VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

ci.dll

https://forum.viry.cz:443/viewtopic.php?t=114240

Stránka 1 z 2

ci.dll

Napsal: 06 srp 2011 16:12
od p4to
zdravim
V priebehu asi 2och tyzdnou sa mi to stalo uz 6x...
Pc sa restartuje a naskoci obrazovka ze to je pokazene abo to chyba ....
opravit to viem ale ako by som tomu mohol predchazat ??
teploty su OK presetril som to mallware bytes a pouzivam aviru

na co vobec sluzi ten subor ci.dll ??

a este ked to opravujem tak pouzijem prikazi bootrec/fixboot a bootrec/fixmbr ten druhi vytvara daku particitu alebo take cosi ale tu staru ze vraj nezmaze ak som to dobre prelozil ... ked sa mi to stalo uz aspon 10x kolko tych particit tam mam ?? co je to vobec ...

dakujem

tu je log

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 17:10:06, on 6. 8. 2011
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\program files (x86)\avira\antivir desktop\avcenter.exe
C:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 204.9.178.11 typepad.com
O1 - Hosts: 74.13.12.32 istockphoto.com
O1 - Hosts: 208.914.0.38 yfrog.com
O1 - Hosts: 63.39.509.12 virustotal.com
O1 - Hosts: 123.125.5.22 126.com
O1 - Hosts: 174.36.28.11 SlideShare.com
O1 - Hosts: 213.238.60.19 xing.com
O1 - Hosts: 59.16.98.139 seesaa.net
O1 - Hosts: 184.72.23.170 hootsuite.com
O1 - Hosts: 211.151.160.16 soku.com
O1 - Hosts: 72.321.12.222 metacafe.com
O1 - Hosts: 9.105.61.98 bitdefender.com
O1 - Hosts: 204.11.19.13 tribalfusion.com
O1 - Hosts: 207.154.104.31 tripadvisor.com
O1 - Hosts: 216.52.20.133 ustream.tv
O1 - Hosts: 174.36.24.132 linkwithin.com
O1 - Hosts: 121.67.23.61 scan.novirusthanks.org
O1 - Hosts: 209.172.34.139 imagevenue.com
O1 - Hosts: 91.206.212.220 booking.com
O1 - Hosts: 118.69.21.6 vnexpress.net
O1 - Hosts: 103.67.11.113 trendmicro.com
O1 - Hosts: 208.85.40.80 pandora.com
O1 - Hosts: 194.16.21.157 softonic.com
O1 - Hosts: 208.83.23.15 match.com
O1 - Hosts: 202.57.69.84 nwt.com
O1 - Hosts: 65.1.03.80 nttnavi.com
O1 - Hosts: 72.51.41.235 nrk.no
O1 - Hosts: 110.16.19.17 nozonedata.com
O1 - Hosts: 76.16.3.21 nachtagenten.com
O1 - Hosts: 195.82.240.124 musicmatch.com
O1 - Hosts: 70.52.56.13 moscowtimes.com
O1 - Hosts: 124.217.235.76 gsn.com
O1 - Hosts: 61.178.63.198 mgd.com
O1 - Hosts: 174.142.24.25 mediastorm.hu
O1 - Hosts: 38.113.207.59 media-servers.com
O1 - Hosts: 116.66.206.161 m5prod.com
O1 - Hosts: 74.175.65.66 lupa.com
O1 - Hosts: 207.20.66.53 liveintercom.com
O1 - Hosts: 71.96.135.201 keenspace.com
O1 - Hosts: 202.51.17.37 jetsoftware.com
O1 - Hosts: 60.21.54.08 jamba.com
O1 - Hosts: 222.161.3.13 ir.com
O1 - Hosts: 200.24.22.70 investopedia.com
O1 - Hosts: 202.19.24.216 choiceradio.com
O1 - Hosts: 91.206.213.22 booking.com
O1 - Hosts: 118.69.251.6 vnexpress.net
O1 - Hosts: 141.76.5.18 chip.com
O1 - Hosts: 128.06.192.15 redv.net
O1 - Hosts: 194.42.170.124 cgi.com
O1 - Hosts: 199.26.24.66 centcomm.com
O1 - Hosts: 202.19.241.26 digitalnook.com
O1 - Hosts: 60.251.19.134 domainfactory.com
O1 - Hosts: 222.161.5.103 dvdfocomm.nu
O1 - Hosts: 157.95.58.15 e-kolay.com
O1 - Hosts: 85.29.231.15 eurosport.com
O1 - Hosts: 189.104.19.61 f1cd.com
O1 - Hosts: 125.162.912.234 free6.com
O1 - Hosts: 80.81.19.20 cdsoftware.com
O1 - Hosts: 85.29.23.115 adware-delete.com
O1 - Hosts: 69.89.221.135 hbv.com
O1 - Hosts: 92.48.210.39 protectorsuite.com
O1 - Hosts: 128.31.3.16 howstuffworks.com
O1 - Hosts: 85.249.23.17 hyena.com
O1 - Hosts: 219.19.180.59 zinfo.com204.9.178.11 typepad.com
O1 - Hosts: 74.13.12.32 istockphoto.com
O1 - Hosts: 208.914.0.38 yfrog.com
O1 - Hosts: 63.39.509.12 virustotal.com
O1 - Hosts: 123.125.5.22 126.com
O1 - Hosts: 174.36.28.11 SlideShare.com
O1 - Hosts: 213.238.60.19 xing.com
O1 - Hosts: 59.16.98.139 seesaa.net
O1 - Hosts: 184.72.23.170 hootsuite.com
O1 - Hosts: 211.151.160.16 soku.com
O1 - Hosts: 72.321.12.222 metacafe.com
O1 - Hosts: 9.105.61.98 bitdefender.com
O1 - Hosts: 204.11.19.13 tribalfusion.com
O1 - Hosts: 207.154.104.31 tripadvisor.com
O1 - Hosts: 216.52.20.133 ustream.tv
O1 - Hosts: 174.36.24.132 linkwithin.com
O1 - Hosts: 121.67.23.61 scan.novirusthanks.org
O1 - Hosts: 209.172.34.139 imagevenue.com
O1 - Hosts: 91.206.212.220 booking.com
O1 - Hosts: 118.69.21.6 vnexpress.net
O1 - Hosts: 103.67.11.113 trendmicro.com
O1 - Hosts: 208.85.40.80 pandora.com
O1 - Hosts: 194.16.21.157 softonic.com
O1 - Hosts: 208.83.23.15 match.com
O1 - Hosts: 202.57.69.84 nwt.com
O1 - Hosts: 65.1.03.80 nttnavi.com
O1 - Hosts: 72.51.41.235 nrk.no
O1 - Hosts: 110.16.19.17 nozonedata.com
O1 - Hosts: 76.16.3.21 nachtagenten.com
O1 - Hosts: 195.82.240.124 musicmatch.com
O1 - Hosts: 70.52.56.13 moscowtimes.com
O1 - Hosts: 124.217.235.76 gsn.com
O1 - Hosts: 61.178.63.198 mgd.com
O1 - Hosts: 174.142.24.25 mediastorm.hu
O1 - Hosts: 38.113.207.59 media-servers.com
O1 - Hosts: 116.66.206.161 m5prod.com
O1 - Hosts: 74.175.65.66 lupa.com
O1 - Hosts: 207.20.66.53 liveintercom.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: BrowserPlugin - {BB54C912-5131-5114-A979-F4D5402448F1} - C:\Users\patricek\AppData\Local\GamePlayLabs Plugin\BHO.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-138382461-3728525367-364277844-1008\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-138382461-3728525367-364277844-1008\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [Welcome Center] C:\Windows\system32\rundll32.exe C:\Windows\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Welcome Center] C:\Windows\system32\rundll32.exe C:\Windows\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{59A722EC-6741-4B99-AB66-3AC64BD899BB}: NameServer = 192.168.0.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~3\AVP11\sbhook.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASDR - Unknown owner - C:\Windows\SysWOW64\ASDR.exe
O23 - Service: ATK Fast User Switch Service (ATKFUSService) - Unknown owner - C:\Windows\system32\ATKFUSService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: mental ray 3.9 Satellite for Autodesk 3ds Max 2012 64-bit - English 64-bit (mi-raysat_3dsmax2012_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 12488 bytes

Re: ci.dll

Napsal: 06 srp 2011 17:01
od Caroprd111
Zdravím :)
  • Příště vkládejte podle pravidel fóra log z RSIT a nedělejte nic bez pokynu rádce.
  • Soubor patří programu Alcohol 120%.
  • Pokud máte, tak mi sem vložte log z MBAM, který jste spustil.
  • bootrec/fixboot a bootrec/fixmbr slouží pouze k opravě, nikoli k vytvoření partic.
Obrázek Stáhněte OTL http://oldtimer.geekstogo.com/OTL.scr na plochu
  • Spusťte, poté do spodního políčka vložte následující skript.

Kód: Vybrat vše

 netsvcs
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

/md5start
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
hal.dll
logevent.dll
netlogon.dll
ntelogon.dll
scecli.dll
sceclt.dll
ws2_32.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
cdrom.sys 
Changer.sys
fastfat.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys 
JakNDis.sys
KR10N.sys
mv61xx.sys
ndis.sys
ntfs.sys
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys 
nvrd32.sys 
nvstor.sys
nvstor32.sys
symmpi.sys
tcpip.sys
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
/md5stop

C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X 
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav 
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe


HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5
  • Označte položku Pro všechny uživatele.
  • Označte položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
  • Klikněte na tlačítko Prohledat
  • Po dokončení, sem vložte logy OTL.Txt a Extras.txt

Re: ci.dll

Napsal: 06 srp 2011 18:36
od p4to
skusal som 2x a vyhodilo tu istu chybu a prestalo to scanovat ... zaselko sa to

Re: ci.dll

Napsal: 06 srp 2011 19:04
od Caroprd111
V tom případě spusťte OTL bez skriptu. :)

Re: ci.dll

Napsal: 06 srp 2011 19:17
od p4to
OTL:
OTL logfile created on: 6. 8. 2011 20:10:32 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\patricek\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000041B | Country: Slovensko | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 1,53 Gb Available Physical Memory | 38,23% Memory free
8,00 Gb Paging File | 5,22 Gb Available in Paging File | 65,30% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 838,08 Gb Total Space | 274,51 Gb Free Space | 32,76% Space Free | Partition Type: NTFS
Drive X: | 93,43 Gb Total Space | 73,21 Gb Free Space | 78,35% Space Free | Partition Type: NTFS

Computer Name: PATRICEK-PC | User Name: patricek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/08/06 18:28:29 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\patricek\Desktop\OTL.scr
PRC - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/07/02 13:38:54 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/06/26 18:24:01 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2011/06/24 17:28:19 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011/05/21 06:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/05/15 19:38:56 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2011/05/15 19:38:46 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011/04/07 21:54:52 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/03/28 16:15:40 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011/03/28 16:15:29 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011/02/22 21:52:54 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe
PRC - [2010/01/28 16:40:13 | 000,655,624 | ---- | M] (Acresso Software Inc.) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
PRC - [2009/08/02 10:18:08 | 001,187,840 | ---- | M] (ASUSTeK Inc.) -- C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe
PRC - [2009/07/27 12:13:28 | 000,061,440 | ---- | M] () -- C:\Windows\SysWOW64\ASDR.exe


========== Modules (SafeList) ==========

MOD - [2011/08/06 18:28:29 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\patricek\Desktop\OTL.scr
MOD - [2010/08/21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/07/14 17:26:01 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2011/02/22 21:52:54 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe -- (mi-raysat_3dsmax2012_64)
SRV:64bit: - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009/05/06 11:41:52 | 000,062,464 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\Windows\SysNative\ATKFUSService.exe -- (ATKFUSService)
SRV:64bit: - [2009/03/12 18:39:54 | 000,086,016 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_64server.exe -- (mi-raysat_3dsmax2010_64)
SRV:64bit: - [2007/11/07 10:11:22 | 004,466,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
SRV - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/07/02 13:38:54 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/05/21 06:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/05/15 19:38:56 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2011/05/15 19:38:46 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011/04/07 21:54:52 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/03/28 16:15:40 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/28 16:40:13 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/07/27 12:13:28 | 000,061,440 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\ASDR.exe -- (ASDR)
SRV - [2009/07/16 17:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/07/06 19:52:42 | 000,025,912 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011/07/02 13:38:54 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2011/07/02 13:38:54 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2011/04/27 15:14:10 | 000,033,344 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2011/03/05 16:36:20 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011/02/05 16:54:24 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2011/02/05 16:54:24 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2010/12/02 12:14:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2010/12/02 12:14:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2010/12/02 12:14:22 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2010/12/02 12:14:18 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2010/12/02 10:36:42 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:64bit: - [2010/11/25 06:59:16 | 000,694,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)
DRV:64bit: - [2010/01/28 13:40:42 | 000,016,384 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EIO64.sys -- (EIO64)
DRV:64bit: - [2009/12/21 21:50:00 | 000,007,552 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vHidDev.sys -- (vhidmini)
DRV:64bit: - [2009/10/30 10:53:50 | 000,010,880 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Abyssus.sys -- (Abyssus)
DRV:64bit: - [2009/10/22 13:54:24 | 000,040,464 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\41940742.sys -- (41940742)
DRV:64bit: - [2009/10/09 23:30:56 | 000,352,784 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\4194074.sys -- (setup_9.0.0.722_24.05.2011_20-12drv)
DRV:64bit: - [2009/09/25 17:59:46 | 000,157,712 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\41940741.sys -- (41940741)
DRV:64bit: - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 02:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/27 02:23:54 | 000,019,432 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\cpuz132_x64.sys -- (cpuz132)
DRV:64bit: - [2009/03/02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/02/17 19:22:22 | 000,039,424 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATKDispLowFilter.sys -- (atkdisplf)
DRV:64bit: - [2009/02/17 19:22:22 | 000,017,792 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asusgsb.sys -- (asusgsb)
DRV:64bit: - [2008/07/26 16:26:34 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
DRV:64bit: - [2008/07/26 16:25:48 | 000,790,424 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2008/07/26 16:22:34 | 002,624,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LV302V64.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV:64bit: - [2008/07/26 16:22:22 | 000,015,768 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lv302a64.sys -- (lvpepf64)
DRV - [2008/08/14 08:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKU\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 02 A9 F0 AE 8C 9F CA 01 [binary data]
IE - HKU\S-1-5-21-138382461-3728525367-364277844-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.sk"
FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1.1
FF - prefs.js..extensions.enabledItems: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}:3.0.5
FF - prefs.js..extensions.enabledItems: plugin3@gameplaylabs.com:3.0
FF - prefs.js..extensions.enabledItems: {5b175400-2368-11de-8c30-0800200c9a66}:1.9
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll File not found
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\patricek\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\patricek\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\patricek\AppData\Local\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\patricek\AppData\Local\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: D:\ff\FirefoxPortable\App\Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: D:\ff\FirefoxPortable\App\Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/24 17:28:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/20 13:53:59 | 000,000,000 | ---D | M]

[2010/12/13 16:38:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patricek\AppData\Roaming\mozilla\Extensions
[2011/07/21 17:16:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patricek\AppData\Roaming\mozilla\Firefox\Profiles\84flnzhf.default\extensions
[2011/05/06 21:23:58 | 000,000,000 | ---D | M] (Media Plugin) -- C:\Users\patricek\AppData\Roaming\mozilla\Firefox\Profiles\84flnzhf.default\extensions\plugin3@gameplaylabs.com
[2011/04/29 18:50:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) --
() (No name found) -- C:\USERS\PATRICEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\84FLNZHF.DEFAULT\EXTENSIONS\{9C51BD27-6ED8-4000-A2BF-36CB95C0C947}.XPI
() (No name found) -- C:\USERS\PATRICEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\84FLNZHF.DEFAULT\EXTENSIONS\GOOGLEDICTIONARY@TOPTIP.CA.XPI
() (No name found) -- C:\USERS\PATRICEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\84FLNZHF.DEFAULT\EXTENSIONS\TABSCOPE@XULDEV.ORG.XPI
[2011/06/24 17:28:19 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/07/07 12:55:34 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/05/10 17:00:17 | 000,001,583 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\atlas-sk.xml
[2011/05/10 17:00:17 | 000,001,380 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\azet-sk.xml
[2011/05/10 17:00:17 | 000,001,479 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\dunaj-sk.xml
[2011/05/10 17:00:17 | 000,001,473 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slovnik-sk.xml
[2011/05/10 17:00:17 | 000,001,104 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-sk.xml
[2011/05/10 17:00:17 | 000,000,830 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2011/07/12 20:53:07 | 000,037,786 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 1267 more lines...
O2 - BHO: (BrowserPlugin) - {BB54C912-5131-5114-A979-F4D5402448F1} - C:\Users\patricek\AppData\Local\GamePlayLabs Plugin\BHO.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-138382461-3728525367-364277844-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKU\.DEFAULT..\Run: [Welcome Center] C:\Windows\SysWow64\OobeFldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-18..\Run: [Welcome Center] C:\Windows\SysWow64\OobeFldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-138382461-3728525367-364277844-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-138382461-3728525367-364277844-1008..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-138382461-3728525367-364277844-1008..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 1
O7 - HKU\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~3\AVP11\sbhook.dll) - File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/03/26 22:35:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - X:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{654879d4-0bca-11df-962e-4061864aeb1d}\Shell - "" = AutoRun
O33 - MountPoints2\{654879d4-0bca-11df-962e-4061864aeb1d}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{9851144e-4735-11e0-aa30-4061864aeb1d}\Shell - "" = AutoRun
O33 - MountPoints2\{9851144e-4735-11e0-aa30-4061864aeb1d}\Shell\AutoRun\command - "" = E:\Setup.exe
O33 - MountPoints2\{dde1310a-3458-11e0-93a4-4061864aeb1d}\Shell - "" = AutoRun
O33 - MountPoints2\{dde1310a-3458-11e0-93a4-4061864aeb1d}\Shell\AutoRun\command - "" = E:\AUTORUN.EXE
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/06 18:28:28 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\patricek\Desktop\OTL.scr
[2011/08/04 22:01:54 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011/08/04 22:01:54 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011/08/04 22:01:50 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2011/08/04 22:01:49 | 000,422,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2011/08/04 22:01:49 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2011/08/04 22:01:49 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2011/08/04 22:01:49 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011/08/04 22:01:48 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2011/08/04 22:01:48 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2011/08/04 22:01:48 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2011/08/04 22:01:47 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2011/08/04 22:01:47 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2011/08/04 22:01:47 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2011/08/04 22:01:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2011/08/04 22:01:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/08/04 22:01:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/08/04 22:01:46 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2011/08/04 22:01:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/08/04 22:01:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2011/08/04 22:01:45 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2011/08/04 22:01:45 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2011/08/04 22:01:45 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2011/08/04 22:01:45 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2011/08/04 22:01:45 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2011/08/04 22:01:45 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2011/08/04 22:01:45 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2011/08/04 22:01:45 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2011/08/04 22:01:18 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2011/08/04 22:01:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2011/08/04 21:46:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Booster 3
[2011/08/04 21:46:07 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
[2011/08/04 21:46:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
[2011/08/02 13:51:43 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Prefetch
[2011/08/02 13:50:16 | 000,000,000 | ---D | C] -- C:\ProgramData\3d-io
[2011/08/02 13:50:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\3d-io plugins
[2011/08/01 14:10:34 | 000,000,000 | ---D | C] -- C:\Users\patricek\Documents\00FLASH
[2011/07/31 16:41:15 | 000,000,000 | ---D | C] -- C:\Users\patricek\Documents\Inventor Server x64 Autodesk 3ds Max 2012 64-bit - English
[2011/07/21 13:45:12 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/07/21 13:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/07/21 13:45:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/07/20 15:49:58 | 000,000,000 | ---D | C] -- C:\Users\patricek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Swift 3D Version 6.00
[2011/07/20 15:49:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electric Rain
[2011/07/15 15:14:43 | 000,000,000 | ---D | C] -- C:\Users\patricek\Desktop\3ds
[2011/07/14 17:36:40 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2011/07/14 17:31:24 | 000,000,000 | ---D | C] -- C:\Users\patricek\Documents\maya
[2011/07/14 17:29:22 | 000,000,000 | ---D | C] -- C:\Users\patricek\Documents\Inventor
[7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[11 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/06 20:04:00 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-138382461-3728525367-364277844-1000UA.job
[2011/08/06 19:41:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/06 19:34:14 | 000,016,521 | ---- | M] () -- C:\Users\patricek\Desktop\Snímka.JPG
[2011/08/06 19:17:48 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011/08/06 18:28:29 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\patricek\Desktop\OTL.scr
[2011/08/06 18:27:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/08/06 17:41:03 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/06 16:49:28 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At55.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At95.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At90.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At85.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At80.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At75.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At70.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At65.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At60.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At50.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At5.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At45.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At40.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At35.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At30.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At25.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At20.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At15.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At10.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At94.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At9.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At84.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At79.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At74.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At69.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At64.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At59.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At54.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At49.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At44.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At4.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At39.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At34.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At29.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At24.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At19.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At14.job
[2011/08/05 22:36:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At89.job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At3.job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At2.job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At1.job
[2011/08/05 13:12:07 | 000,014,778 | ---- | M] () -- C:\Users\patricek\Documents\cc_20110719_110917.reg
[2011/08/04 23:09:39 | 000,030,256 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/04 23:09:38 | 000,030,256 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At98.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At93.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At88.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At83.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At8.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At78.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At73.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At68.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At63.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At58.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At53.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At48.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At43.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At38.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At33.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At28.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At23.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At18.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At13.job
[2011/08/04 22:51:00 | 000,792,590 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/08/04 22:51:00 | 000,660,934 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/08/04 22:51:00 | 000,125,124 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At97.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At92.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At87.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At82.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At77.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At72.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At7.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At67.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At62.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At57.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At52.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At47.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At42.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At37.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At32.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At27.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At22.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At17.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At12.job
[2011/08/04 22:21:03 | 002,934,448 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/08/03 11:04:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-138382461-3728525367-364277844-1000Core.job
[2011/07/28 20:11:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
[2011/07/19 22:36:07 | 000,000,000 | -HS- | M] () -- C:\Program Files (x86)\comset32.exe
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At96.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At91.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At86.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At81.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At76.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At71.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At66.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At61.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At56.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At51.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At6.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At46.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At41.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At36.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At31.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At26.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At21.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At16.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\tasks\At11.job
[7 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[11 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/06 19:34:13 | 000,016,521 | ---- | C] () -- C:\Users\patricek\Desktop\Snímka.JPG
[2011/08/06 18:34:22 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011/07/28 20:11:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
[2011/07/19 22:36:07 | 000,000,000 | -HS- | C] () -- C:\Program Files (x86)\comset32.exe
[2011/07/19 11:09:22 | 000,014,778 | ---- | C] () -- C:\Users\patricek\Documents\cc_20110719_110917.reg
[2011/07/12 20:53:07 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At98.job
[2011/07/12 20:53:06 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At97.job
[2011/07/12 20:53:05 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At96.job
[2011/07/12 20:53:05 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At95.job
[2011/07/12 20:53:04 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At94.job
[2011/07/12 20:48:17 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At93.job
[2011/07/12 20:48:16 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At92.job
[2011/07/12 20:48:15 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At91.job
[2011/07/12 20:48:15 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At90.job
[2011/07/12 20:48:14 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At89.job
[2011/07/12 20:47:54 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At88.job
[2011/07/12 20:47:54 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At87.job
[2011/07/12 20:47:53 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At86.job
[2011/07/12 20:47:52 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At85.job
[2011/07/12 20:47:51 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At84.job
[2011/07/12 13:10:49 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At83.job
[2011/07/12 13:10:48 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At82.job
[2011/07/12 13:10:48 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At81.job
[2011/07/12 13:10:47 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At80.job
[2011/07/12 13:10:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At79.job
[2011/07/12 13:10:26 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At78.job
[2011/07/12 13:10:25 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At77.job
[2011/07/12 13:10:24 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At76.job
[2011/07/12 13:10:23 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At75.job
[2011/07/12 13:10:22 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At74.job
[2011/07/12 13:08:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At73.job
[2011/07/12 13:08:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At72.job
[2011/07/12 13:08:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At71.job
[2011/07/12 13:08:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At70.job
[2011/07/12 13:08:43 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At69.job
[2011/07/12 13:07:20 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At68.job
[2011/07/12 13:07:20 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At67.job
[2011/07/12 13:07:19 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At66.job
[2011/07/12 13:07:18 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At65.job
[2011/07/12 13:07:18 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At64.job
[2011/07/12 13:06:47 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At63.job
[2011/07/12 13:06:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At62.job
[2011/07/12 13:06:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At61.job
[2011/07/12 13:06:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At60.job
[2011/07/12 13:06:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At59.job
[2011/07/12 13:06:32 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At58.job
[2011/07/12 13:06:31 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At57.job
[2011/07/12 13:06:30 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At56.job
[2011/07/12 13:06:30 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At55.job
[2011/07/12 13:06:29 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At54.job
[2011/07/12 13:05:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At53.job
[2011/07/12 13:05:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At52.job
[2011/07/12 13:05:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At51.job
[2011/07/12 13:05:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At50.job
[2011/07/12 13:05:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At49.job
[2011/07/12 12:40:22 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At48.job
[2011/07/12 12:40:22 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At47.job
[2011/07/12 12:40:21 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At46.job
[2011/07/12 12:40:20 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At45.job
[2011/07/12 12:40:19 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At44.job
[2011/07/12 12:37:41 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At43.job
[2011/07/12 12:37:40 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At42.job
[2011/07/12 12:37:40 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At41.job
[2011/07/12 12:37:39 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At40.job
[2011/07/12 12:37:38 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At39.job
[2011/07/12 12:32:14 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At38.job
[2011/07/12 12:32:14 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At37.job
[2011/07/12 12:32:13 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At36.job
[2011/07/12 12:32:12 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At35.job
[2011/07/12 12:32:12 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At34.job
[2011/07/12 12:31:47 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At33.job
[2011/07/12 12:31:46 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At32.job
[2011/07/12 12:31:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At31.job
[2011/07/12 12:31:45 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At30.job
[2011/07/12 12:31:44 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At29.job
[2011/07/12 12:31:26 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At28.job
[2011/07/12 12:31:25 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At27.job
[2011/07/12 12:31:24 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At26.job
[2011/07/12 12:31:24 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At25.job
[2011/07/12 12:31:23 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At24.job
[2011/07/12 12:30:35 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At23.job
[2011/07/12 12:30:34 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At22.job
[2011/07/12 12:30:33 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At21.job
[2011/07/12 12:30:33 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At20.job
[2011/07/12 12:30:32 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At19.job
[2011/07/12 12:29:53 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At18.job
[2011/07/12 12:29:52 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At17.job
[2011/07/12 12:29:51 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At16.job
[2011/07/12 12:29:50 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At15.job
[2011/07/12 12:29:50 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At14.job
[2011/07/12 12:29:35 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At13.job
[2011/07/12 12:29:35 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At12.job
[2011/07/12 12:29:34 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At11.job
[2011/07/12 12:29:33 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At9.job
[2011/07/12 12:29:33 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At10.job
[2011/07/12 12:29:17 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At8.job
[2011/07/12 12:29:17 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At7.job
[2011/07/12 12:29:16 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At6.job
[2011/07/12 12:29:15 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At5.job
[2011/07/12 12:29:14 | 000,000,324 | ---- | C] () -- C:\Windows\tasks\At4.job
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/03/16 14:33:51 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011/03/16 14:33:50 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011/02/06 17:53:25 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\N3DTypeLib.dll
[2010/12/15 21:26:20 | 000,000,088 | ---- | C] () -- C:\Windows\STXKBD32.INI
[2010/11/18 15:48:20 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
[2010/11/10 20:50:48 | 000,004,608 | ---- | C] () -- C:\Users\patricek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/31 09:23:33 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2010/06/14 18:38:10 | 000,001,456 | ---- | C] () -- C:\Users\patricek\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/04/25 12:07:23 | 000,101,072 | ---- | C] () -- C:\Windows\UTP.exe
[2010/04/06 18:43:40 | 000,028,672 | ---- | C] () -- C:\Windows\lmunin2.exe
[2010/04/02 14:09:10 | 000,192,725 | ---- | C] () -- C:\Users\patricek\AppData\Local\debuggee.mdmp
[2010/03/26 12:32:18 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/03/13 13:47:20 | 000,104,680 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2010/03/12 21:00:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010/03/06 11:39:41 | 000,112,640 | ---- | C] () -- C:\Windows\lsb_un20.exe
[2010/02/20 23:12:30 | 000,000,138 | ---- | C] () -- C:\Windows\thtitanc.INI
[2010/02/20 22:32:41 | 000,000,336 | ---- | C] () -- C:\Windows\LEXICON.INI
[2010/02/13 19:43:50 | 000,007,621 | ---- | C] () -- C:\Users\patricek\AppData\Local\Resmon.ResmonCfg
[2010/02/08 07:33:04 | 000,359,320 | ---- | C] () -- C:\Windows\SysWow64\vfprintpthelper.dll
[2010/02/03 18:49:03 | 002,097,152 | ---- | C] () -- C:\Windows\sample5x.dat
[2010/02/03 18:03:33 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
[2010/02/02 22:15:48 | 000,000,096 | ---- | C] () -- C:\Users\patricek\AppData\Local\fusioncache.dat
[2010/01/29 19:05:00 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010/01/28 19:27:26 | 000,000,028 | ---- | C] () -- C:\Windows\ODBC.INI
[2010/01/28 19:26:40 | 000,771,334 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asrussian.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\askorean.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asjapan.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\ASCHT.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\aschs.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asgerman.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asfrench.dll
[2010/01/28 13:39:46 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\aseng.dll
[2009/07/27 12:13:28 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\ASDR.exe
[2009/07/14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2005/04/08 04:16:43 | 000,000,910 | -H-- | C] () -- C:\Users\patricek\AppData\Roaming\patriceklog.dat
[2004/10/11 12:19:00 | 000,092,672 | ---- | C] () -- C:\Windows\SysWow64\ASUSASV2.DLL

========== LOP Check ==========

[2011/04/26 13:02:03 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\2K Sports
[2011/08/05 18:19:48 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\AIMP
[2010/10/08 16:23:06 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\AniTuner
[2011/07/14 17:36:12 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Autodesk
[2011/04/26 18:38:44 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\BlackBean
[2010/02/11 16:03:07 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\com.adobe.ExMan
[2010/02/03 18:07:16 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\DAEMON Tools Lite
[2011/02/09 17:40:13 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\DAEMON Tools Pro
[2011/06/22 20:35:03 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Day 1 Studios
[2010/12/28 21:13:53 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\EAC
[2011/01/30 13:22:43 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\FUEL
[2010/02/03 19:44:36 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\GHISLER
[2010/03/19 22:18:21 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\GullySoft
[2010/12/24 18:08:18 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\LangSoft
[2010/01/28 20:03:47 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Leadertech
[2010/12/24 13:56:30 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\ManyCam
[2010/09/20 19:15:06 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Mirillis
[2011/02/13 15:04:03 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\MultiRenamer
[2010/11/22 16:00:17 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Need for Speed World
[2010/10/19 19:09:59 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Publish Providers
[2011/03/16 14:33:49 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\PunkBuster
[2011/01/29 16:07:16 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\RedDotGames
[2010/01/30 22:54:39 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Sony
[2010/01/30 23:06:42 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Sony Creative Software
[2011/03/05 15:55:28 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\The Creative Assembly
[2011/01/21 15:56:21 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Tunngle
[2010/11/28 20:06:03 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\Ubisoft
[2011/08/06 20:11:46 | 000,000,000 | ---D | M] -- C:\Users\patricek\AppData\Roaming\uTorrent
[2010/04/14 10:42:53 | 000,000,394 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\Tasks\At1.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At10.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At11.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At12.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At13.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At14.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At15.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At16.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At17.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At18.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At19.job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\Tasks\At2.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At20.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At21.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At22.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At23.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At24.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At25.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At26.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At27.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At28.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At29.job
[2011/08/05 14:00:00 | 000,000,376 | ---- | M] () -- C:\Windows\Tasks\At3.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At30.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At31.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At32.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At33.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At34.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At35.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At36.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At37.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At38.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At39.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At4.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At40.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At41.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At42.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At43.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At44.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At45.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At46.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At47.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At48.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At49.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At5.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At50.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At51.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At52.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At53.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At54.job
[2011/08/06 16:49:28 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At55.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At56.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At57.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At58.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At59.job
[2011/07/12 13:04:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At6.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At60.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At61.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At62.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At63.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At64.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At65.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At66.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At67.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At68.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At69.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At7.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At70.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At71.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At72.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At73.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At74.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At75.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At76.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At77.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At78.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At79.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At8.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At80.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At81.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At82.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At83.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At84.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At85.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At86.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At87.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At88.job
[2011/08/05 22:36:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At89.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At9.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At90.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At91.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At92.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At93.job
[2011/08/05 22:36:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At94.job
[2011/08/05 22:40:06 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At95.job
[2011/07/13 17:15:03 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At96.job
[2011/08/04 22:48:00 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At97.job
[2011/08/04 22:52:01 | 000,000,324 | ---- | M] () -- C:\Windows\Tasks\At98.job
[2011/06/03 16:47:55 | 000,032,634 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:64217CD0
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:D05EBBBF
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

< End of report >

Re: ci.dll

Napsal: 06 srp 2011 19:18
od p4to
Extras:
OTL Extras logfile created on: 6. 8. 2011 20:10:32 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\patricek\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000041B | Country: Slovensko | Language: SKY | Date Format: d. M. yyyy

4,00 Gb Total Physical Memory | 1,53 Gb Available Physical Memory | 38,23% Memory free
8,00 Gb Paging File | 5,22 Gb Available in Paging File | 65,30% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 838,08 Gb Total Space | 274,51 Gb Free Space | 32,76% Space Free | Partition Type: NTFS
Drive X: | 93,43 Gb Total Space | 73,21 Gb Free Space | 78,35% Space Free | Partition Type: NTFS

Computer Name: PATRICEK-PC | User Name: patricek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [openNew] -- explorer %1 (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [runas] -- Reg Error: Value error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [openNew] -- explorer %1 (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [runas] -- Reg Error: Value error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"C:\Users\patricek\AppData\Roaming\rundll32.exe" = C:\Users\patricek\AppData\Roaming\rundll32.exe:*:Enabled:Windows Messanger
"C:\Users\patricek\AppData\Local\Temp\svhost.exe" = C:\Users\patricek\AppData\Local\Temp\svhost.exe:*:Enabled:Windows Messanger
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe" = [String data over 1000 bytes]
"C:\Users\patricek\AppData\Roaming\rundll32.exe" = C:\Users\patricek\AppData\Roaming\rundll32.exe:*:Enabled:Windows Messanger
"C:\Users\patricek\AppData\Local\Temp\svhost.exe" = C:\Users\patricek\AppData\Local\Temp\svhost.exe:*:Enabled:Windows Messanger


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{1B918A92-A0BC-4B34-B2EF-AD427332732D}" = Microsoft SQL Server Management Studio Express
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{29C93182-34F6-3275-A18D-59326851CD57}" = Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools
"{2BFA9B05-7418-4EDE-A6FC-620427BAAAA3}" = Crystal Reports Basic Runtime for Visual Studio 2008 (x64)
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{3156336D-8E44-3671-A6FE-AE51D3D6564E}" = Microsoft Windows SDK for Windows 7 (7.1)
"{4529F749-C362-4119-AFA0-0A3F1CA924AB}" = Autodesk MatchMover 2012 64-bit
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{5B52A9E2-0778-4356-93AF-25DBAC2FA365}_is1" = XviD MPEG-4 Video Codec rev.1.3.0
"{5DE154DF-A55E-4FA5-BE59-32E78FCACF3E}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{62EED300-E841-4083-A1D6-60B906271804}" = Microsoft Windows SDK for Visual Studio 2008 Tools
"{64D5BBC6-5270-3711-AA39-31C1087AF4E6}" = Microsoft Visual Studio 2008 Remote Debugger - ENU
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{6C8D7973-31F9-32E1-A820-8DD857910323}" = Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{723C8298-C7B0-0409-A1B6-C3BA6F3FFAB1}" = Autodesk 3ds Max 2012 64-bit - English
"{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}" = Microsoft SQL Server Native Client
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{84452C2C-BDCC-36F3-A189-CE15F02A47FB}" = Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{89026002-A893-42D9-9E20-6829B844735E}" = Application Verifier (x64)
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-0015-0405-1000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-1000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-1000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-1000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-1000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0405-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Czech) 2010
"{90140000-0044-0405-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{91140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{951E6223-AC28-345E-BCF4-B55C1267E321}" = Microsoft Windows SDK for Windows 7 Samples (30514)
"{9aa5f39c-a8de-46b0-919a-0248f8bc8490}" = Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A0B0F02C-410B-3DE3-9740-EC4C3D902532}" = Microsoft Windows SDK for Windows 7 Common Utilities (30514)
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{A992BBAA-723D-4574-A07F-983BF8FAA3E1}" = Microsoft Windows SDK for Visual Studio 2008 Win32 Tools
"{A9F1B5F6-0EE6-0409-BADD-F8BD360FACC3}" = Autodesk 3ds Max 2010 64-bit
"{AC3E3746-8F18-4F8A-9521-1493022C6E0A}" = Autodesk DirectConnect 2012 64-bit
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovládač 3D Vision 270.61
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafický ovládač 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 270.61
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Softvér systému s podporou technológie PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.3.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{B7D0C3BC-CB39-3CA1-9295-A23A93994893}" = Microsoft Windows SDK for Windows 7 Redistributable Components for Windows Debugging Tools (30514)
"{B9E591DD-DAAC-0409-B1B8-5667E359170B}" = Autodesk 3ds Max 2010 64-bit Components
"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{E7F9E526-2324-437B-A609-E8C5309465CB}" = Microsoft Windows Performance Toolkit
"{EA234BC3-39FE-4734-B72F-076086889F6D}" = Composite 2012 64-bit
"{EF8B1A2E-9CCB-3AB2-91E3-4EEDAB1294E1}" = Microsoft Device Emulator (64 bit) version 3.0 - ENU
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}" = NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit
"Autodesk 3ds Max 2012 64-bit - English" = Autodesk 3ds Max 2012 64-bit - English
"Autodesk DirectConnect 2012 64-bit" = Autodesk DirectConnect 2012 64-bit
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010 64-bit" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010 64-bit
"Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit" = Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit
"CCleaner" = CCleaner
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.15
"Defraggler" = Defraggler
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Visual Studio 2008 Remote Debugger - ENU" = Microsoft Visual Studio 2008 Remote Debugger - ENU
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"SDKSetup_7.1.7600.0.30514" = Microsoft Windows SDK for Windows 7 (7.1)
"V-Ray for 3dsmax 2010 for x64" = V-Ray for 3dsmax 2010 for x64
"WinRAR archiver" = WinRAR arkivering

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{0711500B-9912-4D60-9A49-C577B4503D42}" = Nero Recode Help
"{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}" = HiJackThis
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1B040683-C390-4711-ABC7-DA8D85E470E7}" = NeroBurningROM
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2168245A-B5AD-40D8-A641-48E3E070B5B6}" = Adobe Flash CS4 STI-en
"{241F2BF7-69EB-42A4-9156-96B2426C7504}" = Microsoft SQL Server Compact 3.5 for Devices ENU
"{2D3455A8-3B15-41A8-99F8-0D4215746463}" = Nero StartSmart
"{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}" = Microsoft SQL Server Compact 3.5 Design Tools ENU
"{3097B151-1F61-4211-A4CC-D70127B226AE}" = SoundTrax
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2012.0.0
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{425AD62D-5B16-494C-8AAB-6B3D0CF2527A}" = Adobe Setup
"{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"{434D0831-A4CC-401A-9E74-621000018401}" = F1 2010
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}" = Nero ControlCenter
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5AE12194-3EAA-40DF-B2BF-FE1D6B78BBF4}" = Nero Vision
"{5C2E8A0F-80E2-4C68-8CC0-D8D16E7196BF}" = Nero RescueAgent Help
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{65EEA363-8D47-4268-BBCE-85CD54ACDC15}" = Swift 3D v6.00
"{669A032D-4E28-3D11-BB26-8AD5D51EFE87}" = Google Talk Plugin
"{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D}" = Microsoft Document Explorer 2008
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{765443B7-555F-4E8C-9C96-A52409AE4E4A}" = Utility
"{793D1D88-6141-43DE-BE58-59BCE31B4090}" = Adobe Flash CS4 Extension - Flash Lite STI en
"{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}" = 3dsmax ancillary install
"{7F88C9E5-12BD-404F-AC6A-108BAAC9B708}" = ASUS Gamer OSD
"{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83744391-B5A4-40E3-8A7D-E8BF39CB00ED}" = Adobe Creative Suite 4 Design Premium
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83A606F5-BF6F-42ED-9F33-B9F74297CDED}" = Need for Speed(TM) Hot Pursuit
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{863CC205-84C1-4B7D-9033-ECEB0077FFD9}_is1" = AIMP2 MegaPack
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8C654BD0-1949-43DE-84F2-EC2A1ABB0CB4}" = Nero ShowTime
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{90120000-0021-0000-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer 2007
"{90120000-0021-0000-0000-0000000FF1CE}_VisualWebDeveloper_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0021-0409-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer MUI (English) 2007
"{90120000-0021-0409-0000-0000000FF1CE}_VisualWebDeveloper_{E1044ED2-E4AD-4B39-B500-31109750F6B4}" = Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_VisualWebDeveloper_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_VisualWebDeveloper_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{948FFAAE-C57F-447B-9B07-3721E950BFDC}" = Nero ShowTime
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}" = Microsoft SQL Server Database Publishing Wizard 1.2
"{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}" = Nero ControlCenter
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}" = Advertising Center
"{A126E617-63F0-4E57-BFA4-7190F5845C39}" = Guitar Hero World Tour
"{A73BEC3C-40A0-480E-87EF-EFCD33629088}" = NeroExpress
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.5
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2C12C8D-65DC-40BD-B309-5ADB0C6C8D8F}" = Nero WaveEditor
"{B5751715-EC10-43D9-8C95-62E1368433EF}" = Autodesk Material Library Medium Resolution Image Library 2012
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B96C2601-52F5-4D5D-816A-63469EA311EF}" = "Nero SoundTrax Help
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}" = Microsoft SQL Server Compact 3.5 ENU
"{BE4BA698-8533-4F77-9559-C7F3F78C0B05}" = Assassin's Creed Brotherhood
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD1826A5-CFCC-4C6E-9F9D-E181876162EA}" = Nero Rescue Agent
"{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}" = Nero StartSmart Help
"{D7DAD1E4-45F4-3B2B-899A-EA728167EC4F}" = Microsoft Visual Studio 2008 Professional Edition - ENU
"{DC785DB7-D389-48C3-B146-96FE99BF4E2B}" = Vegas Pro 9.0
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E86156E5-9859-440D-8876-26CED1349802}" = Nero WaveEditor Help
"{E8C37E27-5205-4C8A-BECB-B00533045AAE}" = SHIFT 2 UNLEASHED™
"{EB006CA6-ECD1-4C3D-BAD4-6A18A9BAA897}" = Splash Lite
"{EED50C97-C79E-4149-BD82-7C5A22437708}" = Adobe Setup
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F53F6769-AC46-49E3-ABE3-2C8AFD39D0DD}" = Nero Vision
"{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FF29527A-44CD-3422-945E-981A13584000}" = VC Runtimes MSI
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_a68eec966ce913ddaa63251dc82ed31" = Adobe Flash CS4 Professional
"Adobe_b421102ce31f2649ef3785f2a17166f" = Adobe Creative Suite 4 Design Premium
"Autodesk 3ds Max 2012 64-bit - English SP1" = Autodesk 3ds Max 2012 64-bit - English SP1
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BSPlayerf" = BS.Player FREE
"Cisco Packet Tracer 5.3.1_is1" = Cisco Packet Tracer 5.3.1
"DAEMON Tools Lite" = DAEMON Tools Lite
"EasyBCD" = EasyBCD 2.0
"FBX Plugin 2006.08 for Max 9.0" = FBX Plugin 2006.08 for Max 9.0
"Fraps" = Fraps (remove only)
"Game Booster 3_is1" = Game Booster
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"Hamachi" = Hamachi 1.0.2.5
"InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty(R) - World at War(TM) 1.6 Patch
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty(R) - World at War(TM) 1.7 Patch
"InstallShield_{7A529246-912F-4C40-A82A-E608DB702FD7}" = ASUS VideoSecurity Online
"InstallShield_{809D7E6D-915D-4EAD-821F-E13D93F37161}" = ASUS Smart Doctor
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"Landi 2003 - jazykový kurz" = Landi 2003 - jazykový kurz
"Mafia II_is1" = Mafia II DLC Joe's Adventures
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware verzia 1.51.1.1800
"Microsoft Document Explorer 2008" = Microsoft Document Explorer 2008
"Microsoft Visual Studio 2008 Professional Edition - ENU" = Microsoft Visual Studio 2008 Professional Edition - ENU
"Mozilla Firefox 5.0 (x86 sk)" = Mozilla Firefox 5.0 (x86 sk)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Portal" = Portal
"Totalcmd" = Total Commander (Remove or Repair)
"USB-709 Vibration Joystick" = USB-709 Vibration Joystick
"uTorrent" = µTorrent
"VisualWebDeveloper" = Microsoft Visual Studio Web Authoring Component
"VLC media player" = VLC media player 1.1.4
"WinRAR archiver" = WinRAR archiver

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-138382461-3728525367-364277844-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Re: ci.dll

Napsal: 06 srp 2011 19:32
od Caroprd111
:arrow: Doporučuji odinstalovat všechny aplikace od IObit.

:arrow: Máte někde ten log z Malwarebytes' Anti-Malware :???:

:arrow: Znovu spusťte OTL a do spodního bílého okna vložte následující skript. Poté klikněte na Opravit, PC se restartuje, výsledný log vložte sem.

Kód: Vybrat vše

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

:OTL
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1.1
FF - prefs.js..extensions.enabledItems: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}:3.0.5
FF - prefs.js..extensions.enabledItems: {5b175400-2368-11de-8c30-0800200c9a66}:1.9
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll File not found
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O3:64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-138382461-3728525367-364277844-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
[2011/07/19 22:36:07 | 000,000,000 | -HS- | M] () -- C:\Program Files (x86)\comset32.exe
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:64217CD0
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:D05EBBBF
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

:Reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Users\patricek\AppData\Roaming\rundll32.exe" =-
"C:\Users\patricek\AppData\Local\Temp\svhost.exe" =-

:Files
C:\Users\patricek\AppData\Roaming\rundll32.exe
C:\Users\patricek\AppData\Local\Temp
C:\Windows\tasks\At*.job

:arrow: Následující soubory otestujte na http://www.virustotal.com, odkaz na výsledek vložte sem.

C:\Windows\UTP.exe
C:\Windows\lmunin2.exe

Re: ci.dll

Napsal: 06 srp 2011 19:43
od p4to
C:\Windows\UTP.exe
MD5: e7b46480571fceaad8242059cdb37d94
Date first seen: 2010-03-24 06:02:10 (UTC)
Date last seen: 2011-01-18 00:17:45 (UTC)
Detection ratio: 0/43

C:\Windows\lmunin2.exe
MD5: dc5bddb370f13ba7e0922db755d1cd2a
Date first seen: 2009-07-07 19:44:33 (UTC)
Date last seen: 2011-07-20 02:09:54 (UTC)
Detection ratio: 0/43

neviem ci je to co potrebujes ...

Re: ci.dll

Napsal: 06 srp 2011 19:44
od Caroprd111
Ano, tohle mi stačí. :) Ještě další kroky. :)

Re: ci.dll

Napsal: 06 srp 2011 19:58
od p4to

Kód: Vybrat vše

All processes killed
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: AppData
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: patricek
->Temp folder emptied: 25524180 bytes
->Temporary Internet Files folder emptied: 266238 bytes
->Java cache emptied: 847612 bytes
->FireFox cache emptied: 43395760 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 5566 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1159168 bytes
%systemroot%\System32 .tmp files removed: 8900744 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 47456 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50333 bytes
RecycleBin emptied: 31589295 bytes
 
Total Files Cleaned = 107,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: AppData
 
User: Default
 
User: Default User
 
User: patricek
->Flash cache emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
 
Total Flash Files Cleaned = 0,00 mb
 
Error creating restore point.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Prefs.js: false removed from browser.search.update
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: tabscope@xuldev.org:1.1.1 removed from extensions.enabledItems
Prefs.js: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}:3.0.5 removed from extensions.enabledItems
Prefs.js: {5b175400-2368-11de-8c30-0800200c9a66}:1.9 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@nexon.net/NxGame\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame\ deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\Windows\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}\ not found.
File {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_USERS\S-1-5-21-138382461-3728525367-364277844-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
C:\Program Files (x86)\comset32.exe moved successfully.
ADS C:\ProgramData\TEMP:64217CD0 deleted successfully.
ADS C:\ProgramData\TEMP:DFC5A2B2 deleted successfully.
ADS C:\ProgramData\TEMP:D05EBBBF deleted successfully.
ADS C:\ProgramData\TEMP:888AFB86 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Users\patricek\AppData\Roaming\rundll32.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Users\patricek\AppData\Local\Temp\svhost.exe deleted successfully.
========== FILES ==========
File\Folder C:\Users\patricek\AppData\Roaming\rundll32.exe not found.
Folder move failed. C:\Users\patricek\AppData\Local\Temp scheduled to be moved on reboot.
C:\Windows\tasks\At1.job moved successfully.
C:\Windows\tasks\At10.job moved successfully.
C:\Windows\tasks\At11.job moved successfully.
C:\Windows\tasks\At12.job moved successfully.
C:\Windows\tasks\At13.job moved successfully.
C:\Windows\tasks\At14.job moved successfully.
C:\Windows\tasks\At15.job moved successfully.
C:\Windows\tasks\At16.job moved successfully.
C:\Windows\tasks\At17.job moved successfully.
C:\Windows\tasks\At18.job moved successfully.
C:\Windows\tasks\At19.job moved successfully.
C:\Windows\tasks\At2.job moved successfully.
C:\Windows\tasks\At20.job moved successfully.
C:\Windows\tasks\At21.job moved successfully.
C:\Windows\tasks\At22.job moved successfully.
C:\Windows\tasks\At23.job moved successfully.
C:\Windows\tasks\At24.job moved successfully.
C:\Windows\tasks\At25.job moved successfully.
C:\Windows\tasks\At26.job moved successfully.
C:\Windows\tasks\At27.job moved successfully.
C:\Windows\tasks\At28.job moved successfully.
C:\Windows\tasks\At29.job moved successfully.
C:\Windows\tasks\At3.job moved successfully.
C:\Windows\tasks\At30.job moved successfully.
C:\Windows\tasks\At31.job moved successfully.
C:\Windows\tasks\At32.job moved successfully.
C:\Windows\tasks\At33.job moved successfully.
C:\Windows\tasks\At34.job moved successfully.
C:\Windows\tasks\At35.job moved successfully.
C:\Windows\tasks\At36.job moved successfully.
C:\Windows\tasks\At37.job moved successfully.
C:\Windows\tasks\At38.job moved successfully.
C:\Windows\tasks\At39.job moved successfully.
C:\Windows\tasks\At4.job moved successfully.
C:\Windows\tasks\At40.job moved successfully.
C:\Windows\tasks\At41.job moved successfully.
C:\Windows\tasks\At42.job moved successfully.
C:\Windows\tasks\At43.job moved successfully.
C:\Windows\tasks\At44.job moved successfully.
C:\Windows\tasks\At45.job moved successfully.
C:\Windows\tasks\At46.job moved successfully.
C:\Windows\tasks\At47.job moved successfully.
C:\Windows\tasks\At48.job moved successfully.
C:\Windows\tasks\At49.job moved successfully.
C:\Windows\tasks\At5.job moved successfully.
C:\Windows\tasks\At50.job moved successfully.
C:\Windows\tasks\At51.job moved successfully.
C:\Windows\tasks\At52.job moved successfully.
C:\Windows\tasks\At53.job moved successfully.
C:\Windows\tasks\At54.job moved successfully.
C:\Windows\tasks\At55.job moved successfully.
C:\Windows\tasks\At56.job moved successfully.
C:\Windows\tasks\At57.job moved successfully.
C:\Windows\tasks\At58.job moved successfully.
C:\Windows\tasks\At59.job moved successfully.
C:\Windows\tasks\At6.job moved successfully.
C:\Windows\tasks\At60.job moved successfully.
C:\Windows\tasks\At61.job moved successfully.
C:\Windows\tasks\At62.job moved successfully.
C:\Windows\tasks\At63.job moved successfully.
C:\Windows\tasks\At64.job moved successfully.
C:\Windows\tasks\At65.job moved successfully.
C:\Windows\tasks\At66.job moved successfully.
C:\Windows\tasks\At67.job moved successfully.
C:\Windows\tasks\At68.job moved successfully.
C:\Windows\tasks\At69.job moved successfully.
C:\Windows\tasks\At7.job moved successfully.
C:\Windows\tasks\At70.job moved successfully.
C:\Windows\tasks\At71.job moved successfully.
C:\Windows\tasks\At72.job moved successfully.
C:\Windows\tasks\At73.job moved successfully.
C:\Windows\tasks\At74.job moved successfully.
C:\Windows\tasks\At75.job moved successfully.
C:\Windows\tasks\At76.job moved successfully.
C:\Windows\tasks\At77.job moved successfully.
C:\Windows\tasks\At78.job moved successfully.
C:\Windows\tasks\At79.job moved successfully.
C:\Windows\tasks\At8.job moved successfully.
C:\Windows\tasks\At80.job moved successfully.
C:\Windows\tasks\At81.job moved successfully.
C:\Windows\tasks\At82.job moved successfully.
C:\Windows\tasks\At83.job moved successfully.
C:\Windows\tasks\At84.job moved successfully.
C:\Windows\tasks\At85.job moved successfully.
C:\Windows\tasks\At86.job moved successfully.
C:\Windows\tasks\At87.job moved successfully.
C:\Windows\tasks\At88.job moved successfully.
C:\Windows\tasks\At89.job moved successfully.
C:\Windows\tasks\At9.job moved successfully.
C:\Windows\tasks\At90.job moved successfully.
C:\Windows\tasks\At91.job moved successfully.
C:\Windows\tasks\At92.job moved successfully.
C:\Windows\tasks\At93.job moved successfully.
C:\Windows\tasks\At94.job moved successfully.
C:\Windows\tasks\At95.job moved successfully.
C:\Windows\tasks\At96.job moved successfully.
C:\Windows\tasks\At97.job moved successfully.
C:\Windows\tasks\At98.job moved successfully.
 
OTL by OldTimer - Version 3.2.26.1 log created on 08062011_204412

Files\Folders moved on Reboot...
C:\Users\patricek\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\patricek\AppData\Local\Temp folder moved successfully.

Registry entries deleted on Reboot...
zmazalo mi to temu z ff znamena to ze to bol vir ???

a este k IObit od nich mam jedine gamebooster a to som instaloval len vcera alebo predvcerom je to program ktori vypne zbytocne sluzby a procesi aby nezatazovali pc pri hrany hier a vycisti to ram ... mozem to odinstalovat nepoznate nieaky podobny program ??

logy z Malwarebytes' Anti-Malware som nasiel nieake je ich asi 5 v tych najnovsich neni nic

Re: ci.dll

Napsal: 06 srp 2011 20:03
od Caroprd111
Logy příště nedávejte do Code. Tému si nainstalujte znovu. :) Podobný program bohužel neznám, ale IObit bych nevěřil.

Jak se chová PC?

Re: ci.dll

Napsal: 06 srp 2011 20:14
od p4to
ok odinstaloval som to ...
no zatial ok ale ten problem co som mal predtym sa staval nepravidelne tak uvidim po par dnoch
kazdopadne velmi dakujem za pomoc

este k tomu ci.dll co je to vlastne za subor ?? co to robi ?? na googli som o tom nenasiel

Re: ci.dll

Napsal: 06 srp 2011 20:17
od Caroprd111
Nevím, co dělá, ale patří k programu Alcohol 120%. Pak se ozvěte.

Re: ci.dll

Napsal: 06 srp 2011 20:27
od p4to
hmm myslim ze ten som nikdy nepouzival ...
je v zlozke C:\Windows\System32

Re: ci.dll

Napsal: 06 srp 2011 20:30
od Caroprd111
OtZkuste ho také otestovat na www.virustotal.com
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz