VIRY.CZ

Dobrý den,
PC běží již delší dobu velmi pomalu, internet, hry apod. Po kontrole Avastem se náhle asi před 2 týdny objevil vir (nejeden), který se údajně podařilo Avastu při kontrole po restartu smazat. PC jede ovšem pořád stejně pomalu. Smazány byly programy MP4Player a MyWeb Search by měl být taky pryč, nejspíš tady ale něco zůstalo prosím o pomoc ... ,

nechali jsme na našem PC udělat scan z HijackThis a tady je:

Logfile of HijackThis v1.99.1
Scan saved at 14:19:40, on 13.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BySoft FreeRAM\FreeRAM.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ADS.Services.Main.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\System32\svchost.exe
G:\Programy\Tunngle\TnglCtrl.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Lukáš Sluka\Dokumenty\Čistící programy\Hijack this\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - - (no file)

Omlouvám se, nevšimnul jsem si, že tam nemám celý scan, takže oprava:


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BySoft FreeRAM\FreeRAM.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ADS.Services.Main.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\System32\svchost.exe
G:\Programy\Tunngle\TnglCtrl.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Lukáš Sluka\Dokumenty\Čistící programy\Hijack this\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BySoft FreeRAM] C:\Program Files\BySoft FreeRAM\FreeRAM.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... xdm490YYCZ
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Advanced) - https://kdp.cpas.cz/EXT_FA/modules/smsx.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (BitDefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab
O16 - DPF: {5D2CF9D0-113A-476B-986F-288B54571614} (DevalVR Control) - http://www.devalvr.com/instalacion/plug ... plugin.php
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 3793770000
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: LMIinit - C:\WINDOWS\SYSTEM32\LMIinit.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ADS Main Service (ADSMainSvc) - Unknown owner - C:\WINDOWS\system32\ADS.Services.Main.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Firebird Guardian Service (InterBaseGuardian) - FirebirdSQL Project - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: Firebird Server (InterBaseServer) - FirebirdSQL Project - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - G:\Programy\Tunngle\TnglCtrl.exe

Zdravim a pekny den preji

Dejte log z RSIT - viz muj podpis - je podrobnejsi nez HJT

Opět zdravíme, zde je Vámi požadovaný log


Logfile of random's system information tool 1.09 (written by random/random)
Run by Lukáš Sluka at 2011-08-14 14:19:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (9%) free of 76 GB
Total RAM: 1023 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:19:28, on 14.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BySoft FreeRAM\FreeRAM.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ADS.Services.Main.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\System32\svchost.exe
G:\Programy\Tunngle\TnglCtrl.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Borland\InterBase\bin\ibserver.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Lukáš Sluka\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Lukáš Sluka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BySoft FreeRAM] C:\Program Files\BySoft FreeRAM\FreeRAM.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... xdm490YYCZ
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Advanced) - https://kdp.cpas.cz/EXT_FA/modules/smsx.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (BitDefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab
O16 - DPF: {5D2CF9D0-113A-476B-986F-288B54571614} (DevalVR Control) - http://www.devalvr.com/instalacion/plug ... plugin.php
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 3793770000
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ADS Main Service (ADSMainSvc) - Unknown owner - C:\WINDOWS\system32\ADS.Services.Main.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Firebird Guardian Service (InterBaseGuardian) - FirebirdSQL Project - C:\Program Files\Borland\InterBase\bin\ibguard.exe
O23 - Service: Firebird Server (InterBaseServer) - FirebirdSQL Project - C:\Program Files\Borland\InterBase\bin\ibserver.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - G:\Programy\Tunngle\TnglCtrl.exe
O24 - Desktop Component 0: (no name) - http://www.tapety-na-plochu.cz/albums/P ... vity17.jpg
O24 - Desktop Component 1: (no name) - http://email.seznam.cz/getAttachment?se ... mentId=873

--
End of file - 9198 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-746137067-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-746137067-839522115-1003.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-07-16 386264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}]
Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2007-07-31 1933256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-07-10 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll [2008-07-13 734704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2007-07-31 1933256]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-07-10 2403392]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-07-04 3493720]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BySoft FreeRAM"=C:\Program Files\BySoft FreeRAM\FreeRAM.exe [2004-12-17 318976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConnectionCenter]
C:\Program Files\Citrix\ICA Client\concentr.exe [2009-09-13 103768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DynamicUSB]
C:\Program Files\DynamicUSBTool\DynamicUSB.exe [2007-03-02 94208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.5\ICQ.exe [2011-06-29 124216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^BDARemote.lnk]
C:\PROGRA~1\USBTV~1\EM28XX\BDAREM~1.EXE [2007-06-26 81997]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-22 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2009-09-28 87352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0xFF000000
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=255
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"G:\Hry\Heroes of Might and Magic V\bin\H5_Game.exe"="G:\Hry\Heroes of Might and Magic V\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V"
"G:\Hry\Heroes of Might and Magic V\bina1\H5_Game.exe"="G:\Hry\Heroes of Might and Magic V\bina1\H5_Game.exe:*:Enabled:Heroes of Might and Magic V: Hammers of Fate"
"C:\NeverwinterNights\NWN\nwmain.exe"="C:\NeverwinterNights\NWN\nwmain.exe:*:Enabled:Neverwinter Nights"
"G:\Hry\Counter-Strike Source\hl2.exe"="G:\Hry\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"G:\Hry\Counter-Strike Source\srcds.exe"="G:\Hry\Counter-Strike Source\srcds.exe:*:Enabled:srcds"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ"
"G:\Hry\Rise Of Legends\legends.exe"="G:\Hry\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends"
"G:\Hry\Warhammer 40000 - Dawn of War\W40k.exe"="G:\Hry\Warhammer 40000 - Dawn of War\W40k.exe:*:Enabled:W40k"
"G:\Hry\Titan Quest\Titan Quest.exe"="G:\Hry\Titan Quest\Titan Quest.exe:*:Enabled:Titan Quest"
"G:\Hry\Titan Quest Immortal Throne\Tqit.exe"="G:\Hry\Titan Quest Immortal Throne\Tqit.exe:*:Enabled:Tqit"
"G:\Hry\Paintball2\paintball2.exe"="G:\Hry\Paintball2\paintball2.exe:*:Enabled:paintball2"
"G:\Hry\Renegade Paintball\PaintballGame.exe"="G:\Hry\Renegade Paintball\PaintballGame.exe:*:Enabled:Renegade Paintball"
"G:\Hry\FIFA 10\FIFA10.exe"="G:\Hry\FIFA 10\FIFA10.exe:*:Enabled:FIFA10"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"G:\Hry\Icewind Dale II\IWD2.exe"="G:\Hry\Icewind Dale II\IWD2.exe:*:Enabled:Icewind Dale II"
"G:\Hry\Silverfall\Silverfall.exe"="G:\Hry\Silverfall\Silverfall.exe:*:Enabled:Silverfall"
"G:\Hry\Two Worlds\TwoWorlds.exe"="G:\Hry\Two Worlds\TwoWorlds.exe:*:Enabled:Two Worlds"
"G:\Hry\Heroes of Might and Magic V - Tribes of the East original\bin\H5_Game.exe"="G:\Hry\Heroes of Might and Magic V - Tribes of the East original\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V- Tribes of the East"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"G:\Disky her\HOMM_v1100_P2P.exe"="G:\Disky her\HOMM_v1100_P2P.exe:*:Enabled:HOMM_v1100_P2P.exe"
"G:\Hry\HeroOnline\NdCheck\NdCheckTool.exe"="G:\Hry\HeroOnline\NdCheck\NdCheckTool.exe:*:Enabled:ĚěÇçÎÄĽţĽě˛âą¤ľß"
"G:\Hry\Allods Online\bin\Launcher.exe"="G:\Hry\Allods Online\bin\Launcher.exe:*:Enabled:Allods Online launcher.exe"
"G:\Hry\Allods Online\bin\AOgame.exe"="G:\Hry\Allods Online\bin\AOgame.exe:*:Enabled:Allods Online AOgame.exe"
"G:\Hry\Hell Forces\hell.exe"="G:\Hry\Hell Forces\hell.exe:*:Enabled:Hell Forces"
"G:\Hry\Lord of the Rings The Battle for Middle-Earth 2\game.dat"="G:\Hry\Lord of the Rings The Battle for Middle-Earth 2\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"G:\Hry\StarCraft II\Versions\Base15405\SC2.exe"="G:\Hry\StarCraft II\Versions\Base15405\SC2.exe:*:Enabled:StarCraft II"
"G:\Hry\The Lord of the Rings Online\lotroclient.exe"="G:\Hry\The Lord of the Rings Online\lotroclient.exe:*:Enabled:lotroclient"
"G:\Hry\Assassins Creed\AssassinsCreed_Dx9.exe"="G:\Hry\Assassins Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"G:\Hry\Assassins Creed\AssassinsCreed_Dx10.exe"="G:\Hry\Assassins Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"G:\Hry\Assassins Creed\AssassinsCreed_Launcher.exe"="G:\Hry\Assassins Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"G:\Programy\Tunngle\TnglCtrl.exe"="G:\Programy\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service"
"G:\Programy\Tunngle\Tunngle.exe"="G:\Programy\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client"
"G:\Hry\Warcraft III\Frozen Throne.exe"="G:\Hry\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - Ledový trůn"
"G:\Hry\Warcraft III\Warcraft III.exe"="G:\Hry\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"G:\Hry\Warcraft III\World Editor.exe"="G:\Hry\Warcraft III\World Editor.exe:*:Enabled:Warcraft III Editor světů"
"G:\Hry\StarCraft II\StarCraft II.exe"="G:\Hry\StarCraft II\StarCraft II.exe:*:Disabled:Blizzard Launcher"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"
"C:\WINDOWS\network diagnostic\xpnetdiag.exe"="C:\WINDOWS\network diagnostic\xpnetdiag.exe:*:Enabled:Network Diagnostic for Windows XP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"G:\Disky her\HOMM_v1100_P2P.exe"="G:\Disky her\HOMM_v1100_P2P.exe:*:Enabled:HOMM_v1100_P2P.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=iyvu9_32.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"vidc.LEAD"=LCODCCMP.DLL
"vidc.wmv3"=wmv9vcm.dll
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2011-08-14 13:05:47 ----D---- C:\Program Files\trend micro
2011-08-14 13:05:42 ----D---- C:\rsit
2011-08-11 09:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-11 09:00:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-11 09:00:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-11 08:39:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-11 08:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-10 23:42:46 ----ASH---- C:\hiberfil.sys
2011-08-10 23:40:16 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2011-07-24 18:22:58 ----D---- C:\Program Files\ATI Technologies
2011-07-24 18:21:41 ----D---- C:\ATI
2011-07-16 18:49:54 ----D---- C:\Program Files\Real
2011-07-16 18:49:42 ----D---- C:\Program Files\Common Files\xing shared

======List of files/folders modified in the last 1 month======

2011-08-14 14:18:49 ----D---- C:\WINDOWS
2011-08-14 13:07:14 ----D---- C:\WINDOWS\Prefetch
2011-08-14 13:05:47 ----RD---- C:\Program Files
2011-08-14 11:35:51 ----D---- C:\WINDOWS\temp
2011-08-14 02:01:44 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-08-13 14:17:02 ----D---- C:\WINDOWS\Debug
2011-08-13 10:38:24 ----SD---- C:\WINDOWS\Tasks
2011-08-13 10:18:40 ----D---- C:\WINDOWS\system32
2011-08-12 08:23:46 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-11 09:23:10 ----RSD---- C:\WINDOWS\assembly
2011-08-11 09:23:10 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-11 09:06:37 ----SHD---- C:\WINDOWS\Installer
2011-08-11 09:06:37 ----HD---- C:\Config.Msi
2011-08-11 09:06:04 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-11 09:05:08 ----D---- C:\WINDOWS\WinSxS
2011-08-11 09:01:11 ----HD---- C:\WINDOWS\inf
2011-08-11 09:01:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-11 09:00:55 ----D---- C:\WINDOWS\system32\drivers
2011-08-11 09:00:38 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-11 08:52:43 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-11 08:39:55 ----D---- C:\Program Files\Internet Explorer
2011-08-11 08:39:38 ----D---- C:\WINDOWS\ie8updates
2011-08-11 08:34:45 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-10 23:32:32 ----AC---- C:\WINDOWS\wininit.ini
2011-08-10 22:09:01 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-10 21:28:14 ----D---- C:\Program Files\QuickTime
2011-08-10 21:17:16 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-10 21:17:12 ----D---- C:\Program Files\DelMp3Kok
2011-08-10 21:12:52 ----D---- C:\Program Files\Windows Media Connect 2
2011-08-07 12:42:52 ----D---- C:\WINDOWS\pss
2011-07-25 17:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-24 19:50:59 ----D---- C:\Program Files\ICQ7.5
2011-07-24 19:28:13 ----D---- C:\Program Files\Common Files\Adobe
2011-07-24 19:27:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-24 19:27:36 ----D---- C:\Program Files\Adobe
2011-07-24 19:25:26 ----D---- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICQ
2011-07-24 17:23:54 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-24 17:14:42 ----D---- C:\Program Files\Common Files
2011-07-16 19:42:07 ----AC---- C:\WINDOWS\CTWave32.ini
2011-07-16 19:40:45 ----AC---- C:\WINDOWS\sbwin.ini
2011-07-16 18:50:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2011-07-16 18:48:48 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2011-07-16 18:48:25 ----A---- C:\WINDOWS\system32\pndx5032.dll
2011-07-16 18:48:25 ----A---- C:\WINDOWS\system32\pndx5016.dll
2011-07-16 18:48:19 ----A---- C:\WINDOWS\system32\pncrt.dll
2011-07-16 18:40:35 ----AC---- C:\WINDOWS\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\System32\DRIVERS\gagp30kx.sys [2008-04-13 46464]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-08-09 114016]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2005-08-10 19968]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-08-24 66560]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2007-01-18 639224]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2002-07-24 32128]
R0 viamraid;viamraid; C:\WINDOWS\system32\DRIVERS\viamraid.sys [2004-07-06 60672]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-07-04 30808]
R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-07-04 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-07-04 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-07-04 309848]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-07-04 43608]
R1 ctxusbm;Citrix USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\ctxusbm.sys [2009-09-08 65584]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2007-01-20 31644]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-07-04 19544]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-07-04 102616]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-12-01 278984]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-12-01 25416]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-22 1522688]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2003-08-28 186068]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2003-09-19 496800]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2003-08-28 6144]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2003-08-28 136448]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2003-08-28 145504]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\System32\drivers\ha10kx2k.sys [2003-08-28 823456]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2003-08-28 113840]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 azgrsyi1;azgrsyi1; C:\WINDOWS\system32\drivers\azgrsyi1.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz130;cpuz130; \??\C:\DOCUME~1\LUKSLU~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\System32\drivers\ctdvda2k.sys []
S3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2005-02-02 14408]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-03-06 25280]
S3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\System32\drivers\hap16v2k.sys [2003-08-28 135696]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-21 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-21 21744]
S3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2008-08-11 10144]
S3 MosIrUsb;MosIrUsb.sys; C:\WINDOWS\system32\DRIVERS\MosIrUsb.sys [2004-04-14 20736]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II\system\npkcrypt.sys []
S3 RTL8023;Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver; C:\WINDOWS\system32\DRIVERS\Rtlnic5.sys [2003-12-31 68736]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2004-10-07 174592]
S3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2005-08-03 202112]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ADSMainSvc;ADS Main Service; C:\WINDOWS\system32\ADS.Services.Main.exe [2005-05-23 40960]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-22 405504]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-07-04 42184]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
R2 InterBaseGuardian;Firebird Guardian Service; C:\Program Files\Borland\InterBase\bin\ibguard.exe [2002-12-12 32768]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 TunngleService;TunngleService; G:\Programy\Tunngle\TnglCtrl.exe [2010-11-22 718072]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R3 InterBaseServer;Firebird Server; C:\Program Files\Borland\InterBase\bin\ibserver.exe [2002-12-12 1748992]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-03-17 520192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-24 133104]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-24 133104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-07-10 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-02-27 4010312]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
S4 iPodService;iPodService; C:\Program Files\iPod\bin\iPodService.exe [2006-06-14 323584]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]

-----------------EOF-----------------

Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

Stahnete na plochu CKScanner

• Spustte a kliknete na Search for files
• Po dokonceni skenu kliknete na Save List to File a nasledne OK
• Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  adp3132.sys
  AGP440.sys
  ahcix86.sys
  ahcix86s.sys
  atapi.sys
  autochk.exe
  cdrom.sys
  cngaudit.dll
  cryptsvc.dll
  eNetHook.dll
  eventlog.dll
  explorer.exe
  hal.dll
  Changer.sys
  iaStor.sys
  iastorv.sys
  IdeChnDr.sys
  isapnp.sys
  JakNDis.sys
  KR10N.sys
  logevent.dll
  lsass.exe
  mv61xx.sys
  ndis.sys
  netlogon.dll
  ntelogon.dll
  nvata.sys
  nvatabus.sys
  nvgts.sys
  nvraid.sys
  nvrd32.sys
  nvstor.sys
  nvstor32.sys
  scecli.dll
  sceclt.dll
  smss.exe
  svchost.exe
  symmpi.sys
  tcpip.sys
  userinit.exe
  vaxscsi.sys
  viamraid.sys
  viasraid.sys
  ViPrt.sys
  winlogon.exe
  ws2_32.dll
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  type c:\boot.ini >> test.txt /c
  %SystemDrive%\PhysicalMBR.bin /md5 

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

Opět jsem z5 takže zde jsou požadované scany


CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\lukáš sluka\dokumenty\roman\midi2\nutcracker.mid
c:\documents and settings\lukáš sluka\oblíbené položky\vyhledávače cracků.url
c:\documents and settings\lukáš sluka\oblíbené položky\www.hubi.estranky.cz - hodně cd key a crack.url
c:\documents and settings\lukáš sluka\oblíbené položky\links\uloz.to! - stahování z rapidshare, stahuj, sdílej, obrázky, online video, na mobil thewitcher_crack.rar.url
c:\documents and settings\lukáš sluka\plocha\midi melodie\heavy metal -midifiles\stone temple pilots\crackerman.mid
c:\documents and settings\lukáš sluka\plocha\torrenty\guild_wars_keygen.4007134.tpb.torrent
c:\documents and settings\lukáš sluka\plocha\torrenty\gwen_guild_wars_eye_of_the_north_keygen_real_working_teamrna_---[www.btscene.com]---_.torrent
c:\documents and settings\lukáš sluka\plocha\torrenty\no_one_lives_forever_2_wcrack.torrent
c:\program files\mount&blade\sounds\fire_small_crackle_slick_op.ogg
scanner sequence 3.ED.11.BQNAUH
----- EOF -----

kernlady píše:

Znamena ze nehodlate dale resit

Chybi mi logy z OTL...Ke crackum se nema asi ani cenu vyjadrovat ze Windos jsou predpokladam legalni = zakoupena licence

Scan trval pěkně dlouho - přes hodinu určitě nevím přesně kolik, pak už jsem totiž nevydržel a musel jít taky spát jako přítelkyně


OTL logfile created on: 15.8.2011 2:26:18 - Run 1
OTL by OldTimer - Version 3.2.26.3 Folder = C:\Documents and Settings\Lukáš Sluka\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,48 Mb Total Physical Memory | 638,13 Mb Available Physical Memory | 62,35% Memory free
1,47 Gb Paging File | 1,03 Gb Available in Paging File | 69,99% Paging File free
Paging file location(s): C:\pagefile.sys 400 576 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 6,48 Gb Free Space | 8,69% Space Free | Partition Type: NTFS
Drive G: | 280,00 Gb Total Space | 20,07 Gb Free Space | 7,17% Space Free | Partition Type: NTFS
Drive H: | 18,08 Gb Total Space | 4,82 Gb Free Space | 26,68% Space Free | Partition Type: NTFS

Computer Name: SLOTASOVNA | User Name: Lukáš Sluka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.08.15 02:20:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukáš Sluka\Plocha\OTL.exe
PRC - [2011.08.06 04:21:27 | 001,017,912 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2011.07.04 13:43:54 | 003,493,720 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.07.04 13:43:51 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.11.22 22:52:46 | 000,718,072 | ---- | M] (Tunngle.net GmbH) -- G:\Programy\Tunngle\TnglCtrl.exe
PRC - [2009.09.13 00:08:00 | 000,071,000 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\ICA Client\ssonsvr.exe
PRC - [2006.01.02 17:41:22 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
PRC - [2005.05.23 20:26:28 | 000,040,960 | ---- | M] () -- C:\WINDOWS\system32\ADS.Services.Main.exe
PRC - [2004.12.17 22:44:50 | 000,318,976 | ---- | M] (BySoft) -- C:\Program Files\BySoft FreeRAM\FreeRAM.exe
PRC - [2002.12.12 00:38:04 | 000,032,768 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Borland\InterBase\bin\ibguard.exe
PRC - [2002.12.12 00:37:34 | 001,748,992 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Borland\InterBase\bin\ibserver.exe


========== Modules (SafeList) ==========

MOD - [2011.08.15 02:20:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukáš Sluka\Plocha\OTL.exe
MOD - [2011.08.14 23:41:45 | 001,306,624 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11081401\algo.dll
MOD - [2011.08.10 23:03:50 | 000,086,504 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswScan.dll
MOD - [2011.08.10 23:03:47 | 001,207,120 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswEngin.dll
MOD - [2011.08.10 23:03:46 | 000,321,320 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswCmnBS.dll
MOD - [2011.08.10 23:03:46 | 000,208,544 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswRep.dll
MOD - [2011.08.10 23:03:46 | 000,183,288 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswCmnIS.dll
MOD - [2011.08.10 23:03:46 | 000,097,840 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\aswCmnOS.dll
MOD - [2011.08.10 23:03:43 | 000,040,136 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\defs\11081401\ArPot.dll
MOD - [2011.08.06 04:21:27 | 001,017,912 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
MOD - [2011.08.06 04:21:25 | 000,400,440 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\ppgooglenaclpluginchrome.dll
MOD - [2011.08.06 04:21:24 | 004,118,072 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\pdf.dll
MOD - [2011.08.06 04:20:16 | 000,327,736 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\Locales\cs.dll
MOD - [2011.08.06 04:20:06 | 009,075,768 | ---- | M] (The ICU Project) -- C:\Program Files\Google\Chrome\Application\13.0.782.112\icudt.dll
MOD - [2011.08.06 04:20:00 | 026,362,424 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\13.0.782.112\chrome.dll
MOD - [2011.08.06 04:19:58 | 000,104,520 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\avutil-50.dll
MOD - [2011.08.06 04:19:56 | 000,203,848 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\avformat-52.dll
MOD - [2011.08.06 04:19:55 | 001,846,344 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\13.0.782.112\avcodec-52.dll
MOD - [2011.07.04 13:43:56 | 000,174,560 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\1029\uiLangRes.dll
MOD - [2011.07.04 13:43:56 | 000,086,480 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\1029\Base.dll
MOD - [2011.07.04 13:43:54 | 003,493,720 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
MOD - [2011.07.04 13:43:51 | 001,762,296 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\CommonRes.dll
MOD - [2011.07.04 13:43:51 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2011.07.04 13:43:51 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
MOD - [2011.07.04 13:43:48 | 000,682,344 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswAux.dll
MOD - [2011.07.04 13:43:48 | 000,398,576 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswSqLt.dll
MOD - [2011.07.04 13:43:48 | 000,313,080 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswCmnBS.dll
MOD - [2011.07.04 13:43:48 | 000,201,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswLog.dll
MOD - [2011.07.04 13:43:48 | 000,201,352 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswProperty.dll
MOD - [2011.07.04 13:43:48 | 000,163,200 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswData.dll
MOD - [2011.07.04 13:43:48 | 000,162,712 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswCmnIS.dll
MOD - [2011.07.04 13:43:48 | 000,145,696 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswDld.dll
MOD - [2011.07.04 13:43:48 | 000,046,328 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswEngLdr.dll
MOD - [2011.07.04 13:43:48 | 000,025,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswUtil.dll
MOD - [2011.07.04 13:43:48 | 000,013,896 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswIdle.dll
MOD - [2011.07.04 13:43:47 | 000,610,720 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashWebSv.dll
MOD - [2011.07.04 13:43:47 | 000,095,232 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\aswCmnOS.dll
MOD - [2011.07.04 13:43:47 | 000,046,840 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashWsFtr.dll
MOD - [2011.07.04 13:43:46 | 000,930,032 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashMaiSv.dll
MOD - [2011.07.04 13:43:46 | 000,122,512 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashShell.dll
MOD - [2011.07.04 13:43:45 | 000,182,776 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashBase.dll
MOD - [2011.07.04 13:43:45 | 000,150,352 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashTask.dll
MOD - [2011.07.04 13:43:45 | 000,143,648 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashServ.dll
MOD - [2011.07.04 13:43:45 | 000,061,760 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\ashTaskEx.dll
MOD - [2011.07.04 13:43:45 | 000,060,736 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResStd.dll
MOD - [2011.07.04 13:43:45 | 000,059,736 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResWS.dll
MOD - [2011.07.04 13:43:45 | 000,048,376 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResNS.dll
MOD - [2011.07.04 13:43:45 | 000,041,696 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResP2P.dll
MOD - [2011.07.04 13:43:45 | 000,040,672 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResMes.dll
MOD - [2011.07.04 13:43:45 | 000,033,944 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResJs.dll
MOD - [2011.07.04 13:43:44 | 000,062,832 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResBhv.dll
MOD - [2011.07.04 13:43:44 | 000,053,032 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AhResMai.dll
MOD - [2011.07.04 13:43:42 | 000,311,544 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\Aavm4h.dll
MOD - [2011.07.04 13:43:42 | 000,070,024 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AavmRpch.dll
MOD - [2011.06.06 12:55:30 | 000,394,136 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
MOD - [2011.05.14 01:17:40 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
MOD - [2011.04.18 22:51:18 | 003,781,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll
MOD - [2011.04.18 22:51:18 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
MOD - [2011.04.18 22:51:18 | 000,569,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
MOD - [2010.11.22 22:52:46 | 000,718,072 | ---- | M] (Tunngle.net GmbH) -- G:\Programy\Tunngle\TnglCtrl.exe
MOD - [2010.10.23 02:47:27 | 001,748,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
MOD - [2010.10.08 23:15:35 | 003,391,488 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_f5159646\mscorlib.dll
MOD - [2010.10.08 23:15:29 | 000,835,584 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_4f5ac5e4\system.drawing.dll
MOD - [2010.10.08 23:15:10 | 002,088,960 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_a3143162\system.xml.dll
MOD - [2010.10.08 23:14:58 | 003,018,752 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_fa152196\system.windows.forms.dll
MOD - [2010.10.08 23:14:27 | 001,966,080 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_4bc08327\system.dll
MOD - [2010.10.08 23:13:56 | 001,265,664 | ---- | M] () -- c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll
MOD - [2010.10.08 23:13:56 | 001,232,896 | ---- | M] () -- c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010.07.06 15:32:40 | 001,572,855 | ---- | M] () -- G:\Programy\Tunngle\libeay32.dll
MOD - [2010.06.11 23:21:58 | 000,096,768 | ---- | M] (Tunngle.net GmbH) -- G:\Programy\Tunngle\tNetFilter.dll
MOD - [2010.03.18 13:16:28 | 000,771,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr100_clr0400.dll
MOD - [2009.09.28 20:34:48 | 000,083,288 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\LMIRfsClientNP.dll
MOD - [2009.09.28 20:34:40 | 000,047,416 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\LMIproc.dll
MOD - [2009.09.28 20:34:32 | 000,028,984 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\LMIport.dll
MOD - [2009.09.28 20:34:30 | 000,087,352 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\system32\LMIinit.dll
MOD - [2009.09.13 00:08:00 | 000,071,000 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\ICA Client\ssonsvr.exe
MOD - [2009.09.13 00:08:00 | 000,070,992 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\ICA Client\pnsson.dll
MOD - [2009.05.24 22:41:34 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
MOD - [2008.09.18 21:23:52 | 000,101,888 | ---- | M] (Tunngle.net GmbH) -- G:\Programy\Tunngle\tNetRaw.dll
MOD - [2008.09.18 21:23:48 | 000,265,216 | ---- | M] (Tunngle.net GmbH) -- G:\Programy\Tunngle\tZip.dll
MOD - [2008.09.08 00:11:02 | 000,073,392 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
MOD - [2008.06.24 18:44:28 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mscms.dll
MOD - [2008.05.26 22:22:12 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cs-cz\tquery.dll.mui
MOD - [2008.05.26 22:21:26 | 001,418,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mssrch.dll
MOD - [2008.05.26 22:21:08 | 001,582,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\tquery.dll
MOD - [2008.05.26 22:17:44 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscb.dll
MOD - [2008.05.26 22:17:28 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mssprxy.dll
MOD - [2008.04.14 05:22:08 | 000,383,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wzcdlg.dll
MOD - [2008.04.14 05:22:08 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\xactsrv.dll
MOD - [2008.04.14 05:22:06 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wshirda.dll
MOD - [2008.04.14 05:22:03 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\sti.dll
MOD - [2008.04.14 05:21:55 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shfolder.dll
MOD - [2008.04.14 05:21:54 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\security.dll
MOD - [2008.04.14 05:21:53 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\perfproc.dll
MOD - [2008.04.14 05:21:41 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\fxsst.dll
MOD - [2008.04.14 05:21:41 | 000,451,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\fxsapi.dll
MOD - [2008.04.14 05:16:48 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\icmp.dll
MOD - [2008.04.14 04:14:42 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\browselc.dll
MOD - [2007.04.18 16:50:38 | 000,372,736 | ---- | M] () -- c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll
MOD - [2007.04.18 16:50:35 | 001,339,392 | ---- | M] () -- c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll
MOD - [2007.04.18 16:50:34 | 000,323,584 | ---- | M] () -- c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll
MOD - [2007.04.18 16:50:32 | 000,466,944 | ---- | M] () -- c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll
MOD - [2007.04.18 16:50:31 | 002,052,096 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll
MOD - [2007.01.20 09:08:52 | 000,204,800 | ---- | M] (PowerISO Computing, Inc.) -- C:\Program Files\PowerISO\PWRISOSH.DLL
MOD - [2006.10.18 22:47:18 | 000,284,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\portabledeviceapi.dll
MOD - [2006.10.18 22:47:18 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\portabledevicetypes.dll
MOD - [2006.03.22 05:50:22 | 000,041,984 | ---- | M] (ATI Technologies, Inc.) -- C:\WINDOWS\system32\ati2edxx.dll
MOD - [2006.03.22 05:50:10 | 000,061,440 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ati2evxx.dll
MOD - [2006.03.22 04:38:45 | 000,286,720 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\ATIDEMGR.dll
MOD - [2006.03.21 21:44:16 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Local.Dashboard.dll
MOD - [2006.03.21 21:44:12 | 001,232,896 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Dashboard.dll
MOD - [2006.03.21 21:44:10 | 000,086,016 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.dll
MOD - [2006.03.21 21:44:08 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Service.dll
MOD - [2006.03.21 21:44:08 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VideoOverlay.Graphics.Runtime.dll
MOD - [2006.03.21 21:44:08 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.XManifestation.dll
MOD - [2006.03.21 21:44:04 | 000,061,440 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Dashboard.dll
MOD - [2006.03.21 21:44:00 | 000,299,008 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Runtime.dll
MOD - [2006.03.21 21:43:32 | 000,425,984 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Systemtray.dll
MOD - [2006.03.21 21:43:14 | 000,565,248 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2006.03.21 21:43:12 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2006.03.21 21:43:08 | 000,798,720 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll
MOD - [2006.03.21 21:43:06 | 000,053,248 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2006.03.21 21:43:02 | 000,430,080 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
MOD - [2006.03.21 21:43:00 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:56 | 000,438,272 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:54 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:50 | 001,253,376 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:48 | 000,061,440 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:42 | 001,245,184 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:40 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:36 | 000,868,352 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:34 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:30 | 000,700,416 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:22 | 000,184,320 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:22 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:18 | 000,348,160 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:16 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:12 | 000,307,200 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:12 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:08 | 001,130,496 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2006.03.21 21:42:04 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2006.03.21 21:42:00 | 000,700,416 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:58 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive2.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:54 | 000,892,928 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive3.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:50 | 000,077,824 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive3.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:46 | 000,270,336 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.PowerPlay3.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:44 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.PowerPlay3.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:40 | 000,966,656 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:38 | 000,053,248 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:34 | 000,446,464 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3DLegacy.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:32 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3DLegacy.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:28 | 000,356,352 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.SmartGart.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:26 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.SmartGart.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:22 | 002,785,280 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VideoOverlay.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:14 | 000,143,360 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VPURecover.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:14 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VPURecover.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:10 | 000,135,168 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.WorkstationConfig.Graphics.Dashboard.dll
MOD - [2006.03.21 21:41:08 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.WorkstationConfig.Graphics.Runtime.dll
MOD - [2006.03.21 21:41:04 | 000,106,496 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Welcome.Local.Dashboard.dll
MOD - [2006.03.21 21:41:04 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:56 | 000,499,712 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:54 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:50 | 000,704,512 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:48 | 000,053,248 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:44 | 000,573,440 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:42 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:38 | 000,491,520 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:36 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:32 | 000,442,368 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:32 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:32 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:28 | 000,811,008 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:40:24 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU2.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:24 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime.dll
MOD - [2006.03.21 21:40:18 | 000,299,008 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VeryLargeDesktop.Graphics.Dashboard.dll
MOD - [2006.03.21 21:39:16 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Implementation.dll
MOD - [2006.03.21 21:39:12 | 000,499,712 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU2.Graphics.Dashboard.dll
MOD - [2006.03.21 21:09:30 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0601.dll
MOD - [2006.03.21 21:09:28 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0600.dll
MOD - [2006.03.08 09:44:20 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Shared.dll
MOD - [2006.02.14 16:14:04 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP2.Graphics.Shared.dll
MOD - [2006.02.14 16:13:46 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2006.02.14 16:13:16 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Shared.dll
MOD - [2006.02.14 16:12:40 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2006.02.14 16:12:06 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT2.Graphics.Shared.dll
MOD - [2006.02.14 16:11:36 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2006.02.14 16:11:06 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2006.02.10 15:58:38 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3DLegacy.Graphics.Shared.dll
MOD - [2006.02.10 15:58:34 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2006.02.09 15:11:00 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive3.Graphics.Shared.dll
MOD - [2006.02.08 17:32:22 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0602.dll
MOD - [2006.02.01 16:48:02 | 000,069,632 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.dll
MOD - [2006.01.26 17:11:12 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Shared.dll
MOD - [2006.01.26 17:11:04 | 000,057,344 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2006.01.24 17:19:04 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Shared.dll
MOD - [2006.01.24 17:18:56 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2006.01.19 13:48:26 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.dll
MOD - [2006.01.17 17:02:04 | 000,040,960 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.Clients.dll
MOD - [2006.01.17 17:02:04 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.Shared.dll
MOD - [2006.01.17 17:02:04 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Dashboard.Shared.dll
MOD - [2006.01.17 17:02:04 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\DEM.Foundation.dll
MOD - [2006.01.17 17:02:02 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.WorkstationConfig.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VideoOverlay.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.SmartGart.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.PowerPlay3.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VPURecover.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VeryLargeDesktop.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU2.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive2.Graphics.Shared.dll
MOD - [2006.01.17 17:02:02 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,032,768 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour.Graphics.Shared.dll
MOD - [2006.01.17 17:02:00 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2006.01.17 17:01:58 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty2.Graphics.Shared.dll
MOD - [2006.01.17 17:01:58 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2006.01.17 17:01:56 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\ATICCCom.dll
MOD - [2006.01.17 16:40:06 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\APM.Foundation.dll
MOD - [2006.01.17 16:39:44 | 000,020,480 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Shared.dll
MOD - [2006.01.17 16:39:36 | 000,016,384 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.VideoOverlay.Shared.dll
MOD - [2006.01.17 16:39:34 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.DisplaysManager.Shared.dll
MOD - [2006.01.17 16:39:32 | 000,036,864 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.dll
MOD - [2006.01.17 16:39:32 | 000,024,576 | ---- | M] (ATI Technologies Inc.) -- c:\Program Files\ATI Technologies\ATI.ACE\AEM.Foundation.dll
MOD - [2006.01.07 14:30:22 | 000,229,376 | ---- | M] () -- c:\windows\assembly\gac\mscorlib.resources\1.0.5000.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2006.01.07 14:30:21 | 000,180,224 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms.resources\1.0.5000.0_cs_b77a5c561934e089\system.windows.forms.resources.dll
MOD - [2006.01.02 17:41:22 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
MOD - [2005.10.19 10:17:58 | 000,073,728 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll
MOD - [2005.10.10 14:21:24 | 000,311,296 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2005.10.07 15:05:32 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2005.05.23 20:26:28 | 000,040,960 | ---- | M] () -- C:\WINDOWS\system32\ADS.Services.Main.exe
MOD - [2004.12.17 22:44:50 | 000,318,976 | ---- | M] (BySoft) -- C:\Program Files\BySoft FreeRAM\FreeRAM.exe
MOD - [2004.06.21 22:02:18 | 000,180,315 | ---- | M] (HP) -- C:\WINDOWS\system32\hpzsnt10.dll
MOD - [2004.04.23 12:00:00 | 000,116,736 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\CNMLM5y.DLL
MOD - [2004.04.23 12:00:00 | 000,017,920 | ---- | M] (CANON INC.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPD5y.DLL
MOD - [2002.12.12 00:38:04 | 000,032,768 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Borland\InterBase\bin\ibguard.exe
MOD - [2002.12.12 00:37:34 | 001,748,992 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Borland\InterBase\bin\ibserver.exe
MOD - [2002.03.07 12:17:20 | 000,360,448 | ---- | M] (FirebirdSQL Project) -- C:\WINDOWS\system32\gds32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011.07.04 13:43:51 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.02.27 19:26:00 | 004,010,312 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2010.11.22 22:52:46 | 000,718,072 | ---- | M] (Tunngle.net GmbH) [Auto | Running] -- G:\Programy\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2005.05.23 20:26:28 | 000,040,960 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ADS.Services.Main.exe -- (ADSMainSvc)
SRV - [2004.03.18 17:55:48 | 000,065,536 | ---- | M] (HP) [Disabled | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2002.12.12 00:38:04 | 000,032,768 | ---- | M] (FirebirdSQL Project) [Auto | Running] -- C:\Program Files\Borland\InterBase\bin\ibguard.exe -- (InterBaseGuardian)
SRV - [2002.12.12 00:37:34 | 001,748,992 | ---- | M] (FirebirdSQL Project) [On_Demand | Running] -- C:\Program Files\Borland\InterBase\bin\ibserver.exe -- (InterBaseServer)


========== Driver Services (SafeList) ==========

DRV - [2011.07.04 13:36:43 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.07.04 13:36:32 | 000,309,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.07.04 13:35:23 | 000,043,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.07.04 13:35:12 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.07.04 13:32:32 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.07.04 13:32:13 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.07.04 13:32:12 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.03.06 23:08:57 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.12.01 20:34:26 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.12.01 20:34:25 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.09.28 20:34:48 | 000,083,288 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2009.09.16 07:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV - [2009.09.08 19:13:16 | 000,065,584 | ---- | M] (Citrix Systems, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ctxusbm.sys -- (ctxusbm)
DRV - [2008.10.19 16:31:55 | 000,023,217 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Lineage II\system\npkcrypt.sys -- (npkcrypt)
DRV - [2008.08.11 13:41:00 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008.04.13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007.01.20 09:11:07 | 000,031,644 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2007.01.18 09:32:03 | 000,639,224 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2006.11.10 15:08:50 | 000,024,064 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ATITool.sys -- (ATITool)
DRV - [2006.03.22 05:56:22 | 001,522,688 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005.08.24 15:55:48 | 000,066,560 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005.08.10 16:06:28 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005.08.10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005.08.03 09:16:10 | 000,202,112 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vinyl97.sys -- (VIAudio) Vinyl AC'97 Audio Controller (WDM)
DRV - [2005.05.16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005.03.09 08:53:00 | 000,036,352 | R--- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004.08.09 13:33:26 | 000,114,016 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.08.09 13:29:28 | 000,053,920 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004.08.03 22:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.07.19 16:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2004.04.14 14:52:54 | 000,020,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MosIrUsb.sys -- (MosIrUsb)
DRV - [2003.12.31 12:14:12 | 000,068,736 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtlnic5.sys -- (RTL8023)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.19 03:47:22 | 000,496,800 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2003.08.28 10:24:36 | 000,145,504 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EMUPIA2K.SYS -- (emupia)
DRV - [2003.08.28 10:24:24 | 000,136,448 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CTSFM2K.SYS -- (ctsfm2k)
DRV - [2003.08.28 10:24:08 | 000,006,144 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CTPRXY2K.SYS -- (ctprxy2k)
DRV - [2003.08.28 10:24:04 | 000,113,840 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2003.08.28 10:22:32 | 000,186,068 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CTAC32K.SYS -- (ctac32k)
DRV - [2003.08.28 10:22:20 | 000,135,696 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HAP16V2K.SYS -- (hap16v2k)
DRV - [2003.08.28 10:22:04 | 000,823,456 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2003.03.05 13:19:28 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PFMODNT.SYS -- (PfModNT)
DRV - [2002.07.24 05:30:00 | 000,032,128 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2001.08.17 21:19:20 | 000,003,712 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://red.clientapps.yahoo.com/customi ... earch.html
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found


IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://google.icq.com/search/search_frame.php
IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: g:\programy\real player\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: g:\programy\real player\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.660: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.660: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.660: g:\programy\real player\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPGameWebStarter: C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll (WEBZEN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.07.16 18:49:28 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2008.09.13 18:49:29 | 000,000,686 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-2052111302-746137067-839522115-1003..\Run: [BySoft FreeRAM] C:\Program Files\BySoft FreeRAM\FreeRAM.exe (BySoft)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00 [binary data]
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (ICQ, LLC.)
O15 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..Trusted Domains: ([]msn in My Computer)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://www.apple.com/qtactivex/qtplugin.cab (Reg Error: Key error.)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} https://kdp.cpas.cz/EXT_FA/modules/smsx.cab (MeadCo ScriptX)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} http://quickscan.bitdefender.com/qsax/qsax.cab (BitDefender QuickScan Control)
O16 - DPF: {5D2CF9D0-113A-476B-986F-288B54571614} http://www.devalvr.com/instalacion/plug ... plugin.php (DevalVR Control)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resourc ... oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 3793770000 (MUWebControl Class)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/s ... DEXAXO.cab (HP Download Manager)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} http://icq.oberon-media.com/Gameshell/G ... meHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} http://drmlicense.one.microsoft.com/crl ... crlocx.ocx (CRLDownloadWrapper Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop Components:0 () - http://www.tapety-na-plochu.cz/albums/P ... vity17.jpg
O24 - Desktop Components:1 () - http://email.seznam.cz/getAttachment?se ... mentId=873
O24 - Desktop Components:2 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.12.23 19:59:37 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0e98d50a-9bcb-11db-90d6-0013d39de504}\Shell - "" = AutoRun
O33 - MountPoints2\{0e98d50a-9bcb-11db-90d6-0013d39de504}\Shell\AutoRun\command - "" = E:\autorun.exe
O33 - MountPoints2\{d9c9e328-e1a8-11dd-952f-0013d39de504}\Shell - "" = AutoRun
O33 - MountPoints2\{d9c9e328-e1a8-11dd-952f-0013d39de504}\Shell\AutoRun\command - "" = G:\autorun.exe
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll (Ligos Corporation)
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll (Ligos Corporation)
Drivers32: vidc.LEAD - LCODCCMP.DLL File not found
Drivers32: vidc.wmv3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\WINDOWS\System32\iyvu9_32.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.08.15 02:20:40 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Lukáš Sluka\Plocha\OTL.exe
[2011.08.14 15:20:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\BlackMirrorIII
[2011.08.14 14:18:51 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Lukáš Sluka\Recent
[2011.08.14 13:05:47 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.08.14 13:05:42 | 000,000,000 | ---D | C] -- C:\rsit
[2011.08.11 08:32:21 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011.08.11 08:31:22 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011.08.10 23:41:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Catalyst Control Center
[2006.12.02 14:06:27 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.08.15 02:41:25 | 000,000,950 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.08.15 02:31:32 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.08.15 02:20:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lukáš Sluka\Plocha\OTL.exe
[2011.08.15 02:18:19 | 000,459,264 | ---- | M] () -- C:\Documents and Settings\Lukáš Sluka\Plocha\CKScanner.exe
[2011.08.15 02:17:18 | 000,000,298 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-746137067-839522115-1003.job
[2011.08.15 02:17:18 | 000,000,290 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-746137067-839522115-1003.job
[2011.08.15 00:41:50 | 000,000,946 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.08.14 11:22:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.08.14 11:18:42 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.08.14 11:18:28 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
[2011.08.14 02:01:56 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2011.08.14 02:01:56 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2011.08.14 02:01:56 | 000,000,288 | ---- | M] () -- C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2011.08.14 02:01:56 | 000,000,288 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2011.08.14 02:01:55 | 000,028,404 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,028,404 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,016,968 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,016,968 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:29 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\Access.dat
[2011.08.13 14:57:31 | 003,406,668 | ---- | M] () -- C:\WINDOWS\{00000000-00000000-00000009-00001102-00000002-80661102}.CDF
[2011.08.11 09:06:04 | 000,497,952 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011.08.11 09:06:04 | 000,481,656 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.08.11 09:06:04 | 000,100,722 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011.08.11 09:06:04 | 000,079,730 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.08.10 23:32:32 | 000,000,065 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2011.08.10 23:31:43 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.08.10 23:22:43 | 000,047,658 | ---- | M] () -- C:\Documents and Settings\Lukáš Sluka\Dokumenty\cc_20110810_232208.reg
[2011.08.10 21:27:07 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2011.08.10 21:27:07 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2011.08.10 21:22:25 | 000,038,156 | ---- | M] () -- C:\Documents and Settings\Lukáš Sluka\Dokumenty\cc_20110810_212201.reg
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.08.15 02:31:32 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.08.15 02:18:18 | 000,459,264 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Plocha\CKScanner.exe
[2011.08.10 23:42:46 | 1073,270,784 | -HS- | C] () -- C:\hiberfil.sys
[2011.08.10 23:40:16 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011.08.10 23:22:10 | 000,047,658 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Dokumenty\cc_20110810_232208.reg
[2011.08.10 21:27:07 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2011.08.10 21:27:07 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2011.08.10 21:22:05 | 000,038,156 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Dokumenty\cc_20110810_212201.reg
[2011.05.15 21:02:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\Access.dat
[2011.05.15 20:34:59 | 000,066,711 | ---- | C] () -- C:\WINDOWS\War3Unin.dat
[2011.03.21 19:56:22 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll
[2011.02.12 13:51:57 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011.02.12 13:50:44 | 000,000,036 | -H-- | C] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\swk.ini
[2011.01.10 00:29:21 | 000,002,644 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010.04.17 21:33:08 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\psfind.dll
[2010.04.10 18:11:32 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\SI.bin
[2010.02.21 21:42:19 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2010.02.11 06:12:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010.02.11 06:12:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010.02.01 01:16:51 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2009.12.01 20:34:26 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009.12.01 20:34:25 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009.08.04 20:58:45 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS5y.DLL
[2009.02.09 20:42:20 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\Alphablending.dll
[2009.01.16 22:05:30 | 000,005,368 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\froggy_scorebox
[2009.01.16 22:05:30 | 000,001,720 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\pl_accounts.pl_acc
[2009.01.16 22:05:30 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Troll.options
[2009.01.16 21:49:57 | 000,000,271 | ---- | C] () -- C:\WINDOWS\spidla.INI
[2009.01.09 21:17:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2008.11.29 22:52:08 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2008.11.29 22:38:59 | 000,053,248 | ---- | C] () -- C:\WINDOWS\unrar.dll
[2008.10.17 00:23:12 | 000,000,123 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\Model_ji.ini
[2008.10.17 00:03:44 | 000,000,829 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\User_ji.cds
[2008.10.05 18:52:22 | 000,000,485 | ---- | C] () -- C:\WINDOWS\EReg072.dat
[2008.09.13 19:18:12 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2008.09.13 19:18:12 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2008.09.13 19:18:12 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2008.09.13 19:18:12 | 000,049,152 | ---- | C] () -- C:\WINDOWS\VFind.exe
[2008.07.10 21:58:19 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008.07.08 18:38:30 | 003,843,072 | ---- | C] () -- C:\WINDOWS\System32\PODATELNA.DLL
[2008.06.12 01:55:04 | 000,041,296 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2008.06.06 16:31:29 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\CSDLGE1LIB.dll
[2008.05.26 22:22:14 | 000,015,552 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008.05.26 22:22:10 | 000,021,464 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008.05.26 22:22:04 | 000,014,910 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008.05.26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008.05.26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008.05.25 15:20:41 | 000,000,816 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2008.02.22 21:10:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2007.08.22 21:09:40 | 000,000,169 | ---- | C] () -- C:\WINDOWS\TOP_SPIN.INI
[2007.08.21 15:12:18 | 000,274,251 | ---- | C] () -- C:\WINDOWS\PC Image Editor Uninstaller.exe
[2007.06.02 23:02:35 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2007.05.27 18:50:54 | 000,001,332 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\QTSBandwidthCache
[2007.05.02 23:28:33 | 000,000,065 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007.04.18 21:33:22 | 000,001,006 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2007.04.18 13:51:01 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\sfsc.exe
[2007.04.18 13:51:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\jos_ibsec.dll
[2007.04.18 13:26:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2007.04.18 13:02:41 | 000,000,299 | ---- | C] () -- C:\WINDOWS\navrhcp.ini
[2007.04.18 12:54:45 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ADS.Services.Main.exe
[2007.04.18 12:54:45 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\ntrc.exe
[2007.04.18 12:54:44 | 000,137,728 | ---- | C] () -- C:\WINDOWS\System32\josmisc.exe
[2007.04.01 12:02:43 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc1395793746.bin
[2007.03.13 17:21:59 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2007.03.11 12:16:53 | 000,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2007.02.21 16:45:00 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\xpspqdvd.dat
[2007.01.18 10:47:07 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2007.01.18 10:47:07 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2007.01.17 16:13:34 | 000,071,836 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ArtRom.LST
[2006.12.23 15:34:53 | 000,000,400 | ---- | C] () -- C:\WINDOWS\T602.INI
[2006.12.07 23:01:31 | 000,192,512 | ---- | C] () -- C:\WINDOWS\off-road-uninst.exe
[2006.12.04 18:09:00 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2006.12.02 20:15:35 | 000,000,288 | ---- | C] () -- C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2006.12.02 20:15:35 | 000,000,288 | ---- | C] () -- C:\WINDOWS\System32\DVCState-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2006.12.02 14:08:17 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI
[2006.12.02 14:08:14 | 001,048,576 | ---- | C] () -- C:\WINDOWS\System32\SFMAN.DAT
[2006.12.02 14:06:45 | 000,035,766 | ---- | C] () -- C:\WINDOWS\System32\Emu10kx.ini
[2006.12.02 14:06:45 | 000,000,029 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2006.12.02 14:06:37 | 000,251,970 | ---- | C] () -- C:\WINDOWS\System32\ctstatic.dat
[2006.12.02 14:06:36 | 000,189,704 | ---- | C] () -- C:\WINDOWS\System32\ctdlang.dat
[2006.12.02 14:06:36 | 000,142,968 | ---- | C] () -- C:\WINDOWS\System32\CTBAS2W.DAT
[2006.12.02 14:06:36 | 000,115,322 | ---- | C] () -- C:\WINDOWS\System32\ctbasicw.dat
[2006.12.02 14:06:36 | 000,053,674 | ---- | C] () -- C:\WINDOWS\System32\ctdaught.dat
[2006.12.02 14:06:34 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\REGPLIB.EXE
[2006.12.02 14:06:33 | 000,184,320 | ---- | C] () -- C:\WINDOWS\PSCONV.EXE
[2006.12.02 14:06:33 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\KILLAPPS.EXE
[2006.12.02 14:06:33 | 000,005,515 | ---- | C] () -- C:\WINDOWS\System32\ENSDEF.INI
[2006.12.02 14:06:33 | 000,000,192 | ---- | C] () -- C:\WINDOWS\System32\KILL.INI
[2006.11.15 20:29:42 | 000,000,221 | ---- | C] () -- C:\WINDOWS\CTWave32.ini
[2006.11.10 15:08:50 | 000,024,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATITool.sys
[2006.10.18 22:51:39 | 000,000,035 | ---- | C] () -- C:\WINDOWS\vidwiz.ini
[2006.10.18 21:26:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vstudio.INI
[2006.10.17 21:44:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsrex.INI
[2006.10.17 21:44:09 | 000,000,036 | ---- | C] () -- C:\WINDOWS\dswplug.ini
[2006.10.17 21:44:09 | 000,000,011 | ---- | C] () -- C:\WINDOWS\Msdevctl.ini
[2006.10.17 21:44:08 | 000,000,868 | ---- | C] () -- C:\WINDOWS\Ulead32.ini
[2006.10.07 03:38:48 | 000,000,026 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2006.10.06 15:21:21 | 000,000,026 | ---- | C] () -- C:\WINDOWS\neosetup.INI
[2006.07.17 14:43:25 | 000,000,307 | ---- | C] () -- C:\WINDOWS\sbwin.ini
[2006.06.17 00:27:33 | 000,000,067 | ---- | C] () -- C:\WINDOWS\DVDRegionFree.INI
[2006.06.04 12:26:36 | 000,000,150 | ---- | C] () -- C:\WINDOWS\ChssBase.ini
[2006.05.25 01:22:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\bdoscandel.exe
[2006.05.02 21:38:49 | 000,000,202 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006.03.27 08:59:41 | 000,000,837 | ---- | C] () -- C:\WINDOWS\level.ini
[2006.02.13 22:29:25 | 000,121,995 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2006.02.12 13:01:13 | 000,070,144 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.01.07 14:54:23 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\Lukáš Sluka\Local Settings\Data aplikací\fusioncache.dat
[2006.01.07 14:15:58 | 000,104,257 | ---- | C] () -- C:\WINDOWS\hpoins04.dat
[2006.01.07 14:15:57 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat
[2005.12.25 23:01:10 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2005.12.23 21:01:36 | 000,000,046 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2005.12.23 20:52:08 | 000,000,494 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005.12.23 20:42:10 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll
[2005.12.23 20:39:00 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005.12.23 20:37:49 | 000,191,384 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005.12.23 20:02:44 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005.12.23 19:55:58 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005.03.01 15:30:20 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2005.02.04 05:59:48 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\metaflac.exe
[2005.02.04 05:59:44 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\flac.exe
[2004.08.02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.04.14 14:52:54 | 000,020,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\MosIrUsb.sys
[2002.09.23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002.09.23 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2002.09.23 14:00:00 | 000,497,952 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002.09.23 14:00:00 | 000,481,656 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002.09.23 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002.09.23 14:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002.09.23 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2002.09.23 14:00:00 | 000,100,722 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002.09.23 14:00:00 | 000,079,730 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002.09.23 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2002.09.23 14:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002.09.23 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2002.09.23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2002.09.23 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002.09.23 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002.03.13 15:46:46 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[1999.08.12 00:00:00 | 001,708,032 | ---- | C] () -- C:\WINDOWS\System32\MSO97V.DLL
[1999.08.12 00:00:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\MSORFS.DLL
[1999.01.23 02:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1997.06.18 00:00:00 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1997.06.18 00:00:00 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL

========== LOP Check ==========

[2009.04.25 19:45:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
[2010.04.24 16:52:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2011.02.05 15:24:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Barbie Fashion Show
[2011.01.31 23:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Citrix
[2009.01.17 01:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\EleFun Games
[2009.03.03 03:17:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\GameXzone
[2011.06.21 19:59:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2006.10.07 03:39:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\JollyBear
[2007.04.18 12:54:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\JOS
[2006.10.15 22:19:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MumboJumbo
[2011.05.01 21:03:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2006.10.07 02:39:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PopCap
[2006.11.26 21:06:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SpinTop Games
[2007.05.21 22:31:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.05.15 20:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Tunngle
[2011.04.17 15:41:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
[2006.05.21 10:07:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\YAHOO
[2011.06.23 23:01:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Špidla Data Processing, s.r.o
[2011.01.31 23:48:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Data aplikací\IcaClient
[2009.04.23 00:05:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Alawar
[2009.03.16 01:23:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Artogon
[2006.12.02 14:16:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ChessBase
[2011.06.23 23:01:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Divo Games
[2006.10.04 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\EA
[2009.01.17 01:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\EleFun Games
[2011.03.27 20:25:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ERS G-Studio
[2009.12.18 01:05:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Games
[2007.04.24 15:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\GanymedeNet
[2011.02.01 00:02:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICAClient
[2011.07.24 19:25:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICQ
[2006.03.06 18:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICQLite
[2008.09.13 22:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ImgBurn
[2007.08.08 00:02:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\JOS
[2006.09.21 19:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\kiwi.software.NET
[2011.06.18 17:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Ladia Group
[2006.08.11 02:30:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Leadertech
[2008.06.06 16:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\LGSync
[2009.01.17 02:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\MagicBall3
[2009.09.26 21:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Mount&Blade
[2011.04.08 21:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\My Battle for Middle-earth(tm) II Files
[2011.06.11 00:00:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\QuickScan
[2011.06.23 22:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\RainbowGames
[2011.06.22 00:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SecretIslandEng
[2011.06.18 14:27:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Shape games
[2010.03.23 01:12:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Silver Style Entertainment
[2010.01.31 18:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Silverlode Interactive
[2009.06.15 20:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SprillBermudeChech
[2011.06.23 19:39:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Trio
[2011.06.01 20:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Tunngle
[2011.04.17 16:19:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Ubisoft
[2011.06.16 23:16:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\uTorrent
[2009.06.01 02:22:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\VO
[2011.06.16 21:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Windows Desktop Search
[2011.07.01 20:43:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Windows Search
[2011.06.24 00:02:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper
[2011.06.24 00:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Špidla Data Processing, s.r.o

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: AGP440.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.04 00:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 16:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 23:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 16:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 16:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 16:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007.06.13 15:23:39 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=ED7B460B142A32097B8A8F6ECC941815 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 23:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
[2004.08.04 00:00:14 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\$NtServicePackUninstall$\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.09.17 19:23:28 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.24 12:44:12 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2002.09.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 16:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.04 00:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 16:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 16:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 16:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 16:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2006.04.20 13:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2006.01.13 19:07:08 | 000,360,448 | ---- | M] (Microsoft Corporation) MD5=5562CC0A47B2AEF06D3417B733F3C195 -- C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[2006.01.13 04:28:14 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=583E063FDC888CA30D05C2724B0D7EF4 -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2005.05.25 21:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2005.05.25 21:04:02 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=88763A98A4C26C409741B4AA162720C9 -- C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys
[2007.10.30 19:20:55 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.04 00:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 16:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: VIAMRAID.SYS >
[2004.07.06 16:45:42 | 000,060,672 | R--- | M] (VIA Technologies inc,.ltd) MD5=44056E9FEE477F512EE58BCFEE949621 -- C:\WINDOWS\system32\drivers\viamraid.sys

< MD5 for: WINLOGON.EXE >
[2004.08.17 16:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 16:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[22 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[2 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp -> ]
[1 C:\WINDOWS\system32\drivers\*.tmp files -> C:\WINDOWS\system32\drivers\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2001.05.24 13:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.04.12 13:49:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Adobe
[2006.08.11 02:27:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\AdobeAUM
[2011.04.12 13:41:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\AdobeUM
[2006.08.13 19:50:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Ahead
[2009.04.23 00:05:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Alawar
[2006.07.19 13:58:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Apple Computer
[2009.03.16 01:23:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Artogon
[2011.04.16 15:25:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ATI
[2006.12.02 14:16:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ChessBase
[2006.12.02 14:12:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Creative
[2011.06.23 23:01:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Divo Games
[2006.10.04 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\EA
[2009.01.17 01:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\EleFun Games
[2011.03.27 20:25:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ERS G-Studio
[2009.12.18 01:05:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Games
[2007.04.24 15:53:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\GanymedeNet
[2008.07.10 22:03:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Google
[2010.03.07 19:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Hamachi
[2008.08.29 20:56:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Help
[2011.02.01 00:02:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICAClient
[2011.07.24 19:25:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICQ
[2006.03.06 18:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ICQLite
[2005.12.23 20:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Identities
[2008.09.13 22:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\ImgBurn
[2007.05.28 18:33:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\InstallShield
[2007.08.08 00:02:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\JOS
[2006.09.21 19:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\kiwi.software.NET
[2011.06.18 17:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Ladia Group
[2006.08.11 02:30:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Leadertech
[2008.06.06 16:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\LGSync
[2006.12.08 00:01:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Macromedia
[2009.01.17 02:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\MagicBall3
[2008.09.13 21:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Malwarebytes
[2011.04.12 13:49:30 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft
[2005.12.23 20:47:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft Web Folders
[2009.09.26 21:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Mount&Blade
[2011.06.21 19:59:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Mozilla
[2007.05.22 18:25:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\MSN6
[2011.04.08 21:41:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\My Battle for Middle-earth(tm) II Files
[2011.06.11 00:00:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\QuickScan
[2011.06.23 22:00:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\RainbowGames
[2011.06.18 01:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Real
[2011.06.22 00:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SecretIslandEng
[2008.08.22 21:49:15 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SecuROM
[2011.06.18 14:27:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Shape games
[2010.03.23 01:12:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Silver Style Entertainment
[2010.01.31 18:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Silverlode Interactive
[2011.07.12 03:14:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Skype
[2011.07.12 00:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\skypePM
[2009.06.15 20:22:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SprillBermudeChech
[2011.06.24 00:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\SunRay Games
[2011.06.23 19:39:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Trio
[2011.06.01 20:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Tunngle
[2011.04.17 16:19:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Ubisoft
[2011.06.16 23:16:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\uTorrent
[2009.06.01 02:22:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\VO
[2011.06.16 21:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Windows Desktop Search
[2011.07.01 20:43:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Windows Search
[2011.06.24 00:02:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper
[2011.06.24 00:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Špidla Data Processing, s.r.o

< %APPDATA%\*.exe /s >
[2011.04.12 13:41:52 | 004,638,960 | ---- | M] (Adobe Systems ) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Adobe\Acrobat\7.0\Updater\Extended_language_pack.exe
[2007.04.01 12:03:18 | 000,054,272 | ---- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\GanymedeNet\Online Games\Common\ielauncher.exe
[2006.01.07 14:31:40 | 000,045,056 | R--- | M] (InstallShield Software Corp.) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{457791C5-D702-4143-A7B2-2744BE9573F2}\NewShortcut1_5B69D3033CA54B39B5ECE7D051297E77.exe
[2006.09.21 19:06:18 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{B4929EA4-EA46-41BA-915B-6EB16AFA343E}\_16496df1.exe
[2006.09.21 19:06:18 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{B4929EA4-EA46-41BA-915B-6EB16AFA343E}\_26e91eb.exe
[2006.09.21 19:06:18 | 000,001,078 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{B4929EA4-EA46-41BA-915B-6EB16AFA343E}\_5af141bb.exe
[2006.09.21 19:06:18 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{B4929EA4-EA46-41BA-915B-6EB16AFA343E}\_69525f90.exe
[2011.01.31 23:45:48 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{BFCF1FE9-C3B0-46EC-8DB5-F52447E7B665}\_6FEFF9B68218417F98F549.exe
[2011.01.31 23:45:48 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Microsoft\Installer\{BFCF1FE9-C3B0-46EC-8DB5-F52447E7B665}\_94120461A6DC84FDC268DD.exe
[2011.07.16 18:38:01 | 000,308,864 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\rnupgagent.exe
[2011.07.16 18:38:23 | 025,827,984 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\stub_data\RealPlayer.exe
[2011.06.19 04:21:41 | 000,675,088 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\8.01\stub_exe\RealPlayer.exe
[2011.04.14 16:23:10 | 006,471,838 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Anticky Rim.exe
[2011.04.15 10:41:52 | 006,250,664 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Divoky mic 3.exe
[2011.04.14 17:14:26 | 004,416,338 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Dobrodruzny mahjongg - Kapitola 2.exe
[2011.06.24 00:02:55 | 000,866,488 | -H-- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\game.exe
[2011.04.15 09:55:46 | 004,163,226 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Morsky vlk.exe
[2011.04.15 09:59:12 | 004,214,408 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\OceaniX.exe
[2011.04.15 10:01:26 | 005,025,520 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Poklady ostrova zahad.exe
[2011.04.15 11:24:12 | 007,096,512 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Rybicky.exe
[2011.04.15 11:36:34 | 006,244,500 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Smajlici.exe
[2011.04.15 11:38:04 | 004,851,186 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Tajemny denik - Ztraceny bratr.exe
[2011.06.18 12:23:28 | 001,173,631 | ---- | M] () -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\unins000.exe
[2011.04.15 12:01:04 | 005,660,350 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Ztraceny poklad.exe
[2011.04.15 11:57:58 | 005,676,750 | ---- | M] (Spidla) -- C:\Documents and Settings\Lukáš Sluka\Data aplikací\wrapper\Ztracené Eldorádo.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2007.01.18 09:32:03 | 000,639,224 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys
[1 C:\WINDOWS\system32\drivers\*.tmp files -> C:\WINDOWS\system32\drivers\*.tmp -> ]

< %systemroot%\System32\config\*.sav >
[2005.12.23 20:37:03 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2005.12.23 20:37:03 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2005.12.23 20:37:03 | 000,409,600 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >
[1 C:\WINDOWS\system32\drivers\*.tmp files -> C:\WINDOWS\system32\drivers\*.tmp -> ]

< %systemroot%\system32\*.* /3 >
[2011.08.14 02:01:29 | 000,000,000 | ---- | M] () -- C:\WINDOWS\system32\Access.dat
[2011.08.14 02:01:55 | 000,028,404 | ---- | M] () -- C:\WINDOWS\system32\BMXBkpCtrlState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,028,404 | ---- | M] () -- C:\WINDOWS\system32\BMXCtrlState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,016,968 | ---- | M] () -- C:\WINDOWS\system32\BMXState-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:55 | 000,016,968 | ---- | M] () -- C:\WINDOWS\system32\BMXStateBkp-{00000000-00000000-00000009-00001102-00000002-80661102}.rfx
[2011.08.14 02:01:56 | 000,000,288 | ---- | M] () -- C:\WINDOWS\system32\DVCState-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2011.08.14 02:01:56 | 000,000,288 | ---- | M] () -- C:\WINDOWS\system32\DVCStateBkp-{00000000-00000000-00000009-00001102-00000002-80661102}.dat
[2011.08.14 02:01:56 | 000,001,080 | ---- | M] () -- C:\WINDOWS\system32\settings.sfm
[2011.08.14 02:01:56 | 000,001,080 | ---- | M] () -- C:\WINDOWS\system32\settingsbkup.sfm
[2011.08.14 11:22:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2001.05.24 13:59:30 | 000,162,304 | ---- | M] () -- C:\UNWISE.EXE

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"BySoft FreeRAM" = C:\Program Files\BySoft FreeRAM\FreeRAM.exe -- [2004.12.17 22:44:50 | 000,318,976 | ---- | M] (BySoft)

< >

< type c:\boot.ini >> test.txt /c >
No captured output from command...

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.08.15 02:31:32 | 000,000,512 | ---- | M] () MD5=746CB55DFB39411199DAC605DCE0A2FB -- C:\PhysicalMBR.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:62AED3D0
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:3B3A35EC
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:ECF5194F

< End of report >

Je to pěkně dlouhý ... ty zprávy mi nevlezou ani do jedné zprávy, tak to rozděluji
A ano - Windows legální, na PC se střídá mnoho človíčků, a tak je tady bohužel kde co
tady je ještě ten poslední scan:

OTL Extras logfile created on: 15.8.2011 2:26:18 - Run 1
OTL by OldTimer - Version 3.2.26.3 Folder = C:\Documents and Settings\Lukáš Sluka\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,48 Mb Total Physical Memory | 638,13 Mb Available Physical Memory | 62,35% Memory free
1,47 Gb Paging File | 1,03 Gb Available in Paging File | 69,99% Paging File free
Paging file location(s): C:\pagefile.sys 400 576 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74,52 Gb Total Space | 6,48 Gb Free Space | 8,69% Space Free | Partition Type: NTFS
Drive G: | 280,00 Gb Total Space | 20,07 Gb Free Space | 7,17% Space Free | Partition Type: NTFS
Drive H: | 18,08 Gb Total Space | 4,82 Gb Free Space | 26,68% Space Free | Partition Type: NTFS

Computer Name: SLOTASOVNA | User Name: Lukáš Sluka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"57242:TCP" = 57242:TCP:*:Enabled:Pando Media Booster
"57242:UDP" = 57242:UDP:*:Enabled:Pando Media Booster

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"57242:TCP" = 57242:TCP:*:Enabled:Pando Media Booster
"57242:UDP" = 57242:UDP:*:Enabled:Pando Media Booster
"5985:TCP" = 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"80:TCP" = 80:TCP:*:Disabled:Vzdálená správa systému Windows – režim kompatibility (HTTP-In)

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"G:\Disky her\HOMM_v1100_P2P.exe" = G:\Disky her\HOMM_v1100_P2P.exe:*:Enabled:HOMM_v1100_P2P.exe
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Program Files\ICQ7.5\ICQ.exe" = C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"G:\Hry\Heroes of Might and Magic V\bin\H5_Game.exe" = G:\Hry\Heroes of Might and Magic V\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V -- ()
"G:\Hry\Heroes of Might and Magic V\bina1\H5_Game.exe" = G:\Hry\Heroes of Might and Magic V\bina1\H5_Game.exe:*:Enabled:Heroes of Might and Magic V: Hammers of Fate -- ()
"C:\NeverwinterNights\NWN\nwmain.exe" = C:\NeverwinterNights\NWN\nwmain.exe:*:Enabled:Neverwinter Nights
"G:\Hry\Counter-Strike Source\hl2.exe" = G:\Hry\Counter-Strike Source\hl2.exe:*:Enabled:hl2 -- ()
"G:\Hry\Counter-Strike Source\srcds.exe" = G:\Hry\Counter-Strike Source\srcds.exe:*:Enabled:srcds -- ()
"C:\Program Files\uTorrent\utorrent.exe" = C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ
"G:\Hry\Rise Of Legends\legends.exe" = G:\Hry\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends -- (Big Huge Games, Inc.)
"G:\Hry\Warhammer 40000 - Dawn of War\W40k.exe" = G:\Hry\Warhammer 40000 - Dawn of War\W40k.exe:*:Enabled:W40k -- (THQ Canada Inc.)
"G:\Hry\Titan Quest\Titan Quest.exe" = G:\Hry\Titan Quest\Titan Quest.exe:*:Enabled:Titan Quest -- ()
"G:\Hry\Titan Quest Immortal Throne\Tqit.exe" = G:\Hry\Titan Quest Immortal Throne\Tqit.exe:*:Enabled:Tqit -- ()
"G:\Hry\Paintball2\paintball2.exe" = G:\Hry\Paintball2\paintball2.exe:*:Enabled:paintball2
"G:\Hry\Renegade Paintball\PaintballGame.exe" = G:\Hry\Renegade Paintball\PaintballGame.exe:*:Enabled:Renegade Paintball -- (Cat Daddy Games, LLC, published by Globalstar Software)
"G:\Hry\FIFA 10\FIFA10.exe" = G:\Hry\FIFA 10\FIFA10.exe:*:Enabled:FIFA10
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"G:\Hry\Icewind Dale II\IWD2.exe" = G:\Hry\Icewind Dale II\IWD2.exe:*:Enabled:Icewind Dale II -- (Interplay Entertainment Corp.)
"G:\Hry\Silverfall\Silverfall.exe" = G:\Hry\Silverfall\Silverfall.exe:*:Enabled:Silverfall -- ()
"G:\Hry\Two Worlds\TwoWorlds.exe" = G:\Hry\Two Worlds\TwoWorlds.exe:*:Enabled:Two Worlds
"G:\Hry\Heroes of Might and Magic V - Tribes of the East original\bin\H5_Game.exe" = G:\Hry\Heroes of Might and Magic V - Tribes of the East original\bin\H5_Game.exe:*:Enabled:Heroes of Might and Magic V- Tribes of the East -- ()
"G:\Disky her\HOMM_v1100_P2P.exe" = G:\Disky her\HOMM_v1100_P2P.exe:*:Enabled:HOMM_v1100_P2P.exe
"G:\Hry\HeroOnline\NdCheck\NdCheckTool.exe" = G:\Hry\HeroOnline\NdCheck\NdCheckTool.exe:*:Enabled:ĚěÇçÎÄĽţĽě˛âą¤ľß -- (天晴数码娱乐公司)
"G:\Hry\Allods Online\bin\Launcher.exe" = G:\Hry\Allods Online\bin\Launcher.exe:*:Enabled:Allods Online launcher.exe -- (© 2008 - 2009 Astrum Nival, LLC)
"G:\Hry\Allods Online\bin\AOgame.exe" = G:\Hry\Allods Online\bin\AOgame.exe:*:Enabled:Allods Online AOgame.exe -- (© 2008 - 2009 Astrum Nival, LLC)
"G:\Hry\Hell Forces\hell.exe" = G:\Hry\Hell Forces\hell.exe:*:Enabled:Hell Forces -- (Orion)
"G:\Hry\Lord of the Rings The Battle for Middle-Earth 2\game.dat" = G:\Hry\Lord of the Rings The Battle for Middle-Earth 2\game.dat:*:Enabled:The Battle for Middle-earth(tm) II -- (Electronic Arts Inc.)
"G:\Hry\StarCraft II\Versions\Base15405\SC2.exe" = G:\Hry\StarCraft II\Versions\Base15405\SC2.exe:*:Enabled:StarCraft II -- (Blizzard Entertainment, Inc.)
"G:\Hry\The Lord of the Rings Online\lotroclient.exe" = G:\Hry\The Lord of the Rings Online\lotroclient.exe:*:Enabled:lotroclient -- (Turbine, Inc.)
"G:\Hry\Assassins Creed\AssassinsCreed_Dx9.exe" = G:\Hry\Assassins Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9 -- (Ubisoft)
"G:\Hry\Assassins Creed\AssassinsCreed_Dx10.exe" = G:\Hry\Assassins Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10 -- (Ubisoft)
"G:\Hry\Assassins Creed\AssassinsCreed_Launcher.exe" = G:\Hry\Assassins Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update -- (Ubisoft)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"G:\Programy\Tunngle\TnglCtrl.exe" = G:\Programy\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service -- (Tunngle.net GmbH)
"G:\Programy\Tunngle\Tunngle.exe" = G:\Programy\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client -- (Tunngle.net GmbH)
"G:\Hry\Warcraft III\Frozen Throne.exe" = G:\Hry\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - Ledový trůn -- (Blizzard Entertainment)
"G:\Hry\Warcraft III\Warcraft III.exe" = G:\Hry\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III -- (Blizzard Entertainment)
"G:\Hry\Warcraft III\World Editor.exe" = G:\Hry\Warcraft III\World Editor.exe:*:Enabled:Warcraft III Editor světů -- (Blizzard Entertainment)
"G:\Hry\StarCraft II\StarCraft II.exe" = G:\Hry\StarCraft II\StarCraft II.exe:*:Disabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\ICQ7.5\ICQ.exe" = C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000405-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{0B7D6F1A-1412-481E-A2E1-B63551CF54AD}" = JOS - WEPOS
"{0BCA9EFD-F2D6-4638-B053-8693BA0404BE}" = Citrix online plug-in (Web)
"{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}" = Scan
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{21E75254-410E-49C4-8981-2E1A2A2221F2}" = HP Diagnostic Assistant
"{2405665A-16C9-4D3A-B70E-F006220E1472}" = Overland
"{255FC1CF-2620-4B64-BE02-79B9E609BB3D}" = Webzen Game Starter
"{267868CE-6DFF-40F7-9C58-C01119B7B117}" = Fax
"{2758691A-2CDE-4942-A4AC-0E8F61FE2067}" = USB Video Driver
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = The Battle for Middle-earth (tm) II
"{2BBC9458-07CA-4843-848B-5C8146E5EFA8}" = CreativeProjects
"{2F71F2BA-B513-4113-969C-18A84D238E27}" = 1310
"{34566374-6C4D-419F-A9E0-8B21CA905FD8}" = ATI Catalyst Control Center
"{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}" = AiOSoftware
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{35A0C956-ACF1-41AB-89DE-1772C8A27ACB}" = Drákula - Zrození
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{362D5167-9716-44BE-89FD-BF9EB6EF814B}" = DawnOfWar
"{3A9FEF84-BF2A-11D6-BFBA-006097A3C2DE}" = Provizní prohlížeč
"{3AE681E0-4E8D-453F-950A-48534D3C0724}" = Copy
"{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}" = Mega Manager
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics
"{41254D7B-EADF-4078-AE4A-BD73B300EE86}" = Unload
"{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}" = Titan Quest
"{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{4D1291AB-DE93-4E99-8508-088E407AFFD2}" = Mega Manager
"{546C143E-68DC-314D-97BC-1E454E3BA429}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - CSY
"{54B5B9D1-EBB5-421C-9C43-F75D06F9D8FE}_is1" = Warlords Battlecry III
"{54C0D94A-F467-4ABC-9D02-6E58748668D4}" = iTunes
"{55392E52-1AAD-44C4-BE49-258FFE72434F}" = Citrix online plug-in (USB)
"{597D73A8-5FDB-4bc1-9893-40B54459F1BC}" = ProductContext
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5D2CF9D0-113A-476B-986F-288B54571614}" = DevalVR plugin for Internet Explorer (remove)
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{66FF4C48-0083-4E60-8556-B883AB200092}" = Heroes of Might and Magic V - Tribes of the East
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{76F4DD9B-C246-4BE0-00B6-3DE9ABF72299}" = Need For Speed Hot Pursuit 2
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7B31DF8A-8B77-497F-8180-E710A01635F1}" = Warlords IV
"{7C84DDDF-DEC9-4E02-8222-D86E73531CEB}" = Citrix online plug-in (SSON)
"{7EE9145D-C430-44E6-B5ED-61FF9C332100}_is1" = Battle of the Immortals
"{80413011-029C-4D6B-B3AD-725DDE60B81C}" = 1310Trb
"{812424AC-A8B5-44E6-8D48-07E939D1AD9A}" = Citrix online plug-in (HDX)
"{82FF9CEB-A50B-45A4-B6B1-7BF8C585D8CA}" = Heroes of Might and Magic V - Tribes of the East
"{85BC6E3A-E8D4-48B7-8EEE-13E46F65BA75}" = DynamicUSBTool
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8E5E9DD0-4950-40AD-8958-F0CE92A4F700}" = JOS - POV-HAV
"{9115E7DB-3B29-445A-802D-11E0AA945B7F}" = Sound Blaster Live!
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}" = SkinsHP1
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}" = QuickProjects
"{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}" = PrintScreen
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.2
"{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}" = PhotoGallery
"{A2500497-FD32-493e-B8E5-28D6728DBEF5}" = Readme
"{A2C9CD1B-2551-3AED-B244-6698FB929FA6}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - CSY
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAB6D0F8-02B3-4E89-B24C-0BB153C21445}" = Windows Presentation Foundation Language Pack (CSY)
"{ABC7F49D-084B-4FEF-895E-7D7790DBD3EF}" = JOS - VO1
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Czech
"{B32C75F2-7495-4D01-9431-C11E97D66F8C}" = DocProc
"{B3D5D4E0-E965-41C4-ABFD-A7B1AD0663C2}" = Director
"{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}" = CreativeProjectsTemplates
"{B4929EA4-EA46-41BA-915B-6EB16AFA343E}" = PhotoMerge - vkládání textu do fotografií
"{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}" = DocumentViewer
"{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}" = Titan Quest Immortal Throne
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{BF018D2F-C788-4AB1-AB95-1280EAB8F13E}" = TrayApp
"{BFCF1FE9-C3B0-46EC-8DB5-F52447E7B665}" = visionapp OneTimePass
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{C8A76CF5-B0CC-4A58-8FF7-387D9A21E50C}_is1" = HeroOnline
"{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"{CastleStrike_B}" = Castle Strike
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DAB93135-BA7D-46E1-9AEB-1F0913DB2422}" = JOS - Systém automatické distribuce
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{Divoky mic 3}_is1" = Divoký míč 3 v1.6
"{E21658D0-8C83-4ADD-937B-6ED07F335ABA}" = 1310Tour
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{E6B43F88-0D4F-4CA5-931F-DCF0B6BE0028}" = Icewind Dale II
"{E90BEB5B-CFA0-418E-9ABB-4C4A7B0D9483}" = 1310_Help
"{EC8673DA-F96B-497E-B2DB-BC7B029FD680}" = BufferChm
"{F1C726B1-9CE6-4AF2-A651-87332B20915F}_is1" = Hell Forces
"{F4F47155-5B4D-42AA-97F8-490BC52EA7F3}" = Destinations
"{F65787F3-B356-45EC-8DD0-0E6758EDBCEE}" = WebReg
"{f953d390-d28e-4943-a052-81b99d1f9ec9}.sdb" = NFS4 1MB Patch
"{FB09515C-8E3E-4E0F-A1F2-032F38DEC185}" = Microsoft .NET Framework 3.0 Czech Language Pack
"{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}" = CueTour
"{Ledova kralovna 2}_is1" = Ledová královna 2 v1.5
"{Ledova kralovna 3 - Vrani carodejka}_is1" = Ledová královna 3 - Vraní čarodějka 1.5
"{Ledova kralovna}_is1" = Ledová královna 1.5
"{Poklady ostrova zahad}_is1" = Poklady ostrova záhad 1.5
"{Pruzkumnici - Ztraceni v oceanu}_is1" = Průzkumníci - Ztraceni v oceánu 1.0
"{Šachy Grand Master Chess}_is1" = Šachy Grand Master Chess 1.5
"{Tajemny denik - Ztraceny bratr}_is1" = Tajemný deník - Ztracený bratr 1.5
"{Tajemstvi zamku bileho jednorozce}_is1" = Tajemství zámku Bílého jednorožce 1.5
"{Vraždy v ulici Morgue}_is1" = Vraždy v ulici Morgue 1.0
"{Záhadné město - Zlatá Praha}_is1" = Záhadné město - Zlatá Praha 1.5
"4f6dcc3b-179d-4b1b-80f0-b6083a0b3ce6_is1" = The Lord of the Rings Online™ v03.02.04.8010
"69083DC58646DE46A09847A522A1CC487F918039" = Balíček ovladače systému Windows - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)
"9722CA1E8F72F362E93CBEC75A707FDABFC8D880" = Balíček ovladače systému Windows - Advanced Micro Devices, Inc. (USB28xxBGA) Media (08/31/2007 5.7.0831.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Age of Wonders Shadow Magic" = Age of Wonders Shadow Magic
"All ATI Software" = ATI - Software Uninstall Utility
"AstrumNival Allods" = Allods Online 1.1.04.44
"ATI Display Driver" = ATI Display Driver
"avast" = avast! Free Antivirus
"Battle for Wesnoth_is1" = Battle for Wesnoth 0.8.8
"BySoft FreeRAM" = BySoft FreeRAM 4.0
"Carrera GT for NFS4" = Carrera GT for NFS4
"CCleaner" = CCleaner (remove only)
"CitrixOnlinePluginFull" = Citrix online plug-in
"Citrus Alarm Clock_is1" = Citrus Alarm Clock 1.0.5
"CSS FULL DZ [Oct 15 2007]" = CSS FULL DZ [Oct 15 2007] v18.1
"FreeAlpha 3" = FreeAlpha 3
"GameSpy Arcade" = GameSpy Arcade
"Google Chrome" = Google Chrome
"GreatSecrets-DaVinci_is1" = Great Secrets DaVinci
"Hellfire" = Hellfire
"HijackThis" = HijackThis 1.99.1
"HP Photo & Imaging" = HP Image Zone 4.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"ImgBurn" = ImgBurn (Remove Only)
"Indeo® Software" = Indeo® Software
"InstallShield_{192E2132-E977-4D3E-90BA-9DBCE1B57F8C}" = Heroes of Might and Magic® IV
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{362D5167-9716-44BE-89FD-BF9EB6EF814B}" = DawnOfWar
"InstallShield_{54C0D94A-F467-4ABC-9D02-6E58748668D4}" = iTunes
"InstallShield_{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"InstallShield_{E6B43F88-0D4F-4CA5-931F-DCF0B6BE0028}" = Icewind Dale II
"KLiteCodecPack_is1" = K-Lite Codec Pack 3.2.5 Standard
"Kouzelné dárky" = Kouzelné dárky
"LIŠKA RYŠKA - ZÁHADA BERMUDSKÉHO TROJÚHELNÍKU" = LIŠKA RYŠKA - ZÁHADA BERMUDSKÉHO TROJÚHELNÍKU
"LiveUpdate" = LiveUpdate 2.0 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mario Forever v 2.16 !" = Mario Forever v 2.16 !
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0 Czech Language Pack" = Microsoft .NET Framework 3.0 Czech Language Pack
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft NetShow Tools 2.0" = NetShow Tools 3.0
"Mount&Blade" = Mount&Blade
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Musculus - zima" = Musculus - zima
"MV2Player" = MV2Player (remove only)
"Need For Speed High Stakes" = Need For Speed High Stakes
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NeroMultiInstaller!UninstallKey" = Nero Suite
"Network Play System" = EA Network Play System
"NFSCarMan" = NFS Car Manager
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Noční obloha_is1" = Noční obloha 1.5
"Numen: Contest of Heroes CZ_is1" = Numen: Contest of Heroes v1.13 (s BONUSEM)
"OpenAL" = OpenAL
"Paradise_is1" = Paradise
"PC Image Editor" = PC Image Editor
"Planisphere_is1" = Otočná mapka 2.0
"PowerISO" = PowerISO
"PPTView97" = Microsoft PowerPoint Viewer 97
"RealPlayer 12.0" = RealPlayer
"S3" = UniChrome Pro IGP Display Driver and Utilities
"Schizm II_is1" = Schizm II
"Silverfall_is1" = Silverfall
"StarCraft II" = StarCraft II
"Tunngle beta_is1" = Tunngle beta
"VIA Vinyl Audio Codecs Driver Setup Program" = VIA Vinyl Audio Codecs Driver Setup Program
"VMidi" = vanBasco's Karaoke Player
"VTInfo2" = S3 S3Info2
"VTOverlay" = S3 S3Overlay
"VTTrayPlus" = S3 S3TrayPlus
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XLViewer97" = Microsoft Excel Viewer 97
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Warcraft III" = Warcraft III: All Products

========== Last 10 Event Log Errors ==========

[ Antivirus Events ]
Error - 18.4.2007 7:25:32 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 18.4.2007 7:25:35 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 4.6.2007 9:48:54 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 6.4.2008 5:12:59 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 7.4.2008 4:25:11 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 7.4.2008 9:51:22 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 7.4.2008 13:36:34 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 31.8.2008 18:01:01 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 6.1.2009 18:30:00 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

Error - 14.2.2009 14:47:41 | Computer Name = SLOTASOVNA | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 10.8.2011 15:22:54 | Computer Name = SLOTASOVNA | Source = Windows Search Service | ID = 3013
Description = Položka <C:\DOCUMENTS AND SETTINGS\LUKÁŠ SLUKA\RECENT\DESKTOP.INI>
v mapě algoritmu hash nebyla aktualizována. Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení
připojené k systému nefunguje. (0x8007001f)

Error - 10.8.2011 15:24:21 | Computer Name = SLOTASOVNA | Source = Windows Search Service | ID = 3013
Description = Položka <C:\DOCUMENTS AND SETTINGS\LUKÁŠ SLUKA\RECENT\DESKTOP.INI>
v mapě algoritmu hash nebyla aktualizována. Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení
připojené k systému nefunguje. (0x8007001f)

Error - 10.8.2011 15:42:38 | Computer Name = SLOTASOVNA | Source = Windows Search Service | ID = 3013
Description = Položka <C:\DOCUMENTS AND SETTINGS\LUKÁŠ SLUKA\RECENT\DESKTOP.INI>
v mapě algoritmu hash nebyla aktualizována. Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení
připojené k systému nefunguje. (0x8007001f)

Error - 10.8.2011 15:42:38 | Computer Name = SLOTASOVNA | Source = Windows Search Service | ID = 3013
Description = Položka <C:\DOCUMENTS AND SETTINGS\LUKÁŠ SLUKA\RECENT\DESKTOP.INI>
v mapě algoritmu hash nebyla aktualizována. Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení
připojené k systému nefunguje. (0x8007001f)

Error - 10.8.2011 15:54:29 | Computer Name = SLOTASOVNA | Source = Windows Search Service | ID = 3013
Description = Položka <C:\DOCUMENTS AND SETTINGS\LUKÁŠ SLUKA\RECENT\DESKTOP.INI>
v mapě algoritmu hash nebyla aktualizována. Kontext: aplikace , katalog SystemIndex

Podrobnosti:
Zařízení
připojené k systému nefunguje. (0x8007001f)

Error - 10.8.2011 17:45:14 | Computer Name = SLOTASOVNA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 13.8.2011 4:21:18 | Computer Name = SLOTASOVNA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

Error - 13.8.2011 4:22:52 | Computer Name = SLOTASOVNA | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown

Error - 13.8.2011 8:02:03 | Computer Name = SLOTASOVNA | Source = Application Error | ID = 1000
Description = Chybující aplikace h5_game.exe, verze 3.1.2.98, chybující modul fmod.dll,
verze 3.7.5.0, adresa chyby 0x0003428f.

Error - 14.8.2011 5:20:58 | Computer Name = SLOTASOVNA | Source = PerfNet | ID = 2004
Description = Nelze otevřít službu serveru. Data o výkonu serveru nejsou k dispozici.
Vrácený chybový kód je v datech DWORD 0.

[ System Events ]
Error - 10.8.2011 17:28:06 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 10.8.2011 17:28:06 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Kernel Information Provider neuspěla při spuštění v
důsledku následující chyby: %%3

Error - 10.8.2011 17:35:52 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 10.8.2011 17:35:52 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Kernel Information Provider neuspěla při spuštění v
důsledku následující chyby: %%3

Error - 10.8.2011 17:46:11 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 10.8.2011 17:46:11 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Kernel Information Provider neuspěla při spuštění v
důsledku následující chyby: %%3

Error - 13.8.2011 4:22:29 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 13.8.2011 4:22:29 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Kernel Information Provider neuspěla při spuštění v
důsledku následující chyby: %%3

Error - 14.8.2011 5:21:56 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 14.8.2011 5:21:56 | Computer Name = SLOTASOVNA | Source = Service Control Manager | ID = 7000
Description = Služba LogMeIn Kernel Information Provider neuspěla při spuštění v
důsledku následující chyby: %%3


< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  SRV - File not found [Disabled | Stopped] -- -- (HidServ)
  
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://red.clientapps.yahoo.com/customi ... earch.html
  IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
  IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
  IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
  IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
  IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
  IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
  IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://google.icq.com/search/search_frame.php
  IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
  IE - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\URLSearchHook: - Reg Error: Key error. File not found
  FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
  O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
  O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
  O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
  O3 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
  O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  O15 - HKU\S-1-5-21-2052111302-746137067-839522115-1003\..Trusted Domains: ([]msn in My Computer)
  O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://www.apple.com/qtactivex/qtplugin.cab (Reg Error: Key error.)
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
  O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
  O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
  O33 - MountPoints2\{0e98d50a-9bcb-11db-90d6-0013d39de504}\Shell - "" = AutoRun
  O33 - MountPoints2\{d9c9e328-e1a8-11dd-952f-0013d39de504}\Shell - "" = AutoRun
  O33 - MountPoints2\D\Shell - "" = AutoRun
  [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
  [1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
  [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [22 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
  [2 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
  [10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  [1 C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\*.tmp -> ]
  [1 C:\WINDOWS\system32\drivers\*.tmp files -> C:\WINDOWS\system32\drivers\*.tmp -> ]
  [1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]
  @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:62AED3D0
  @Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:3B3A35EC
  @Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:ECF5194F
  
  :reg
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
  
  :services
  gupdate
  gupdatem
  gusvc
  
  :files
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-746137067-839522115-1003.job
  C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-746137067-839522115-1003.job
  C:\WINDOWS\tasks\Symantec NetDetect.job
  c:\documents and settings\lukáš sluka\dokumenty\roman\midi2\nutcracker.mid /d
  c:\documents and settings\lukáš sluka\oblíbené položky\vyhledávače cracků.url
  c:\documents and settings\lukáš sluka\oblíbené položky\www.hubi.estranky.cz - hodně cd key a crack.url /d
  c:\documents and settings\lukáš sluka\oblíbené položky\links\uloz.to! - stahování z rapidshare, stahuj, sdílej, obrázky, online video, na mobil thewitcher_crack.rar.url /d
  c:\documents and settings\lukáš sluka\plocha\midi melodie\heavy metal -midifiles\stone temple pilots\crackerman.mid /d
  c:\documents and settings\lukáš sluka\plocha\torrenty\guild_wars_keygen.4007134.tpb.torrent /d
  c:\documents and settings\lukáš sluka\plocha\torrenty\gwen_guild_wars_eye_of_the_north_keygen_real_working_teamrna_---[www.btscene.com]---_.torrent /d
  c:\documents and settings\lukáš sluka\plocha\torrenty\no_one_lives_forever_2_wcrack.torrent /d
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

To nastavení mám použít stejné, jako předtím ? Stejné zaškrtnutí ? Nebo to tam zůstane už zaškrtnuté od minule ? raději se ptám ... nejsem teď totiž u onoho PC, jsem v práci.

Nastaveni nechte jak bude, nema na to vliv - to nastaveni je nastaveni skenovani, my uz budem opravovat

Po chvilce oddychu Vás zdravím a vkládám požadovaný log a sice - tu je:


All processes killed
========== OTL ==========
Service HidServ stopped successfully!
Service HidServ deleted successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\CustomSearch| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Bar| /E : value set successfully!
HKU\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ not found.
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2052111302-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\\ deleted successfully.
Starting removal of ActiveX control {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
C:\WINDOWS\Downloaded Program Files\QTPlugin.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\ not found.
Starting removal of ActiveX control {17492023-C23A-453E-A040-C7C580BBF700}
C:\WINDOWS\Downloaded Program Files\LegitCheckControl.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{17492023-C23A-453E-A040-C7C580BBF700}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{17492023-C23A-453E-A040-C7C580BBF700}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17492023-C23A-453E-A040-C7C580BBF700}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\WINDOWS\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
Starting removal of ActiveX control DirectAnimation Java Classes
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
Starting removal of ActiveX control Microsoft XML Parser for Java
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0e98d50a-9bcb-11db-90d6-0013d39de504}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0e98d50a-9bcb-11db-90d6-0013d39de504}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d9c9e328-e1a8-11dd-952f-0013d39de504}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d9c9e328-e1a8-11dd-952f-0013d39de504}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D\ deleted successfully.
C:\WINDOWS\002178_.tmp deleted successfully.
C:\WINDOWS\005731_.tmp deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SETA.tmp deleted successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
C:\WINDOWS\System32\SET161.tmp deleted successfully.
C:\WINDOWS\System32\SET163.tmp deleted successfully.
C:\WINDOWS\System32\SET172.tmp deleted successfully.
C:\WINDOWS\System32\SET80.tmp deleted successfully.
C:\WINDOWS\System32\SET86.tmp deleted successfully.
C:\WINDOWS\System32\SETAC.tmp deleted successfully.
C:\WINDOWS\System32\setb7.tmp deleted successfully.
C:\WINDOWS\System32\SETBB.tmp deleted successfully.
C:\WINDOWS\System32\SETF7.tmp deleted successfully.
C:\WINDOWS\System32\drivers\SETAB.tmp deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP118.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP166.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17C.tmp\AspNetMMCExt.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP199.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1B9.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1DD.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP240.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP25A.tmp\System.Xml.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP25A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP269.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP279.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP282.tmp\Microsoft.PowerShell.Editor.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP282.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3C8.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP40.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP56.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP64.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP94.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP96.tmp folder deleted successfully.
C:\WINDOWS\CSC\csc1.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC6.tmp deleted successfully.
C:\WINDOWS\Installer\MSID.tmp deleted successfully.
C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\CR_9C3A2.tmp\SETUP_PATCH.PACKED.7Z deleted successfully.
C:\WINDOWS\system32\config\systemprofile\Local Settings\temp\CR_9C3A2.tmp folder deleted successfully.
C:\WINDOWS\twain_32\hpqgends.tmp deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:62AED3D0 deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:3B3A35EC deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:ECF5194F deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task\ deleted successfully.
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Error: No service named gusvc was found to stop!
Service\Driver key gusvc not found.
========== FILES ==========
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-746137067-839522115-1003.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-746137067-839522115-1003.job moved successfully.
C:\WINDOWS\tasks\Symantec NetDetect.job moved successfully.
c:\documents and settings\lukáš sluka\dokumenty\roman\midi2\Nutcracker.mid deleted successfully.
c:\documents and settings\lukáš sluka\oblíbené položky\Vyhledávače cracků.url moved successfully.
c:\documents and settings\lukáš sluka\oblíbené položky\www.hubi.estranky.cz - hodně cd key a crack.url deleted successfully.
File\Folder c:\documents and settings\lukáš sluka\oblíbené položky\links\uloz.to! - stahování z rapidshare, stahuj, sdílej, obrázky, online video, na mobil thewitcher_crack.rar.url not found.
c:\documents and settings\lukáš sluka\plocha\midi melodie\heavy metal -midifiles\stone temple pilots\crackerman.mid deleted successfully.
c:\documents and settings\lukáš sluka\plocha\torrenty\Guild_Wars_Keygen.4007134.TPB.torrent deleted successfully.
c:\documents and settings\lukáš sluka\plocha\torrenty\GWEN_Guild_Wars_Eye_Of_The_North_KEYGEN_REAL_WORKING_TeamRNA_---[www.btscene.com]---_.torrent deleted successfully.
c:\documents and settings\lukáš sluka\plocha\torrenty\No_One_Lives_Forever_2_wcrack.torrent deleted successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Hans

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Luk ç Sluka
->Temporary Internet Files folder emptied: 112311 bytes

User: Lukáš Sluka
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 85502767 bytes
->Google Chrome cache emptied: 43514206 bytes
->Flash cache emptied: 866 bytes

User: Lukáš Sluka

User: Luk�Sluka

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 211113 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 52549150 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 174,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: Hans

User: LocalService

User: Luk ç Sluka

User: Lukáš Sluka
->Flash cache emptied: 0 bytes

User: Lukáš Sluka

User: Luk�Sluka

User: NetworkService

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.26.3 log created on 08182011_194200

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Doporucuji provest defragmentaci disku

• Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
  • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
  • prepnete se do zalozky Nastroje
  • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
  • Toto provedte se vsemi disky
• Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
  • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
  • Kliknete na Analyzovat
  • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
  • Postup provedte se vsemi disky
• Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
  • Vyhodou programku je, ze se neinstaluje
  • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
  • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
  • Probehne analyza disku a nasledne i defragmentace

Napiste co PC