VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by jakub at 2011-09-05 10:16:34
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 3 GB (4%) free of 82 GB
Total RAM: 2045 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:16:41, on 5.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
C:\WINDOWS\system32\HPSIsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Documents and Settings\jakub\My Documents\Preberanie\RSIT.exe
C:\Program Files\trend micro\jakub.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [DriverCD] D:\Run.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [TransBar] C:\Documents and Settings\jakub\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe /s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1614895754-1004336348-839522115-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - HP - C:\WINDOWS\system32\HPSIsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 6829 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\jakub\Application Data\Mozilla\Firefox\Profiles\5105ayyf.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-10-15 375000]
"DriverCD"=D:\Run.exe []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-28 19557480]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
""= []
"HPUsageTrackingLEDM"=C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [2009-08-04 30264]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-02-19 49152]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-04 1955208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-07-05 1632360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-06-01 94208]
"TransBar"=C:\Documents and Settings\jakub\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe [2005-06-01 65536]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"H:\Program Files\HLSW\hlsw.exe"="H:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\Program Files\EA Sports\FIFA 11\Game\fifa.exe"="D:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11"
"D:\Program Files\HLSW\hlsw.exe"="D:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"D:\Program Files\uTorrent\uTorrent.exe"="D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\MIRC\mirc.exe"="D:\Program Files\MIRC\mirc.exe:*:Enabled:mIRC"
"D:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe"="D:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe:*:Enabled:Medal of Honor Airborne"
"D:\Program Files\Xfire\Xfire.exe"="D:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"D:\Program Files\Electronic Arts\Crytek\Crysis 2\bin32\Crysis2.exe"="D:\Program Files\Electronic Arts\Crytek\Crysis 2\bin32\Crysis2.exe:*:Enabled:Crysis2"
"J:\L4D 2\Left 4 Dead 2\left4dead2.exe"="J:\L4D 2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"D:\Program Files\Valve\hl.exe"="D:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"D:\Program Files\Garena\Garena.exe"="D:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"E:\L4D 2\Left 4 Dead 2\left4dead2.exe"="E:\L4D 2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2"
"C:\Program Files\Veetle\Player\VeetleNet.exe"="C:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe"="D:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe:*:Enabled:biahh"
"D:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe"="D:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe:*:Disabled:Medal of Honor™"
"D:\Program Files\Activision\Modern Warfare 2\iw4mp.exe"="D:\Program Files\Activision\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp"
"D:\Program Files\Activision\Modern Warfare 2\iw4mpOLD.exe"="D:\Program Files\Activision\Modern Warfare 2\iw4mpOLD.exe:*:Enabled: "
"D:\Program Files\Activision\Modern Warfare 2\bootstrap\iw4mp.exe"="D:\Program Files\Activision\Modern Warfare 2\bootstrap\iw4mp.exe:*:Enabled: "
"D:\Program Files\Activision\Modern Warfare 2\iw4mp.dat"="D:\Program Files\Activision\Modern Warfare 2\iw4mp.dat:*:Enabled:iw4mp"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"D:\Program Files\EA Sports\Madden NFL 07\mainapp.exe"="D:\Program Files\EA Sports\Madden NFL 07\mainapp.exe:*:Enabled:mainapp"
"H:\Portable Appz\uTorrentPortable\App\uTorrent\uTorrent.exe"="H:\Portable Appz\uTorrentPortable\App\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiver.exe"="D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiver.exe:*:Enabled:Operation Flashpoint ®: Red River"
"D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe"="D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe:*:Enabled:Operation Flashpoint ®: Red River"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"D:\Program Files\Ubisoft\Brotherhood\ACBSP.exe"="D:\Program Files\Ubisoft\Brotherhood\ACBSP.exe:*:Enabled:ACBSP"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Veetle\Player\VeetleNet.exe"="C:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll

======List of files/folders created in the last 2 months======

2011-09-05 10:16:34 ----D---- C:\rsit
2011-09-05 10:16:34 ----D---- C:\Program Files\trend micro
2011-09-04 20:19:37 ----D---- C:\Documents and Settings\jakub\Application Data\U3
2011-09-02 15:37:47 ----D---- C:\Program Files\Microsoft Silverlight
2011-09-01 15:12:54 ----D---- C:\Documents and Settings\jakub\Application Data\Rovio
2011-08-29 19:41:40 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2011-08-27 00:21:30 ----A---- C:\WINDOWS\system32\xfcodec.dll
2011-08-26 08:51:58 ----SH---- C:\WINDOWS\system32\SCS.dll
2011-08-24 20:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-17 20:31:48 ----D---- C:\Documents and Settings\jakub\Application Data\Ubisoft
2011-08-17 20:31:48 ----D---- C:\Documents and Settings\All Users\Application Data\Ubisoft
2011-08-14 10:17:42 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2011-08-14 10:17:42 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2011-08-13 22:28:33 ----A---- C:\cmdlog.txt
2011-08-11 10:45:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-11 10:44:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-11 10:42:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-11 10:40:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2559049$
2011-08-11 10:35:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-11 10:34:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-10 13:29:41 ----A---- C:\WINDOWS\system32\muweb.dll
2011-08-10 13:29:41 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-08-09 19:13:44 ----D---- C:\WINDOWS\system32\xlive
2011-08-09 19:13:32 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-08-09 16:44:41 ----A---- C:\WINDOWS\system32\drivers\pdihwctl.sys
2011-08-09 16:44:39 ----A---- C:\WINDOWS\system32\drivers\i1display.sys
2011-08-09 16:44:39 ----A---- C:\WINDOWS\system32\drivers\direci2c.dll
2011-08-09 16:43:57 ----D---- C:\Program Files\GretagMacbeth
2011-08-09 08:43:53 ----AH---- C:\WINDOWS\system32\hamachi.sys
2011-08-09 08:43:41 ----D---- C:\Program Files\LogMeIn Hamachi
2011-08-08 11:51:36 ----D---- C:\WINDOWS\Downloaded Installations
2011-07-31 09:30:08 ----D---- C:\Program Files\Common Files\Adobe
2011-07-31 09:30:08 ----D---- C:\Program Files\Adobe
2011-07-31 09:29:37 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2011-07-29 12:48:21 ----D---- C:\Program Files\MSXML 4.0
2011-07-28 11:38:27 ----D---- C:\Documents and Settings\jakub\Application Data\Image Zone Express
2011-07-28 11:31:38 ----RA---- C:\WINDOWS\system32\drivers\HPZipr12.sys
2011-07-28 11:31:36 ----RA---- C:\WINDOWS\system32\drivers\HPZid412.sys
2011-07-28 11:31:15 ----RA---- C:\WINDOWS\system32\HPZIDS01.dll
2011-07-28 11:31:14 ----A---- C:\WINDOWS\system32\hpzll054.dll
2011-07-28 11:30:58 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2011-07-28 10:36:45 ----D---- C:\Program Files\Common Files\HP
2011-07-28 10:34:56 ----D---- C:\Program Files\Hewlett-Packard
2011-07-28 10:34:27 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZisn12.dll
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZipt12.dll
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZipr12.dll
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZipm12.exe
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZinw12.exe
2011-07-28 10:33:38 ----A---- C:\WINDOWS\system32\HPZidr12.dll
2011-07-28 10:33:36 ----A---- C:\WINDOWS\IsUninst.exe
2011-07-28 10:32:07 ----HD---- C:\Config.Msi
2011-07-28 10:12:26 ----A---- C:\WINDOWS\hpoins11.dat
2011-07-26 09:19:47 ----A---- C:\Documents and Settings\jakub\Application Data\steam_md4.dat
2011-07-20 13:33:25 ----D---- C:\Documents and Settings\jakub\Application Data\Zoner
2011-07-20 13:32:22 ----D---- C:\Program Files\Zoner
2011-07-18 18:55:42 ----D---- C:\Documents and Settings\All Users\Application Data\HP
2011-07-18 18:55:33 ----D---- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
2011-07-18 18:54:37 ----RA---- C:\WINDOWS\system32\HP1100SMs.dll
2011-07-18 18:54:37 ----A---- C:\WINDOWS\system32\HP1100SM.EXE
2011-07-18 18:54:37 ----A---- C:\WINDOWS\system32\HP1100LM.DLL
2011-07-18 18:54:25 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-07-18 18:54:18 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2011-07-18 18:54:15 ----RA---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2011-07-18 18:54:15 ----RA---- C:\WINDOWS\system32\mvusbews.dll
2011-07-18 18:54:15 ----RA---- C:\WINDOWS\system32\drivers\mvusbews.sys
2011-07-18 18:52:48 ----RA---- C:\WINDOWS\system32\HPSIsvc.exe
2011-07-18 18:52:43 ----D---- C:\Documents and Settings\All Users\Application Data\HPSSUPPLY
2011-07-18 18:51:09 ----RA---- C:\WINDOWS\system32\Difxapi.dll
2011-07-18 18:51:08 ----RA---- C:\WINDOWS\system32\mvhlewsi.dll
2011-07-18 18:51:05 ----D---- C:\Program Files\HP
2011-07-18 18:50:52 ----D---- C:\Documents and Settings\jakub\Application Data\HP
2011-07-17 12:14:37 ----D---- C:\WINDOWS\74224F8D4A1748169EDB7BB854DE532C.TMP
2011-07-16 20:03:26 ----D---- C:\Documents and Settings\jakub\Application Data\IrfanView
2011-07-14 20:18:50 ----D---- C:\WINDOWS\E10DB5DAE57640EAA7FC1CB2A7B283A6.TMP
2011-07-14 20:18:09 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-07-14 20:18:09 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-07-14 20:18:09 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-07-14 20:18:08 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-07-14 20:18:08 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-07-14 20:18:07 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-07-14 20:18:07 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-07-14 20:18:06 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-07-14 20:18:05 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-07-14 20:18:05 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-07-14 20:18:05 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-07-14 20:18:04 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-07-14 20:18:04 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-07-14 20:18:03 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-07-13 20:03:43 ----A---- C:\WINDOWS\popcinfot.dat
2011-07-13 19:37:27 ----D---- C:\Documents and Settings\All Users\Application Data\PopCap Games
2011-07-13 17:52:50 ----A---- C:\WINDOWS\system32\msvcr100.dll
2011-07-13 15:37:11 ----A---- C:\debug3.txt
2011-07-13 15:36:56 ----D---- C:\Program Files\Veetle
2011-07-13 15:24:36 ----D---- C:\WINDOWS\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
2011-07-13 12:12:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-07-13 12:11:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-11 19:32:02 ----D---- C:\Documents and Settings\jakub\Application Data\NVIDIA
2011-07-11 11:10:54 ----A---- C:\Documents and Settings\jakub\Application Data\room_v3.dat
2011-07-09 18:22:14 ----A---- C:\WINDOWS\system32\nvUnsupRes.dat
2011-07-09 17:38:53 ----A---- C:\WINDOWS\system32\pbsvc.exe
2011-07-09 15:47:43 ----ASH---- C:\hiberfil.sys
2011-07-06 20:26:15 ----D---- C:\WINDOWS\Minidump

======List of files/folders modified in the last 2 months======

2011-09-05 10:16:34 ----RD---- C:\Program Files
2011-09-05 10:16:34 ----D---- C:\WINDOWS\Temp
2011-09-05 10:15:23 ----D---- C:\WINDOWS\Prefetch
2011-09-05 10:10:24 ----D---- C:\WINDOWS\system32
2011-09-05 10:10:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-05 07:47:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-05 07:31:48 ----D---- C:\WINDOWS
2011-09-04 20:13:14 ----HD---- C:\WINDOWS\inf
2011-09-04 20:13:02 ----D---- C:\WINDOWS\system32\drivers
2011-09-04 20:12:18 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-04 15:58:30 ----D---- C:\Documents and Settings\jakub\Application Data\HLSW
2011-09-04 15:20:02 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-09-03 20:23:10 ----SHD---- C:\WINDOWS\Installer
2011-09-01 12:50:52 ----D---- C:\Program Files\Mozilla Firefox
2011-08-30 10:15:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-29 21:38:59 ----D---- C:\Documents and Settings\jakub\Application Data\uTorrent
2011-08-29 19:41:04 ----D---- C:\Program Files\DAEMON Tools Lite
2011-08-27 13:24:21 ----D---- C:\Documents and Settings\jakub\Application Data\Xfire
2011-08-24 19:15:45 ----A---- C:\WINDOWS\NeroDigital.ini
2011-08-20 21:31:42 ----D---- C:\WINDOWS\WinSxS
2011-08-20 21:30:24 ----RSD---- C:\WINDOWS\assembly
2011-08-20 21:29:44 ----D---- C:\WINDOWS\system32\DirectX
2011-08-16 10:17:04 ----D---- C:\Documents and Settings\jakub\Application Data\TS3Client
2011-08-15 21:43:37 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-15 21:43:16 ----RSD---- C:\WINDOWS\Fonts
2011-08-14 12:58:08 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2011-08-14 10:19:48 ----D---- C:\WINDOWS\Help
2011-08-14 10:19:21 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-14 10:18:17 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-13 18:38:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-13 18:38:06 ----D---- C:\Program Files\Microsoft Works
2011-08-13 18:36:27 ----A---- C:\WINDOWS\win.ini
2011-08-13 18:36:26 ----D---- C:\Program Files\Common Files\System
2011-08-11 18:00:00 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-11 10:45:13 ----A---- C:\WINDOWS\imsins.BAK
2011-08-11 10:44:03 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-11 10:41:08 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-09 19:13:16 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2011-08-08 11:55:18 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-08 11:51:33 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvwddi.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrszht.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrstr.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsth.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrssv.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrssl.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrssk.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsru.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrspt.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrspl.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsno.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsko.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsja.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsit.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrshu.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrshe.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrses.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrseng.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsel.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsde.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsda.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrscs.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvrsar.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvmctray.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcuda.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcpl.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvcolor.exe
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nvapi.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2011-08-03 13:49:00 ----A---- C:\WINDOWS\system32\easyupdatusapiu.dll
2011-08-01 12:30:01 ----SD---- C:\WINDOWS\Tasks
2011-07-31 09:30:57 ----SD---- C:\Documents and Settings\jakub\Application Data\Microsoft
2011-07-31 09:30:57 ----D---- C:\Documents and Settings\jakub\Application Data\Adobe
2011-07-31 09:30:08 ----D---- C:\Program Files\Common Files
2011-07-28 11:31:03 ----D---- C:\WINDOWS\twain_32
2011-07-24 18:57:41 ----D---- C:\Documents and Settings\jakub\Application Data\Ahead
2011-07-10 10:46:14 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2011-07-09 15:50:15 ----D---- C:\WINDOWS\system32\wbem
2011-07-08 15:49:22 ----N---- C:\WINDOWS\system32\tzchange.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Texas Instruments OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-08-30 232512]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 PDIHWCTL;PDIHWCTL; \??\C:\WINDOWS\system32\drivers\pdihwctl.sys []
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-28 6108776]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-05-03 225232]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 GGSAFERDriver;GGSAFER Driver; \??\D:\Program Files\Garena\safedrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 i1display;i1 Display; C:\WINDOWS\System32\Drivers\i1display.sys [2004-10-15 44344]
S3 ivusb;Initio Driver for USB Default Controller; C:\WINDOWS\system32\DRIVERS\ivusb.sys [2010-07-29 25112]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 mvusbews;USB EWS Device; C:\WINDOWS\System32\Drivers\mvusbews.sys [2009-10-26 17408]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-08-24 68136]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-04 1361288]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [2009-06-24 136704]
R2 HPSIService;HP SI Service; C:\WINDOWS\system32\HPSIsvc.exe [2009-11-10 99896]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-07-10 75136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-06-08 208896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím.

Dej mi minutku, hnedle na to mrknu.

Předpokládám, že ten ESET NOD32 Antivirus máš legální = zakoupená licence?!

Říká Ti něco tento soubor D:\Run.exe ?

Pro začátek stáhni OTL z tohoto odkazu a ulož jej na Plochu.

Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
Zaškrtni okénko Pro všechny uživatele.
Zaškrtni okénko Kontrola na havěť "LOP".
Zaškrtni okénko Kontrola na havěť "Purity".
Stáři souborů změň z 30 dnů na 7 dnů.
Do spodního okénka Vlastní skenování/opravy vlož tento skript:

Kód: Vybrat vše

safebootminimal 
safebootnetwork
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
/md5start
scecli.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
atapi.sys
cdrom.sys 
ndis.sys
ntfs.sys
tcpip.sys
%SystemDrive%\PhysicalMBR.bin
/md5stop
C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X 
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav 
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
*crack* /s
*keygen* /s
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

Klikni na tlačítko Prohledat.
Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.

hej hej mam legalny NOD a D:Run.exe mi nic nehovori:(

OTL logfile created on: 5.9.2011 20:23:31 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Documents and Settings\jakub\My Documents\Preberanie
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 62,14% Memory free
3,85 Gb Paging File | 3,03 Gb Available in Paging File | 78,84% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 80,00 Gb Total Space | 53,36 Gb Free Space | 66,71% Space Free | Partition Type: NTFS
Drive D: | 400,00 Gb Total Space | 292,78 Gb Free Space | 73,19% Space Free | Partition Type: NTFS
Drive E: | 218,63 Gb Total Space | 44,58 Gb Free Space | 20,39% Space Free | Partition Type: NTFS
Drive J: | 149,05 Gb Total Space | 3,41 Gb Free Space | 2,29% Space Free | Partition Type: NTFS

Computer Name: JAKUB-1CA53A203 | User Name: jakub | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.09.05 20:22:27 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\jakub\My Documents\Preberanie\OTL.exe
PRC - [2011.09.01 12:50:45 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.08.04 14:34:50 | 001,955,208 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2011.08.04 14:34:46 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011.08.03 13:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.08.02 09:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2009.11.10 04:57:54 | 000,099,896 | R--- | M] (HP) -- C:\WINDOWS\system32\HPSIsvc.exe
PRC - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009.10.15 14:06:42 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe
PRC - [2009.06.24 10:57:04 | 000,136,704 | ---- | M] (HP) -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
PRC - [2009.02.06 14:23:36 | 000,727,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.02.06 14:23:12 | 002,021,400 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.04.14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.06.01 13:32:12 | 000,094,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

========== Modules (No Company Name) ==========

MOD - [2011.09.01 12:50:44 | 001,846,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.08.23 07:50:34 | 006,277,280 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2011.08.11 17:57:56 | 011,800,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\40893760431f8f0dcce3e18630e45b23\System.Web.ni.dll
MOD - [2011.08.11 17:57:51 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\70a1400affdc775d7c7398e036359286\System.ServiceProcess.ni.dll
MOD - [2011.08.11 17:57:45 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\21248037960cf6dfa2ce401d355bd6c9\System.Runtime.Serialization.Formatters.Soap.ni.dll
MOD - [2011.08.11 17:57:02 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\77df2cd21a5b85a1605b335aa9ad9d44\System.Configuration.ni.dll
MOD - [2011.08.11 17:52:13 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xml.ni.dll
MOD - [2011.08.11 17:51:11 | 007,950,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll
MOD - [2011.08.11 10:46:51 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2011.08.11 10:39:42 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll
MOD - [2011.07.05 10:08:34 | 000,355,432 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nvShell.dll
MOD - [2011.06.06 12:55:42 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.SKY
MOD - [2010.02.05 20:27:45 | 001,291,776 | ---- | M] () -- C:\WINDOWS\system32\quartz.dll
MOD - [2009.10.26 17:01:40 | 000,081,920 | R--- | M] () -- C:\WINDOWS\system32\mvusbews.dll
MOD - [2009.10.23 11:18:38 | 000,151,552 | ---- | M] () -- C:\WINDOWS\system32\HP1100LM.DLL
MOD - [2009.10.23 11:18:14 | 000,069,632 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\HP1100PP.dll
MOD - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe
MOD - [2009.06.27 10:11:12 | 000,503,202 | ---- | M] () -- C:\Program Files\DeviceVM\Browser Configuration Utility\sqlite3.dll
MOD - [2009.03.13 11:30:44 | 000,109,096 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\ycc.dll
MOD - [2005.10.20 10:36:08 | 000,077,824 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmltok.dll
MOD - [2005.10.20 10:36:08 | 000,065,536 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmlparse.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.08.04 14:34:46 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011.08.03 13:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2009.11.10 04:57:54 | 000,099,896 | R--- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPSIsvc.exe -- (HPSIService)
SRV - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009.06.24 10:57:04 | 000,136,704 | ---- | M] (HP) [Auto | Running] -- C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service)
SRV - [2009.02.06 14:27:06 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.02.06 14:23:36 | 000,727,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2006.03.03 21:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

========== Driver Services (SafeList) ==========

DRV - [2011.09.05 19:46:33 | 000,138,160 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2011.09.05 18:07:06 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2011.08.30 10:15:30 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010.07.29 00:25:42 | 000,025,112 | ---- | M] (Initio Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ivusb.sys -- (ivusb)
DRV - [2010.07.28 12:27:36 | 006,108,776 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010.05.03 08:49:18 | 000,225,232 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009.11.18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.10.26 17:01:40 | 000,017,408 | R--- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mvusbews.sys -- (mvusbews)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.02.06 14:24:24 | 000,093,336 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.02.06 14:23:18 | 000,106,208 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.02.06 14:19:52 | 000,113,448 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2007.01.25 16:41:30 | 000,014,416 | ---- | M] (Portrait Displays, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pdihwctl.sys -- (PDIHWCTL)
DRV - [2004.10.15 08:54:56 | 000,044,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\i1display.sys -- (i1display)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\S-1-5-21-1614895754-1004336348-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
IE - HKU\S-1-5-21-1614895754-1004336348-839522115-1004\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-1614895754-1004336348-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.09.01 12:50:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011.06.27 20:06:44 | 000,000,000 | ---D | M]

[2011.06.27 14:22:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\jakub\Application Data\Mozilla\Extensions
[2011.07.27 21:27:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\jakub\Application Data\Mozilla\Firefox\Profiles\5105ayyf.default\extensions
[2011.06.27 14:22:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.06.27 14:15:17 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.09.01 12:50:46 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,001,583 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\atlas-sk.xml
[2010.01.01 10:00:00 | 000,001,380 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\azet-sk.xml
[2010.01.01 10:00:00 | 000,001,479 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\dunaj-sk.xml
[2010.01.01 10:00:00 | 000,001,473 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slovnik-sk.xml
[2010.01.01 10:00:00 | 000,001,104 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-sk.xml
[2010.01.01 10:00:00 | 000,000,830 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: ([2006.02.28 14:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [DriverCD] File not found
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKU\S-1-5-21-1614895754-1004336348-839522115-1004..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1614895754-1004336348-839522115-1004..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1614895754-1004336348-839522115-1004..\Run: [TransBar] C:\Documents and Settings\jakub\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe (AKSoftware)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1614895754-1004336348-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1614895754-1004336348-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6AC1B8C3-4F49-4E35-8A88-F1926879CDB0}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.06.27 13:15:17 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

SafeBootMin: AppMgmt - File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: AppMgmt - File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Hamachi2Svc - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\WINDOWS\System32\xfcodec.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2011.09.05 10:16:34 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.09.05 10:16:34 | 000,000,000 | ---D | C] -- C:\rsit
[2011.09.04 20:19:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Application Data\U3
[2011.09.03 20:23:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2011.09.02 16:32:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2011.09.02 15:37:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011.09.01 15:12:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Application Data\Rovio
[2011.08.29 19:41:40 | 000,232,512 | ---- | C] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2011.08.28 09:06:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\DAEMON Tools Lite
[2011.08.28 09:05:14 | 011,527,296 | ---- | C] (DT Soft Ltd.) -- C:\Documents and Settings\jakub\My Documents\DTLite4413-0173.exe
[2011.08.20 21:36:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\My Documents\Aspyr
[2011.08.20 21:29:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Aspyr
[2011.08.20 20:39:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Local Settings\Application Data\Aspyr
[2011.08.18 11:48:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\My Documents\BFBC2
[2011.08.17 20:31:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Application Data\Ubisoft
[2011.08.17 20:31:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Ubisoft
[2011.08.17 20:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Assassins Creed Brotherhood
[2011.08.14 20:10:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\LucasArts
[2011.08.14 10:17:42 | 000,914,024 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco32.dll
[2011.08.14 10:17:42 | 000,875,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco32.dll
[2011.08.14 10:11:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Desktop\mob
[2011.08.13 22:28:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\My Documents\LucasArts
[2011.08.13 22:28:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Local Settings\Application Data\LucasArts
[2011.08.13 18:54:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\My Documents\My Cheat Tables
[2011.08.11 07:56:54 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011.08.11 07:56:36 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011.08.10 13:29:41 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2011.08.10 13:29:41 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2011.08.09 19:13:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2011.08.09 19:13:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011.08.09 19:13:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2011.08.09 19:03:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Codemasters
[2011.08.09 18:53:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Local Settings\Application Data\GHISLER
[2011.08.09 16:44:41 | 000,014,416 | ---- | C] (Portrait Displays, Inc.) -- C:\WINDOWS\System32\drivers\pdihwctl.sys
[2011.08.09 16:44:39 | 000,126,976 | ---- | C] (Portrait Displays, Inc.) -- C:\WINDOWS\System32\drivers\direci2c.dll
[2011.08.09 16:43:57 | 000,000,000 | ---D | C] -- C:\Program Files\GretagMacbeth
[2011.08.09 08:43:53 | 000,026,176 | -H-- | C] (LogMeIn, Inc.) -- C:\WINDOWS\System32\hamachi.sys
[2011.08.09 08:43:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\LogMeIn Hamachi
[2011.08.09 08:43:41 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2011.08.08 12:21:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Local Settings\Application Data\LogMeIn Hamachi
[2011.08.08 12:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\LogMeIn Hamachi
[2011.08.08 11:58:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\My Documents\Madden NFL 07
[2011.08.08 11:51:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations
[2011.08.07 12:05:13 | 028,868,320 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\jakub\Desktop\FileFormatConverters.exe
[2011.08.07 12:05:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\jakub\Desktop\JM Merkur
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.09.05 20:24:14 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.09.05 19:46:33 | 000,138,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011.09.05 19:46:20 | 000,271,200 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2011.09.05 19:19:05 | 000,271,200 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2011.09.05 18:11:15 | 000,475,870 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.09.05 18:11:15 | 000,076,712 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.09.05 18:07:06 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
[2011.09.05 18:06:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.09.05 18:06:47 | 2144,915,456 | -HS- | M] () -- C:\hiberfil.sys
[2011.09.05 17:10:59 | 000,000,499 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Counter-Strike 1.6.lnk
[2011.09.05 17:10:44 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011.09.05 16:58:32 | 000,067,072 | ---- | M] () -- C:\Documents and Settings\jakub\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.09.01 22:24:34 | 000,149,687 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\214440_1238804246523_full.jpg
[2011.08.30 11:21:50 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.08.30 10:15:30 | 000,232,512 | ---- | M] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2011.08.28 09:06:22 | 000,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools Lite.lnk
[2011.08.28 09:05:03 | 011,527,296 | ---- | M] (DT Soft Ltd.) -- C:\Documents and Settings\jakub\My Documents\DTLite4413-0173.exe
[2011.08.27 00:21:30 | 000,042,392 | ---- | M] () -- C:\WINDOWS\System32\xfcodec.dll
[2011.08.26 08:51:58 | 000,164,352 | -HS- | M] () -- C:\WINDOWS\System32\SCS.dll
[2011.08.24 19:15:45 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\jakub\default.pls
[2011.08.23 07:50:35 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.08.21 10:46:36 | 1666,708,266 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\I.am.number.four.2011.DVDRip.Xvid.AC3.CZ.-iNKViZiT0R.avi
[2011.08.20 21:29:36 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\Star Wars The Force Unleashed.lnk
[2011.08.17 20:27:07 | 000,000,590 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Assassins Creed Brotherhood.lnk
[2011.08.16 08:30:23 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.08.14 20:12:53 | 000,000,025 | ---- | M] () -- C:\WINDOWS\popcinfot.dat
[2011.08.14 10:18:21 | 000,280,904 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011.08.14 10:18:21 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011.08.14 10:18:18 | 000,280,904 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011.08.14 09:15:03 | 000,000,801 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\Odkaz na SWTFU2.lnk
[2011.08.11 10:45:13 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011.08.09 12:49:50 | 000,123,061 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\Clipboard01sdfasf.jpg
[2011.08.09 10:15:41 | 000,134,397 | ---- | M] () -- C:\Documents and Settings\jakub\Desktop\Clipboard01dsf.jpg
[2011.08.08 11:51:20 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Madden NFL 07.lnk
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.09.05 20:24:14 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.09.05 17:10:59 | 000,000,499 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Counter-Strike 1.6.lnk
[2011.09.05 17:02:20 | 000,350,408 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\DSC04577.JPG
[2011.09.01 22:24:33 | 000,149,687 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\214440_1238804246523_full.jpg
[2011.08.28 09:06:22 | 000,001,613 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools Lite.lnk
[2011.08.27 00:21:30 | 000,042,392 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2011.08.26 08:51:58 | 000,164,352 | -HS- | C] () -- C:\WINDOWS\System32\SCS.dll
[2011.08.23 15:43:59 | 1666,708,266 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\I.am.number.four.2011.DVDRip.Xvid.AC3.CZ.-iNKViZiT0R.avi
[2011.08.20 21:58:54 | 000,220,112 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011.08.20 21:29:36 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\Star Wars The Force Unleashed.lnk
[2011.08.17 20:27:07 | 000,000,590 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Assassins Creed Brotherhood.lnk
[2011.08.14 09:15:03 | 000,000,801 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\Odkaz na SWTFU2.lnk
[2011.08.09 19:13:16 | 000,001,085 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Live ID.lnk
[2011.08.09 16:44:39 | 000,044,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\i1display.sys
[2011.08.09 12:49:50 | 000,123,061 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\Clipboard01sdfasf.jpg
[2011.08.09 10:15:41 | 000,134,397 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\Clipboard01dsf.jpg
[2011.08.08 11:51:20 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Madden NFL 07.lnk
[2011.08.07 12:06:13 | 2029,580,288 | ---- | C] () -- C:\Documents and Settings\jakub\Desktop\Sucker.Punch.2011.480p.BRRip.XviD.AC3.CZ-LEADERs.avi
[2011.07.28 11:31:15 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2011.07.28 10:12:26 | 000,117,734 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2011.07.26 09:19:47 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\jakub\Application Data\steam_md4.dat
[2011.07.18 18:54:37 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\HP1100SM.EXE
[2011.07.18 18:54:37 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\HP1100LM.DLL
[2011.07.18 18:54:37 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\HP1100SMs.dll
[2011.07.18 18:54:15 | 000,081,920 | R--- | C] () -- C:\WINDOWS\System32\mvusbews.dll
[2011.07.18 18:51:08 | 000,284,160 | R--- | C] () -- C:\WINDOWS\System32\mvhlewsi.dll
[2011.07.13 20:03:43 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2011.07.11 11:10:54 | 000,045,202 | ---- | C] () -- C:\Documents and Settings\jakub\Application Data\room_v3.dat
[2011.07.09 18:22:14 | 000,000,237 | ---- | C] () -- C:\WINDOWS\System32\nvUnsupRes.dat
[2011.07.09 17:38:53 | 000,669,184 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2011.06.27 20:31:46 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011.06.27 17:48:10 | 000,138,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011.06.27 17:48:09 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\jakub\Application Data\PnkBstrK.sys
[2011.06.27 17:47:41 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2011.06.27 17:47:38 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011.06.27 17:47:35 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2011.06.27 14:59:49 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.06.27 14:58:31 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.06.27 14:27:40 | 000,280,904 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011.06.27 14:27:40 | 000,280,904 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011.06.27 14:27:40 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011.06.27 14:27:19 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011.06.27 14:22:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.06.27 14:06:21 | 000,067,072 | ---- | C] () -- C:\Documents and Settings\jakub\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.06.27 14:05:53 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011.06.27 13:41:50 | 000,080,416 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2011.06.27 13:24:53 | 000,207,400 | R--- | C] () -- C:\WINDOWS\GSetup.exe
[2011.06.27 13:24:53 | 000,000,010 | ---- | C] () -- C:\WINDOWS\GSetup.ini
[2011.06.27 13:17:09 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.06.27 13:12:11 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009.04.01 10:48:16 | 000,053,478 | ---- | C] () -- C:\WINDOWS\mvtcpui.ini
[2006.05.05 12:59:01 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2006.02.28 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006.02.28 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006.02.28 14:00:00 | 000,475,870 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006.02.28 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006.02.28 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006.02.28 14:00:00 | 000,076,712 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006.02.28 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006.02.28 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006.02.28 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006.02.28 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006.02.28 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006.02.28 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001.07.07 03:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini

========== LOP Check ==========

[2011.06.27 16:47:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.06.28 14:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EA Core
[2011.06.28 14:56:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2011.06.27 20:06:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2011.06.27 16:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Mirillis
[2011.07.13 19:37:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap Games
[2011.08.17 20:31:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ubisoft
[2011.06.27 20:43:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\DAEMON Tools Lite
[2011.09.05 19:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\HLSW
[2011.08.24 19:50:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Image Zone Express
[2011.07.16 20:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\IrfanView
[2011.06.28 08:45:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Leadertech
[2011.06.27 16:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Mirillis
[2011.09.01 15:12:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Rovio
[2011.06.28 15:16:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\The Lord of the Rings - Conquest
[2011.08.16 10:17:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\TS3Client
[2011.08.17 20:31:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Ubisoft
[2011.09.05 13:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\uTorrent
[2011.07.20 13:33:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Zoner

========== Purity Check ==========

========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 02:12:16 | 000,015,360 | ---- | M] (Microsoft Corporation)
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" = "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" -- [2006.06.01 13:32:12 | 000,094,208 | ---- | M] (Nero AG)
"TransBar" = C:\Documents and Settings\jakub\Local Settings\Application Data\AKSoftware\TransBar\TransBar.exe /s -- [2005.06.01 21:41:18 | 000,065,536 | ---- | M] (AKSoftware)
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2011.08.02 09:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd)

< MD5 for: ATAPI.SYS >
[2006.02.28 14:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2011.06.27 15:20:42 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2011.06.27 15:20:42 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.02.28 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 02:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 02:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- C:\WINDOWS\system32\autochk.exe
[2006.02.28 14:00:00 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2006.02.28 14:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2011.06.27 15:20:42 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2011.06.27 15:20:42 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2006.02.28 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CSRSS.EXE >
[2008.04.14 02:12:15 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=44F275C64738EA2056E3D9580C23B60F -- C:\WINDOWS\ServicePackFiles\i386\csrss.exe
[2008.04.14 02:12:15 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=44F275C64738EA2056E3D9580C23B60F -- C:\WINDOWS\system32\csrss.exe
[2006.02.28 14:00:00 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=F12B178B1678D778CFD3FF1FC38C71FB -- C:\WINDOWS\$NtServicePackUninstall$\csrss.exe

< MD5 for: EXPLORER.EXE >
[2008.04.14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
[2008.04.14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.02.28 14:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: LSASS.EXE >
[2006.02.28 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 02:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 02:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.02.28 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NTFS.SYS >
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\drivers\ntfs.sys
[2006.02.28 14:00:00 | 000,574,592 | ---- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys

< MD5 for: SCECLI.DLL >
[2006.02.28 14:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 02:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 02:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.06 13:06:24 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=020CEAAEDC8EB655B6506B8C70D53BB6 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2008.04.14 02:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 02:12:34 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=0E776ED5F7CC9F94299E70461B7B8185 -- C:\WINDOWS\ServicePackFiles\i386\services.exe
[2009.02.06 19:14:03 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=37561F8D4160D62DA86D24AE41FAE8DE -- C:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.06 12:22:21 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=4712531AB7A01B7EE059853CA17D39BD -- C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe
[2009.02.06 13:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009.02.06 13:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.06 13:11:05 | 000,110,592 | ---- | M] (Microsoft Corporation) MD5=65DF52F5B8B6E9BBD183505225C37315 -- C:\WINDOWS\system32\services.exe
[2006.02.28 14:00:00 | 000,108,032 | ---- | M] (Microsoft Corporation) MD5=C6CE6EEC82F187615D1002BB3BB50ED4 -- C:\WINDOWS\$NtUninstallKB956572_0$\services.exe

< MD5 for: SMSS.EXE >
[2008.04.14 02:12:36 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 02:12:36 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=5F816C1F539266D2D4C78694239DA0B5 -- C:\WINDOWS\system32\smss.exe
[2006.02.28 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=BD7FB0957C716F1A60333AEE04DE2178 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe

< MD5 for: SPOOLSV.EXE >
[2010.08.17 15:19:36 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=258DD5D4283FD9F9A7166BE9AE45CE73 -- C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\dllcache\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\spoolsv.exe
[2006.02.28 14:00:00 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=7435B108B935E42EA92CA94F59C8E717 -- C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe
[2008.04.14 02:12:36 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=D8E14A61ACC1D4A6CD0D38AEBAC7FA3B -- C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe
[2008.04.14 02:12:36 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=D8E14A61ACC1D4A6CD0D38AEBAC7FA3B -- C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 02:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 02:12:36 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=27C6D03BCDB8CFEB96B716F3D8BE3E18 -- C:\WINDOWS\system32\svchost.exe
[2006.02.28 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=8F078AE4ED187AAABC0A305146DE6716 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2006.02.28 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2006.02.28 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008.04.14 02:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 02:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2006.02.28 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 02:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 02:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe

< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2008.07.06 14:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2009.10.23 11:18:14 | 000,069,632 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\HP1100PP.dll
[2006.04.10 14:02:32 | 000,074,240 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp054.dll
[2008.07.06 14:06:10 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll

< %systemroot%\system32\drivers\*.sys /5 >
[2011.09.05 19:46:33 | 000,138,160 | ---- | M] () -- C:\WINDOWS\system32\drivers\PnkBstrK.sys

< %systemroot%\system32\drivers\*.sys /X >
[2008.04.14 02:11:48 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008.04.14 02:11:48 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008.04.14 02:11:48 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008.04.14 02:11:48 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008.04.14 02:11:48 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008.04.14 02:11:48 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008.04.14 02:11:48 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2004.07.17 11:36:24 | 000,064,352 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativmc20.cod
[2008.04.14 02:11:50 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008.04.14 02:11:50 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008.04.14 02:11:50 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008.04.14 02:11:50 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008.04.14 02:11:50 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008.04.14 02:11:50 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2004.07.17 22:55:24 | 000,129,045 | ---- | M] () -- C:\WINDOWS\system32\drivers\cxthsfs2.cty
[2007.01.25 16:41:30 | 000,126,976 | ---- | M] (Portrait Displays, Inc.) -- C:\WINDOWS\system32\drivers\direci2c.dll
[2006.02.28 14:00:00 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2006.02.28 14:00:00 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt
[2011.07.18 18:54:34 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2011.07.18 18:54:36 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\Msft_Kernel_mvusbews_01007.Wdf
[2004.07.17 11:35:00 | 000,067,866 | ---- | M] () -- C:\WINDOWS\system32\drivers\netwlan5.img
[2008.04.14 02:12:05 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008.04.14 02:12:08 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\system32\*.* /5 >
[2011.09.05 18:11:15 | 000,076,712 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2011.09.05 18:11:15 | 000,475,870 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2011.09.05 18:11:15 | 000,563,910 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2011.09.05 19:19:05 | 000,271,200 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.ex0
[2011.09.05 19:46:20 | 000,271,200 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.exe
[2011.09.05 19:46:20 | 000,271,200 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.xtr
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\config\*.sav >
[2011.06.27 14:57:04 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2011.06.27 14:57:04 | 000,634,880 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2011.06.27 14:57:04 | 000,909,312 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\*.* /U /s >
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[8 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[10 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]

< %systemroot%\*. /mp /s >

< %ALLUSERSPROFILE%\Data Aplikací\*.* >

< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >

< %APPDATA%\*. >
[2011.07.31 09:30:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Adobe
[2011.07.24 18:57:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Ahead
[2011.06.27 20:43:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\DAEMON Tools Lite
[2011.09.05 19:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\HLSW
[2011.07.28 11:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\HP
[2011.06.27 13:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Identities
[2011.08.24 19:50:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Image Zone Express
[2011.07.16 20:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\IrfanView
[2011.06.28 08:45:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Leadertech
[2011.06.27 14:10:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Macromedia
[2011.09.05 18:31:08 | 000,000,000 | --SD | M] -- C:\Documents and Settings\jakub\Application Data\Microsoft
[2011.06.27 16:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Mirillis
[2011.06.27 14:22:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Mozilla
[2011.09.01 15:12:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\NVIDIA
[2011.09.01 15:12:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Rovio
[2011.06.28 13:43:58 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\jakub\Application Data\SecuROM
[2011.06.28 15:16:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\The Lord of the Rings - Conquest
[2011.08.16 10:17:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\TS3Client
[2011.09.04 20:20:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\U3
[2011.08.17 20:31:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Ubisoft
[2011.09.05 13:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\uTorrent
[2011.06.27 16:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\WinRAR
[2011.08.27 13:24:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Xfire
[2011.07.20 13:33:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jakub\Application Data\Zoner

< %APPDATA%\*.* >
[2011.06.27 14:59:17 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\jakub\Application Data\desktop.ini
[2011.07.09 17:39:16 | 000,022,328 | ---- | M] () -- C:\Documents and Settings\jakub\Application Data\PnkBstrK.sys
[2011.07.24 19:00:32 | 000,045,202 | ---- | M] () -- C:\Documents and Settings\jakub\Application Data\room_v3.dat
[2011.07.26 09:19:47 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\jakub\Application Data\steam_md4.dat

< %APPDATA%\*.exe /s >
[2011.06.27 14:10:27 | 003,120,288 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\jakub\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
[2011.06.27 16:56:42 | 000,009,662 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_151F73A55EA852A095A6B4.exe
[2011.06.27 16:56:41 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_21F3885A18D238E15AAE81.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_235DA26EF7FE14183F01E6.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_415493353D745EEA216D94.exe
[2011.06.27 16:56:40 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_6FEFF9B68218417F98F549.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_70A4483B33DE1D17D4EEE0.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_806048DC66200FE6D24FF3.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_85972F4A73DF7EADFBAFC2.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_934312A2105DE40686D86A.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_A753214149FB4F8721C1CB.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_A7A1F24988209FFD6FF84A.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_C7EFEC170C2E3BE8B9D183.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_CF15DB293FB3ABD44856FB.exe
[2011.06.27 16:56:41 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_D707CE1C009F1381803C2C.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_EAF89F682B9E1F7D624883.exe
[2011.06.27 16:56:42 | 000,287,934 | R--- | M] () -- C:\Documents and Settings\jakub\Application Data\Microsoft\Installer\{5A5268CC-F594-4DAE-9168-029BF43BFFAA}\_FD8B6BA922FF5C34868F02.exe
[2006.05.24 13:36:46 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\jakub\Application Data\U3\temp\cleanup.exe

< %SYSTEMDRIVE%\*.exe >

< *crack* /s >
[2011.07.09 20:12:37 | 000,008,871 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Crysis 2 crack for 1.9 Patch.torrent
[2011.07.09 20:07:18 | 000,007,109 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Crysis2_1.9_crackfix.rar.torrent
[2011.07.15 18:19:43 | 000,015,386 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Homefront crack ammo+sound fix.rar.torrent
[2011.07.14 21:18:29 | 000,017,595 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\HomeFront crack+fix.rar.torrent
[2011.07.11 22:38:41 | 000,083,049 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Homefront [MULTI5][PCDVD][NO CRACK][WwW.GamesTorrents.CoM].torrent
[2011.07.14 21:11:36 | 000,004,014 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Homefront-SKIDROW_Crack.Only.torrent
[2011.06.29 21:32:01 | 000,001,166 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\NFS Need For Speed Shift Crack [speedcrew.com].zip.torrent
[2011.08.21 20:48:48 | 000,005,421 | ---- | M] () -- \Documents and Settings\jakub\Application Data\uTorrent\Star.Wars.Force.Unleashed.Ultimate.Sith.Edition.CrackFix-RELOADED.torrent
[2011.07.15 18:24:01 | 048,380,821 | ---- | M] () -- \Documents and Settings\jakub\My Documents\Downloads\Homefront crack ammo+sound fix.rar
[2011.07.14 21:22:18 | 055,652,167 | ---- | M] () -- \Documents and Settings\jakub\My Documents\Downloads\HomeFront crack+fix.rar
[2011.06.28 08:37:28 | 006,013,155 | ---- | M] () -- \Documents and Settings\jakub\My Documents\Preberanie\fifa-2011-crack.rar
[2011.06.29 21:27:18 | 003,204,050 | ---- | M] () -- \Documents and Settings\jakub\My Documents\Preberanie\nfs_shift_crack.rar
[2011.08.13 18:27:53 | 000,213,644 | ---- | M] () -- \Documents and Settings\jakub\My Documents\Preberanie\Operation-Flashpoint-Red-River-crack.rar
[2011.09.01 15:15:39 | 000,000,433 | ---- | M] () -- \Documents and Settings\jakub\Recent\Angry Birds - 2011 - PC - Cracked.lnk
[2011.09.01 15:15:39 | 000,000,638 | ---- | M] () -- \Documents and Settings\jakub\Recent\Angry_Birds_PC_Cracked.lnk
[2011.07.15 18:24:06 | 000,000,792 | ---- | M] () -- \Documents and Settings\jakub\Recent\Homefront crack ammo+sound fix.lnk
[2011.08.13 18:27:58 | 000,000,835 | ---- | M] () -- \Documents and Settings\jakub\Recent\Operation-Flashpoint-Red-River-crack.lnk

< *keygen* /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-09-03 18:23:12

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *\0\0

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.09.05 20:24:14 | 000,000,512 | ---- | M] () MD5=DA0C752043AB58EF1B6930A2CD30E3DF -- C:\PhysicalMBR.bin

< End of report >

OTL Extras logfile created on: 5.9.2011 20:23:31 - Run 1
OTL by OldTimer - Version 3.2.27.0 Folder = C:\Documents and Settings\jakub\My Documents\Preberanie
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,24 Gb Available Physical Memory | 62,14% Memory free
3,85 Gb Paging File | 3,03 Gb Available in Paging File | 78,84% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 80,00 Gb Total Space | 53,36 Gb Free Space | 66,71% Space Free | Partition Type: NTFS
Drive D: | 400,00 Gb Total Space | 292,78 Gb Free Space | 73,19% Space Free | Partition Type: NTFS
Drive E: | 218,63 Gb Total Space | 44,58 Gb Free Space | 20,39% Space Free | Partition Type: NTFS
Drive J: | 149,05 Gb Total Space | 3,41 Gb Free Space | 2,29% Space Free | Partition Type: NTFS

Computer Name: JAKUB-1CA53A203 | User Name: jakub | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1614895754-1004336348-839522115-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Veetle\Player\VeetleNet.exe" = C:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = D:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"H:\Program Files\HLSW\hlsw.exe" = H:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application
"D:\Program Files\EA Sports\FIFA 11\Game\fifa.exe" = D:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11 -- (Electronic Arts)
"D:\Program Files\HLSW\hlsw.exe" = D:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application -- (Stripf Software)
"D:\Program Files\uTorrent\uTorrent.exe" = D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"D:\Program Files\MIRC\mirc.exe" = D:\Program Files\MIRC\mirc.exe:*:Enabled:mIRC -- (mIRC Co. Ltd.)
"D:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe" = D:\Program Files\Electronic Arts\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe:*:Enabled:Medal of Honor Airborne -- (Electronic Arts Inc.)
"D:\Program Files\Xfire\Xfire.exe" = D:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire -- (Xfire Inc.)
"D:\Program Files\Electronic Arts\Crytek\Crysis 2\bin32\Crysis2.exe" = D:\Program Files\Electronic Arts\Crytek\Crysis 2\bin32\Crysis2.exe:*:Enabled:Crysis2 -- (Crytek GmbH)
"J:\L4D 2\Left 4 Dead 2\left4dead2.exe" = J:\L4D 2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2
"D:\Program Files\Valve\hl.exe" = D:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher -- (Valve)
"D:\Program Files\Garena\Garena.exe" = D:\Program Files\Garena\Garena.exe:*:Enabled:Garena -- (Garena Online PTE LTD)
"E:\L4D 2\Left 4 Dead 2\left4dead2.exe" = E:\L4D 2\Left 4 Dead 2\left4dead2.exe:*:Enabled:left4dead2 -- ()
"C:\Program Files\Veetle\Player\VeetleNet.exe" = C:\Program Files\Veetle\Player\VeetleNet.exe:*:Enabled:VeetleNet -- ()
"D:\Program Files\Steam\Steam.exe" = D:\Program Files\Steam\Steam.exe:*:Enabled:Steam
"D:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe" = D:\Program Files\Ubisoft\Gearbox Software\Brothers in Arms - Hell's Highway\Binaries\biahh.exe:*:Enabled:biahh -- ()
"D:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe" = D:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe:*:Disabled:Medal of Honor™ -- (Electronic Arts Inc.)
"D:\Program Files\Activision\Modern Warfare 2\iw4mp.exe" = D:\Program Files\Activision\Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp -- ()
"D:\Program Files\Activision\Modern Warfare 2\iw4mpOLD.exe" = D:\Program Files\Activision\Modern Warfare 2\iw4mpOLD.exe:*:Enabled: -- ()
"D:\Program Files\Activision\Modern Warfare 2\bootstrap\iw4mp.exe" = D:\Program Files\Activision\Modern Warfare 2\bootstrap\iw4mp.exe:*:Enabled: -- ()
"D:\Program Files\Activision\Modern Warfare 2\iw4mp.dat" = D:\Program Files\Activision\Modern Warfare 2\iw4mp.dat:*:Enabled:iw4mp -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Development Company, L.P.)
"D:\Program Files\EA Sports\Madden NFL 07\mainapp.exe" = D:\Program Files\EA Sports\Madden NFL 07\mainapp.exe:*:Enabled:mainapp -- ()
"H:\Portable Appz\uTorrentPortable\App\uTorrent\uTorrent.exe" = H:\Portable Appz\uTorrentPortable\App\uTorrent\uTorrent.exe:*:Enabled:µTorrent
"D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiver.exe" = D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiver.exe:*:Enabled:Operation Flashpoint ®: Red River -- (Codemasters Software Company Limited)
"D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe" = D:\Program Files\Codemasters\Operation Flashpoint Red River\RedRiverLauncher.exe:*:Enabled:Operation Flashpoint ®: Red River -- (Sony DADC Austria AG)
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"D:\Program Files\Ubisoft\Brotherhood\ACBSP.exe" = D:\Program Files\Ubisoft\Brotherhood\ACBSP.exe:*:Enabled:ACBSP -- ()

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05C56753-F144-44BC-BA67-83CC5DBF395C}" = F300
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0E448256-D515-4C3E-A5BE-0A7B76CED5D4}" = hppP1100P1560P1600SeriesLaserJetService
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{25F28E39-FDBB-11DB-8314-0800200C9A66}" = Medal of Honor Airborne
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F5FA47E-B4DE-45B4-85E3-11CD5E4974A3}_is1" = Assassins Creed Brotherhood version 1.0
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{434D083E-7E9A-4D3A-914B-121000008100}" = Operation Flashpoint ®: Red River
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{47E16407-05D3-4D2A-B2B9-C30700B7C2AD}" = LogMeIn Hamachi
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{5A5268CC-F594-4DAE-9168-029BF43BFFAA}" = Splash PRO EX
"{6033673D-2530-4587-8AD0-EB059FC263F9}" = Crysis® 2
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{692854CC-97EF-4307-B787-8C6787B91051}" = Nero 7 Ultra Edition
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{7902E313-FF0F-4493-ACB1-A8147B78DCD0}" = HPSSupply
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{853F464A-B2B8-404E-BA3E-B98FF6862C41}" = hppusgP1100P1560P1600Series
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{90120000-0010-041B-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Slovak) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0015-041B-0000-0000000FF1CE}" = Microsoft Office Access MUI (Slovak) 2007
"{90120000-0015-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-041B-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Slovak) 2007
"{90120000-0019-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-041B-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Slovak) 2007
"{90120000-001A-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_PROPLUS_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_PROPLUS_{573CA1BB-C8A3-46C4-993E-DB4043D9BFCD}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_PROPLUS_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Slovak) 2007
"{90120000-0044-041B-0000-0000000FF1CE}_PROPLUS_{F69A7281-8297-47E2-B583-36EAA37C89EE}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_PROPLUS_{8AF3A9EB-FBB9-449F-AC11-94CE39930037}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}" = Browser Configuration Utility
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1051-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Slovak
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafický ovládač 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.94
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Softvér systému s podporou technológie PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizácie NVIDIA 1.4.28
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}" = HP Software Update
"{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C85E633E-864A-4AFE-0095-844838BFCC7E}" = Madden NFL 07
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D371F551-0DB9-4CEC-844B-4C90CE91EA0B}" = hppLaserJetService
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{E270E198-9998-41C2-B894-B8A62122A38F}" = ESET NOD32 Antivirus
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E5966E4C-0A93-4F59-A981-BD3173D4799F}" = F300_Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Brothers in Arms - Hell's Highway" = Brothers in Arms: Hell's Highway
"DAEMON Tools Lite" = DAEMON Tools Lite
"Garena" = Garena 2010
"GFWL_{434D083E-7E9A-4D3A-914B-121000008100}" = Operation Flashpoint ®: Red River
"HLSW_is1" = HLSW v1.3.3.8c
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP LaserJet Professional P1100-P1560-P1600 Series" = HP LaserJet Professional P1100-P1560-P1600 Series
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.1.0 (Basic)
"L4D2SP" = Left 4 Dead 2 Standalone Patch™
"L4D2SPUC" = Left 4 Dead 2 Standalone Patch™
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"mIRC" = mIRC
"Mozilla Firefox 6.0 (x86 sk)" = Mozilla Firefox 6.0 (x86 sk)
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"PROPLUS" = Microsoft Office Professional Plus 2007
"PunkBusterSvc" = PunkBuster Services
"Star Wars: The Force Unleashed 2_is1" = Star Wars: The Force Unleashed 2
"Star Wars: The Force Unleashed_is1" = Star Wars: The Force Unleashed
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.00 (32-bit)
"Xfire" = Xfire (remove only)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1614895754-1004336348-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TransBar" = TransBar

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8.8.2011 7:26:20 | Computer Name = JAKUB-1CA53A203 | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie homefront.exe, verzia 1.0.0.1, zlyhanie modulu
homefront.exe, verzia 1.0.0.1, adresa zlyhania 0x0004ba8f.

Error - 8.8.2011 7:29:27 | Computer Name = JAKUB-1CA53A203 | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie homefront.exe, verzia 1.0.0.1, zlyhanie modulu
homefront.exe, verzia 1.0.0.1, adresa zlyhania 0x00a3312a.

Error - 9.8.2011 3:20:22 | Computer Name = JAKUB-1CA53A203 | Source = nview | ID = 1
Description = failed to retrieve module name

Error - 9.8.2011 5:02:56 | Computer Name = JAKUB-1CA53A203 | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie iw3mp.exe, verzia 0.0.0.0, zlyhanie modulu pbcl.dll,
verzia 0.0.0.0, adresa zlyhania 0x000d2f49.

Error - 9.8.2011 11:28:14 | Computer Name = JAKUB-1CA53A203 | Source = MsiInstaller | ID = 11335
Description = Product: Operation Flashpoint ®: Red River -- Error 1335. The cabinet
file 'Media1.cab' required for this installation is corrupt and cannot be used.
This could indicate a network error, an error reading from the CD-ROM, or a problem
with this package.

Error - 9.8.2011 11:28:48 | Computer Name = JAKUB-1CA53A203 | Source = MsiInstaller | ID = 11335
Description = Product: Operation Flashpoint ®: Red River -- Error 1335. The cabinet
file 'Media1.cab' required for this installation is corrupt and cannot be used.
This could indicate a network error, an error reading from the CD-ROM, or a problem
with this package.

Error - 9.8.2011 11:28:51 | Computer Name = JAKUB-1CA53A203 | Source = MsiInstaller | ID = 11335
Description = Product: Operation Flashpoint ®: Red River -- Error 1335. The cabinet
file 'Media1.cab' required for this installation is corrupt and cannot be used.
This could indicate a network error, an error reading from the CD-ROM, or a problem
with this package.

Error - 9.8.2011 12:47:52 | Computer Name = JAKUB-1CA53A203 | Source = MsiInstaller | ID = 11335
Description = Product: Operation Flashpoint ®: Red River -- Error 1335. The cabinet
file 'Media1.cab' required for this installation is corrupt and cannot be used.
This could indicate a network error, an error reading from the CD-ROM, or a problem
with this package.

Error - 9.8.2011 12:51:00 | Computer Name = JAKUB-1CA53A203 | Source = MsiInstaller | ID = 11335
Description = Product: Operation Flashpoint ®: Red River -- Error 1335. The cabinet
file 'Media1.cab' required for this installation is corrupt and cannot be used.
This could indicate a network error, an error reading from the CD-ROM, or a problem
with this package.

Error - 11.8.2011 3:07:57 | Computer Name = JAKUB-1CA53A203 | Source = Application Error | ID = 1000
Description = Zlyhanie aplikácie iw3mp.exe, verzia 0.0.0.0, zlyhanie modulu pbcl.dll,
verzia 0.0.0.0, adresa zlyhania 0x000d2f49.

[ System Events ]
Error - 4.9.2011 13:44:17 | Computer Name = JAKUB-1CA53A203 | Source = Service Control Manager | ID = 7026
Description = Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému
zlyhali pri načítaní: i8042prt

Error - 4.9.2011 13:45:12 | Computer Name = JAKUB-1CA53A203 | Source = System Error | ID = 1003
Description = Kód chyby 1000008e, parameter1 e0000001, parameter2 b83f0925, parameter3
ab37c844, parameter4 00000000.

Error - 4.9.2011 13:56:21 | Computer Name = JAKUB-1CA53A203 | Source = Service Control Manager | ID = 7026
Description = Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému
zlyhali pri načítaní: i8042prt

Error - 4.9.2011 13:56:47 | Computer Name = JAKUB-1CA53A203 | Source = System Error | ID = 1003
Description = Kód chyby 1000008e, parameter1 e0000001, parameter2 b8430925, parameter3
abb07844, parameter4 00000000.

Error - 5.9.2011 1:31:23 | Computer Name = JAKUB-1CA53A203 | Source = Dhcp | ID = 1002
Description = Server DHCP 198.172.1.1 odmietol prenájom 198.172.1.101 adresy IP pre
sieťovú kartu so sieťovou adresou 1C6F65A7D750 (server DHCP odoslal hlásenie DHCPNACK).

Error - 5.9.2011 1:31:46 | Computer Name = JAKUB-1CA53A203 | Source = Service Control Manager | ID = 7026
Description = Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému
zlyhali pri načítaní: i8042prt

Error - 5.9.2011 4:06:01 | Computer Name = JAKUB-1CA53A203 | Source = Dhcp | ID = 1002
Description = Server DHCP 198.172.1.1 odmietol prenájom 198.172.1.100 adresy IP pre
sieťovú kartu so sieťovou adresou 1C6F65A7D750 (server DHCP odoslal hlásenie DHCPNACK).

Error - 5.9.2011 4:06:28 | Computer Name = JAKUB-1CA53A203 | Source = Service Control Manager | ID = 7026
Description = Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému
zlyhali pri načítaní: i8042prt

Error - 5.9.2011 12:06:51 | Computer Name = JAKUB-1CA53A203 | Source = Dhcp | ID = 1002
Description = Server DHCP 198.172.1.1 odmietol prenájom 198.172.1.100 adresy IP pre
sieťovú kartu so sieťovou adresou 1C6F65A7D750 (server DHCP odoslal hlásenie DHCPNACK).

Error - 5.9.2011 12:07:18 | Computer Name = JAKUB-1CA53A203 | Source = Service Control Manager | ID = 7026
Description = Nasledujúce ovládače pre spustenie zavedenia alebo spustenie systému
zlyhali pri načítaní: i8042prt

< End of report >

malkyyy píše:\Documents and Settings\jakub\Application Data\uTorrent\Crysis 2 crack for 1.9 Patch.torrent
\Documents and Settings\jakub\Application Data\uTorrent\Crysis2_1.9_crackfix.rar.torrent
\Documents and Settings\jakub\Application Data\uTorrent\Homefront crack ammo+sound fix.rar.torrent
\Documents and Settings\jakub\Application Data\uTorrent\HomeFront crack+fix.rar.torrent
\Documents and Settings\jakub\Application Data\uTorrent\Homefront [MULTI5][PCDVD][NO CRACK][WwW.GamesTorrents.CoM].torrent
\Documents and Settings\jakub\Application Data\uTorrent\Homefront-SKIDROW_Crack.Only.torrent
\Documents and Settings\jakub\Application Data\uTorrent\NFS Need For Speed Shift Crack [speedcrew.com].zip.torrent
\Documents and Settings\jakub\Application Data\uTorrent\Star.Wars.Force.Unleashed.Ultimate.Sith.Edition.CrackFix-RELOADED.torrent
\Documents and Settings\jakub\My Documents\Downloads\Homefront crack ammo+sound fix.rar
\Documents and Settings\jakub\My Documents\Downloads\HomeFront crack+fix.rar
\Documents and Settings\jakub\My Documents\Preberanie\fifa-2011-crack.rar
\Documents and Settings\jakub\My Documents\Preberanie\nfs_shift_crack.rar
\Documents and Settings\jakub\My Documents\Preberanie\Operation-Flashpoint-Red-River-crack.rar
\Documents and Settings\jakub\Recent\Angry Birds - 2011 - PC - Cracked.lnk
\Documents and Settings\jakub\Recent\Angry_Birds_PC_Cracked.lnk
\Documents and Settings\jakub\Recent\Homefront crack ammo+sound fix.lnk
\Documents and Settings\jakub\Recent\Operation-Flashpoint-Red-River-crack.lnk

Vzhledem k tomu, že používáš nelegální software Obrázek

se nedivím, že jsi návštěvníkem našeho fóra.

Dle pravidel fóra (viz zde a zde bod č.3) se však nelegálním software nezabýváme, jelikož nelegální programy jsou většinou zdrojem havěti. Navíc tím porušuješ i autorská práva Obrázek

, pácháš trestný čin a ten, jako takový, nebude naším fórem podporován! Uvědom si, že jsi na bezpečnostním fóru - podpora warezu (zvláště operačních systémů a bezpečnostních programů) by byla zcela proti logice fóra.

Z mé strany je to vše

a zde poprosím moderátory o

a následné řešení.

Zdravim a pekny den preji

Jak psal kolega, warez tu nepodporujem

A opravdu tu nemame naladu, chut a obcas ani cas resit zavirovane PC, ktere si uzivatel zpusobi vlastni nezodpovednosti a dovolim si rict blbosti, kdyz si nakrmi PC crackama, keygenama a podobnymi dobroty...

Pokud budete v budoucnu zadat o kontrolu a bude v PC nalezen opet podobny sber jako nyni, bude pomoc odmitnuta a jednani bude dale reseno...

Thread zamykam

S pozdravem vyosek - moderator a lektor fora

VIRY.CZ

Prosim o kontorolu logu.. vopred dakujem:)

Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)

Re: Prosim o kontorolu logu.. vopred dakujem:)