.04.14 11:28:44 | 000,073,728 | ---- | M] (Software602 a.s.) -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2010.04.07 13:16:54 | 001,599,880 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe
PRC - [2010.01.29 16:52:58 | 000,260,640 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe
PRC - [2008.04.14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (No Company Name) ==========
MOD - [2014.10.05 12:55:55 | 002,859,008 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14100500\algo.dll
MOD - [2014.07.15 11:24:48 | 000,353,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\ppgooglenaclpluginchrome.dll
MOD - [2014.07.15 11:24:44 | 008,537,928 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\pdf.dll
MOD - [2014.07.15 11:24:35 | 001,732,936 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
MOD - [2014.07.01 19:04:24 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.07.01 19:04:19 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
MOD - [2014.02.10 13:44:24 | 004,592,128 | ---- | M] () -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libGLESv2.dll
MOD - [2014.02.10 13:44:24 | 000,112,128 | ---- | M] () -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libEGL.dll
MOD - [2013.03.06 03:21:50 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
MOD - [2009.05.20 14:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files\Launch Manager\CdDirIo.dll
MOD - [2008.04.14 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
========== Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2014.08.26 19:44:28 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2014.07.20 23:41:04 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.07.01 19:04:15 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.06.22 14:34:48 | 000,321,104 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files\Launch Manager\dsiwmis.exe -- (DsiWMIService)
SRV - [2010.05.26 19:41:06 | 000,305,520 | ---- | M] (Egis Technology Inc.) [On_Demand | Stopped] -- C:\Program Files\EgisTec MyWinLocker\x86\MWLService.exe -- (MWLService)
SRV - [2010.04.14 11:28:44 | 000,073,728 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2010.01.29 16:52:58 | 000,260,640 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer VCM\RS_Service.exe -- (RS_Service)
SRV - [2010.01.28 16:27:36 | 000,243,232 | ---- | M] (Acer Group) [On_Demand | Stopped] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\PCASp50.sys -- (PCASp50)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014.07.05 00:16:31 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP)
DRV - [2014.07.01 19:04:32 | 000,057,800 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014.07.01 19:04:31 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014.07.01 19:04:31 | 000,192,352 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014.07.01 19:04:31 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014.07.01 19:04:31 | 000,055,112 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswrdr.sys -- (aswRdr)
DRV - [2014.07.01 19:04:31 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014.07.01 19:04:31 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014.06.05 06:28:16 | 000,026,624 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\TrueSight.sys -- (TrueSight)
DRV - [2014.05.31 22:07:13 | 003,361,408 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\S6000KNT.sys -- (S6000KNT)
DRV - [2014.04.26 13:29:00 | 001,987,840 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2014.04.26 13:26:44 | 005,630,168 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2014.04.26 13:26:38 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2014.04.26 13:26:37 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2011.06.02 11:08:34 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2010.11.01 19:57:22 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2010.06.17 08:50:02 | 000,082,384 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EUCR6SK.sys -- (EUCR)
DRV - [2010.05.20 11:20:26 | 000,061,552 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)
DRV - [2009.03.25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm)
DRV - [2009.03.25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic)
DRV - [2009.03.25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt)
DRV - [2009.03.25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex)
DRV - [2009.03.25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus)
DRV - [2009.03.25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5)
DRV - [2009.03.25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl)
DRV - [2008.12.08 17:21:20 | 000,110,080 | R--- | M] (ZTE Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnet.sys -- (ZTEusbnet)
DRV - [2008.12.08 17:21:20 | 000,105,344 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2008.12.08 17:21:20 | 000,104,960 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2008.12.08 17:21:20 | 000,104,960 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2008.12.02 11:52:00 | 000,058,800 | ---- | M] (Egis Incorporated.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV - [2008.12.02 11:52:00 | 000,017,840 | ---- | M] (Egis Incorporated.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV - [2008.12.02 11:52:00 | 000,015,280 | ---- | M] (Egis Incorporated.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV - [2008.11.11 13:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2008.11.11 13:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2008.11.11 13:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2008.05.16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic)
DRV - [2008.05.16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5)
DRV - [2008.05.16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV - [2008.05.16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm)
DRV - [2008.05.16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt)
DRV - [2008.05.16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex)
DRV - [2008.05.16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus)
DRV - [2008.04.14 14:00:00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008.04.14 14:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008.04.14 14:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2007.04.23 15:54:50 | 000,100,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mgmt.sys -- (s115mgmt)
DRV - [2007.04.23 15:54:50 | 000,098,568 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115obex.sys -- (s115obex)
DRV - [2007.04.23 15:54:48 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdm.sys -- (s115mdm)
DRV - [2007.04.23 15:54:48 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115mdfl.sys -- (s115mdfl)
DRV - [2007.04.23 15:54:46 | 000,083,208 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s115bus.sys -- (s115bus)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes,DefaultScope = {012E1000-F331-11DB-8314-0800200C9A66}
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}: "URL" =
http://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}: "URL" =
http://www.google.com/search?q={searchTerms}
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{0b009c52-75c1-4023-bad2-50985d4090f2}: "URL" =
http://www.firmy.cz/phr/{searchTerms}?s ... Listicka_1
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{40fa5025-1c2d-46fb-bade-5cd9411134c3}: "URL" =
http://www.mapy.cz/?query={searchTerms} ... Listicka_1
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.com/search?q={searchT ... d=ie7&rlz=
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{a6ba9475-d33b-4e7f-87ea-443370c82772}: "URL" =
http://www.zbozi.cz/?q={searchTerms}&r= ... Listicka_1
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\{e10ebd9d-5f03-4c56-8218-66dfdb008f86}: "URL" =
http://www.google.com/search?q={searchT ... utEncoding?}
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\SearchScopes\videa.seznam.cz-181844: "URL" =
http://videa.seznam.cz/?q={searchTerms}
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:8080
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.defaulturl: "
http://www.google.com/search?btnG=Google+Search&q="
FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=198484"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: true
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "
http://www.google.com"
FF - prefs.js..extensions.enabledItems: {ea614400-e918-4741-9a97-7a972ff7c30b}:2.0.10
FF - prefs.js..keyword.URL: "
http://www.google.com/search?btnG=Google+Search&q="
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@IObit.com/np_Asc_Plugin: C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.1.18: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.1: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.1: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.1: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.1.18: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Update\1.3.23.9\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Update\1.3.23.9\npGoogleUpdate3.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013.03.25 01:35:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DAC3F861-B30D-40dd-9166-F4E75327FAC7}: C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013.03.25 01:35:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\
wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.07.01 19:04:34 | 000,000,000 | ---D | M]
[2014.10.06 10:18:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\extensions
[2012.03.28 18:05:00 | 000,002,023 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\badoo.xml
[2012.05.29 18:18:45 | 000,002,015 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\firmy.cz-181845.xml
[2012.05.29 18:18:45 | 000,002,078 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\mapy.cz-181845.xml
[2012.05.29 18:18:45 | 000,002,148 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\seznam.cz-181845.xml
[2012.05.29 18:18:45 | 000,002,019 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\videa.seznam.cz-181845.xml
[2013.06.29 15:58:44 | 000,000,904 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\yahoo.xml
[2012.05.29 18:18:45 | 000,002,146 | ---- | M] () -- C:\Documents and Settings\Paja\Data aplikací\Mozilla\Firefox\Profiles\6m8kta85.default\searchplugins\zbozi.cz-181845.xml
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PAJA\DATA APLIKACÍ\MOZILLA\FIREFOX\PROFILES\6M8KTA85.DEFAULT\EXTENSIONS\
5A6BF058-B978-4B84-A2EC-6F5462CFCCB2@10120365-D3C0-4EC9-8624-5FAC2592D0DF.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PAJA\DATA APLIKACÍ\MOZILLA\FIREFOX\PROFILES\6M8KTA85.DEFAULT\EXTENSIONS\
ADSREMOVAL@ADSREMOVAL.NET
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PAJA\DATA APLIKACÍ\MOZILLA\FIREFOX\PROFILES\6M8KTA85.DEFAULT\EXTENSIONS\
ASCSURFINGPROTECTION@IOBIT.COM
File not found (No name found) -- C:\PROGRAM FILES\IOBIT APPS TOOLBAR\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{EA614400-E918-4741-9A97-7A972FF7C30B}
========== Chrome ==========
CHR - plugin: Error reading preferences file
CHR - Extension: Dokumenty Google = C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: avast! Online Security = C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2022.121_0\
CHR - Extension: RealDownloader = C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.1_0\
CHR - Extension: Peněženka Google = C:\Documents and Settings\Paja\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
O1 HOSTS File: ([2014.10.06 23:03:04 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..\Toolbar\ShellBrowser: (no name) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - No CLSID value found.
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006..\Run: [LManager.exe] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006..\Run: [Memory Cleaner] C:\Documents and Settings\Paja\Data aplikací\KoshyJohn.com\MemClean\MemClean.exe (KoshyJohn.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKU\S-1-5-21-1203752577-2552189465-2221179514-1006\..Trusted Domains: seznam.cz ([email] https in Trusted sites)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089}
http://office.microsoft.com/sites/produ ... wsdc32.cab (Reg Error: Value error.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://www.update.microsoft.com/microso ... 2750926984 (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 81.19.0.67 81.19.10.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{67A0B67B-DAF6-4D00-B8FA-D7EED28D0D46}: DhcpNameServer = 81.19.0.67 81.19.10.34
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Paja\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Paja\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.08.09 10:52:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
CREATERESTOREPOINT
System Restore Service not available.
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2015.05.30 18:11:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\Temp
[2015.05.30 18:08:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Data aplikací\ProductData
[2014.10.07 19:31:50 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Paja\Plocha\OTL.exe
[2014.10.07 11:27:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2014.10.06 12:16:46 | 005,582,481 | R--- | C] (Swearware) -- C:\Documents and Settings\Paja\Plocha\ComboFix.exe
[2014.10.06 10:45:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2014.10.06 08:33:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2014.10.06 08:32:16 | 001,704,938 | ---- | C] (Thisisu) -- C:\Documents and Settings\Paja\Plocha\JRT.exe
[2014.10.05 12:40:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\Identities
[2014.10.05 12:37:07 | 010,284,816 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Paja\Plocha\mbam-setup-1.75.0.1300.exe
[2014.10.04 18:58:35 | 000,000,000 | ---D | C] -- C:\Plocha originál
[2014.10.04 17:31:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\DriverToolkit
[2014.10.04 17:31:41 | 000,000,000 | ---D | C] -- C:\Program Files\DriverToolkit
[2014.10.04 13:33:14 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.10.04 13:33:13 | 000,000,000 | ---D | C] -- C:\rsit
[2014.09.28 21:17:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2014.09.28 20:24:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Data aplikací\KoshyJohn.com
[2014.09.28 20:06:00 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schtasks.exe
[2014.09.25 12:55:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Data aplikací\RealNetworks
[2014.09.16 06:28:52 | 000,000,000 | ---D | C] -- C:\Program Files\Aegisub
[2014.09.08 02:29:45 | 000,000,000 | ---D | C] -- C:\Program Files\Intel Corporation
[2014.09.08 02:28:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\Downloaded Installations
[2014.03.09 19:44:07 | 001,178,624 | ---- | C] (CPUID) -- C:\Documents and Settings\Paja\Data aplikací\siw_sdk.dll
[2013.01.18 23:16:48 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Paja\Data aplikací\pcouffin.sys
[304 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2014.10.07 19:54:35 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.10.07 19:34:33 | 735,694,848 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\Ander.avi
[2014.10.07 19:32:07 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paja\Plocha\OTL.exe
[2014.10.07 19:04:06 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.10.06 23:55:04 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
[2014.10.06 23:54:59 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
[2014.10.06 23:54:22 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.10.06 23:03:04 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2014.10.06 12:17:10 | 005,582,481 | R--- | M] (Swearware) -- C:\Documents and Settings\Paja\Plocha\ComboFix.exe
[2014.10.06 09:43:48 | 000,024,064 | ---- | M] () -- C:\WINDOWS\zoek-delete.exe
[2014.10.06 08:51:18 | 000,002,561 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\Microsoft Office Word 2003.lnk
[2014.10.06 08:46:53 | 001,290,752 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\zoek.exe
[2014.10.06 08:32:39 | 001,704,938 | ---- | M] (Thisisu) -- C:\Documents and Settings\Paja\Plocha\JRT.exe
[2014.10.05 12:39:38 | 001,375,089 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\adwcleaner_3.311.exe
[2014.10.05 12:37:47 | 010,284,816 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Paja\Plocha\mbam-setup-1.75.0.1300.exe
[2014.10.04 19:01:58 | 000,000,443 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\PAJA.lnk
[2014.10.04 19:01:58 | 000,000,436 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\MP3.lnk
[2014.10.04 17:15:13 | 001,178,624 | ---- | M] (CPUID) -- C:\Documents and Settings\Paja\Data aplikací\siw_sdk.dll
[2014.10.04 13:28:44 | 001,107,968 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\RSIT.exe
[2014.10.03 19:06:02 | 000,352,176 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.10.03 17:38:35 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Paja\Plocha\~$ibehy-dospivajicich-pedofilu-Daniel-Kubec-a-kolektiv.mobi
[2014.09.28 21:29:41 | 000,508,132 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.09.28 21:29:41 | 000,503,632 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.09.28 21:29:41 | 000,105,880 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.09.28 21:29:41 | 000,090,734 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.09.28 21:10:39 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2014.09.28 21:10:39 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2014.09.28 20:14:27 | 000,000,020 | ---- | M] () -- C:\WINDOWS\cmm.dat
[2014.09.28 06:15:06 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014.09.28 04:52:06 | 004,458,097 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\vkchpt1.pdf
[2014.09.28 04:18:24 | 001,101,420 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\vkchpt2.pdf
[2014.09.25 12:07:03 | 000,002,517 | ---- | M] () -- C:\Documents and Settings\Paja\Plocha\Microsoft Office Excel 2003.lnk
[2014.09.19 12:56:04 | 000,271,360 | ---- | M] () -- C:\Documents and Settings\Paja\Dokumenty\Outlook.pst
[2014.09.16 06:32:57 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Paja\Plocha\~$stament-of-love-82.srt
[2014.09.10 17:14:56 | 000,067,899 | ---- | M] () -- C:\Documents and Settings\Paja\Dokumenty\10593156_700977333290209_8047483647587619240_n.jpg
[304 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014.10.07 19:54:35 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.10.07 18:44:19 | 735,694,848 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\Ander.avi
[2014.10.06 10:45:51 | 000,024,064 | ---- | C] () -- C:\WINDOWS\zoek-delete.exe
[2014.10.06 08:46:42 | 001,290,752 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\zoek.exe
[2014.10.05 12:39:38 | 001,375,089 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\adwcleaner_3.311.exe
[2014.10.04 19:01:58 | 000,000,443 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\PAJA.lnk
[2014.10.04 19:01:58 | 000,000,436 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\MP3.lnk
[2014.10.04 13:28:43 | 001,107,968 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\RSIT.exe
[2014.10.03 19:06:02 | 000,352,176 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.10.03 17:38:35 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Paja\Plocha\~$ibehy-dospivajicich-pedofilu-Daniel-Kubec-a-kolektiv.mobi
[2014.09.28 20:14:27 | 000,000,020 | ---- | C] () -- C:\WINDOWS\cmm.dat
[2014.09.28 04:52:01 | 004,458,097 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\vkchpt1.pdf
[2014.09.28 04:18:21 | 001,101,420 | ---- | C] () -- C:\Documents and Settings\Paja\Plocha\vkchpt2.pdf
[2014.09.25 12:54:54 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
[2014.09.25 12:54:53 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
[2014.09.19 12:40:30 | 000,271,360 | ---- | C] () -- C:\Documents and Settings\Paja\Dokumenty\Outlook.pst
[2014.09.16 06:32:57 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Paja\Plocha\~$stament-of-love-82.srt
[2014.09.16 06:29:10 | 000,000,779 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ASSDraw3.lnk
[2014.09.16 06:29:10 | 000,000,750 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Aegisub.lnk
[2014.09.10 17:14:52 | 000,067,899 | ---- | C] () -- C:\Documents and Settings\Paja\Dokumenty\10593156_700977333290209_8047483647587619240_n.jpg
[2014.06.29 20:37:12 | 000,002,292 | ---- | C] () -- C:\Documents and Settings\Paja\Data aplikací\ASSDraw3.cfg
[2014.06.26 00:45:31 | 000,000,037 | ---- | C] () -- C:\WINDOWS\csw.ini
[2014.06.17 19:57:47 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\fusioncache.dat
[2014.06.05 06:16:15 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\TrueSight.sys
[2014.05.31 19:58:36 | 000,187,720 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2014.05.30 17:31:34 | 000,000,028 | ---- | C] () -- C:\WINDOWS\molgen.ini
[2014.05.26 22:29:11 | 000,192,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.05.26 22:29:11 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.05.26 22:29:11 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2014.04.26 13:40:12 | 000,076,376 | ---- | C] () -- C:\WINDOWS\System32\S6000DIF.dll
[2014.04.26 13:40:12 | 000,015,190 | ---- | C] () -- C:\WINDOWS\S6000Twn.ini
[2013.09.22 11:12:29 | 000,645,632 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2013.07.28 18:27:35 | 001,527,650 | ---- | C] () -- C:\WINDOWS\System32\libfftw3f-3.dll
[2013.07.28 18:27:35 | 000,121,344 | ---- | C] () -- C:\WINDOWS\System32\MT.dll
[2013.07.28 18:27:34 | 001,527,650 | ---- | C] () -- C:\WINDOWS\System32\fftw3.dll
[2013.06.21 21:32:35 | 000,035,178 | ---- | C] () -- C:\Documents and Settings\Paja\clip_image002.jpg
[2013.04.12 17:26:25 | 000,157,814 | ---- | C] () -- C:\WINDOWS\hpoins14.dat.temp
[2013.04.12 17:26:25 | 000,002,000 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat.temp
[2013.02.12 14:33:16 | 000,000,025 | ---- | C] () -- C:\WINDOWS\Simulator.ini
[2013.01.18 23:16:48 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Paja\Data aplikací\inst.exe
[2013.01.18 23:16:48 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Paja\Data aplikací\pcouffin.cat
[2013.01.18 23:16:48 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Paja\Data aplikací\pcouffin.inf
[2012.12.25 14:38:16 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.12.25 14:38:16 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.12.25 14:38:16 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.12.25 14:38:16 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.12.25 14:38:16 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.12.08 19:59:08 | 000,000,038 | ---- | C] () -- C:\WINDOWS\MARPLOT.INI
[2012.12.08 12:23:54 | 000,102,400 | ---- | C] () -- C:\WINDOWS\NOAA_32.DLL
[2011.11.20 14:47:27 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Paja\Data aplikací\wklnhst.dat
========== ZeroAccess Check ==========
[2010.08.09 10:56:36 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2012.02.28 20:49:53 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2010.08.09 12:44:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Acer
[2011.10.25 17:12:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Advanced Chemistry Development
[2012.07.03 21:09:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Aliasworlds
[2013.10.19 18:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2014.05.12 20:26:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVG
[2012.06.08 17:49:11 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2013.02.12 22:38:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2014.06.17 20:25:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\EgisTec IPS
[2011.11.20 14:25:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\eSobi
[2011.08.02 12:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Extreme Picture Finder
[2014.06.17 20:48:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GlarySoft
[2014.06.05 07:55:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\HitmanPro
[2013.10.13 23:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IsolatedStorage
[2013.08.06 11:49:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Logs
[2014.01.26 05:50:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\RegCure
[2014.06.05 05:26:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\REGSERVO
[2014.06.05 07:55:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\RogueKiller
[2012.04.18 06:22:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Smith Micro
[2011.12.11 17:08:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2011.11.25 12:34:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Vodafone
[2013.12.07 20:46:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\VSO
[2014.05.12 20:21:17 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
[2011.04.03 22:55:24 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2011.12.11 17:04:04 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2014.02.28 03:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
[2014.06.17 20:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}
[2013.09.01 22:50:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{BDDB56DE-AE4E-48A2-B856-FB60C8498453}
[2010.10.29 18:59:30 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2013.06.24 20:20:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\602Installer
[2014.09.16 06:43:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Aegisub
[2014.08.14 09:55:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Apollo VUT
[2014.06.17 20:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Audacity
[2014.05.26 22:32:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\AVAST Software
[2014.06.17 20:25:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\avidemux
[2014.06.17 20:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\DAEMON Tools Lite
[2013.10.13 23:22:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\desksware
[2014.06.17 20:35:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\DiskDefrag
[2014.06.17 20:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\DVDVideoSoft
[2014.05.31 23:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Easeware
[2012.05.29 18:18:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\FM Software Studio
[2014.06.29 20:40:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\fontconfig
[2013.01.04 04:48:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Freeplane
[2013.08.01 18:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\GeoVid
[2014.06.17 20:13:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\GlarySoft
[2013.01.04 12:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\gtk-2.0
[2014.06.17 20:25:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\ICQ
[2013.10.13 23:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\IsolatedStorage
[2014.09.28 20:24:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\KoshyJohn.com
[2014.03.04 00:33:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Liteon
[2012.08.13 13:11:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Opera
[2013.09.15 16:29:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Opera Software
[2012.07.05 01:07:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\PCFix
[2012.05.23 16:36:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\PrimoPDF
[2015.05.30 18:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\ProductData
[2014.04.19 21:14:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Seznam.cz
[2014.06.17 20:25:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\SmartDraw
[2013.07.28 18:27:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\snezvidstudio
[2012.07.25 18:00:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Sony
[2010.11.02 19:02:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Teleca
[2011.11.20 14:47:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Template
[2011.12.11 17:07:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\TuneUp Software
[2012.05.23 17:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\UDC Profiles
[2011.03.02 16:16:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Utherverse
[2014.10.04 12:01:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\uTorrent
[2010.10.26 08:41:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Vodafone
[2013.01.18 23:24:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paja\Data aplikací\Vso
========== Purity Check ==========
========== Custom Scans ==========
< >
[2010.08.09 10:55:14 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2010.08.09 20:23:58 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2013.05.10 14:36:15 | 000,000,936 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.05.10 14:36:18 | 000,000,940 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.05.11 12:53:04 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2014.03.10 20:19:39 | 000,000,214 | ---- | C] () -- C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.03.10 20:19:40 | 000,000,220 | ---- | C] () -- C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
[2014.05.26 22:30:53 | 000,000,364 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2014.09.25 12:54:53 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
[2014.09.25 12:54:54 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1203752577-2552189465-2221179514-1006.job
< >
< MD5 for: AGP440.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:AGP440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\dllcache\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:atapi.sys
[2008.04.14 14:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.14 14:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008.04.14 14:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\i386\AUTOCHK.EXE
[2008.04.14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\Driver Cache\i386\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2008.05.02 12:49:39 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=4B0A100EAF5C49EF3CCA8C641431EACC -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 14:00:00 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 14:00:00 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: HAL.DLL >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:hal.dll
[2008.04.14 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T170813218750\acpiapic_mp\hal.dll
[2008.04.14 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T174712296875\acpiapic_mp\hal.dll
[2008.04.14 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T180456921875\acpiapic_mp\hal.dll
[2008.04.14 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:Changer.sys
[2008.04.14 00:11:00 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\system32\dllcache\changer.sys
< MD5 for: IASTOR.SYS >
[2012.02.01 16:06:58 | 000,470,808 | ---- | M] (Intel Corporation) MD5=76C3966183BD5382E14CEB6DF97D9709 -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T174712296875\pci\ven_8086&dev_27c1&cc_0106\iaStor.sys
[2012.02.01 16:06:58 | 000,470,808 | ---- | M] (Intel Corporation) MD5=76C3966183BD5382E14CEB6DF97D9709 -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T180456921875\pci\ven_8086&dev_27c1&cc_0106\iaStor.sys
[2012.02.01 16:06:58 | 000,470,808 | ---- | M] (Intel Corporation) MD5=76C3966183BD5382E14CEB6DF97D9709 -- C:\WINDOWS\system32\drivers\iaStor.sys
[2012.02.01 16:06:58 | 000,470,808 | ---- | M] (Intel Corporation) MD5=76C3966183BD5382E14CEB6DF97D9709 -- C:\WINDOWS\system32\DRVSTORE\iaAHCI_182B1C83F399012351FE711C28B4239C7A81840C\iaStor.sys
[2009.06.04 12:43:16 | 000,330,264 | ---- | M] (Intel Corporation) MD5=D483687EACE0C065EE772481A96E05F5 -- C:\WINDOWS\OemDir\iaStor.sys
[2011.01.12 18:44:08 | 000,355,352 | ---- | M] (Intel Corporation) MD5=F989555F1662581032CCE1578A8FF28E -- C:\Documents and Settings\Paja\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20140531T170813218750\pci\ven_8086&dev_27c1&cc_0106\iaStor.sys
[2011.01.12 18:44:08 | 000,355,352 | ---- | M] (Intel Corporation) MD5=F989555F1662581032CCE1578A8FF28E -- C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\iaStor.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\i386\sp3.cab:isapnp.sys
[2008.04.14 14:00:00 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 14:00:00 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.14 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2008.04.14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 14:00:00 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
[2008.04.14 14:00:00 | 000,481,792 | ---- | M] (Microsoft Corporation) MD5=F209B5C79A87A9521DC0BD88B039EEE3 -- C:\i386\SYSTEM32\SMSS.EXE
< MD5 for: SVCHOST.EXE >
[2008.04.14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.04.14 14:00:00 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 14:00:00 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 14:00:00 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 14:00:00 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.) 
Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.