VIRY.CZ

Zdravim,

prosím vás o pomoc, nelze nastavit tapetu plochy ( zobrazuje se mi pouze jednobarevné pozadí). Problém s tapetou se tu už řešil ovšem našel jsem jen řešení pro Win XP

Přikládám log...



Logfile of random's system information tool 1.09 (written by random/random)
Run by Melounek at 2011-08-22 11:45:48
Microsoft Windows 7 Ultimate
System drive C: has 19 GB (19%) free of 101 GB
Total RAM: 3327 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:46:26, on 22.8.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Melounek\Downloads\RSIT.exe
C:\Program Files\trend micro\Melounek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gooogle.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qstatsrv.dll (file missing)
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: Loader Class - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\WIA6EB~1\Datamngr\BROWSE~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: BrowserPlugin - {C2C174C4-0CCA-BC04-157E-BDAF73460396} - (no file)
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [PATHPILOT] C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\WIA6EB~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\RpcSandraSrv.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 7652 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Norton Security Scan for Melounek.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qstatsrv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-12-13 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll [2011-07-12 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
Loader Class - C:\PROGRA~1\WIA6EB~1\Datamngr\BROWSE~1.DLL [2011-07-21 101272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2C174C4-0CCA-BC04-157E-BDAF73460396}]
BrowserPlugin

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll [2011-07-12 88976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"PATHPILOT"=C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk []
"DATAMNGR"=C:\PROGRA~1\WIA6EB~1\Datamngr\DATAMN~1.EXE [2011-07-21 1547152]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-07-06 449584]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-03-26 399736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileConnect]
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2009-09-18 2412032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
C:\Users\Melounek\AppData\Roaming\QipGuard\QipGuard.exe [2010-12-13 187776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-03-26 399736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Melounek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"VIDC.FPS1"=frapsvid.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-08-22 11:45:50 ----D---- C:\Program Files\trend micro
2011-08-22 11:45:48 ----D---- C:\rsit
2011-08-22 11:33:52 ----D---- C:\Windows\LastGood
2011-08-22 11:08:51 ----A---- C:\Windows\system32\MRT.exe
2011-08-22 10:32:53 ----D---- C:\ProgramData\ESET
2011-08-22 10:32:53 ----D---- C:\Program Files\ESET
2011-08-21 19:11:48 ----D---- C:\Users\Melounek\AppData\Roaming\Malwarebytes
2011-08-21 19:11:44 ----D---- C:\ProgramData\Malwarebytes
2011-08-21 19:11:44 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-08-21 19:11:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-08-21 19:11:41 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-08-21 18:56:16 ----D---- C:\32788R22FWJFW
2011-08-21 18:55:50 ----A---- C:\Bug.txt
2011-08-20 04:20:25 ----D---- C:\regards
2011-08-14 13:40:35 ----D---- C:\ProgramData\TrackMania
2011-08-10 01:52:44 ----A---- C:\Windows\system32\pncrt.dll
2011-08-10 01:52:28 ----D---- C:\Program Files\FreeTime
2011-08-10 01:48:23 ----D---- C:\ProgramData\boost_interprocess
2011-08-09 15:00:14 ----D---- C:\Program Files\MKVTOAVI
2011-08-09 11:53:56 ----A---- C:\Windows\system32\WMAFile.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudPlayer.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioVisu.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioRecord.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioInfos.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\VB6FR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\TABCTFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\MSCMCFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\Mscc2fr.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\inetfr.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\CMDLGFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudFile.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudDisplay.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudDesign.dll
2011-08-09 11:53:20 ----D---- C:\Program Files\Windows Searchqu Toolbar
2011-08-09 11:53:19 ----D---- C:\Users\Melounek\AppData\Roaming\FreeAudioPack
2011-08-09 11:53:19 ----D---- C:\Program Files\Free mp3 Wma Converter
2011-08-09 11:53:19 ----A---- C:\Windows\system32\msvcr71.dll
2011-08-09 11:53:19 ----A---- C:\Windows\system32\msvcr70.dll
2011-08-09 11:53:19 ----A---- C:\Windows\system32\MFC71.dll
2011-08-04 09:45:24 ----D---- C:\Windows\pss
2011-07-24 22:29:33 ----D---- C:\Program Files\Convert AVI to MP4

======List of files/folders modified in the last 1 month======

2011-08-22 11:45:52 ----D---- C:\Windows\Temp
2011-08-22 11:45:50 ----RD---- C:\Program Files
2011-08-22 11:42:22 ----A---- C:\Users\Melounek\AppData\Roaming\myMPQ.ini
2011-08-22 11:41:03 ----SHD---- C:\System Volume Information
2011-08-22 11:37:34 ----D---- C:\Users\Melounek\AppData\Roaming\uTorrent
2011-08-22 11:35:19 ----D---- C:\Windows\winsxs
2011-08-22 11:34:02 ----D---- C:\Windows\System32
2011-08-22 11:34:02 ----D---- C:\Windows
2011-08-22 11:33:54 ----D---- C:\Windows\system32\drivers
2011-08-22 11:33:48 ----D---- C:\Windows\inf
2011-08-22 11:33:46 ----D---- C:\Windows\system32\catroot
2011-08-22 11:33:44 ----D---- C:\Windows\system32\DriverStore
2011-08-22 11:31:47 ----D---- C:\Windows\system32\catroot2
2011-08-22 11:26:18 ----SHD---- C:\Windows\Installer
2011-08-22 11:26:17 ----RSD---- C:\Windows\assembly
2011-08-22 11:25:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-22 11:11:58 ----D---- C:\Windows\Prefetch
2011-08-22 11:11:57 ----SD---- C:\Users\Melounek\AppData\Roaming\Microsoft
2011-08-22 11:09:39 ----SHD---- C:\$Recycle.Bin
2011-08-22 11:09:30 ----RD---- C:\Users
2011-08-22 11:08:52 ----D---- C:\Windows\debug
2011-08-22 11:01:04 ----D---- C:\Windows\Microsoft.NET
2011-08-22 10:34:08 ----D---- C:\Windows\system32\config
2011-08-22 10:32:53 ----HD---- C:\ProgramData
2011-08-21 20:03:16 ----D---- C:\Windows\Globalization
2011-08-19 18:46:28 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-08-08 18:10:39 ----D---- C:\Users\Melounek\AppData\Roaming\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-17 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-07-06 22712]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 a5ddm0bl;a5ddm0bl; C:\Windows\system32\drivers\a5ddm0bl.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwusbfake;Huawei DataCard USB Fake; C:\Windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
R2 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SandraDataSrv;SiSoftware Database Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\Win32\RpcDataSrv.exe [2007-08-15 184504]
S3 SandraTheSrv;SiSoftware Sandra Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\RpcSandraSrv.exe [2007-08-15 1261760]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravim a pekny den preji

Predpokladam ze ty Windows Ultimate (az pro me nepochopitelne proc ma bezny uzivatel nejvyssi licenci) mate legalni = zakoupena licence

Ten NOD je tez zakoupen nebo jen jednou za mesic preinstalovan a zaregistrovan na novy mail

Přesně tak, obojí sedí, NODa po měsíci znova a znova....

Nelegalnim SW se tu nezabyvame

Prosím, jak nelegálním? Všechen software co na PC mám by měl být legální...

Miloseeek píše:NODa po měsíci znova a znova....

Proctete si znovu dukladne licencni podminky ESETu a ne jen kliknout dalsi dalsi atd...

Omlouvám se, nečet jsem podmínky tak důkladně. Už jsem ho smazal a najdu si legální alternativu.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Melounek at 2011-08-29 13:44:29
Microsoft Windows 7 Ultimate
System drive C: has 16 GB (16%) free of 101 GB
Total RAM: 3327 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:44:43, on 29.8.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16839)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Melounek\Downloads\RSIT.exe
C:\Program Files\trend micro\Melounek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gooogle.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qstatsrv.dll (file missing)
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: Loader Class - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\WIA6EB~1\Datamngr\BROWSE~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: BrowserPlugin - {C2C174C4-0CCA-BC04-157E-BDAF73460396} - (no file)
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [PATHPILOT] C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\WIA6EB~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\RpcSandraSrv.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 7334 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Norton Security Scan for Melounek.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qstatsrv.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-12-13 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll [2011-07-12 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
Loader Class - C:\PROGRA~1\WIA6EB~1\Datamngr\BROWSE~1.DLL [2011-07-21 101272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-04-15 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2C174C4-0CCA-BC04-157E-BDAF73460396}]
BrowserPlugin

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll [2011-07-12 88976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"PATHPILOT"=C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk []
"DATAMNGR"=C:\PROGRA~1\WIA6EB~1\Datamngr\DATAMN~1.EXE [2011-07-21 1547152]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2011-07-06 449584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileConnect]
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2009-09-18 2412032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
C:\Users\Melounek\AppData\Roaming\QipGuard\QipGuard.exe [2010-12-13 187776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-03-26 399736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Melounek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"VIDC.FPS1"=frapsvid.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-08-29 11:04:01 ----D---- C:\Users\Melounek\AppData\Roaming\Unity
2011-08-24 10:10:06 ----A---- C:\Windows\system32\tzres.dll
2011-08-22 21:36:41 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-08-22 21:36:41 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-08-22 21:36:41 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-08-22 21:36:40 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-08-22 21:36:40 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-08-22 21:36:40 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-08-22 21:36:40 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-08-22 21:36:36 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-08-22 21:36:36 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-08-22 21:36:35 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-08-22 21:36:34 ----A---- C:\Windows\system32\esent.dll
2011-08-22 21:36:34 ----A---- C:\Windows\system32\drivers\storport.sys
2011-08-22 21:36:34 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-08-22 21:36:33 ----A---- C:\Windows\system32\fsutil.exe
2011-08-22 21:36:33 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-08-22 21:36:33 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-08-22 21:36:33 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-08-22 16:11:41 ----D---- C:\Windows\system32\Wat
2011-08-22 11:45:50 ----D---- C:\Program Files\trend micro
2011-08-22 11:45:48 ----D---- C:\rsit
2011-08-22 11:31:39 ----A---- C:\Windows\system32\msv1_0.dll
2011-08-22 11:11:53 ----A---- C:\Windows\system32\browserchoice.exe
2011-08-22 11:08:51 ----A---- C:\Windows\system32\MRT.exe
2011-08-22 10:59:44 ----A---- C:\Windows\system32\drivers\ks.sys
2011-08-22 10:59:12 ----A---- C:\Windows\system32\wcncsvc.dll
2011-08-22 10:58:03 ----A---- C:\Windows\system32\spoolsv.exe
2011-08-22 10:57:43 ----A---- C:\Windows\system32\winlogon.exe
2011-08-22 10:57:38 ----A---- C:\Windows\system32\msdri.dll
2011-08-22 10:57:37 ----A---- C:\Windows\system32\psisdecd.dll
2011-08-22 10:57:24 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-08-22 10:57:23 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-22 10:57:21 ----A---- C:\Windows\system32\atmfd.dll
2011-08-22 10:57:20 ----A---- C:\Windows\system32\atmlib.dll
2011-08-22 10:57:18 ----A---- C:\Windows\system32\ole32.dll
2011-08-22 10:57:17 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-08-22 10:57:17 ----A---- C:\Windows\system32\drivers\srv.sys
2011-08-22 10:57:16 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-08-22 10:57:12 ----A---- C:\Windows\system32\drivers\afd.sys
2011-08-22 10:57:11 ----A---- C:\Windows\system32\oleaut32.dll
2011-08-22 10:57:09 ----A---- C:\Windows\system32\ir32_32.dll
2011-08-22 10:57:09 ----A---- C:\Windows\system32\iccvid.dll
2011-08-22 10:57:07 ----A---- C:\Windows\system32\vbscript.dll
2011-08-22 10:57:07 ----A---- C:\Windows\system32\jscript.dll
2011-08-22 10:57:06 ----A---- C:\Windows\system32\schannel.dll
2011-08-22 10:57:04 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-08-22 10:57:04 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-08-22 10:57:04 ----A---- C:\Windows\system32\dnsapi.dll
2011-08-22 10:57:03 ----A---- C:\Windows\system32\prevhost.exe
2011-08-22 10:57:01 ----A---- C:\Windows\system32\t2embed.dll
2011-08-22 10:57:00 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-08-22 10:56:59 ----A---- C:\Windows\system32\xmllite.dll
2011-08-22 10:56:57 ----A---- C:\Windows\system32\rtutils.dll
2011-08-22 10:56:56 ----A---- C:\Windows\system32\umpnpmgr.dll
2011-08-22 10:56:54 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-08-22 10:56:54 ----A---- C:\Windows\system32\taskschd.dll
2011-08-22 10:56:54 ----A---- C:\Windows\system32\schedsvc.dll
2011-08-22 10:56:53 ----A---- C:\Windows\system32\taskeng.exe
2011-08-22 10:56:53 ----A---- C:\Windows\system32\taskcomp.dll
2011-08-22 10:56:53 ----A---- C:\Windows\system32\schtasks.exe
2011-08-22 10:56:50 ----A---- C:\Windows\system32\lsasrv.dll
2011-08-22 10:56:50 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2011-08-22 10:56:49 ----A---- C:\Windows\system32\msasn1.dll
2011-08-22 10:56:48 ----A---- C:\Windows\system32\kerberos.dll
2011-08-22 10:56:44 ----A---- C:\Windows\system32\odbc32.dll
2011-08-22 10:56:37 ----A---- C:\Windows\system32\winload.exe
2011-08-22 10:56:37 ----A---- C:\Windows\system32\CertEnroll.dll
2011-08-22 10:56:36 ----A---- C:\Windows\system32\winresume.exe
2011-08-22 10:56:33 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-08-22 10:56:30 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-22 10:56:28 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-22 10:56:27 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-08-22 10:56:27 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-08-22 10:56:21 ----A---- C:\Windows\system32\inetcomm.dll
2011-08-22 10:56:18 ----A---- C:\Windows\system32\asycfilt.dll
2011-08-22 10:56:16 ----A---- C:\Windows\system32\comctl32.dll
2011-08-22 10:56:14 ----A---- C:\Windows\system32\mfc40.dll
2011-08-22 10:56:13 ----A---- C:\Windows\system32\mfc40u.dll
2011-08-22 10:55:56 ----A---- C:\Windows\system32\wmp.dll
2011-08-22 10:55:55 ----A---- C:\Windows\system32\wmploc.DLL
2011-08-22 10:55:51 ----A---- C:\Windows\system32\tquery.dll
2011-08-22 10:55:51 ----A---- C:\Windows\system32\mssrch.dll
2011-08-22 10:55:50 ----A---- C:\Windows\system32\SearchIndexer.exe
2011-08-22 10:55:50 ----A---- C:\Windows\system32\mssvp.dll
2011-08-22 10:55:49 ----A---- C:\Windows\system32\mssph.dll
2011-08-22 10:55:48 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2011-08-22 10:55:48 ----A---- C:\Windows\system32\SearchFilterHost.exe
2011-08-22 10:55:48 ----A---- C:\Windows\system32\mssphtb.dll
2011-08-22 10:55:48 ----A---- C:\Windows\system32\msscntrs.dll
2011-08-22 10:55:46 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-08-22 10:55:44 ----A---- C:\Windows\system32\fontsub.dll
2011-08-22 10:55:43 ----A---- C:\Windows\system32\XpsPrint.dll
2011-08-22 10:55:41 ----A---- C:\Windows\system32\apphelp.dll
2011-08-22 10:55:39 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-08-22 10:55:36 ----A---- C:\Windows\system32\quartz.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\tsbyuv.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\msyuv.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\msvidc32.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\msrle32.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\mciavi32.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\iyuv_32.dll
2011-08-22 10:55:35 ----A---- C:\Windows\system32\avifil32.dll
2011-08-22 10:55:31 ----A---- C:\Windows\system32\EncDec.dll
2011-08-22 10:55:31 ----A---- C:\Windows\system32\CPFilters.dll
2011-08-22 10:55:30 ----A---- C:\Windows\system32\sbe.dll
2011-08-22 10:55:20 ----A---- C:\Windows\system32\mshtml.dll
2011-08-22 10:55:16 ----A---- C:\Windows\system32\iertutil.dll
2011-08-22 10:55:14 ----A---- C:\Windows\system32\ieframe.dll
2011-08-22 10:55:12 ----A---- C:\Windows\system32\urlmon.dll
2011-08-22 10:55:12 ----A---- C:\Windows\system32\mstime.dll
2011-08-22 10:55:12 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-22 10:55:11 ----A---- C:\Windows\system32\wininet.dll
2011-08-22 10:55:11 ----A---- C:\Windows\system32\licmgr10.dll
2011-08-22 10:55:11 ----A---- C:\Windows\system32\iepeers.dll
2011-08-22 10:55:11 ----A---- C:\Windows\system32\iedkcs32.dll
2011-08-22 10:55:10 ----A---- C:\Windows\system32\url.dll
2011-08-22 10:55:10 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-22 10:55:10 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-08-22 10:55:10 ----A---- C:\Windows\system32\ieui.dll
2011-08-22 10:55:09 ----A---- C:\Windows\system32\msfeedssync.exe
2011-08-22 10:55:09 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-22 10:55:03 ----A---- C:\Windows\explorer.exe
2011-08-22 10:55:00 ----A---- C:\Windows\system32\webio.dll
2011-08-22 10:54:55 ----A---- C:\Windows\system32\shell32.dll
2011-08-22 10:54:51 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-22 10:54:51 ----A---- C:\Windows\system32\winsrv.dll
2011-08-22 10:54:51 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-22 10:54:51 ----A---- C:\Windows\system32\kernel32.dll
2011-08-22 10:54:51 ----A---- C:\Windows\system32\conhost.exe
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-22 10:54:50 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-22 10:54:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-22 10:54:48 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-22 10:54:48 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-22 10:54:48 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-22 10:54:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-22 10:54:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-22 10:54:45 ----A---- C:\Windows\system32\mstscax.dll
2011-08-22 10:54:45 ----A---- C:\Windows\system32\mstsc.exe
2011-08-22 10:54:40 ----A---- C:\Windows\system32\win32k.sys
2011-08-22 10:54:38 ----A---- C:\Windows\system32\odbcjt32.dll
2011-08-22 10:54:38 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-22 10:54:37 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-22 10:54:37 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-22 10:54:37 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-22 10:54:23 ----A---- C:\Windows\system32\d3d10_1.dll
2011-08-22 10:54:21 ----A---- C:\Windows\system32\srvsvc.dll
2011-08-22 10:54:19 ----A---- C:\Windows\system32\ntdll.dll
2011-08-22 10:54:17 ----A---- C:\Windows\system32\d3d10warp.dll
2011-08-22 10:54:16 ----A---- C:\Windows\system32\mf.dll
2011-08-22 10:54:16 ----A---- C:\Windows\system32\DWrite.dll
2011-08-22 10:54:16 ----A---- C:\Windows\system32\d2d1.dll
2011-08-22 10:54:15 ----A---- C:\Windows\system32\FntCache.dll
2011-08-22 10:54:14 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-08-22 10:54:14 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-08-22 10:54:13 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-08-22 10:54:13 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-08-22 10:54:13 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-08-22 10:54:07 ----A---- C:\Windows\system32\upnp.dll
2011-08-22 10:54:06 ----A---- C:\Windows\system32\msxml6.dll
2011-08-22 10:54:06 ----A---- C:\Windows\system32\msxml3.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\wscsvc.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\wscapi.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\winhttp.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\WebClnt.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\slwga.dll
2011-08-22 10:54:05 ----A---- C:\Windows\system32\davclnt.dll
2011-08-22 10:54:00 ----A---- C:\Windows\system32\wmpmde.dll
2011-08-22 10:53:59 ----A---- C:\Windows\system32\consent.exe
2011-08-22 10:53:57 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2011-08-22 10:53:57 ----A---- C:\Windows\system32\secproc_isv.dll
2011-08-22 10:53:57 ----A---- C:\Windows\system32\secproc.dll
2011-08-22 10:53:57 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-08-22 10:53:57 ----A---- C:\Windows\system32\RMActivate.exe
2011-08-22 10:53:56 ----A---- C:\Windows\system32\secproc_ssp.dll
2011-08-22 10:53:56 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2011-08-22 10:53:56 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2011-08-22 10:53:51 ----A---- C:\Windows\system32\mfc42.dll
2011-08-22 10:53:50 ----A---- C:\Windows\system32\mfc42u.dll
2011-08-22 10:53:30 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-08-22 10:53:27 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-08-22 10:53:21 ----A---- C:\Windows\system32\poqexec.exe
2011-08-22 10:53:19 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-08-22 10:43:22 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-08-22 10:43:21 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-08-22 10:43:21 ----A---- C:\Windows\system32\cdd.dll
2011-08-22 10:38:32 ----A---- C:\Windows\system32\wintrust.dll
2011-08-22 10:38:32 ----A---- C:\Windows\system32\cabview.dll
2011-08-21 19:11:48 ----D---- C:\Users\Melounek\AppData\Roaming\Malwarebytes
2011-08-21 19:11:44 ----D---- C:\ProgramData\Malwarebytes
2011-08-21 19:11:44 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2011-08-21 19:11:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-08-21 19:11:41 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-08-21 18:56:16 ----D---- C:\32788R22FWJFW
2011-08-21 18:55:50 ----A---- C:\Bug.txt
2011-08-20 04:20:25 ----D---- C:\regards
2011-08-14 13:40:35 ----D---- C:\ProgramData\TrackMania
2011-08-10 01:52:44 ----A---- C:\Windows\system32\pncrt.dll
2011-08-10 01:52:28 ----D---- C:\Program Files\FreeTime
2011-08-10 01:48:23 ----D---- C:\ProgramData\boost_interprocess
2011-08-09 15:00:14 ----D---- C:\Program Files\MKVTOAVI
2011-08-09 11:53:56 ----A---- C:\Windows\system32\WMAFile.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudPlayer.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioVisu.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioRecord.dll
2011-08-09 11:53:56 ----A---- C:\Windows\system32\AudioInfos.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\VB6FR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\TABCTFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\MSCMCFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\Mscc2fr.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\inetfr.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\CMDLGFR.DLL
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudFile.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudDisplay.dll
2011-08-09 11:53:55 ----A---- C:\Windows\system32\AudDesign.dll
2011-08-09 11:53:20 ----D---- C:\Program Files\Windows Searchqu Toolbar
2011-08-09 11:53:19 ----D---- C:\Users\Melounek\AppData\Roaming\FreeAudioPack
2011-08-09 11:53:19 ----D---- C:\Program Files\Free mp3 Wma Converter
2011-08-09 11:53:19 ----A---- C:\Windows\system32\msvcr71.dll
2011-08-09 11:53:19 ----A---- C:\Windows\system32\msvcr70.dll
2011-08-09 11:53:19 ----A---- C:\Windows\system32\MFC71.dll
2011-08-04 09:45:24 ----D---- C:\Windows\pss

======List of files/folders modified in the last 1 month======

2011-08-29 13:44:40 ----D---- C:\Windows\Prefetch
2011-08-29 13:44:30 ----D---- C:\Windows\Temp
2011-08-29 00:07:28 ----D---- C:\Windows\system32\config
2011-08-26 23:37:32 ----SHD---- C:\Windows\Installer
2011-08-26 23:37:25 ----RD---- C:\Program Files
2011-08-26 23:37:25 ----HD---- C:\ProgramData
2011-08-26 23:37:23 ----D---- C:\Windows\system32\DriverStore
2011-08-26 23:37:23 ----D---- C:\Windows\system32\drivers
2011-08-26 23:37:23 ----D---- C:\Windows\system32\catroot
2011-08-26 23:37:23 ----D---- C:\Windows\inf
2011-08-26 09:26:08 ----SHD---- C:\System Volume Information
2011-08-25 15:35:53 ----D---- C:\Windows\rescache
2011-08-25 12:03:40 ----D---- C:\Users\Melounek\AppData\Roaming\uTorrent
2011-08-25 02:35:03 ----D---- C:\Windows\winsxs
2011-08-25 02:34:56 ----D---- C:\Windows\system32\cs-CZ
2011-08-25 02:34:56 ----D---- C:\Windows\System32
2011-08-24 19:17:30 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-08-24 13:19:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-23 11:35:20 ----D---- C:\Windows\system32\catroot2
2011-08-22 17:15:17 ----D---- C:\Windows\AppPatch
2011-08-22 16:55:11 ----D---- C:\Windows\Microsoft.NET
2011-08-22 16:54:38 ----RSD---- C:\Windows\assembly
2011-08-22 16:35:25 ----A---- C:\Windows\BlendSettings.ini
2011-08-22 16:14:04 ----D---- C:\Windows
2011-08-22 16:11:55 ----D---- C:\Program Files\Windows Mail
2011-08-22 16:11:54 ----RSD---- C:\Windows\Fonts
2011-08-22 16:11:54 ----D---- C:\Windows\ehome
2011-08-22 16:11:51 ----D---- C:\Windows\system32\Boot
2011-08-22 16:11:50 ----D---- C:\Program Files\Windows Media Player
2011-08-22 16:11:48 ----D---- C:\Windows\system32\migration
2011-08-22 16:11:48 ----D---- C:\Program Files\Internet Explorer
2011-08-22 11:42:22 ----A---- C:\Users\Melounek\AppData\Roaming\myMPQ.ini
2011-08-22 11:11:57 ----SD---- C:\Users\Melounek\AppData\Roaming\Microsoft
2011-08-22 11:09:39 ----SHD---- C:\$Recycle.Bin
2011-08-22 11:09:30 ----RD---- C:\Users
2011-08-22 11:08:52 ----D---- C:\Windows\debug
2011-08-21 20:03:16 ----D---- C:\Windows\Globalization
2011-08-08 18:10:39 ----D---- C:\Users\Melounek\AppData\Roaming\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-10-17 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-07-06 22712]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 axtnnvi3;axtnnvi3; C:\Windows\system32\drivers\axtnnvi3.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwusbfake;Huawei DataCard USB Fake; C:\Windows\system32\DRIVERS\ewusbfake.sys [2009-07-23 100736]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
R2 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 9216]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SandraDataSrv;SiSoftware Database Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\Win32\RpcDataSrv.exe [2007-08-15 184504]
S3 SandraTheSrv;SiSoftware Sandra Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\RpcSandraSrv.exe [2007-08-15 1261760]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-08-22 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Nainstalujte si legalni zabezpeceni (doporucuji Avast, Aviru ci MSE)

A i samotne windows jsou legalni = zakoupena linence Nechapu proc lidi utraci za nejvyssi licenci kdyz ji naprosto nemohou vyuzit

Ano Windows mam legalni. Koupil mi je otec. Prosím víte jak na to zobrazení pozadí ?

Stahnete OTL (viz muj podpis) a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  adp3132.sys
  AGP440.sys
  ahcix86.sys
  ahcix86s.sys
  atapi.sys
  autochk.exe
  cdrom.sys
  cngaudit.dll
  cryptsvc.dll
  eNetHook.dll
  eventlog.dll
  explorer.exe
  hal.dll
  Changer.sys
  iaStor.sys
  iastorv.sys
  IdeChnDr.sys
  isapnp.sys
  JakNDis.sys
  KR10N.sys
  logevent.dll
  lsass.exe
  mv61xx.sys
  ndis.sys
  netlogon.dll
  ntelogon.dll
  nvata.sys
  nvatabus.sys
  nvgts.sys
  nvraid.sys
  nvrd32.sys
  nvstor.sys
  nvstor32.sys
  scecli.dll
  sceclt.dll
  smss.exe
  svchost.exe
  symmpi.sys
  tcpip.sys
  userinit.exe
  vaxscsi.sys
  viamraid.sys
  viasraid.sys
  ViPrt.sys
  winlogon.exe
  ws2_32.dll
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  type c:\boot.ini >> test.txt /c
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack /s
  *keygen* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte

OTL logfile created on: 5.9.2011 12:40:40 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\Melounek\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 74,32% Memory free
6,50 Gb Paging File | 5,60 Gb Available in Paging File | 86,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 99,12 Gb Total Space | 27,23 Gb Free Space | 27,48% Space Free | Partition Type: NTFS
Drive D: | 832,39 Gb Total Space | 320,01 Gb Free Space | 38,44% Space Free | Partition Type: NTFS
Drive E: | 1,10 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: GAIA | User Name: Melounek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.09.05 12:37:36 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Melounek\Desktop\OTL.exe
PRC - [2011.08.29 14:37:14 | 000,273,528 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2011.07.21 14:29:38 | 001,547,152 | ---- | M] (Bandoo Media, inc) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
PRC - [2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.09.18 17:48:28 | 000,009,216 | ---- | M] (Vodafone) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
PRC - [2009.08.18 02:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2009.07.14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe


========== Modules (No Company Name) ==========

MOD - [2010.09.17 01:01:41 | 002,613,816 | ---- | M] () -- C:\Users\Melounek\AppData\Local\Google\Chrome\Application\6.0.472.62\pdf.dll
MOD - [2010.09.17 01:00:12 | 000,091,192 | ---- | M] () -- C:\Users\Melounek\AppData\Local\Google\Chrome\Application\6.0.472.62\avutil-50.dll
MOD - [2010.09.17 01:00:10 | 000,193,592 | ---- | M] () -- C:\Users\Melounek\AppData\Local\Google\Chrome\Application\6.0.472.62\avformat-52.dll
MOD - [2010.09.17 01:00:09 | 001,434,680 | ---- | M] () -- C:\Users\Melounek\AppData\Local\Google\Chrome\Application\6.0.472.62\avcodec-52.dll
MOD - [2010.09.16 23:00:44 | 005,964,752 | ---- | M] () -- C:\Users\Melounek\AppData\Local\Google\Chrome\Application\6.0.472.62\gcswf32.dll
MOD - [2010.03.15 11:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Win32 Services (SafeList) ==========

SRV - [2011.08.22 10:59:33 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.09.18 17:48:28 | 000,009,216 | ---- | M] (Vodafone) [Auto | Running] -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.08.15 18:05:16 | 000,184,504 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\Win32\RpcDataSrv.exe -- (SandraDataSrv)
SRV - [2007.08.15 18:05:08 | 001,261,760 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII\RpcSandraSrv.exe -- (SandraTheSrv)


========== Driver Services (SafeList) ==========

DRV - [2010.10.17 17:21:43 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.08.18 03:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.07.23 11:57:22 | 000,112,128 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009.07.23 11:57:22 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.07.23 11:57:22 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009.07.14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009.07.14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009.07.14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========







IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gooogle.com/
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.666: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.666: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.666: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.666: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.666: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Melounek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.04.07 11:59:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.04.07 11:59:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.08.29 14:37:19 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (QipLI Class) - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - File not found
O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (Loader Class) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (BrowserPlugin) - {C2C174C4-0CCA-BC04-157E-BDAF73460396} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [PATHPILOT] File not found
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra 'Tools' menuitem : Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2586A3C7-75B7-4BC3-9D30-A52FFC8EE303}: DhcpNameServer = 192.168.100.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6334338F-C8A0-4F14-9DF3-ED99529C659F}: DhcpNameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2FA3F36-1B89-40E6-9E1C-3D5D2E591AFD}: DhcpNameServer = 217.77.165.81 217.77.161.131
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\WIA6EB~1\Datamngr\datamngr.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~1\WIA6EB~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008.04.14 15:11:33 | 000,000,055 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{5e6cb380-da02-11df-9edd-00248ca93da7}\Shell - "" = AutoRun
O33 - MountPoints2\{5e6cb380-da02-11df-9edd-00248ca93da7}\Shell\AutoRun\command - "" = J:\Autorun.exe
O33 - MountPoints2\{5e6cb382-da02-11df-9edd-00248ca93da7}\Shell - "" = AutoRun
O33 - MountPoints2\{5e6cb382-da02-11df-9edd-00248ca93da7}\Shell\AutoRun\command - "" = K:\Launcher.exe
O33 - MountPoints2\{a5db943f-dccf-11df-ace9-00248ca93da7}\Shell - "" = AutoRun
O33 - MountPoints2\{a5db943f-dccf-11df-ace9-00248ca93da7}\Shell\AutoRun\command - "" = L:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{bc860d68-d298-11df-9ba5-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{bc860d68-d298-11df-9ba5-806e6f6e6963}\Shell\AutoRun\command - "" = E:\CdAutoRun.exe -- [2008.04.14 15:13:37 | 000,055,136 | R--- | M] ()
O33 - MountPoints2\{c15f93b2-d487-11df-8889-00248ca93da7}\Shell - "" = AutoRun
O33 - MountPoints2\{c15f93b2-d487-11df-8889-00248ca93da7}\Shell\AutoRun\command - "" = J:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{c15f9476-d487-11df-8889-00248ca93da7}\Shell - "" = AutoRun
O33 - MountPoints2\{c15f9476-d487-11df-8889-00248ca93da7}\Shell\AutoRun\command - "" = L:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\_AUTORUN\AUTORUN.EXE
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\setup_vmc_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.09.05 12:37:32 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Users\Melounek\Desktop\OTL.exe
[2011.09.04 10:49:00 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2011.09.04 10:47:39 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2011.09.01 10:56:18 | 000,000,000 | ---D | C] -- C:\Users\Melounek\Desktop\PORNO
[2011.08.30 15:59:54 | 000,000,000 | ---D | C] -- C:\Users\Melounek\Desktop\Nová složka
[2011.08.29 16:36:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2011.08.29 14:37:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2011.08.29 14:37:17 | 000,198,832 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2011.08.29 14:37:15 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2011.08.29 14:37:15 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[2011.08.29 14:37:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011.08.29 14:37:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011.08.29 14:37:12 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2011.08.29 14:37:11 | 000,000,000 | ---D | C] -- C:\Users\Melounek\AppData\Roaming\Real
[2011.08.29 14:36:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[8 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2011.09.05 12:42:15 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.09.05 12:37:36 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Melounek\Desktop\OTL.exe
[2011.09.05 12:02:20 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.09.05 12:02:20 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.05 11:55:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.09.05 11:55:04 | 2616,635,392 | -HS- | M] () -- C:\hiberfil.sys
[2011.08.29 14:37:26 | 000,001,910 | ---- | M] () -- C:\Users\Public\Desktop\Free Offers.lnk
[2011.08.29 14:37:26 | 000,001,238 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011.08.29 14:37:17 | 000,198,832 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll
[2011.08.29 14:37:15 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2011.08.29 14:37:15 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll
[2011.08.29 14:37:15 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll
[8 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.09.05 12:42:15 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.08.29 14:37:26 | 000,001,910 | ---- | C] () -- C:\Users\Public\Desktop\Free Offers.lnk
[2011.08.29 14:37:26 | 000,001,238 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011.07.06 15:38:30 | 000,123,907 | ---- | C] () -- C:\Users\Melounek\AppData\Local\SRDownloader.err
[2011.07.06 15:31:44 | 000,001,872 | ---- | C] () -- C:\Users\Melounek\AppData\Local\SRDownloader.nast
[2011.06.12 15:10:24 | 000,004,665 | ---- | C] () -- C:\Windows\AbleBurn.ini
[2011.05.12 16:14:48 | 000,000,557 | ---- | C] () -- C:\Windows\smrpro.INI
[2011.05.12 16:14:29 | 000,000,000 | ---- | C] () -- C:\Windows\ae_mini.INI
[2011.05.10 11:10:19 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011.05.05 14:26:21 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2011.05.05 13:51:05 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI
[2011.05.05 13:42:51 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011.01.09 11:41:35 | 000,001,644 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011.01.09 11:41:35 | 000,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.01.05 16:36:03 | 000,011,776 | ---- | C] () -- C:\Users\Melounek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.10.17 18:02:04 | 000,000,565 | ---- | C] () -- C:\Users\Melounek\AppData\Roaming\myMPQ.ini
[2010.10.08 07:02:03 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009.08.28 14:16:16 | 000,130,238 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
[2009.07.14 10:44:22 | 000,661,766 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2009.07.14 10:44:22 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2009.07.14 10:44:22 | 000,137,342 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2009.07.14 10:44:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2009.07.14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 06:33:53 | 000,298,584 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 04:05:48 | 000,647,308 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 04:05:48 | 000,118,438 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 02:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009.07.14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.18 19:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009.02.18 17:55:22 | 000,294,912 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2009.02.03 20:52:04 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2004.07.29 01:19:46 | 000,175,104 | ---- | C] () -- C:\Windows\System32\lame_enc.dll

========== LOP Check ==========

[2011.01.27 21:15:53 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\BSplayer
[2010.11.01 11:13:10 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\BSplayer Pro
[2010.10.17 17:24:39 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\DAEMON Tools Lite
[2010.10.20 14:57:50 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Dev-Cpp
[2011.08.09 11:53:59 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\FreeAudioPack
[2011.07.03 20:01:37 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Mumble
[2011.04.30 20:14:52 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2011.06.25 15:48:10 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\OpenOffice.org
[2011.05.29 12:16:12 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\PandoraRecovery
[2011.04.17 18:05:22 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\TS3Client
[2011.08.29 11:04:01 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Unity
[2011.08.25 12:03:40 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\uTorrent
[2010.10.11 14:50:07 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Vodafone
[2011.06.07 07:02:00 | 000,032,612 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: AGP440.SYS >
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\System32\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\drivers\cdrom.sys
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_db87d184bc84f910\cdrom.sys
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\System32\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\System32\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: IASTORV.SYS >
[2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\System32\drivers\iaStorV.sys
[2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0033117673c16921\iaStorV.sys
[2011.03.11 07:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys
[2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2010.11.20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
[2011.03.11 07:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\System32\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_a620e0e5be1ecda7\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_a61fe281be1fb177\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_a69eaf60d7456d32\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_a851f4adbb0d5141\lsass.exe

< MD5 for: NDIS.SYS >
[2009.07.14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\System32\drivers\ndis.sys
[2009.07.14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys
[2010.11.20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys

< MD5 for: NETLOGON.DLL >
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvraid.sys
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys
[2010.11.20 14:30:06 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=AF2EEC9580C1D32FB7EAF105D9784061 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvraid.sys
[2011.03.11 07:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=B3E25EE28883877076E0E1FF877D02E0 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvraid.sys
[2011.03.11 07:28:10 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=E3B840350A72CA6F39BD2BEF85A2BCFB -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvraid.sys
[2011.03.11 07:44:01 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=F1B0BED906F97E16F6D0C3629D2F21C6 -- C:\Windows\System32\drivers\nvraid.sys
[2011.03.11 07:44:01 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=F1B0BED906F97E16F6D0C3629D2F21C6 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_38e464dbe521cc7f\nvraid.sys
[2011.03.11 07:44:01 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=F1B0BED906F97E16F6D0C3629D2F21C6 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvraid.sys
[2011.03.11 07:52:25 | 000,117,120 | ---- | M] (NVIDIA Corporation) MD5=FCD5C3542A85EEBA7D0833B7E5086C10 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\System32\drivers\nvstor.sys
[2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_38e464dbe521cc7f\nvstor.sys
[2011.03.11 07:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys
[2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2011.03.11 07:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys
[2010.11.20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\System32\smss.exe
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.06.21 07:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010.11.20 14:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2011.04.25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2011.06.21 07:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2011.06.21 07:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\System32\drivers\tcpip.sys
[2011.06.21 07:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2011.06.21 08:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\System32\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[8 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\2347e1c1efb91df2d1b80df333ec27b3\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2347e1c1efb91df2d1b80df333ec27b3\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\2c5f142d97790997d9b113eb9ad8f966\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2c5f142d97790997d9b113eb9ad8f966\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\877a04eb3c7ed569a71e644a1f478f22\*.tmp files -> C:\Windows\SoftwareDistribution\Download\877a04eb3c7ed569a71e644a1f478f22\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\e86cc367db72984a1e1f05b09c03af8c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e86cc367db72984a1e1f05b09c03af8c\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\eb3696b9932f474fe45978811bea2090\*.tmp files -> C:\Windows\SoftwareDistribution\Download\eb3696b9932f474fe45978811bea2090\*.tmp -> ]
[10 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.03.27 15:18:54 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Adobe
[2011.01.27 21:15:53 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\BSplayer
[2010.11.01 11:13:10 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\BSplayer Pro
[2010.10.17 17:24:39 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\DAEMON Tools Lite
[2010.10.20 14:57:50 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Dev-Cpp
[2011.05.16 21:11:04 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\DivX
[2010.10.11 14:56:10 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\FLEXnet
[2011.08.09 11:53:59 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\FreeAudioPack
[2010.10.08 13:59:02 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Identities
[2011.06.16 16:43:09 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\InstallShield Installation Information
[2010.10.11 15:00:44 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Macromedia
[2011.08.21 19:11:48 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Malwarebytes
[2009.07.14 11:20:06 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Media Center Programs
[2011.08.22 11:11:57 | 000,000,000 | --SD | M] -- C:\Users\Melounek\AppData\Roaming\Microsoft
[2011.07.03 20:01:37 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Mumble
[2011.04.30 20:14:52 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2011.06.25 15:48:10 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\OpenOffice.org
[2011.05.29 12:16:12 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\PandoraRecovery
[2011.08.29 14:48:27 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Real
[2010.11.09 12:03:14 | 000,000,000 | RH-D | M] -- C:\Users\Melounek\AppData\Roaming\SecuROM
[2011.08.08 18:10:39 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Skype
[2011.05.11 15:11:33 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\skypePM
[2011.04.17 18:05:22 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\TS3Client
[2011.08.29 11:04:01 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Unity
[2011.08.25 12:03:40 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\uTorrent
[2011.04.02 21:52:42 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Ventrilo
[2010.10.11 14:50:07 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\Vodafone
[2010.10.17 17:48:13 | 000,000,000 | ---D | M] -- C:\Users\Melounek\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2009.08.11 22:21:26 | 000,087,552 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
[2009.08.11 22:21:30 | 000,090,112 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
[2010.03.22 15:52:04 | 000,697,690 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
[2010.02.23 18:01:52 | 001,185,871 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\FFDShow\unins000.exe
[2010.08.14 11:42:54 | 000,113,152 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
[2010.08.14 11:45:10 | 000,358,400 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
[2010.08.14 11:42:06 | 000,137,728 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
[2010.09.30 16:30:22 | 000,042,305 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
[2011.06.16 16:36:34 | 000,331,776 | ---- | M] () -- C:\Users\Melounek\AppData\Roaming\InstallShield Installation Information\{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}\SetupUT3.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010.10.17 17:21:43 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sptd.sys

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.09.05 12:02:20 | 000,014,224 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.09.05 12:02:20 | 000,014,224 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.09.05 12:42:15 | 000,000,512 | ---- | M] () MD5=E0E3900CAD13AE76599DF2EFC628AA22 -- C:\PhysicalMBR.bin

< >

< *crack /s >

< *keygen* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1

< End of report >














OTL Extras logfile created on: 5.9.2011 12:40:40 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Users\Melounek\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,41 Gb Available Physical Memory | 74,32% Memory free
6,50 Gb Paging File | 5,60 Gb Available in Paging File | 86,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 99,12 Gb Total Space | 27,23 Gb Free Space | 27,48% Space Free | Partition Type: NTFS
Drive D: | 832,39 Gb Total Space | 320,01 Gb Free Space | 38,44% Space Free | Partition Type: NTFS
Drive E: | 1,10 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: GAIA | User Name: Melounek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{16D919E6-F019-4E15-BFBE-4A85EF19DA57}" = Oblivion - Spell Tomes
"{1E81725C-1EE7-476D-8E1D-3150469643F6}" = Recordster
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20071984-5EB1-4881-8EDB-082532ACEC6D}" = Heroes of Might and Magic V
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = The Battle for Middle-earth (tm) II
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{45235788-142C-44BE-8A4D-DDE9A84492E5}" = AGEIA PhysX v7.09.13
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{53480350-2D1F-461C-9214-3AEC993DD4A1}" = O&O UnErase
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{620797B0-A022-4B57-A95E-DD7DD0352001}" = Restore Deleted Files Now
"{62C68336-B969-4097-B0BD-A3A0FBFD59C1}" = Mumble 1.2.3
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo
"{8795CBED-55E2-4693-9F14-84EC446935BE}" = SpeechRedist
"{96B51C0B-D3BE-4DF3-959C-28B22C10CFBB}" = Vodafone Mobile Connect Lite
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2B4455D-1046-4732-BFBC-0821BEFC07BC}" = Hellgate: London
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{AC76BA86-7AD7-1029-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Czech
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}" = Unreal Tournament 3
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2096}_is1" = SiSoftware Sandra Lite XII
"{CE7CB214-DB11-4B5D-A6AF-3B4ED47C68B7}" = Microsoft Game Studios Common Redistributables Pack 1
"{D5B94160-4A07-4956-9C73-8C5EEFEF180F}" = OpenOffice.org 3.3
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{ED50ECE9-EC54-4C05-B5ED-EE4741A9F2EC}" = Battlefield 2142
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{F06AC34A-24D8-48B7-830B-06BE30A22E5A}" = Audio Record Wizard
"AbleBurn_is1" = AbleBurn 2.3
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Alice: Madness Returns_is1" = Alice: Madness Returns
"BSG-Galactica Client mod" = BSG-Galactica Client mod
"BSPlayerf" = BS.Player FREE
"Bytescout XLS Viewer_is1" = Bytescout XLS Viewer 1.01
"Capture-A-ScreenShot_is1" = Capture-A-ScreenShot
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DivX Setup.divx.com" = DivX Setup
"DVD Shrink_is1" = DVD Shrink 3.2
"FineRecovery_is1" = FineRecovery 1.1.7
"FormatFactory" = FormatFactory 2.70
"Fraps" = Fraps
"Freelancer 1.0" = Freelancer
"FreeUndelete" = FreeUndelete
"GamePlayLabs Plugin" = GamePlayLabs Plugin
"Heroes of Might and Magic II" = Heroes of Might and Magic II
"Heroes of Might and Magic III Complete" = Heroes of Might and Magic III Complete
"HolidayRO - free server" = HolidayRO - free server
"Magic The Gathering - Duels of the Planeswalkers 2012_is1" = Magic The Gathering - Duels of the Planeswalkers 2012
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"PandoraRecovery" = PandoraRecovery (Remove Only)
"RealPlayer 12.0" = RealPlayer
"Searchqu 0 MediaBar" = Windows Searchqu Toolbar
"SmartPCRecorder" = Smart PC Recorder - by freebird
"Super Mp3 Recorder Professional_is1" = Super Mp3 Recorder Professional v6.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TmUnitedForever_is1" = TmUnitedForever Update 2010-03-15
"UT2004" = Unreal Tournament 2004
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR
"Wisdom-soft ScreenHunter 4.0 Free" = Wisdom-soft ScreenHunter 4.0 Free
"World of Warcraft" = World of Warcraft
"Zero Assumption Recovery_is1" = Zero Assumption Recovery Version 7.9

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"HolidayRO - free server" = HolidayRO - free server
"InstallShield_{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}" = Unreal Tournament 3
"QIP 2010" = QIP 2010 3.1.5248
"UnityWebPlayer" = Unity Web Player
"Verdict Free" = Slovník Verdict Free (a internetový překladač)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1.9.2011 4:54:37 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 2.9.2011 6:08:12 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 2.9.2011 23:04:00 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 3.9.2011 6:48:54 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 4.9.2011 4:30:21 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 4.9.2011 4:43:34 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 4.9.2011 4:58:23 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 4.9.2011 5:50:56 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 4.9.2011 12:55:34 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

Error - 5.9.2011 5:55:13 | Computer Name = Gaia | Source = VMCService | ID = 0
Description = conflictManagerTypeValue

[ Media Center Events ]
Error - 13.3.2011 6:31:56 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 11:31:52 - Chyba při připojování k Internetu 11:31:52 - Nelze kontaktovat
server..

Error - 16.3.2011 1:59:49 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 6:59:49 - Chyba při připojování k Internetu 6:59:49 - Nelze kontaktovat
server..

Error - 16.3.2011 1:59:58 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 6:59:54 - Chyba při připojování k Internetu 6:59:54 - Nelze kontaktovat
server..

Error - 19.3.2011 5:29:03 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 10:29:03 - Chyba při připojování k Internetu 10:29:03 - Nelze kontaktovat
server..

Error - 19.3.2011 5:29:12 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 10:29:08 - Chyba při připojování k Internetu 10:29:08 - Nelze kontaktovat
server..

Error - 21.3.2011 9:22:06 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 14:22:06 - Chyba při připojování k Internetu 14:22:06 - Nelze kontaktovat
server..

Error - 21.3.2011 9:22:19 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 14:22:12 - Chyba při připojování k Internetu 14:22:12 - Nelze kontaktovat
server..

Error - 23.3.2011 8:19:42 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 13:19:42 - Chyba při připojování k Internetu 13:19:42 - Nelze kontaktovat
server..

Error - 23.3.2011 8:19:51 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 13:19:47 - Chyba při připojování k Internetu 13:19:47 - Nelze kontaktovat
server..

Error - 27.6.2011 9:46:11 | Computer Name = Gaia | Source = MCUpdate | ID = 0
Description = 15:46:06 - Chyba při připojování k Internetu 15:46:06 - Nelze kontaktovat
server..

[ System Events ]
Error - 4.9.2011 4:56:48 | Computer Name = Gaia | Source = Service Control Manager | ID = 7001
Description = Služba Prohledávání počítačů závisí na službě Server, která neuspěla
při spuštění v důsledku následující chyby: %%1068

Error - 4.9.2011 4:58:16 | Computer Name = Gaia | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 4.9.2011 4:58:16 | Computer Name = Gaia | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 4.9.2011 5:50:50 | Computer Name = Gaia | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 4.9.2011 5:50:50 | Computer Name = Gaia | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 4.9.2011 12:55:27 | Computer Name = Gaia | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 4.9.2011 12:55:27 | Computer Name = Gaia | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 4.9.2011 19:23:17 | Computer Name = Gaia | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 5.9.2011 5:55:07 | Computer Name = Gaia | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 5.9.2011 5:55:07 | Computer Name = Gaia | Source = atikmdag | ID = 43029
Description = Display is not active


< End of report >

Ha už je vše v pořádku, ale ten OTL.exe jen skenoval, neopravoval, ne?

OTL jen skenovalo, opravovat budem az ted

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

• Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
• Spustte a kliknete na Deletion
• Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gooogle.com/
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: - Reg Error: Key error. File not found
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
  IE - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
  FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
  O2 - BHO: (QipLI Class) - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - File not found
  O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Melounek\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
  O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
  O2 - BHO: (Loader Class) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
  O2 - BHO: (BrowserPlugin) - {C2C174C4-0CCA-BC04-157E-BDAF73460396} - Reg Error: Value error. File not found
  O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
  O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
  O3 - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
  O3 - HKU\S-1-5-21-1521026211-2440243870-3557288801-1000\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  O13 - gopher Prefix: missing
  O20 - AppInit_DLLs: (C:\PROGRA~1\WIA6EB~1\Datamngr\datamngr.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
  O20 - AppInit_DLLs: (C:\PROGRA~1\WIA6EB~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  [8 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  [2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\2347e1c1efb91df2d1b80df333ec27b3\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2347e1c1efb91df2d1b80df333ec27b3\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\2c5f142d97790997d9b113eb9ad8f966\*.tmp files -> C:\Windows\SoftwareDistribution\Download\2c5f142d97790997d9b113eb9ad8f966\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\877a04eb3c7ed569a71e644a1f478f22\*.tmp files -> C:\Windows\SoftwareDistribution\Download\877a04eb3c7ed569a71e644a1f478f22\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\e86cc367db72984a1e1f05b09c03af8c\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e86cc367db72984a1e1f05b09c03af8c\*.tmp -> ]
  [1 C:\Windows\SoftwareDistribution\Download\eb3696b9932f474fe45978811bea2090\*.tmp files -> C:\Windows\SoftwareDistribution\Download\eb3696b9932f474fe45978811bea2090\*.tmp -> ]
  [10 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [8 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  [11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
  [11 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
  @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1
  
  :reg
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "Adobe Reader Speed Launcher"=-
  "Adobe ARM"=-
  "PATHPILOT"=-
  "DATAMNGR"=-
  "Malwarebytes' Anti-Malware"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
  
  :files
  C:\Program Files\uTorrentBar
  C:\Windows\tasks\Norton Security Scan for Melounek.job
  c:\Program Files\Windows Searchqu Toolbar
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem