VIRY.CZ

dobry den poslednich asi 14 dni mě trapí nemožnost načíst některé stránky, např. google.com(cz),youtube.com(CZ),slunecnice.cz.....atd.
udělal jsem tedy ten log a chtěl bych vás poprosit o pomoc ři řešení problému.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jarda at 2012-01-10 15:25:51
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 47 GB (31%) free of 153 GB
Total RAM: 3001 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:25:55, on 10.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
F:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
F:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Jarda\Plocha\RSIT.exe
C:\Program Files\trend micro\Jarda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60040
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60040
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ooVoo Video Chat - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\BSP Toolbar\tbcore3.dll
O2 - BHO: BS Player - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ooVoo Video Chat Toolbar - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [egui] "F:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [TNOD UP] "f:\Program Files\TNod User & Password Finder\TNODUP.exe" /i
O4 - HKCU\..\Run: [OEXPRESS] C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
O4 - HKCU\..\Run: [DAEMON Tools Lite] "c:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Companion] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Tapety 2.12.lnk = C:\Program Files\Tapety 2.12\Tapety.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O4 - Global Startup: CLS12.50.lnk = C:\Program Files\Edgecam\Cam\cls.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/a ... oader6.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... .3.1.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{30813892-64A5-4126-8F8F-4A146A64ED55}: NameServer = 10.120.32.1,10.120.32.2
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Konfigurační služba Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - F:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

--
End of file - 11912 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.bigseekpro.com/bsprpc/{0DB59 ... 8ABEB4077D}"
prefs.js - "extensions.enabledItems" - "jqs@sun.com:1.0, engine@conduit.com:3.2.5.2, {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.5.2, DTToolbar@toolbarnet.com:1.1.3.0244, plugin2@gameplaylabs.com:2.0, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550, {800b5000-a755-47e1-992b-48a1c1357f07}:1.3.6, {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.8, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.bigseekpro.com/search/toolba ... B4077D}?q="

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npnul32.dll
npyaxmpb.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\
DTToolbar@toolbarnet.com
engine@conduit.com
plugin2@gameplaylabs.com
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{75656794-AB59-4712-BFBC-5D816D56F3BC}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\
daemon-search.xml
icqplugin-1.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
inbox-hledn.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-09-28 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof2.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-10-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}]
ooVoo Video Chat Toolbar - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-10-19 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files\BSP Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2011-07-20 1055808]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-09-28 798771]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof2.dll [2011-05-09 176936]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-05 988480]
{e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - ooVoo Video Chat Toolbar - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-05-08 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-05-08 173592]
"ACU"=C:\Program Files\Atheros\ACU.exe [2009-01-05 450648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"LXSUPMON"=C:\WINDOWS\system32\LXSUPMON.EXE [2002-01-28 885760]
"egui"=F:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 3080264]
"TNOD UP"=f:\Program Files\TNod User & Password Finder\TNODUP.exe [2011-05-07 1882112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"=C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE [2010-09-28 26624]
"DAEMON Tools Lite"=c:\Program Files\DAEMON Tools Lite\daemon.exe [2007-12-29 486856]
"Sony Ericsson PC Companion"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2011-10-21 433872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe]
C:\Program Files\ooVoo\ooVoo.exe [2011-05-11 22631608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2005-09-24 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^WinZip Quick Pick.lnk]
C:\PROGRA~1\WinZip\WZQKPICK.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
CLS12.50.lnk - C:\Program Files\Edgecam\Cam\cls.exe

C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění
Tapety 2.12.lnk - C:\Program Files\Tapety 2.12\Tapety.exe
Yahoo! Widgets.lnk - C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-05-01 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe:*:Enabled:Wolfram Mathematica 7"
"C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe:*:Enabled:Wolfram Mathematica 7 Kernel"
"C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe:*:Enabled:math.exe"
"C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Program Files\proeWildfire 4.0\bin\proe.exe"="C:\Program Files\proeWildfire 4.0\bin\proe.exe:*:Enabled:Pro/ENGINEER"
"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Disabled:LEXPPS"
"F:\Program Files\StrongDC++\StrongDC.exe"="F:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ooVoo\ooVoo.exe"="C:\Program Files\ooVoo\ooVoo.exe:*:Enabled:ooVoo"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe"="C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"SENTINEL"=snti386.dll
"vidc.tscc"=tsccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.YVU9"=tsbyuv.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-01-10 15:25:51 ----D---- C:\rsit
2012-01-10 15:25:51 ----D---- C:\Program Files\trend micro
2012-01-10 15:16:57 ----A---- C:\ComboFix.txt
2012-01-10 14:29:16 ----A---- C:\Boot.bak
2012-01-10 14:29:11 ----RASHD---- C:\cmdcons
2012-01-10 14:25:37 ----A---- C:\WINDOWS\zip.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\SWREG.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\PEV.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\NIRCMD.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\MBR.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\grep.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\SWXCACLS.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\SWSC.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\sed.exe
2012-01-10 14:25:28 ----D---- C:\WINDOWS\ERDNT
2012-01-10 14:10:19 ----D---- C:\Qoobox
2012-01-04 00:26:26 ----D---- C:\Program Files\Yahoo!
2012-01-01 23:06:16 ----D---- C:\Program Files\Firefly Studios
2011-12-31 19:33:39 ----D---- C:\Program Files\Tapety 2.12
2011-12-22 18:59:40 ----D---- C:\Program Files\vanBasco's Karaoke Player
2011-12-18 03:17:09 ----D---- C:\Program Files\staženo
2011-12-16 00:15:51 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Toolbar4
2011-12-16 00:15:47 ----D---- C:\Program Files\BSP Toolbar

======List of files/folders modified in the last 1 month======

2012-01-10 15:25:51 ----D---- C:\Program Files
2012-01-10 15:16:58 ----D---- C:\WINDOWS\Temp
2012-01-10 15:15:34 ----D---- C:\WINDOWS
2012-01-10 15:15:34 ----A---- C:\WINDOWS\system.ini
2012-01-10 15:12:58 ----D---- C:\WINDOWS\system32\drivers
2012-01-10 15:12:58 ----D---- C:\WINDOWS\system32
2012-01-10 15:12:58 ----D---- C:\WINDOWS\AppPatch
2012-01-10 15:12:55 ----D---- C:\Program Files\Common Files
2012-01-10 15:04:16 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-10 15:04:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-10 14:50:42 ----SD---- C:\WINDOWS\Tasks
2012-01-10 14:43:36 ----D---- C:\WINDOWS\system32\drivers\etc
2012-01-10 14:42:18 ----D---- C:\WINDOWS\system32\config
2012-01-10 14:41:30 ----D---- C:\Program Files\ESET
2012-01-10 14:29:16 ----RASH---- C:\boot.ini
2012-01-10 14:25:28 ----D---- C:\WINDOWS\Prefetch
2012-01-10 14:13:52 ----D---- C:\Documents and Settings\Jarda\Data aplikací\ICQ
2012-01-09 13:50:19 ----D---- C:\Program Files\AviSynth 2.5
2012-01-09 13:49:51 ----D---- C:\Program Files\Gabest
2012-01-09 13:36:24 ----D---- C:\Documents and Settings\Jarda\Data aplikací\PriceGong
2012-01-08 23:10:14 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Skype
2012-01-08 20:49:37 ----D---- C:\Documents and Settings\Jarda\Data aplikací\skypePM
2012-01-08 17:52:10 ----A---- C:\WINDOWS\win.ini
2012-01-01 23:06:31 ----D---- C:\Documents and Settings\Jarda\Data aplikací\uTorrent
2012-01-01 23:06:16 ----HD---- C:\Program Files\InstallShield Installation Information
2012-01-01 21:58:11 ----A---- C:\WINDOWS\NeroDigital.ini
2011-12-25 20:51:04 ----D---- C:\Program Files\Mozilla Firefox
2011-12-25 20:48:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-12-25 13:06:27 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Ancestry
2011-12-18 22:22:28 ----D---- C:\Documents and Settings\Jarda\Data aplikací\vlc
2011-12-18 16:01:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-12-18 15:38:59 ----D---- C:\Nová složka
2011-12-13 11:01:37 ----D---- C:\Program Files\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-01-18 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 LUMDriver;LUMDriver; \??\C:\WINDOWS\system32\drivers\LUMDriver.sys []
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 truecrypt;truecrypt; C:\WINDOWS\System32\drivers\truecrypt.sys [2011-05-04 217664]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2010-10-24 271360]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2010-10-24 18048]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-03-26 1503840]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2009-03-09 805888]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2011-08-09 39824]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-05-01 6315008]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-04-08 39424]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2008-09-11 1754368]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-27 12288]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2004-05-13 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2004-05-13 44384]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2008-02-08 57408]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [2008-01-02 76288]
S3 attzg9c9;attzg9c9; C:\WINDOWS\system32\drivers\attzg9c9.sys []
S3 bpenum;Intel(R) WiMAX Link Enumerator; C:\WINDOWS\system32\DRIVERS\bpenum.sys [2009-02-01 163840]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\Jarda\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys []
S3 mbr;mbr; \??\C:\ComboFix\mbr.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-14 163584]
S3 PRISM;Intersil PRISM Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys []
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-04-08 164864]
S3 RtsUIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 SE27bus;Sony Ericsson Device 039 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE27bus.sys [2006-09-18 61600]
S3 se45bus;Sony Ericsson Device 069 driver (WDM); C:\WINDOWS\system32\DRIVERS\se45bus.sys [2006-11-30 61536]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2004-05-13 21440]
S3 WmHidLo;Logitech WingMan USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2004-05-13 14720]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2004-05-13 5600]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ACS;Konfigurační služba Atheros; C:\WINDOWS\system32\acs.exe [2009-01-05 475220]
R2 ekrn;ESET Service; F:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-22 974944]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2011-07-20 247872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-10-19 153376]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2002-02-14 299008]
R2 MSSQL$ECSQLEXPRESS;SQL Server (ECSQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 86880]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2011-05-04 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím,

1. dát log RSIT po projetí ComboFixem je nám platné jako mrtvému zimník - stopy jsou odstraněny

2. podle našich pravidel se nezabýváme případy s nelegálním systémem nebo zabezpečením.
pokud odstraníš NODa včetně cracku a nahradíš free řešením (Avast, Avira) můžeš si dát nový RSIT + zkopírovat obsah textu z 2012-01-10 15:16:57 ----A---- C:\ComboFix.txt

tak jsem odstranil ten NOD a nainstaloval Avast,tady je RSIT a pod ním jinou barvou ten combofix.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Jarda at 2012-01-10 16:23:20
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 46 GB (30%) free of 153 GB
Total RAM: 3001 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:23:24, on 10.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Edgecam\Cam\cls.exe
C:\Program Files\Tapety 2.12\Tapety.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Documents and Settings\Jarda\Plocha\RSIT.exe
C:\Program Files\trend micro\Jarda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60040
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60040
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ooVoo Video Chat - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\BSP Toolbar\tbcore3.dll
O2 - BHO: BS Player - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ooVoo Video Chat Toolbar - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [OEXPRESS] C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
O4 - HKCU\..\Run: [DAEMON Tools Lite] "c:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Companion] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Tapety 2.12.lnk = C:\Program Files\Tapety 2.12\Tapety.exe
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O4 - Global Startup: CLS12.50.lnk = C:\Program Files\Edgecam\Cam\cls.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/a ... oader6.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... .3.1.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{30813892-64A5-4126-8F8F-4A146A64ED55}: NameServer = 10.120.32.1,10.120.32.2
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Konfigurační služba Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

--
End of file - 12214 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.bigseekpro.com/bsprpc/{0DB59 ... 8ABEB4077D}"
prefs.js - "extensions.enabledItems" - "jqs@sun.com:1.0, engine@conduit.com:3.2.5.2, {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.5.2, DTToolbar@toolbarnet.com:1.1.3.0244, plugin2@gameplaylabs.com:2.0, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550, {800b5000-a755-47e1-992b-48a1c1357f07}:1.3.6, {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.8, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.bigseekpro.com/search/toolba ... B4077D}?q="

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npnul32.dll
npyaxmpb.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\
DTToolbar@toolbarnet.com
engine@conduit.com
plugin2@gameplaylabs.com
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
{75656794-AB59-4712-BFBC-5D816D56F3BC}
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\
daemon-search.xml
icqplugin-1.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
inbox-hledn.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-09-28 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof2.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-10-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}]
ooVoo Video Chat Toolbar - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-10-19 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files\BSP Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2011-07-20 1055808]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2010-09-28 798771]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\prxtbBS_0.dll [2011-01-17 175912]
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof2.dll [2011-05-09 176936]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-05 988480]
{e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - ooVoo Video Chat Toolbar - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll [2011-01-17 175912]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-05-08 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-05-08 173592]
"ACU"=C:\Program Files\Atheros\ACU.exe [2009-01-05 450648]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"LXSUPMON"=C:\WINDOWS\system32\LXSUPMON.EXE [2002-01-28 885760]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-11-28 3744552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"=C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE [2010-09-28 26624]
"DAEMON Tools Lite"=c:\Program Files\DAEMON Tools Lite\daemon.exe [2007-12-29 486856]
"Sony Ericsson PC Companion"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2011-10-21 433872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe]
C:\Program Files\ooVoo\ooVoo.exe [2011-05-11 22631608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2005-09-24 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^WinZip Quick Pick.lnk]
C:\PROGRA~1\WinZip\WZQKPICK.EXE []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
CLS12.50.lnk - C:\Program Files\Edgecam\Cam\cls.exe

C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění
Tapety 2.12.lnk - C:\Program Files\Tapety 2.12\Tapety.exe
Yahoo! Widgets.lnk - C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-05-01 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe:*:Enabled:Wolfram Mathematica 7"
"C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe:*:Enabled:Wolfram Mathematica 7 Kernel"
"C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe"="C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe:*:Enabled:math.exe"
"C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe"="C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Program Files\proeWildfire 4.0\bin\proe.exe"="C:\Program Files\proeWildfire 4.0\bin\proe.exe:*:Enabled:Pro/ENGINEER"
"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Disabled:LEXPPS"
"F:\Program Files\StrongDC++\StrongDC.exe"="F:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ooVoo\ooVoo.exe"="C:\Program Files\ooVoo\ooVoo.exe:*:Enabled:ooVoo"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe"="C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"SENTINEL"=snti386.dll
"vidc.tscc"=tsccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.YVU9"=tsbyuv.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-01-10 16:20:23 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-01-10 16:20:22 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-01-10 16:20:19 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-01-10 16:20:18 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-01-10 16:20:18 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-01-10 16:20:17 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-01-10 16:20:17 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-01-10 16:20:16 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-01-10 16:19:59 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-01-10 16:19:59 ----A---- C:\WINDOWS\avastSS.scr
2012-01-10 16:19:49 ----D---- C:\Program Files\AVAST Software
2012-01-10 16:19:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-01-10 15:25:51 ----D---- C:\rsit
2012-01-10 15:25:51 ----D---- C:\Program Files\trend micro
2012-01-10 15:16:57 ----A---- C:\ComboFix.txt
2012-01-10 14:29:16 ----A---- C:\Boot.bak
2012-01-10 14:29:11 ----RASHD---- C:\cmdcons
2012-01-10 14:25:37 ----A---- C:\WINDOWS\zip.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\SWREG.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\PEV.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\NIRCMD.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\MBR.exe
2012-01-10 14:25:37 ----A---- C:\WINDOWS\grep.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\SWXCACLS.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\SWSC.exe
2012-01-10 14:25:36 ----A---- C:\WINDOWS\sed.exe
2012-01-10 14:25:28 ----D---- C:\WINDOWS\ERDNT
2012-01-10 14:10:19 ----D---- C:\Qoobox
2012-01-04 00:26:26 ----D---- C:\Program Files\Yahoo!
2012-01-01 23:06:16 ----D---- C:\Program Files\Firefly Studios
2011-12-31 19:33:39 ----D---- C:\Program Files\Tapety 2.12
2011-12-22 18:59:40 ----D---- C:\Program Files\vanBasco's Karaoke Player
2011-12-18 03:17:09 ----D---- C:\Program Files\staženo
2011-12-16 00:15:51 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Toolbar4
2011-12-16 00:15:47 ----D---- C:\Program Files\BSP Toolbar

======List of files/folders modified in the last 1 month======

2012-01-10 16:23:23 ----D---- C:\WINDOWS\Temp
2012-01-10 16:20:23 ----D---- C:\WINDOWS\system32\drivers
2012-01-10 16:20:13 ----D---- C:\Config.Msi
2012-01-10 16:20:12 ----SHD---- C:\WINDOWS\Installer
2012-01-10 16:20:12 ----D---- C:\WINDOWS\WinSxS
2012-01-10 16:19:59 ----D---- C:\WINDOWS\system32
2012-01-10 16:19:59 ----D---- C:\WINDOWS
2012-01-10 16:19:49 ----D---- C:\Program Files
2012-01-10 16:18:12 ----SD---- C:\WINDOWS\Tasks
2012-01-10 16:14:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-10 16:13:34 ----HD---- C:\WINDOWS\inf
2012-01-10 15:15:34 ----A---- C:\WINDOWS\system.ini
2012-01-10 15:12:58 ----D---- C:\WINDOWS\AppPatch
2012-01-10 15:12:55 ----D---- C:\Program Files\Common Files
2012-01-10 15:04:16 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-10 14:43:36 ----D---- C:\WINDOWS\system32\drivers\etc
2012-01-10 14:42:18 ----D---- C:\WINDOWS\system32\config
2012-01-10 14:41:30 ----D---- C:\Program Files\ESET
2012-01-10 14:29:16 ----RASH---- C:\boot.ini
2012-01-10 14:25:28 ----D---- C:\WINDOWS\Prefetch
2012-01-10 14:13:52 ----D---- C:\Documents and Settings\Jarda\Data aplikací\ICQ
2012-01-09 13:50:19 ----D---- C:\Program Files\AviSynth 2.5
2012-01-09 13:49:51 ----D---- C:\Program Files\Gabest
2012-01-09 13:36:24 ----D---- C:\Documents and Settings\Jarda\Data aplikací\PriceGong
2012-01-08 23:10:14 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Skype
2012-01-08 20:49:37 ----D---- C:\Documents and Settings\Jarda\Data aplikací\skypePM
2012-01-08 17:52:10 ----A---- C:\WINDOWS\win.ini
2012-01-01 23:06:31 ----D---- C:\Documents and Settings\Jarda\Data aplikací\uTorrent
2012-01-01 23:06:16 ----HD---- C:\Program Files\InstallShield Installation Information
2012-01-01 21:58:11 ----A---- C:\WINDOWS\NeroDigital.ini
2011-12-25 20:51:04 ----D---- C:\Program Files\Mozilla Firefox
2011-12-25 20:48:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-12-25 13:06:27 ----D---- C:\Documents and Settings\Jarda\Data aplikací\Ancestry
2011-12-18 22:22:28 ----D---- C:\Documents and Settings\Jarda\Data aplikací\vlc
2011-12-18 16:01:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-12-18 15:38:59 ----D---- C:\Nová složka
2011-12-13 11:01:37 ----D---- C:\Program Files\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-01-18 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-11-28 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-11-28 34392]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-11-28 314456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-11-28 52952]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 LUMDriver;LUMDriver; \??\C:\WINDOWS\system32\drivers\LUMDriver.sys []
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 truecrypt;truecrypt; C:\WINDOWS\System32\drivers\truecrypt.sys [2011-05-04 217664]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-11-28 20568]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-11-28 111320]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2010-10-24 271360]
R2 Hardlock;Hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2010-10-24 18048]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-03-26 1503840]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2009-03-09 805888]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-05-01 6315008]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-04-08 39424]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2008-09-11 1754368]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-27 12288]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2004-05-13 10144]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2004-05-13 44384]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2008-02-08 57408]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-11-28 435032]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [2008-01-02 76288]
S3 am7p397e;am7p397e; C:\WINDOWS\system32\drivers\am7p397e.sys []
S3 bpenum;Intel(R) WiMAX Link Enumerator; C:\WINDOWS\system32\DRIVERS\bpenum.sys [2009-02-01 163840]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\Jarda\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys []
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader; C:\WINDOWS\system32\DRIVERS\ewdcsc.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-14 163584]
S3 PRISM;Intersil PRISM Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys []
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-04-08 164864]
S3 RtsUIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 SE27bus;Sony Ericsson Device 039 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE27bus.sys [2006-09-18 61600]
S3 se45bus;Sony Ericsson Device 069 driver (WDM); C:\WINDOWS\system32\DRIVERS\se45bus.sys [2006-11-30 61536]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WmFilter;Logitech WingMan HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2004-05-13 21440]
S3 WmHidLo;Logitech WingMan USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2004-05-13 14720]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2004-05-13 5600]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ACS;Konfigurační služba Atheros; C:\WINDOWS\system32\acs.exe [2009-01-05 475220]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-11-28 44768]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2011-07-20 247872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-10-19 153376]
R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2002-02-14 299008]
R2 MSSQL$ECSQLEXPRESS;SQL Server (ECSQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 86880]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2011-05-04 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


ComboFix 12-01-09.07 - Jarda 10.01.2012 15:05:05.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3001.2379 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jarda\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jarda\Plocha\CFScript.txt
AV: ESET Smart Security 5.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-10 do 2012-01-10 )))))))))))))))))))))))))))))))
.
.
2012-01-03 23:26 . 2012-01-03 23:26 -------- d-----w- c:\documents and settings\Jarda\Local Settings\Data aplikací\Yahoo
2012-01-03 23:26 . 2012-01-03 23:26 -------- d-----w- c:\program files\Yahoo!
2012-01-03 23:19 . 2012-01-03 23:19 -------- d-sh--w- c:\documents and settings\Jarda\IECompatCache
2012-01-01 22:06 . 2012-01-01 22:06 -------- d-----w- c:\program files\Firefly Studios
2011-12-31 18:33 . 2012-01-10 13:43 -------- d-----w- c:\program files\Tapety 2.12
2011-12-22 17:59 . 2011-12-22 17:59 -------- d-----w- c:\program files\vanBasco's Karaoke Player
2011-12-18 02:17 . 2011-12-18 02:17 -------- d-----w- c:\program files\staženo
2011-12-15 23:15 . 2011-12-15 23:15 -------- d-----w- c:\documents and settings\Jarda\Data aplikací\Toolbar4
2011-12-15 23:15 . 2012-01-10 13:41 -------- d-----w- c:\program files\BSP Toolbar
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-22 17:16 . 2011-11-22 17:16 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2010-10-16 10:50 . 2011-03-12 13:27 3056008 -c--a-w- c:\program files\Common Files\AskToolbarInstaller.exe
2010-06-02 03:22 . 2010-06-02 03:22 537432 ----a-w- c:\program files\DXSETUP.exe
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-27 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
2011-05-09 09:49 176936 ----a-w- c:\program files\Softonic-Eng7\prxtbSof2.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ooVoo_Video_Chat\prxtbooVo.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2011-01-17 14:54 175912 ----a-w- c:\program files\BS_Player\prxtbBS_0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\prxtbBS_0.dll" [2011-01-17 175912]
"{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}"= "c:\program files\Softonic-Eng7\prxtbSof2.dll" [2011-05-09 176936]
"{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}"= "c:\program files\ooVoo_Video_Chat\prxtbooVo.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
.
[HKEY_CLASSES_ROOT\clsid\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\prxtbBS_0.dll" [2011-01-17 175912]
"{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}"= "c:\program files\Softonic-Eng7\prxtbSof2.dll" [2011-05-09 176936]
"{E5A1E26F-0D1D-4307-868F-FBD9A374AB54}"= "c:\program files\ooVoo_Video_Chat\prxtbooVo.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
.
[HKEY_CLASSES_ROOT\clsid\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"="c:\documents and settings\All Users\Data aplikací\LangSoft\OETRN.EXE" [2010-09-28 26624]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2007-12-29 486856]
"Sony Ericsson PC Companion"="c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2011-10-21 433872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-05-08 141336]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-05-08 173592]
"ACU"="c:\program files\Atheros\ACU.exe" [2009-01-05 450648]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"LXSUPMON"="c:\windows\system32\LXSUPMON.EXE" [2002-01-28 885760]
"egui"="f:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 3080264]
"TNOD UP"="f:\program files\TNod User & Password Finder\TNODUP.exe" [2011-05-07 1882112]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
.
c:\documents and settings\Jarda\Nabídka Start\Programy\Po spuštění\
Tapety 2.12.lnk - c:\program files\Tapety 2.12\Tapety.exe [2004-10-17 211456]
Yahoo! Widgets.lnk - c:\program files\Yahoo!\Widgets\YahooWidgets.exe [2008-3-19 4742184]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Aktualizovat ESET licenci.lnk - c:\program files\ESET\MiNODLogin\MiNODLogin.exe [N/A]
CLS12.50.lnk - c:\program files\Edgecam\Cam\cls.exe [2010-10-27 745472]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^WinZip Quick Pick.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe]
2011-05-11 06:22 22631608 ----a-w- c:\program files\ooVoo\ooVoo.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"PLFSetL"=c:\windows\PLFSetL.exe
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"
"Persistence"=c:\windows\system32\igfxpers.exe
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"LManager"=c:\program files\Launch Manager\LManager.exe
"LXSUPMON"=c:\windows\system32\LXSUPMON.EXE RUN
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\Wolfram Research\\Mathematica\\7.0\\Mathematica.exe"=
"c:\\Program Files\\Wolfram Research\\Mathematica\\7.0\\MathKernel.exe"=
"c:\\Program Files\\Wolfram Research\\Mathematica\\7.0\\math.exe"=
"c:\\Program Files\\proeWildfire 4.0\\i486_nt\\nms\\nmsd.exe"=
"c:\\Program Files\\proeWildfire 4.0\\i486_nt\\obj\\pro_comm_msg.exe"=
"c:\\Program Files\\proeWildfire 4.0\\i486_nt\\obj\\xtop.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\proeWildfire 4.0\\bin\\proe.exe"=
"c:\\WINDOWS\\system32\\LEXPPS.EXE"=
"f:\\Program Files\\StrongDC++\\StrongDC.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ooVoo\\ooVoo.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\EA Sports\\FIFA 11\\Game\\fifa.exe"=
"c:\\Program Files\\ICQ7.6\\ICQ.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9665:TCP"= 9665:TCP:rwrkczzv
"443:TCP"= 443:TCP:*:Disabled:ooVoo TCP port 443
"443:UDP"= 443:UDP:*:Disabled:ooVoo UDP port 443
"37674:TCP"= 37674:TCP:*:Disabled:ooVoo TCP port 37674
"37674:UDP"= 37674:UDP:*:Disabled:ooVoo UDP port 37674
"37675:UDP"= 37675:UDP:*:Disabled:ooVoo UDP port 37675
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.1.2011 18:43 691696]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [4.8.2011 9:20 118104]
R1 LUMDriver;LUMDriver;c:\windows\system32\drivers\LUMDriver.sys [24.4.2007 16:52 16688]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 10:28 73728]
R2 ekrn;ESET Service;f:\program files\ESET\ESET Smart Security\ekrn.exe [22.9.2011 12:03 974944]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [20.9.2010 19:19 247872]
R2 MSSQL$ECSQLEXPRESS;SQL Server (ECSQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [10.12.2010 17:29 29293408]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 18:19 13592]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [8.4.2009 3:04 39424]
S2 jrllh;Helper Config;c:\windows\system32\svchost.exe -k netsvcs [14.4.2008 9:52 14336]
S2 zsokuduez;Universal Helper;c:\windows\system32\svchost.exe -k netsvcs [14.4.2008 9:52 14336]
S3 bpenum;Intel(R) WiMAX Link Enumerator;c:\windows\system32\drivers\bpenum.sys [1.2.2009 17:39 163840]
S3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys --> c:\windows\system32\DRIVERS\ewdcsc.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys --> c:\windows\system32\DRIVERS\ewusbdev.sys [?]
S3 PRISM;Intersil PRISM Wireless LAN Driver;c:\windows\system32\DRIVERS\PRISMNDS.sys --> c:\windows\system32\DRIVERS\PRISMNDS.sys [?]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [20.9.2010 18:23 164864]
S3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys --> c:\windows\system32\DRIVERS\Rts516xIR.sys [?]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\drivers\s1039bus.sys [18.8.2011 14:25 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\drivers\s1039mdfl.sys [18.8.2011 14:25 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\drivers\s1039mdm.sys [18.8.2011 14:25 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1039mgmt.sys [18.8.2011 14:25 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1039nd5.sys [18.8.2011 14:25 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\drivers\s1039obex.sys [18.8.2011 14:25 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1039unic.sys [18.8.2011 14:25 123504]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [18.8.2011 14:24 155344]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
zsokuduez
jrllh
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-10 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
2012-01-10 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2012-01-10 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2011-09-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2012-01-05 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files\ICQ7.6\ICQ.exe
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\All Users\Data aplikací\LangSoft\WebIE.dll
TCP: DhcpNameServer = 147.230.16.140 147.230.16.1
TCP: Interfaces\{30813892-64A5-4126-8F8F-4A146A64ED55}: NameServer = 10.120.32.1,10.120.32.2
DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} - hxxps://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
FF - ProfilePath - c:\documents and settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.bigseekpro.com/bsprpc/{0DB59A0D-5EF ... 8ABEB4077D}
FF - prefs.js: keyword.URL - hxxp://www.bigseekpro.com/search/toolbar/bsprp ... B4077D}?q=
FF - prefs.js: network.proxy.type - 0
FF - Ext: Skype extension: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} - c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: DAEMON Tools Toolbar: DTToolbar@toolbarnet.com - %profile%\extensions\DTToolbar@toolbarnet.com
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: GamePlayLabs Plugin: plugin2@gameplaylabs.com - %profile%\extensions\plugin2@gameplaylabs.com
FF - Ext: Softonic-Eng7 Community Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - %profile%\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: BSPToolbar: {75656794-AB59-4712-BFBC-5D816D56F3BC} - %profile%\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-10 15:15
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet005\Services\jrllh]
"ServiceDll"="c:\windows\system32\ftawji.dll"
--
.
[HKEY_LOCAL_MACHINE\System\ControlSet005\Services\zsokuduez]
"ServiceDll"="c:\windows\system32\ftawji.dll"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3360)
c:\windows\system32\webcheck.dll
c:\windows\system32\wpdshserviceobj.dll
c:\windows\system32\portabledevicetypes.dll
c:\windows\system32\portabledeviceapi.dll
.
Celkový čas: 2012-01-10 15:16:57
ComboFix-quarantined-files.txt 2012-01-10 14:16
ComboFix2.txt 2012-01-10 13:51
.
Před spuštěním: Volných bajtů: 48 865 890 304
Po spuštění: Volných bajtů: 48 829 628 416
.
- - End Of File - - 3E51E11C4D8DBC99E80D710B6516D6D4

Na žádost kolegy cernohous13 ho zde na chvilku zastoupím (měl doma nehodu).

Jako první odinstaluj všechny toolbary, které půjdou. Jsou to zdržovadla a máš jich tam opravdu nechutnou sbírku:
ICQToolBar, Toolbar: WebTranslator, BS Player Toolbar, Softonic-Eng7 Toolbar, DAEMON Tools Toolbar a ooVoo Video Chat Toolbar.

Potom fixni v HJT níže uvedené položky.

• Fixnout znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
• Položky, které v seznamu nenajdeš, prostě přeskoč.
• HJT najdeš zde: C:\Program Files\trend micro\Jarda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60040
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60040
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O2 - BHO: ooVoo Video Chat - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\BSP Toolbar\tbcore3.dll
O2 - BHO: BS Player - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\prxtbBS_0.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof2.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ooVoo Video Chat Toolbar - {e5a1e26f-0d1d-4307-868f-fbd9a374ab54} - C:\Program Files\ooVoo_Video_Chat\prxtbooVo.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKCU\..\Run: [OEXPRESS] C:\Documents and Settings\All Users\Data aplikací\LangSoft\OETRN.EXE
O4 - HKCU\..\Run: [DAEMON Tools Lite] "c:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O17 - HKLM\System\CCS\Services\Tcpip\..\{30813892-64A5-4126-8F8F-4A146A64ED55}: NameServer = 10.120.32.1,10.120.32.2


Dál stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Zaškrtni okénko Pro všechny uživatele.
• Zaškrtni okénko Kontrola na havěť "LOP".
• Zaškrtni okénko Kontrola na havěť "Purity".
• Stáři souborů změň z 30 dnů na 7 dnů!!
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Prohledat].
• Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
• Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

ČÁST 1. (OTL)

OTL logfile created on: 10.1.2012 18:24:36 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jarda\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,93 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 81,87% Memory free
4,77 Gb Paging File | 4,28 Gb Available in Paging File | 89,58% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 45,38 Gb Free Space | 30,45% Space Free | Partition Type: NTFS
Drive F: | 149,05 Gb Total Space | 11,67 Gb Free Space | 7,83% Space Free | Partition Type: NTFS

Computer Name: NOTBUK | User Name: Jarda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.01.10 18:21:55 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jarda\Plocha\OTL.exe
PRC - [2011.12.13 11:01:25 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2010.04.14 10:28:44 | 000,073,728 | ---- | M] (Software602 a.s.) -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2009.01.05 14:48:12 | 000,450,648 | ---- | M] (Atheros Communications, Inc.) -- C:\Program Files\Atheros\ACU.exe
PRC - [2009.01.05 14:47:44 | 000,475,220 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe
PRC - [2008.06.13 22:13:48 | 000,745,472 | ---- | M] (Pathtrace) -- C:\Program Files\Edgecam\Cam\cls.exe
PRC - [2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.03.19 01:31:20 | 004,742,184 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
PRC - [2006.11.03 18:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MsMpEng.exe
PRC - [2004.10.17 18:54:50 | 000,211,456 | ---- | M] ( ) -- C:\Program Files\Tapety 2.12\Tapety.exe


========== Modules (No Company Name) ==========

MOD - [2012.01.10 10:45:16 | 001,666,560 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12011000\algo.dll
MOD - [2011.08.08 17:28:50 | 003,431,424 | ---- | M] () -- C:\WINDOWS\system32\SAFEQ.DLL
MOD - [2011.08.01 18:27:18 | 000,581,120 | ---- | M] () -- C:\WINDOWS\system32\SafeQCairoLib.DLL
MOD - [2010.09.28 09:41:00 | 000,045,056 | ---- | M] () -- C:\Documents and Settings\All Users\Data aplikací\LangSoft\TRNOEH.DLL
MOD - [2008.06.13 21:33:10 | 000,025,600 | ---- | M] () -- C:\Program Files\Edgecam\Cam\edgecfg.dll
MOD - [2008.03.19 01:21:48 | 000,094,208 | ---- | M] () -- C:\Program Files\Yahoo!\Widgets\jsd.dll
MOD - [2008.03.19 01:21:20 | 000,512,000 | ---- | M] () -- C:\Program Files\Yahoo!\Widgets\js32.dll
MOD - [2008.01.08 23:50:10 | 000,349,147 | ---- | M] () -- C:\Program Files\Yahoo!\Widgets\sqlite3.dll


========== Win32 Services (SafeList) ==========

SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.06.29 14:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011.05.04 23:37:29 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010.04.14 10:28:44 | 000,073,728 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2009.01.05 14:47:44 | 000,475,220 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2006.11.03 18:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - [2011.11.28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 18:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 18:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.05.04 22:32:58 | 000,217,664 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\truecrypt.sys -- (truecrypt)
DRV - [2011.01.18 18:43:29 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.10.27 21:51:14 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2010.10.24 21:35:56 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2010.10.24 21:35:56 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010.03.15 10:38:44 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm)
DRV - [2010.03.15 10:38:44 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM)
DRV - [2010.03.15 10:38:44 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM)
DRV - [2010.03.15 10:38:44 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex)
DRV - [2010.03.15 10:38:44 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) Sony Ericsson Device 1039 driver (WDM)
DRV - [2010.03.15 10:38:44 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS)
DRV - [2010.03.15 10:38:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl)
DRV - [2010.02.11 13:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009.04.08 03:04:00 | 000,039,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c)
DRV - [2009.04.08 02:43:00 | 000,164,864 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009.03.26 03:35:00 | 001,503,840 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2009.03.09 12:32:00 | 000,805,888 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAU32.sys -- (CnxtHdAudService)
DRV - [2009.02.01 17:39:02 | 000,163,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bpenum.sys -- (bpenum) Intel(R)
DRV - [2008.09.11 14:49:26 | 001,754,368 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2008.04.14 01:26:08 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008.02.08 07:46:36 | 000,057,408 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\wsimd.sys -- (WSIMD)
DRV - [2008.01.02 10:36:30 | 000,076,288 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2007.04.24 16:52:10 | 000,016,688 | ---- | M] (IBM) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\LUMDriver.sys -- (LUMDriver)
DRV - [2006.11.30 15:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM)
DRV - [2006.09.18 14:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM)
DRV - [2004.07.14 11:54:42 | 000,676,864 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2004.05.13 23:54:34 | 000,014,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2004.05.13 23:54:32 | 000,021,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\WmFilter.sys -- (WmFilter)
DRV - [2004.05.13 23:54:28 | 000,010,144 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2004.05.13 23:54:26 | 000,005,600 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2004.05.13 23:54:24 | 000,044,384 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2001.10.25 17:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2001.10.25 17:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found



IE - HKU\.DEFAULT\..\URLSearchHook: - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.order.1: "Crawler Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.bigseekpro.com/bsprpc/{0DB59 ... 8ABEB4077D}"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.5.2
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.3.0244
FF - prefs.js..extensions.enabledItems: plugin2@gameplaylabs.com:2.0
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.3.6
FF - prefs.js..extensions.enabledItems: {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.8
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&o ... "user_pref("network.cookie.prefsMigrated", true);
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.01.10 16:20:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.25 20:50:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.01.04 00:26:36 | 000,000,000 | ---D | M]

[2010.10.28 20:25:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Extensions
[2012.01.10 18:03:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions
[2011.01.07 18:17:18 | 000,000,000 | ---D | M] (Softonic-Eng7 Community Toolbar) -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}
[2011.11.29 22:00:40 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.01.07 18:17:14 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com
[2011.04.06 08:38:06 | 000,000,000 | ---D | M] (GamePlayLabs Plugin) -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com
[2011.01.18 23:07:31 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\daemon-search.xml
[2012.01.06 00:08:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin-1.xml
[2011.11.29 22:00:40 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.gif
[2011.11.29 22:00:40 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.src
[2011.07.14 20:19:12 | 000,001,024 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.xml
[2011.04.25 09:45:05 | 000,002,305 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\inbox-hledn.xml
[2011.12.16 19:34:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\{75656794-AB59-4712-BFBC-5D816D56F3BC}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\DTTOOLBAR@TOOLBARNET.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\ENGINE@CONDUIT.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JARDA\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\UOG193FH.DEFAULT\EXTENSIONS\PLUGIN2@GAMEPLAYLABS.COM
[2010.10.19 16:31:36 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2007.03.10 00:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\mozilla firefox\plugins\npyaxmpb.dll
[2009.09.21 11:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml
[2011.11.09 18:18:08 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.11.09 18:18:08 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2011.11.09 18:18:08 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2011.11.09 18:18:08 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2011.11.09 18:18:08 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Jarda\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Jarda\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Jarda\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Gmail = C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

O1 HOSTS File: ([2012.01.10 14:43:36 | 000,000,027 | ---- | M]) - C:\WINDOWS\System32\Drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (WebTransBHO Class) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\..\Toolbar\WebBrowser: (no name) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No CLSID value found.
O4 - HKLM..\Run: [ACU] C:\Program Files\Atheros\ACU.exe (Atheros Communications, Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004..\Run: [Sony Ericsson PC Companion] C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\CLS12.50.lnk = C:\Program Files\Edgecam\Cam\cls.exe (Pathtrace)
O4 - Startup: C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění\Tapety 2.12.lnk = C:\Program Files\Tapety 2.12\Tapety.exe ( )
O4 - Startup: C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění\Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe (Yahoo! Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\##aswSnx private storage\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O9 - Extra 'Tools' menuitem : Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/a ... oader6.cab (CeWe Color AG & Co. OHG Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.co ... .3.1.0.cab (SysInfo Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 147.230.16.140 147.230.16.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{545344C5-C7A5-4F08-83E2-066709B58AD6}: DhcpNameServer = 147.230.16.140 147.230.16.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O30 - LSA: Authentication Packages - (nwprovau) -C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.09.20 22:16:42 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32: msacm.ac3acm - ac3acm.acm File not found
Drivers32: msacm.iac2 - C:\WINDOWS\System32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - mp3fhg.acm File not found
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: SENTINEL - C:\WINDOWS\System32\SNTI386.DLL (Rainbow Technologies, Inc.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Ligos Corporation)
Drivers32: vidc.tscc - C:\WINDOWS\System32\tsccvid.dll (TechSmith Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.01.10 18:21:55 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jarda\Plocha\OTL.exe
[2012.01.10 16:20:23 | 000,020,568 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012.01.10 16:20:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
[2012.01.10 16:20:22 | 000,314,456 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2012.01.10 16:20:19 | 000,034,392 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2012.01.10 16:20:18 | 000,435,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2012.01.10 16:20:18 | 000,052,952 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2012.01.10 16:20:17 | 000,111,320 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2012.01.10 16:20:17 | 000,105,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2012.01.10 16:20:16 | 000,030,808 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2012.01.10 16:19:59 | 000,199,816 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2012.01.10 16:19:59 | 000,041,184 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2012.01.10 16:19:49 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.01.10 16:19:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.01.10 15:25:51 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.10 15:25:51 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.10 14:29:11 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012.01.10 14:25:37 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012.01.10 14:25:37 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012.01.10 14:25:36 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012.01.10 14:25:36 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012.01.10 14:25:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2012.01.10 14:10:19 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.01.10 14:09:36 | 004,376,727 | R--- | C] (Swearware) -- C:\Documents and Settings\Jarda\Plocha\ComboFix.exe
[2012.01.09 13:22:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Plocha\eee
[2012.01.09 12:53:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Nabídka Start\Programy\Google Chrome
[2012.01.09 12:52:36 | 024,255,544 | ---- | C] (Google Inc.) -- C:\Documents and Settings\Jarda\Plocha\chrome_installer.exe
[2012.01.04 22:52:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Plocha\přednaška hydro
[2012.01.04 00:41:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Plocha\Nová složka (2)
[2012.01.04 00:26:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Dokumenty\My Widgets
[2012.01.04 00:26:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jarda\Local Settings\Data aplikací\Yahoo
[2012.01.04 00:26:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Yahoo! Widgets
[2012.01.04 00:26:26 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2012.01.04 00:19:16 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Jarda\IECompatCache
[2011.03.12 14:27:36 | 003,056,008 | ---- | C] (Ask) -- C:\Program Files\Common Files\AskToolbarInstaller.exe
[2010.09.20 18:42:15 | 000,176,128 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll
[2010.09.20 18:42:10 | 000,229,376 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.01.10 18:27:41 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.10 18:21:55 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jarda\Plocha\OTL.exe
[2012.01.10 18:07:58 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2012.01.10 18:05:42 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
[2012.01.10 18:05:38 | 000,000,294 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
[2012.01.10 18:04:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.10 18:03:42 | 000,001,952 | ---- | M] () -- C:\Documents and Settings\Jarda\Dokumenty\ddd.tpt
[2012.01.10 16:20:23 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2012.01.10 16:20:17 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012.01.10 16:18:43 | 064,207,032 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\setup_av_free.exe
[2012.01.10 15:25:42 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\RSIT.exe
[2012.01.10 14:43:36 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.01.10 14:29:16 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012.01.10 14:09:51 | 004,376,727 | R--- | M] (Swearware) -- C:\Documents and Settings\Jarda\Plocha\ComboFix.exe
[2012.01.10 13:10:01 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.09 16:30:47 | 000,158,661 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek2.jpg
[2012.01.09 16:30:12 | 000,668,849 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek1.png
[2012.01.09 12:53:03 | 000,002,291 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Google Chrome.lnk
[2012.01.09 12:52:37 | 024,255,544 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jarda\Plocha\chrome_installer.exe
[2012.01.09 12:13:19 | 000,007,064 | ---- | M] () -- C:\Documents and Settings\Jarda\Data aplikací\mainhst.zgh
[2012.01.09 12:12:42 | 000,594,821 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\kulomet.zip
[2012.01.08 14:13:30 | 000,541,438 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00270.jpg
[2012.01.05 22:39:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
[2012.01.04 22:55:54 | 004,392,764 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\zprava_1166.zip
[2012.01.04 00:57:40 | 000,265,468 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\sss.jpg
[2012.01.04 00:56:12 | 000,262,258 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\sparta1.jpg
[2012.01.04 00:41:51 | 000,000,689 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Zástupce - Yodm3D.exe.lnk
[2012.01.04 00:26:44 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění\Yahoo! Widgets.lnk
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.01.10 18:27:41 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.10 16:20:23 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2012.01.10 16:17:59 | 064,207,032 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\setup_av_free.exe
[2012.01.10 15:25:42 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\RSIT.exe
[2012.01.10 14:29:16 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012.01.10 14:29:13 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2012.01.10 14:25:37 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.01.10 14:25:37 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.01.10 14:25:37 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.01.10 14:25:37 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.01.10 14:25:36 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.01.09 16:30:47 | 000,158,661 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek2.jpg
[2012.01.09 16:30:11 | 000,668,849 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek1.png
[2012.01.09 12:53:03 | 000,002,291 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\Google Chrome.lnk
[2012.01.09 12:12:42 | 000,594,821 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\kulomet.zip
[2012.01.08 14:16:01 | 000,541,438 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\DSC00270.jpg
[2012.01.04 22:55:54 | 004,392,764 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\zprava_1166.zip
[2012.01.04 00:57:40 | 000,265,468 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\sss.jpg
[2012.01.04 00:56:12 | 000,262,258 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\sparta1.jpg
[2012.01.04 00:41:51 | 000,000,689 | ---- | C] () -- C:\Documents and Settings\Jarda\Plocha\Zástupce - Yodm3D.exe.lnk
[2012.01.04 00:26:44 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\Jarda\Nabídka Start\Programy\Po spuštění\Yahoo! Widgets.lnk
[2011.12.06 22:40:58 | 000,302,168 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2011.12.04 14:32:55 | 000,001,046 | ---- | C] () -- C:\Documents and Settings\Jarda\Data aplikací\DVDSubEdit.ini
[2011.11.14 14:58:09 | 003,431,424 | ---- | C] () -- C:\WINDOWS\System32\SAFEQ.DLL
[2011.11.14 14:58:09 | 000,581,120 | ---- | C] () -- C:\WINDOWS\System32\SafeQCairoLib.DLL
[2011.11.14 14:58:09 | 000,133,632 | ---- | C] () -- C:\WINDOWS\System32\SAFEQUI.DLL
[2011.11.14 14:57:22 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\KOAZ8JAL.DLL
[2011.05.17 17:17:58 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011.03.18 16:18:51 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2011.02.22 20:39:04 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011.02.22 20:37:30 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011.01.10 11:31:30 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2011.01.09 20:25:17 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\lxaxih.exe
[2011.01.09 20:25:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\INSTMON.EXE
[2011.01.09 20:25:13 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\lxaxlcnp.dll
[2010.12.29 11:40:42 | 000,007,064 | ---- | C] () -- C:\Documents and Settings\Jarda\Data aplikací\mainhst.zgh
[2010.12.22 13:41:42 | 000,000,147 | ---- | C] () -- C:\WINDOWS\IfoEdit.INI
[2010.12.21 17:40:12 | 000,000,352 | ---- | C] () -- C:\WINDOWS\modelcheck.INI
[2010.10.28 20:24:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.10.27 21:51:14 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2010.10.24 21:35:56 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2010.10.24 21:35:56 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2010.10.11 19:18:56 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2010.10.04 19:39:57 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.10.04 19:39:56 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.10.03 20:29:43 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2010.09.28 09:12:46 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010.09.27 16:00:39 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2010.09.27 07:42:39 | 000,262,216 | ---- | C] () -- C:\WINDOWS\System32\IPTests.dll
[2010.09.21 00:05:37 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010.09.21 00:04:20 | 000,399,144 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.09.20 22:18:59 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.09.20 22:13:32 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010.09.20 19:35:47 | 000,121,344 | ---- | C] () -- C:\Documents and Settings\Jarda\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.09.20 19:20:14 | 000,982,196 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2010.09.20 19:20:12 | 000,417,344 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2010.09.20 18:42:15 | 001,754,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2010.09.20 18:42:15 | 000,028,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys
[2010.09.20 18:42:15 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini
[2010.09.20 18:42:15 | 000,000,055 | ---- | C] () -- C:\WINDOWS\PidList.ini
[2010.09.20 16:41:26 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2010.06.02 04:22:02 | 000,537,432 | ---- | C] () -- C:\Program Files\DXSETUP.exe
[2008.04.14 10:16:08 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2006.12.31 08:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.10.14 11:56:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe
[2005.10.14 10:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2002.01.24 10:09:56 | 000,174,592 | ---- | C] () -- C:\WINDOWS\System32\LEXPPS.EXE
[2001.10.25 17:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.25 17:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 17:00:00 | 000,593,856 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 17:00:00 | 000,588,522 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 17:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 17:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 17:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 17:00:00 | 000,138,986 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 17:00:00 | 000,125,340 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 17:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 17:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 17:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 17:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001.10.25 17:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2011.12.25 13:06:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Ancestry
[2011.05.10 15:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Autodesk
[2011.12.03 02:17:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\BSplayer
[2010.09.28 11:15:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\BSplayer Pro
[2011.01.18 23:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DAEMON Tools
[2011.01.18 23:02:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DAEMON Tools Lite
[2011.11.14 16:43:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DassaultSystemes
[2011.05.17 10:36:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Design Science
[2011.01.02 20:12:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ESET
[2010.10.24 19:04:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\GHISLER
[2012.01.10 17:57:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ICQ
[2010.09.28 09:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\LangSoft
[2011.10.01 06:48:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Leadertech
[2011.08.18 14:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\MyPhoneExplorer
[2011.06.11 21:37:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ooVoo Details
[2010.10.03 09:44:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Opera
[2011.04.25 09:45:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PCPowerSpeed
[2012.01.09 13:36:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PriceGong
[2010.10.15 09:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PTC
[2011.02.12 13:42:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Telefónica Móviles
[2012.01.10 18:03:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Toolbar4
[2011.05.04 22:33:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\TrueCrypt
[2011.01.10 11:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software
[2012.01.01 23:06:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\uTorrent
[2010.10.19 16:33:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\VitySoft
[2011.02.04 20:17:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\WebCam Recorder
[2011.01.01 14:43:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ZipGenius
[2011.12.05 16:07:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ESET
[2011.12.05 16:07:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\LangSoft
[2011.12.05 16:10:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
[2011.05.10 15:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Autodesk
[2012.01.10 16:19:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2011.01.18 23:03:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2011.11.21 11:45:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DassaultSystemes
[2010.09.26 21:07:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Easy Driver Pro
[2011.11.29 22:00:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2010.09.28 09:41:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LangSoft
[2011.09.08 21:19:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MyHeritage
[2010.11.14 09:43:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NCH Swift Sound
[2010.10.27 21:59:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SafeNet Sentinel
[2010.12.01 17:20:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.11.06 15:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\tmp
[2011.01.10 11:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2011.02.21 10:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WinZip
[2010.09.25 14:15:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\602XML
[2011.09.20 14:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Ancestry
[2011.08.16 15:58:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Autodesk
[2010.11.07 13:44:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\BSplayer
[2011.09.10 15:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Design Science
[2011.01.10 16:42:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\ESET
[2011.09.27 10:07:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\ICQ
[2011.04.28 18:18:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Inbox Toolbar
[2010.11.06 09:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\LangSoft
[2010.11.13 11:11:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Memostation
[2011.09.08 20:49:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\MyHeritage
[2011.05.15 11:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\ooVoo Details
[2010.11.05 20:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Opera
[2011.03.24 17:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\PDM
[2011.09.21 05:30:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\PriceGong
[2010.12.30 17:56:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Rainmeter
[2011.03.12 14:17:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Search Settings
[2011.04.28 18:18:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\SiteRanker
[2010.09.26 08:37:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Software602
[2011.02.14 18:31:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\Telefónica Móviles
[2011.01.15 21:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\TuneUp Software
[2011.09.25 07:24:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\uTorrent
[2011.02.20 16:45:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\VitySoft
[2011.03.12 14:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\YouTube Downloader
[2011.02.20 21:18:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\jiří paroubek\Data aplikací\ZipGenius
[2012.01.10 18:07:58 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========



========== Custom Scans ==========


< netsvc >


< MD5 for: ATAPI.SYS >
[2008.04.13 21:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 21:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\System32\dllcache\atapi.sys
[2008.04.13 21:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\System32\Drivers\atapi.sys
[2008.04.14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\System32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys
[2008.04.13 21:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\System32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\System32\autochk.exe
[2008.04.14 09:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\System32\dllcache\autochk.exe

< MD5 for: CDROM.SYS >
[2008.04.14 01:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\System32\Drivers\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 09:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\System32\dllcache\explorer.exe

< MD5 for: HAL.DLL >
[2008.04.14 01:01:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\System32\hal.dll

< MD5 for: SCECLI.DLL >
[2008.04.14 09:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 09:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\System32\dllcache\scecli.dll
[2008.04.14 09:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\System32\scecli.dll

< MD5 for: SVCHOST.EXE >
[2008.04.14 09:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 09:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\System32\dllcache\svchost.exe
[2008.04.14 09:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\System32\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.14 01:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\System32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\System32\Drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 09:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 09:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\System32\dllcache\userinit.exe
[2008.04.14 09:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\System32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2008.04.14 09:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 09:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\System32\dllcache\winlogon.exe
[2008.04.14 09:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\System32\winlogon.exe

< %systemroot%*.* /U /s >
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[10 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[2 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >
[2010.11.29 21:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Eltima Software

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.01.05 11:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Adobe
[2010.09.28 17:32:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\AdobeUM
[2010.09.28 09:11:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Ahead
[2011.12.25 13:06:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Ancestry
[2011.05.10 15:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Autodesk
[2011.12.03 02:17:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\BSplayer
[2010.09.28 11:15:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\BSplayer Pro
[2011.01.18 23:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DAEMON Tools
[2011.01.18 23:02:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DAEMON Tools Lite
[2011.11.14 16:43:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\DassaultSystemes
[2011.05.17 10:36:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Design Science
[2011.01.02 20:12:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ESET
[2010.10.24 19:04:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\GHISLER
[2010.10.08 11:42:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Help
[2012.01.10 17:57:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ICQ
[2010.09.20 22:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Identities
[2010.09.20 18:42:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\InstallShield
[2010.09.26 20:16:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Intel
[2010.09.28 09:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\LangSoft
[2011.10.01 06:48:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Leadertech
[2010.09.29 16:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Macromedia
[2010.10.08 13:34:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Mathematica
[2010.10.06 00:50:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Media Player Classic
[2011.12.09 19:01:06 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Jarda\Data aplikací\Microsoft
[2010.10.28 20:25:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Mozilla
[2011.08.18 14:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\MyPhoneExplorer
[2010.11.14 09:43:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\NCH Software
[2011.06.11 21:37:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ooVoo Details
[2010.10.03 09:44:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Opera
[2011.04.25 09:45:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PCPowerSpeed
[2012.01.09 13:36:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PriceGong
[2010.10.15 09:49:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\PTC
[2011.11.17 22:39:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Real
[2012.01.08 23:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Skype
[2012.01.08 20:49:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\skypePM
[2010.10.19 16:31:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Sun
[2011.02.12 13:42:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Telefónica Móviles
[2012.01.10 18:03:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\Toolbar4
[2011.05.04 22:33:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\TrueCrypt
[2011.01.10 11:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software
[2012.01.01 23:06:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\uTorrent
[2010.10.19 16:33:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\VitySoft
[2011.12.18 22:22:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\vlc
[2011.02.04 20:17:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\WebCam Recorder
[2010.11.23 23:17:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\WinRAR
[2011.01.01 14:43:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jarda\Data aplikací\ZipGenius

< %APPDATA%\*.exe /s >
[2011.11.22 18:15:43 | 003,763,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Documents and Settings\Jarda\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
[2011.01.08 21:36:03 | 000,510,120 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Jarda\Data aplikací\Real\Update\setup3.14\setup.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.01.10 18:07:58 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2012.01.10 18:05:38 | 000,000,294 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
[2012.01.10 18:05:42 | 000,000,278 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job
[2011.09.27 07:19:52 | 000,000,302 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1003.job
[2012.01.05 22:39:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2010.09.21 00:03:50 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2010.09.21 00:03:50 | 001,093,632 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2010.09.21 00:03:49 | 000,495,616 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.01.10 16:20:17 | 000,002,596 | ---- | M] () -- C:\WINDOWS\system32\CONFIG.NT
[2012.01.10 13:10:01 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[3 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

ČÁST 2 (OTL)

< %userprofile%\Plocha\*.* >
[2011.08.24 11:51:22 | 002,555,333 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\100_0074.JPG
[2011.08.24 14:08:32 | 002,931,794 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\100_0110.JPG
[2012.01.09 12:52:37 | 024,255,544 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jarda\Plocha\chrome_installer.exe
[2012.01.10 14:09:51 | 004,376,727 | R--- | M] (Swearware) -- C:\Documents and Settings\Jarda\Plocha\ComboFix.exe
[2011.11.04 15:47:35 | 018,395,498 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\cze.pdf
[2011.12.08 11:37:50 | 003,623,052 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\c_prehledka50000_m_eff842e287.pdf
[2011.11.19 16:53:40 | 010,526,393 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Document_9.rar
[2011.09.24 15:30:18 | 000,340,612 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00018.jpg
[2011.08.31 08:52:00 | 000,257,070 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00169.JPG
[2011.08.31 08:52:10 | 000,256,810 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00170.JPG
[2011.08.31 08:52:24 | 000,336,238 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00171.JPG
[2011.08.31 08:52:40 | 000,301,729 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00172.JPG
[2011.08.31 08:52:52 | 000,312,158 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00173.JPG
[2011.09.01 17:52:42 | 000,330,733 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00174.JPG
[2011.12.18 20:02:40 | 000,657,872 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00188.jpg
[2012.01.08 14:13:30 | 000,541,438 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\DSC00270.jpg
[2012.01.09 12:53:03 | 000,002,291 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Google Chrome.lnk
[2007.02.27 14:12:24 | 009,423,747 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Jiří Mach - Opravy Automobilů Škoda Favorit.pdf
[2011.10.10 11:08:41 | 008,621,939 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Kinematika.rar
[2012.01.09 12:12:42 | 000,594,821 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\kulomet.zip
[2011.11.05 00:30:13 | 002,460,063 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\LG TV Remote.zip
[2007.02.27 14:13:38 | 015,835,706 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Mario Cedrych - Škoda Favorit-Forma-Pick Up.pdf
[2011.12.20 18:15:02 | 000,415,341 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\MT-B%2009%20Proud%C4%9Bn%C3%AD%20se%20ztr%C3%A1tami%202010.pdf
[2011.12.20 18:14:37 | 000,283,638 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\MT-B%2010%20Lamin%C3%A1rn%C3%AD%20proud%C4%9Bn%C3%AD%202010.pdf
[2011.12.20 18:14:27 | 000,231,362 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\MT-B%2011%20%C3%9Avod%20do%20proud%C4%9Bn%C3%AD%20stla%C4%8Diteln%C3%BDch%20tekutin.pdf
[2011.12.20 18:13:14 | 000,167,514 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\MT-B%2012%20Izoentropick%C3%A9%20proud%C4%9Bn%C3%AD.pdf
[2012.01.09 16:30:12 | 000,668,849 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek1.png
[2012.01.09 16:30:47 | 000,158,661 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Obrázek2.jpg
[2012.01.10 18:21:55 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jarda\Plocha\OTL.exe
[2011.12.12 11:53:50 | 002,686,324 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\P1160527.JPG
[2012.01.02 19:26:59 | 060,069,392 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Plocha.zip
[2011.12.06 11:00:11 | 001,074,975 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Resene_priklady_z_FYII.pdf
[2012.01.10 15:25:42 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\RSIT.exe
[2012.01.10 16:18:43 | 064,207,032 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\setup_av_free.exe
[2011.12.31 19:42:39 | 000,023,371 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\slunce.jpg
[2012.01.04 00:56:12 | 000,262,258 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\sparta1.jpg
[2012.01.04 00:57:40 | 000,265,468 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\sss.jpg
[2011.12.31 19:39:51 | 000,145,855 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\storms-brew-thunder-lightning.jpg
[2011.12.31 19:36:59 | 000,617,537 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\svijany-obr1.jpg
[2011.11.19 00:10:36 | 000,050,688 | -HS- | M] () -- C:\Documents and Settings\Jarda\Plocha\Thumbs.db
[2011.10.11 18:56:15 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\VLC media player.lnk
[2011.02.14 15:51:35 | 000,000,333 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\w (10.120.32.130).lnk
[2012.01.04 22:55:54 | 004,392,764 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\zprava_1166.zip
[2011.01.26 22:05:08 | 000,020,591 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Zámek Sychrov.docx
[2012.01.04 00:41:51 | 000,000,689 | ---- | M] () -- C:\Documents and Settings\Jarda\Plocha\Zástupce - Yodm3D.exe.lnk

< %userprofile%\Desktop\*.* >

< %ALLUSERSPROFILE%\Plocha\*.* >
[2011.05.04 23:37:11 | 000,001,568 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\AutoCAD 2009 - česky.lnk
[2012.01.10 16:20:23 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2011.10.01 06:46:10 | 000,001,926 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\FIFA 11.lnk
[2011.05.19 17:56:28 | 000,001,492 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Opera.lnk

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[2010.10.24 22:08:41 | 000,000,389 | ---- | M] () -- \Documents and Settings\Jarda\Cookies\jarda@crackfound[1].txt
[2010.10.24 22:08:58 | 000,003,778 | ---- | M] () -- \Documents and Settings\Jarda\Data aplikací\uTorrent\Gothic3.en.ger.crack.by.=[-RBTM-]=.rar.torrent
[2010.10.24 22:02:50 | 000,003,725 | ---- | M] () -- \Documents and Settings\Jarda\Data aplikací\uTorrent\Gothic_III_CRACK_ONLY-Razor1911[www.moviex.info].torrent
[2002.05.30 17:16:22 | 000,013,160 | ---- | M] () -- \Program Files\Firefly Studios\Stronghold Crusader\gm\cracks.gm1

< *keygen* /s >
[2008.09.29 06:50:08 | 000,153,081 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Java\WolframSSHKeyGen.jar

< *loader* /s >
[2011.10.28 19:56:48 | 000,000,065 | ---- | M] () -- \Documents and Settings\Jarda\Data aplikací\Macromedia\Flash Player\#SharedObjects\9DJMUP3R\www.kamennyobchod.cz\js\preloader.swf\preloadercookie.sol
[2011.03.12 14:26:02 | 000,000,352 | ---- | M] () -- \Documents and Settings\jiří paroubek\Cookies\jiří_paroubek@vdownloader.en.softonic[2].txt
[2011.03.12 14:25:50 | 000,000,358 | ---- | M] () -- \Documents and Settings\jiří paroubek\Cookies\jiří_paroubek@vdownloader[2].txt
[2011.03.12 14:09:15 | 000,001,150 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\http%3A%2F%2Fyoutube-downloader.wz.cz%2Ffavicon.ico
[2011.03.12 14:09:15 | 000,000,085 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\youtube-downloader.wz.cz.idx
[753 \Documents and Settings\jiří paroubek\Local Settings\Temp\*.tmp files -> \Documents and Settings\jiří paroubek\Local Settings\Temp\*.tmp -> ]
[2011.01.10 18:08:17 | 000,000,402 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Temporary Internet Files\Content.IE5\CXUJIS55\preloader[1].htm
[2011.03.12 14:16:30 | 000,001,618 | ---- | M] () -- \Documents and Settings\jiří paroubek\Nabídka Start\Programy\YouTube Downloader\YouTube Downloader Help.lnk
[2011.03.12 14:16:30 | 000,001,713 | ---- | M] () -- \Documents and Settings\jiří paroubek\Nabídka Start\Programy\YouTube Downloader\YouTube Downloader.lnk
[2006.10.26 12:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 12:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2008.01.12 03:20:32 | 000,024,576 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\code\clr\V5JsyClrLoader.dll
[2008.02.23 00:30:34 | 000,002,559 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\CATJsyClassLoader.jar
[2008.02.23 00:31:54 | 000,006,821 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\CATJWSIWASLoader.jar
[2008.06.05 12:04:36 | 000,002,045 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_de.properties
[2004.01.23 17:29:00 | 000,001,684 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_en.properties
[2008.06.05 12:04:36 | 000,002,368 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_fr.properties
[2008.06.05 12:04:40 | 000,002,025 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_it.properties
[2008.06.05 12:04:36 | 000,004,216 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_ja.properties
[2008.06.05 12:04:36 | 000,003,796 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_ko.properties
[2008.06.05 12:04:36 | 000,002,549 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\ClassLoader_zh.properties
[2008.02.23 00:30:26 | 000,005,957 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\java\V5JsyLoader.jar
[2008.02.23 00:30:34 | 000,002,559 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\javaserver\CATJsyClassLoader.jar
[2008.02.23 00:31:54 | 000,006,821 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\javaserver\CATJWSIWASLoader.jar
[2008.02.23 00:30:26 | 000,005,957 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\docs\javaserver\V5JsyLoader.jar
[2006.04.12 16:07:12 | 000,001,702 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATFMSaveLoadError.CATNls
[1999.11.26 14:59:46 | 000,000,147 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATMdlEdtSaveLoadError.CATNls
[2005.05.18 18:56:50 | 000,000,584 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATMMSaveLoadError.CATNls
[1999.04.29 17:31:30 | 000,000,066 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATOMCATSDMSaveLoadError.CATNls
[2008.05.20 18:33:14 | 000,001,275 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATOMLoadError.CATNls
[2005.04.19 09:33:58 | 000,003,533 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATOMSaveLoadError.CATNls
[2007.11.18 21:44:38 | 000,004,793 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATOsmSaveLoadError.CATNls
[2003.06.27 10:47:46 | 000,000,621 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATSmBOMSaveLoadError.CATNls
[2005.02.22 17:44:36 | 000,000,098 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATStandardSaveLoadError.CATNls
[2007.09.06 17:48:08 | 000,000,464 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATStkParamLoaderCmd.CATNls
[2007.09.19 12:04:30 | 000,000,836 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\OMCATSaveLoadError.CATNls
[2008.06.05 11:54:24 | 000,002,058 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATFMSaveLoadError.CATNls
[2008.06.05 11:53:54 | 000,000,154 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATMdlEdtSaveLoadError.CATNls
[2008.06.05 11:53:54 | 000,000,647 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATMMSaveLoadError.CATNls
[2008.06.05 11:53:56 | 000,000,103 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATOMCATSDMSaveLoadError.CATNls
[2008.06.05 11:54:34 | 000,001,437 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATOMLoadError.CATNls
[2008.06.05 11:54:24 | 000,004,136 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATOMSaveLoadError.CATNls
[2008.06.05 11:54:24 | 000,005,904 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATOsmSaveLoadError.CATNls
[2008.06.05 11:54:34 | 000,000,775 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATSmBOMSaveLoadError.CATNls
[2008.06.05 11:54:36 | 000,000,116 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATStandardSaveLoadError.CATNls
[2008.06.05 11:54:00 | 000,000,966 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\OMCATSaveLoadError.CATNls
[2008.06.06 17:43:46 | 000,002,039 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATFMSaveLoadError.CATNls
[2008.06.06 17:43:54 | 000,000,142 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATMdlEdtSaveLoadError.CATNls
[2008.06.06 17:43:58 | 000,000,677 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATMMSaveLoadError.CATNls
[2008.06.06 17:44:00 | 000,000,082 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATOMCATSDMSaveLoadError.CATNls
[2008.06.06 17:44:00 | 000,001,409 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATOMLoadError.CATNls
[2008.06.06 17:44:00 | 000,004,250 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATOMSaveLoadError.CATNls
[2008.06.06 17:44:00 | 000,005,796 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATOsmSaveLoadError.CATNls
[2008.06.06 17:44:10 | 000,000,816 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATSmBOMSaveLoadError.CATNls
[2008.06.06 17:44:14 | 000,000,108 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATStandardSaveLoadError.CATNls
[2008.06.06 17:44:30 | 000,000,978 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\OMCATSaveLoadError.CATNls
[2008.06.06 17:48:06 | 000,001,939 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATFMSaveLoadError.CATNls
[2008.06.06 17:48:08 | 000,000,154 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATMdlEdtSaveLoadError.CATNls
[2008.06.06 17:48:08 | 000,000,634 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATMMSaveLoadError.CATNls
[2008.06.06 17:48:10 | 000,000,083 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATOMCATSDMSaveLoadError.CATNls
[2008.06.06 17:48:10 | 000,001,340 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATOMLoadError.CATNls
[2008.06.06 17:48:10 | 000,004,037 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATOMSaveLoadError.CATNls
[2008.06.06 17:48:10 | 000,005,756 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATOsmSaveLoadError.CATNls
[2008.06.06 17:48:12 | 000,000,720 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATSmBOMSaveLoadError.CATNls
[2008.06.06 17:48:12 | 000,000,115 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATStandardSaveLoadError.CATNls
[2008.06.06 17:48:16 | 000,001,008 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\OMCATSaveLoadError.CATNls
[2008.06.05 12:00:06 | 000,001,747 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATFMSaveLoadError.CATNls
[2008.06.05 12:00:10 | 000,000,121 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATMdlEdtSaveLoadError.CATNls
[2008.06.05 12:00:10 | 000,000,557 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATMMSaveLoadError.CATNls
[2008.06.05 12:00:10 | 000,000,067 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATOMCATSDMSaveLoadError.CATNls
[2008.06.05 12:00:38 | 000,001,167 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATOMLoadError.CATNls
[2008.06.05 12:00:10 | 000,003,307 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATOMSaveLoadError.CATNls
[2008.06.05 12:00:10 | 000,004,541 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATOsmSaveLoadError.CATNls
[2008.06.05 12:00:20 | 000,000,679 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATSmBOMSaveLoadError.CATNls
[2008.06.05 12:00:44 | 000,000,085 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATStandardSaveLoadError.CATNls
[2008.06.05 12:00:18 | 000,000,790 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\OMCATSaveLoadError.CATNls
[2008.06.06 17:46:24 | 000,001,612 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATFMSaveLoadError.CATNls
[2008.06.06 17:46:30 | 000,000,122 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATMdlEdtSaveLoadError.CATNls
[2008.06.06 17:46:30 | 000,000,552 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATMMSaveLoadError.CATNls
[2008.06.06 17:46:32 | 000,000,068 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATOMCATSDMSaveLoadError.CATNls
[2008.06.06 17:46:32 | 000,001,215 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATOMLoadError.CATNls
[2008.06.06 17:46:32 | 000,003,336 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATOMSaveLoadError.CATNls
[2008.06.06 17:46:32 | 000,004,683 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATOsmSaveLoadError.CATNls
[2008.06.06 17:46:38 | 000,000,640 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATSmBOMSaveLoadError.CATNls
[2008.06.06 17:46:38 | 000,000,090 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATStandardSaveLoadError.CATNls
[2008.06.06 17:46:46 | 000,000,780 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\OMCATSaveLoadError.CATNls
[2008.06.06 17:49:02 | 000,001,845 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATFMSaveLoadError.CATNls
[2008.06.06 17:49:06 | 000,000,145 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATMdlEdtSaveLoadError.CATNls
[2008.06.06 17:49:06 | 000,000,695 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATMMSaveLoadError.CATNls
[2008.06.06 17:49:08 | 000,000,074 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATOMCATSDMSaveLoadError.CATNls
[2008.06.06 17:49:08 | 000,001,355 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATOMLoadError.CATNls
[2008.06.06 17:49:08 | 000,003,753 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATOMSaveLoadError.CATNls
[2008.06.06 17:49:08 | 000,005,103 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATOsmSaveLoadError.CATNls
[2008.06.06 17:49:12 | 000,000,726 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATSmBOMSaveLoadError.CATNls
[2008.06.06 17:49:12 | 000,000,099 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATStandardSaveLoadError.CATNls
[2008.06.06 17:49:18 | 000,000,896 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\OMCATSaveLoadError.CATNls
[2008.06.06 17:45:16 | 000,001,197 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATFMSaveLoadError.CATNls
[2008.06.06 17:45:22 | 000,000,099 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATMdlEdtSaveLoadError.CATNls
[2008.06.06 17:45:22 | 000,000,401 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATMMSaveLoadError.CATNls
[2008.06.06 17:45:24 | 000,000,053 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATOMCATSDMSaveLoadError.CATNls
[2008.06.06 17:45:24 | 000,000,921 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATOMLoadError.CATNls
[2008.06.06 17:45:24 | 000,002,563 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATOMSaveLoadError.CATNls
[2008.06.06 17:45:24 | 000,003,700 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATOsmSaveLoadError.CATNls
[2008.06.06 17:45:30 | 000,000,503 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATSmBOMSaveLoadError.CATNls
[2008.06.06 17:45:30 | 000,000,063 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATStandardSaveLoadError.CATNls
[2008.06.06 17:45:38 | 000,000,586 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\OMCATSaveLoadError.CATNls
[2005.11.24 14:34:26 | 000,000,176 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\servlet\SessionDownloader.XMLServlet
[2005.06.09 16:05:40 | 000,000,126 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\widget\FileUploader.XMLWidget
[2006.04.12 07:07:12 | 000,001,702 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATFMSaveLoadError.CATNls
[2005.05.18 09:56:50 | 000,000,584 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATMMSaveLoadError.CATNls
[1999.04.29 08:31:30 | 000,000,066 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATOMCATSDMSaveLoadError.CATNls
[2006.04.03 00:01:06 | 000,000,721 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATOMLoadError.CATNls
[2005.04.19 00:33:58 | 000,003,533 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATOMSaveLoadError.CATNls
[2006.09.15 03:39:16 | 000,004,548 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATOsmSaveLoadError.CATNls
[2003.06.27 01:47:46 | 000,000,621 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATSmBOMSaveLoadError.CATNls
[2005.02.22 09:44:36 | 000,000,098 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATStandardSaveLoadError.CATNls
[2005.07.25 02:26:22 | 000,000,832 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\OMCATSaveLoadError.CATNls
[2006.04.07 15:59:02 | 000,049,152 | ---- | M] () -- \Program Files\Gothic III\PhysXLoader.dll
[2011.11.09 17:24:41 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.6\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.11.09 17:24:42 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.6\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.11.09 17:24:41 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.6\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.11.09 17:25:05 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.6\Xtraz\icq\content\profile_lightboxs\preloader.html
[2005.10.14 11:49:47 | 000,017,624 | ---- | M] () -- \Program Files\Microsoft SQL Server\90\Tools\Binn\SqlResourceLoader.dll
[2005.10.14 11:49:47 | 000,017,624 | ---- | M] () -- \Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SqlResourceLoader.dll
[2010.10.15 09:31:13 | 000,000,598 | ---- | M] () -- \Program Files\proeWildfire 4.0\jlink\jlink_appls\jlink_loader\JLinkLoader.java
[2010.12.14 10:54:22 | 000,166,400 | ---- | M] () -- \Program Files\Teta\Fotosvet TETA 3\CWImageLoader0.dll
[2006.12.23 16:37:56 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2008.11.10 20:19:34 | 000,002,612 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\AddOns\Packages\GUIKit\src\java\com\wolfram\bsf\util\JLink2ClassLoaderHandler.java
[2008.11.10 20:19:34 | 000,000,867 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\AddOns\Packages\GUIKit\src\java\com\wolfram\bsf\util\JLink3ClassLoaderHandler.java
[2008.11.10 20:19:34 | 000,000,463 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\AddOns\Packages\GUIKit\src\java\com\wolfram\bsf\util\LinkClassLoaderHandler.java
[2008.11.10 20:51:52 | 000,027,800 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Documentation\JavaDoc\com\wolfram\jlink\JLinkClassLoader.html
[2008.11.10 20:51:50 | 000,009,698 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Documentation\JavaDoc\com\wolfram\jlink\class-use\JLinkClassLoader.html
[2008.11.10 20:51:52 | 000,015,130 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Source\Java\com\wolfram\jlink\JLinkClassLoader.java
[2008.11.10 20:51:52 | 000,004,509 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Source\Java\com\wolfram\jlink\JLinkClassLoaderHelper.java
[2008.11.10 20:51:52 | 000,004,219 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Source\Java\com\wolfram\jlink\JLinkSystemClassLoader.java
[2008.11.06 12:42:54 | 000,002,824 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.GetType_overloads.html
[2008.11.06 12:42:58 | 000,003,759 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.GetType_overload_1.html
[2008.11.06 12:42:56 | 000,004,521 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.GetType_overload_2.html
[2008.11.06 12:42:52 | 000,004,219 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.GetType_overload_3.html
[2008.11.06 12:42:58 | 000,003,785 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.html
[2008.11.06 12:42:56 | 000,002,353 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.LoadAssembly_overloads.html
[2008.11.06 12:42:56 | 000,003,573 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.LoadAssembly_overload_1.html
[2008.11.06 12:42:54 | 000,004,407 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoader.LoadAssembly_overload_2.html
[2008.11.06 12:42:54 | 000,002,283 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoaderConstructor.html
[2008.11.06 12:42:58 | 000,006,402 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoaderMembers.html
[2008.11.06 12:42:54 | 000,005,811 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Documentation\apidocs\Wolfram.NETLink.TypeLoaderMethods.html
[2008.11.06 12:43:02 | 000,020,873 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Source\TypeLoader.cs
[2008.11.06 12:43:04 | 000,006,625 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\NETLink\Source\Internal\COM\COMTypeLibraryLoader.cs
[2009.12.02 08:27:56 | 000,000,310 | ---- | M] () -- \WINDOWS\Downloaded Program Files\ImageUploader6.inf
[2010.06.25 09:11:48 | 004,994,416 | ---- | M] () -- \WINDOWS\Downloaded Program Files\ImageUploader6.ocx
[2008.04.14 09:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\System32\dmloader.dll
[3 \WINDOWS\System32\*.tmp files -> \WINDOWS\System32\*.tmp -> ]
[2008.04.14 09:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\System32\dllcache\dmloader.dll

< *minodlogin* /s >
[2011.01.03 09:33:09 | 000,000,677 | ---- | M] () -- \Documents and Settings\Jarda\Data aplikací\uTorrent\MiNODLogin 3.9.6.1.rar.torrent
[2010.10.18 00:40:16 | 000,125,952 | ---- | M] () -- \Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLogin.exe.vir
[2010.10.18 00:40:36 | 000,157,017 | ---- | M] () -- \Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLogin.jar.vir
[2010.10.18 00:40:22 | 000,053,248 | ---- | M] () -- \Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLoginLib.dll.vir
[2011.01.03 09:34:26 | 000,095,300 | ---- | M] () -- \Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLoginUninst.exe.vir
[2012.01.10 14:50:53 | 000,000,940 | ---- | M] () -- \Qoobox\Quarantine\Registry_backups\AddRemove-MiNODLogin.reg.dat
[2012.01.10 14:01:53 | 000,028,296 | ---- | M] () -- \WINDOWS\Prefetch\MINODLOGIN.EXE-08C32081.pf

< *tnod* /s >
[2008.04.26 04:44:04 | 000,075,776 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\code\bin\CATNodelockDlg.dll
[2008.04.26 06:01:36 | 000,040,448 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\code\bin\CATNodelockMgt.exe
[2008.04.26 06:01:36 | 000,013,312 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\code\bin\CATNodelockMgtB.exe
[2008.04.26 04:44:02 | 000,021,504 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\code\bin\CATNodelockUtil.dll
[2005.09.27 20:56:10 | 000,000,382 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\CATVoaSeatNode.bmp
[2003.11.05 20:54:34 | 000,000,350 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\I_TreeConstraintNode.bmp
[2004.03.19 23:20:56 | 000,001,550 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\I_TreeReportNode.bmp
[2005.02.08 22:06:12 | 000,000,822 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\I_TreeSegmentOffsetNode.bmp
[2005.11.29 17:57:42 | 000,000,348 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_ArrInsertNodeCenterLocation.bmp
[2000.10.18 01:43:30 | 000,001,606 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_ArrInsertNodes.bmp
[2005.11.29 17:58:34 | 000,000,348 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_ArrInsertNodesBetweenRange.bmp
[2000.08.22 13:26:24 | 000,001,606 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_AssyFeatNode.bmp
[2002.06.19 15:47:24 | 000,001,606 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_QsrAdjustNode.bmp
[2001.05.15 16:42:28 | 000,000,382 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\normal\I_TlbModuleConstantNode.bmp
[2005.11.29 17:58:08 | 000,000,212 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\small\I_ArrInsertNodeCenterLocation.bmp
[2000.10.18 01:42:54 | 000,001,334 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\small\I_ArrInsertNodes.bmp
[2005.11.29 17:58:46 | 000,000,212 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\small\I_ArrInsertNodesBetweenRange.bmp
[2002.06.19 15:38:08 | 000,001,334 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\graphic\icons\small\I_QsrAdjustNode.bmp
[2005.12.13 02:54:36 | 000,001,745 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATArrInsertNodeCmd.CATNls
[2005.12.07 01:15:50 | 000,000,676 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATArrInsertNodePanel.CATNls
[2005.12.07 01:11:32 | 000,000,220 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATArrInsertNodePanel.CATRsc
[2007.02.15 14:24:54 | 000,006,818 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATCustNodeSettings.CATNls
[2005.01.20 15:29:20 | 000,000,856 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATDYNSelectNodeFrame.CATNls
[2006.03.24 14:13:14 | 000,009,904 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodelockDlg.CATNls
[1999.05.06 23:14:20 | 000,000,035 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodelockEditorDlg.CATNls
[2004.04.08 14:42:28 | 000,001,009 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodelockMgtB.CATNls
[2004.06.23 10:02:52 | 000,009,110 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodeSettings.CATNls
[1999.11.08 17:23:34 | 000,000,094 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodeSettingsEditor.CATNls
[2000.10.20 15:56:04 | 000,000,268 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATNodeSettingsEditor.CATRsc
[2006.09.12 13:52:20 | 000,001,913 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATQsrAdjustNodeCmd.CATNls
[2006.11.06 11:21:22 | 000,001,639 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\CATQsrAdjustNodeDlg.CATNls
[2007.07.19 13:45:46 | 000,000,169 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\DNBPertNodeVisuAdapter.CATNls
[2008.06.05 11:53:16 | 000,002,074 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATArrInsertNodeCmd.CATNls
[2008.06.05 11:53:16 | 000,000,769 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATArrInsertNodePanel.CATNls
[2008.06.05 11:54:52 | 000,007,186 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATCustNodeSettings.CATNls
[2008.06.05 11:54:30 | 000,000,881 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATDYNSelectNodeFrame.CATNls
[2008.06.05 11:54:24 | 000,010,538 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATNodelockDlg.CATNls
[2008.06.05 11:53:56 | 000,000,037 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATNodelockEditorDlg.CATNls
[2008.06.05 11:54:24 | 000,001,100 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATNodelockMgtB.CATNls
[2008.06.05 11:54:24 | 000,009,632 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATNodeSettings.CATNls
[2008.06.05 11:53:56 | 000,000,102 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATNodeSettingsEditor.CATNls
[2008.06.05 11:54:26 | 000,002,054 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATQsrAdjustNodeCmd.CATNls
[2008.06.05 11:54:26 | 000,001,657 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\CATQsrAdjustNodeDlg.CATNls
[2008.06.05 11:54:58 | 000,000,169 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\French\DNBPertNodeVisuAdapter.CATNls
[2008.06.06 17:43:36 | 000,002,226 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATArrInsertNodeCmd.CATNls
[2008.06.06 17:43:36 | 000,000,794 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATArrInsertNodePanel.CATNls
[2008.06.06 17:43:42 | 000,006,911 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATCustNodeSettings.CATNls
[2008.06.06 17:43:46 | 000,000,888 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATDYNSelectNodeFrame.CATNls
[2008.06.06 17:44:00 | 000,010,427 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATNodelockDlg.CATNls
[2008.06.06 17:44:00 | 000,000,044 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATNodelockEditorDlg.CATNls
[2008.06.06 17:44:00 | 000,001,000 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATNodelockMgtB.CATNls
[2008.06.06 17:44:00 | 000,009,144 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATNodeSettings.CATNls
[2008.06.06 17:44:00 | 000,000,090 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATNodeSettingsEditor.CATNls
[2008.06.06 17:44:04 | 000,002,074 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATQsrAdjustNodeCmd.CATNls
[2008.06.06 17:44:04 | 000,001,753 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\CATQsrAdjustNodeDlg.CATNls
[2008.06.06 17:44:38 | 000,000,169 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\German\DNBPertNodeVisuAdapter.CATNls
[2008.06.06 17:48:16 | 000,001,996 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATArrInsertNodeCmd.CATNls
[2008.06.06 17:48:16 | 000,000,761 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATArrInsertNodePanel.CATNls
[2008.06.06 17:48:02 | 000,007,329 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATCustNodeSettings.CATNls
[2008.06.06 17:47:38 | 000,000,866 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATDYNSelectNodeFrame.CATNls
[2008.06.06 17:48:10 | 000,010,668 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATNodelockDlg.CATNls
[2008.06.06 17:48:10 | 000,000,047 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATNodelockEditorDlg.CATNls
[2008.06.06 17:48:10 | 000,001,180 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATNodelockMgtB.CATNls
[2008.06.06 17:48:10 | 000,009,941 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATNodeSettings.CATNls
[2008.06.06 17:48:10 | 000,000,101 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\CATNodeSettingsEditor.CATNls
[2008.06.06 17:48:28 | 000,000,169 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Italian\DNBPertNodeVisuAdapter.CATNls
[2008.06.05 12:00:24 | 000,001,700 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATArrInsertNodeCmd.CATNls
[2008.06.05 11:59:04 | 000,000,634 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATArrInsertNodePanel.CATNls
[2008.06.05 12:00:56 | 000,006,069 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATCustNodeSettings.CATNls
[2008.06.05 12:00:18 | 000,000,823 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATDYNSelectNodeFrame.CATNls
[2008.06.05 12:00:10 | 000,009,201 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATNodelockDlg.CATNls
[2008.06.05 12:00:10 | 000,000,031 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATNodelockEditorDlg.CATNls
[2008.06.05 12:00:10 | 000,000,953 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATNodelockMgtB.CATNls
[2008.06.05 12:00:10 | 000,008,569 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATNodeSettings.CATNls
[2008.06.05 12:00:10 | 000,000,088 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATNodeSettingsEditor.CATNls
[2008.06.05 12:00:34 | 000,001,801 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATQsrAdjustNodeCmd.CATNls
[2008.06.05 12:00:20 | 000,001,530 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\CATQsrAdjustNodeDlg.CATNls
[2008.06.05 12:01:16 | 000,000,153 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Japanese\DNBPertNodeVisuAdapter.CATNls
[2008.06.06 17:46:18 | 000,001,683 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATArrInsertNodeCmd.CATNls
[2008.06.06 17:46:18 | 000,000,622 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATArrInsertNodePanel.CATNls
[2008.06.06 17:46:20 | 000,006,367 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATCustNodeSettings.CATNls
[2008.06.06 17:46:32 | 000,009,577 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATNodelockDlg.CATNls
[2008.06.06 17:46:32 | 000,000,033 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATNodelockEditorDlg.CATNls
[2008.06.06 17:46:32 | 000,000,983 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATNodelockMgtB.CATNls
[2008.06.06 17:46:32 | 000,008,955 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATNodeSettings.CATNls
[2008.06.06 17:46:32 | 000,000,091 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Korean\CATNodeSettingsEditor.CATNls
[2008.06.06 17:49:20 | 000,007,013 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATCustNodeSettings.CATNls
[2008.06.06 17:49:08 | 000,010,490 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATNodelockDlg.CATNls
[2008.06.06 17:49:08 | 000,000,048 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATNodelockEditorDlg.CATNls
[2008.06.06 17:49:08 | 000,001,168 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATNodelockMgtB.CATNls
[2008.06.06 17:49:08 | 000,009,342 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATNodeSettings.CATNls
[2008.06.06 17:49:08 | 000,000,090 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Russian\CATNodeSettingsEditor.CATNls
[2008.06.06 17:45:06 | 000,001,392 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATArrInsertNodeCmd.CATNls
[2008.06.06 17:45:06 | 000,000,586 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATArrInsertNodePanel.CATNls
[2008.06.06 17:45:34 | 000,005,684 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATCustNodeSettings.CATNls
[2008.06.06 17:45:24 | 000,008,325 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATNodelockDlg.CATNls
[2008.06.06 17:45:24 | 000,000,028 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATNodelockEditorDlg.CATNls
[2008.06.06 17:45:24 | 000,000,918 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATNodelockMgtB.CATNls
[2008.06.06 17:45:24 | 000,008,087 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATNodeSettings.CATNls
[2008.06.06 17:45:24 | 000,000,085 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\resources\msgcatalog\Simplified_Chinese\CATNodeSettingsEditor.CATNls
[2005.01.28 18:52:04 | 000,000,232 | ---- | M] () -- \Program Files\Dassault Systemes\B19\intel_a\startup\EquipmentAndSystems\MultiDiscipline\SampleData\RunInputNodeData.txt
[2006.07.22 00:15:18 | 000,106,496 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\code\bin\CATNodelockDlg.dll
[2006.07.22 00:15:18 | 000,023,552 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\code\bin\CATNodelockUtil.dll
[2006.03.24 06:13:14 | 000,009,904 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodelockDlg.CATNls
[1999.05.06 14:14:20 | 000,000,035 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodelockEditorDlg.CATNls
[2004.04.08 05:42:28 | 000,001,009 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodelockMgtB.CATNls
[2004.06.23 01:02:52 | 000,009,110 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodeSettings.CATNls
[1999.11.08 09:23:34 | 000,000,094 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodeSettingsEditor.CATNls
[2000.10.20 06:56:04 | 000,000,268 | ---- | M] () -- \Program Files\Edgecam\Cam\lib3dx\intel_a\resources\msgcatalog\CATNodeSettingsEditor.CATRsc
[2010.10.15 09:32:11 | 000,000,480 | ---- | M] () -- \Program Files\proeWildfire 4.0\text\compiled_resource\procmdiddselparentnode.crc
[2010.10.15 09:32:35 | 000,000,735 | ---- | M] () -- \Program Files\proeWildfire 4.0\text\resource\procmdiddselparentnode.res
[2008.11.10 20:19:34 | 000,004,877 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\AddOns\Packages\GUIKit\src\java\com\wolfram\guikit\graph\DefaultNodeController.java
[2008.11.10 20:19:34 | 000,005,655 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\AddOns\Packages\GUIKit\src\java\com\wolfram\guikit\graph\DefaultNodeRenderer.java
[2008.11.11 01:22:04 | 000,009,664 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\Documentation\English\Packages\NumericalDifferentialEquationAnalysis\Documentation\English\ReferencePages\Symbols\ButcherPlotNodeSize.nb
[2012.01.10 14:01:34 | 000,021,532 | ---- | M] () -- \WINDOWS\Prefetch\TNODUP.EXE-070C9CEA.pf

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >

< *serial* /s >
[2004.08.17 15:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2011.11.11 21:38:07 | 000,000,769 | ---- | M] () -- \Documents and Settings\Jarda\Local Settings\Data aplikací\Opera\Opera\icons\http%3A%2F%2Fserials4you.cz%2Findex_soubory%2Fikona.png
[2011.11.11 21:38:07 | 000,000,095 | ---- | M] () -- \Documents and Settings\Jarda\Local Settings\Data aplikací\Opera\Opera\icons\serials4you.cz.idx
[2011.07.11 20:30:28 | 000,000,796 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\http%3A%2F%2Fonline-serialy.vsetu.eu%2Fimages%2Ffavicon.ico
[2011.07.11 20:29:41 | 000,003,621 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\http%3A%2F%2Fserials4you.cz%2Findex_soubory%2Fikona.gif
[2011.07.11 20:30:28 | 000,000,111 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\online-serialy.vsetu.eu.idx
[2011.07.11 20:29:58 | 000,000,193 | ---- | M] () -- \Documents and Settings\jiří paroubek\Local Settings\Data aplikací\Opera\Opera\icons\serials4you.cz.idx
[2011.05.31 00:38:38 | 000,413,696 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.60531.0\System.Runtime.Serialization.dll
[2011.07.07 21:58:34 | 001,186,816 | ---- | M] () -- \Program Files\Microsoft Silverlight\4.0.60531.0\System.Runtime.Serialization.ni.dll
[2010.10.15 09:31:17 | 000,006,057 | ---- | M] () -- \Program Files\proeWildfire 4.0\jlink\jlinkdoc\gnu.regexp-1.0.8\docs\api\serialized-form.html
[2010.10.15 09:31:22 | 000,006,057 | ---- | M] () -- \Program Files\proeWildfire 4.0\weblink\weblinkdoc\gnu.regexp-1.0.8\docs\api\serialized-form.html
[2010.04.07 22:48:30 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2008.11.10 20:51:50 | 000,022,179 | ---- | M] () -- \Program Files\Wolfram Research\Mathematica\7.0\SystemFiles\Links\JLink\Documentation\JavaDoc\serialized-form.html
[2011.03.12 14:47:16 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2011.07.08 21:33:58 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.03.12 14:47:28 | 000,090,112 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2011.07.07 21:40:11 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011.07.08 21:46:09 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\503ccbb50e9c06c2f0b02ad8c3f2d100\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011.07.08 21:44:16 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c889a45c82004537f1620dd3b211af66\System.Runtime.Serialization.ni.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2008.09.10 17:46:28 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.04.07 22:48:30 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2001.10.25 17:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\System32\dpserial.dll
[2001.10.25 17:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\System32\serialui.dll
[3 \WINDOWS\System32\*.tmp files -> \WINDOWS\System32\*.tmp -> ]
[2001.10.25 17:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\System32\dllcache\dpserial.dll
[2001.10.25 17:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\System32\dllcache\serialui.dll
[2008.04.14 08:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\System32\Drivers\serial.sys

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"HotKeysCmds" = C:\WINDOWS\system32\hkcmd.exe -- [2009.05.08 10:22:26 | 000,173,592 | ---- | M] (Intel Corporation)
"ACU" = "C:\Program Files\Atheros\ACU.exe" -nogui -- [2009.01.05 14:48:12 | 000,450,648 | ---- | M] (Atheros Communications, Inc.)
"GrooveMonitor" = "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" -- [2008.10.25 11:44:34 | 000,031,072 | ---- | M] (Microsoft Corporation)
"avast" = "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui -- [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software)

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sony Ericsson PC Companion" = "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background -- [2011.10.21 14:06:26 | 000,433,872 | ---- | M] (Sony Ericsson)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 09:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.10 18:27:41 | 000,000,512 | ---- | M] () MD5=CBF3FF2457BC0023C5F7FF20E73619DB -- C:\PhysicalMBR.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:60466E88

< End of report >

1. ČÁST (EXTRAS)


OTL Extras logfile created on: 10.1.2012 18:24:36 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jarda\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,93 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 81,87% Memory free
4,77 Gb Paging File | 4,28 Gb Available in Paging File | 89,58% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 45,38 Gb Free Space | 30,45% Space Free | Partition Type: NTFS
Drive F: | 149,05 Gb Total Space | 11,67 Gb Free Space | 7,83% Space Free | Partition Type: NTFS

Computer Name: NOTBUK | User Name: Jarda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
https [open] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [CEWE prezentace fotografií] -- "C:\Program Files\Teta\Fotosvet TETA 3\CEWE prezentace fotografií.exe" -d "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotosvet TETA 3] -- "C:\Program Files\Teta\Fotosvet TETA 3\Fotosvet TETA 3.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"9665:TCP" = 9665:TCP:*:Enabled:rwrkczzv
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"443:TCP" = 443:TCP:*:Disabled:ooVoo TCP port 443
"443:UDP" = 443:UDP:*:Disabled:ooVoo UDP port 443
"37674:TCP" = 37674:TCP:*:Disabled:ooVoo TCP port 37674
"37674:UDP" = 37674:UDP:*:Disabled:ooVoo UDP port 37674
"37675:UDP" = 37675:UDP:*:Disabled:ooVoo UDP port 37675

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.6\ICQ.exe" = C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe" = C:\Program Files\Wolfram Research\Mathematica\7.0\Mathematica.exe:*:Enabled:Wolfram Mathematica 7 -- (Wolfram Research, Inc.)
"C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe" = C:\Program Files\Wolfram Research\Mathematica\7.0\MathKernel.exe:*:Enabled:Wolfram Mathematica 7 Kernel -- (Wolfram Research, Inc.)
"C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe" = C:\Program Files\Wolfram Research\Mathematica\7.0\math.exe:*:Enabled:math.exe -- (Wolfram Research, Inc.)
"C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe" = C:\Program Files\proeWildfire 4.0\i486_nt\nms\nmsd.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC -- (PTC)
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe" = C:\Program Files\proeWildfire 4.0\i486_nt\obj\pro_comm_msg.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC -- (PTC)
"C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe" = C:\Program Files\proeWildfire 4.0\i486_nt\obj\xtop.exe:*:Enabled:Pro/ENGINEER Wildfire from PTC -- (PTC)
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe" = C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com)
"C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com)
"C:\Program Files\proeWildfire 4.0\bin\proe.exe" = C:\Program Files\proeWildfire 4.0\bin\proe.exe:*:Enabled:Pro/ENGINEER -- (PTC)
"F:\Program Files\StrongDC++\StrongDC.exe" = F:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\VideoLAN\VLC\vlc.exe" = C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player -- ()
"C:\Program Files\ooVoo\ooVoo.exe" = C:\Program Files\ooVoo\ooVoo.exe:*:Enabled:ooVoo -- (ooVoo LLC)
"C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe" = C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11 -- (Electronic Arts)
"C:\Program Files\ICQ7.6\ICQ.exe" = C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6 -- (ICQ, LLC.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (ECSQLEXPRESS)
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = WebCam
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{4781569D-5404-1F26-4B2B-6DF444441031}" = Nero 7 Premium
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{546C143E-68DC-314D-97BC-1E454E3BA429}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - CSY
"{5783F2D7-7001-0405-0002-0060B0CE6BBA}" = AutoCAD 2009 - český
"{648F9C94-EC44-487B-9DA4-44ED72A082CC}" = Logitech Gaming Software
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6BF37B9E-EC2D-4376-B813-B7AFEB33701A}" = Edgecam 12.50
"{6DE6837F-F3A3-40FF-9F5C-A0B95948E32D}" = Dassault Systemes Software Prerequisites x86
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{892994D3-5963-4877-A8DB-629607E8E928}" = 602XML Filler
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92C7D009-A464-4948-A980-7A3E28CB2F49}" = Richard Burns Rally
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = USB2.0 Card Reader Software
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A116D023-A3BC-4C70-A8B8-9FE77850F0D9}" = Moorhuhn Wanted XXL
"{A2C9CD1B-2551-3AED-B244-6698FB929FA6}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - CSY
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{AC76BA86-7AD7-1029-7B44-A70500000002}" = Adobe Reader 7.0.5 - Czech
"{ADD72094-D289-4714-A62E-70574478A2BC}" = System Requirements Lab for Intel
"{BD8A0C60-1AEB-11D6-B8E1-00025521AE60}" = VBA (3821b)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C260343B-6282-42A2-939F-1FF7E503F608}" = Wolfram Notebook Indexer 2.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer
"{EC3B598C-1151-4191-B5B4-A9072ADE6259}_is1" = ZipGenius 6 (6.0.3.1150)
"{ED8BB1CA-535A-408D-85C9-ED1986D2B85E}" = Palm Reader
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.02.002
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AutoCAD 2009 - český" = AutoCAD 2009 - český
"avast" = avast! Free Antivirus
"BSPlayerf" = BS.Player FREE
"CNXT_AUDIO_HDA" = Conexant HD Audio
"Dassault Systemes B19_0" = Dassault Systemes Software B19
"Derive 6 zkušební verze" = Derive 6 zkušební verze
"DSMT6" = MathType 6
"EAX Unified" = EAX Unified
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Football Arena Viewer_is1" = Football Arena 1.00.0013 (BETA)
"Fotosvet TETA 3" = Fotosvet TETA 3
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.4.0
"Lexmark Supplies Monitor" = Lexmark Supplies Monitor
"Lexmark Z25-Z35" = Lexmark Z25-Z35
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"MITCalc01_is1" = MITCalc 1.50c
"Mozilla Firefox (3.6.25)" = Mozilla Firefox (3.6.25)
"MPE" = MyPhoneExplorer
"M-WIN-L 7.0.0 1148351_is1" = Wolfram Mathematica 7 (M-WIN-L 7.0.0 1148351)
"Opera 11.52.1100" = Opera 11.52
"Opera 11.60.1185" = Opera 11.60
"Pro/ENGINEER Release Wildfire 4.0 Datecode M090" = Pro/ENGINEER Release Wildfire 4.0 Datecode M090
"Rainbow Sentinel Driver" = Sentinel System Driver
"RBRReversedTracks" = RBR Reversed Tracks (remove only)
"RBRSchool2" = RBR School stage 2 (remove only)
"RBRTM" = RBR Tournament plugin (remove only)
"Softonic-Eng7 Toolbar" = Softonic-Eng7 Toolbar
"SopCast" = SopCast 3.0.3
"StrongDC++" = StrongDC++ 2.41
"Tapety 2.12" = Tapety 2.12
"TNod" = TNod User & Password Finder
"Totalcmd" = Total Commander (Remove or Repair)
"TrueCrypt" = TrueCrypt
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.4
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WinRAR archiver" = WinRAR
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"Xvid_is1" = Xvid 1.3.0
"Yahoo! Widget Engine" = Yahoo! Widgets
"YInstHelper" = Yahoo! Install Manager

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12.12.2011 19:00:16 | Computer Name = NOTBUK | Source = Microsoft Office 12 | ID = 1000
Description = Faulting application winword.exe, version 12.0.6545.5000, stamp 4c653e57,
faulting module koaz8jax.dll, version 1.0.0.1, stamp 4b947ca7, debug? 0, fault
address 0x0001c659.

Error - 16.12.2011 22:16:27 | Computer Name = NOTBUK | Source = Application Error | ID = 1000
Description = Chybující aplikace fifa.exe, verze 1.0.0.0, chybující modul unknown,
verze 0.0.0.0, adresa chyby 0x40400000.

Error - 17.12.2011 21:04:22 | Computer Name = NOTBUK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace FIFA11_PATCH101.exe, verze 6.50.0.0, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 18.12.2011 18:59:13 | Computer Name = NOTBUK | Source = Application Error | ID = 1000
Description = Chybující aplikace fifa.exe, verze 1.0.0.0, chybující modul fifa.exe,
verze 1.0.0.0, adresa chyby 0x0096a34d.

Error - 2.1.2012 7:29:27 | Computer Name = NOTBUK | Source = SafeQPort | ID = 131073
Description =

Error - 3.1.2012 19:45:27 | Computer Name = NOTBUK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace Stronghold Crusader.exe, verze 0.0.0.0, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 10.1.2012 12:53:50 | Computer Name = NOTBUK | Source = Application Error | ID = 1000
Description = Chybující aplikace iexplore.exe, verze 8.0.6001.18702, chybující modul
ntdll.dll, verze 5.1.2600.6055, adresa chyby 0x0000100b.

[ OSession Events ]
Error - 17.5.2011 19:21:29 | Computer Name = NOTBUK | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 11
seconds with 0 seconds of active time. This session ended with a crash.

Error - 12.12.2011 19:00:14 | Computer Name = NOTBUK | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 21307
seconds with 1440 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 10.1.2012 11:14:14 | Computer Name = NOTBUK | Source = NetBT | ID = 4321
Description = Název DOMA :1d nelze zaregistrovat v rozhraní s adresou
IP 147.230.176.99. Počítač s adresou IP 147.230.177.212 nepovolil získání názvu tímto
počítačem.

Error - 10.1.2012 11:15:58 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7000
Description = Služba Sentinel neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 10.1.2012 11:15:58 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Helper Config byla ukončena s následující chybou: %%126

Error - 10.1.2012 11:15:58 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Universal Helper byla ukončena s následující chybou: %%126

Error - 10.1.2012 12:59:27 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7000
Description = Služba Sentinel neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 10.1.2012 12:59:27 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Helper Config byla ukončena s následující chybou: %%126

Error - 10.1.2012 12:59:27 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Universal Helper byla ukončena s následující chybou: %%126

Error - 10.1.2012 13:05:22 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7000
Description = Služba Sentinel neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 10.1.2012 13:05:22 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Helper Config byla ukončena s následující chybou: %%126

Error - 10.1.2012 13:05:22 | Computer Name = NOTBUK | Source = Service Control Manager | ID = 7023
Description = Služba Universal Helper byla ukončena s následující chybou: %%126


< End of report >

Vyčisti si Plochu, máš ji strašně zaflákanou. Měl bys ji mít velikou maximálně tak 300 MB, lépe ale kolem 100 MB.

Znovu spusť OTL.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

tak žadnej log to nevyhodilo, jen to chtělo po dokončeni ty opravy provest restart tak sem dal ano, počitač se restartoval a tim to zkončilo.

Proveď to ještě jednou, ale v Nouzovém režimu.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Jarda
->Temp folder emptied: 9700582 bytes
->Temporary Internet Files folder emptied: 24139663 bytes
->Java cache emptied: 5455848 bytes
->FireFox cache emptied: 102921693 bytes
->Google Chrome cache emptied: 6238017 bytes
->Opera cache emptied: 17386870 bytes
->Flash cache emptied: 3811944 bytes

User: jiří paroubek
->Temp folder emptied: 207403983 bytes
->Temporary Internet Files folder emptied: 142149298 bytes
->Java cache emptied: 1121917 bytes
->FireFox cache emptied: 104079141 bytes
->Google Chrome cache emptied: 152602443 bytes
->Opera cache emptied: 8631118 bytes
->Flash cache emptied: 36008 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 2652 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2351732 bytes
%systemroot%\System32 .tmp files removed: 6600 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2496 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 166413302 bytes

Total Files Cleaned = 910,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: Jarda
->Flash cache emptied: 0 bytes

User: jiří paroubek
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore points cleared and new OTL Restore Point set!
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-725345543-2025429265-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "Crawler Search" removed from browser.search.order.1
Prefs.js: "chr-greentree_ff&type=937811" removed from browser.search.param.yahoo-fr
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.bigseekpro.com/bsprpc/{0DB59 ... 8ABEB4077D}" removed from browser.startup.homepage
Prefs.js: engine@conduit.com:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.5.2 removed from extensions.enabledItems
Prefs.js: DTToolbar@toolbarnet.com:1.1.3.0244 removed from extensions.enabledItems
Prefs.js: plugin2@gameplaylabs.com:2.0 removed from extensions.enabledItems
Prefs.js: {800b5000-a755-47e1-992b-48a1c1357f07}:1.3.6 removed from extensions.enabledItems
Prefs.js: "http://www.google.com/search?ie=UTF-8&o ... "user_pref("network.cookie.prefsMigrated", true); removed from keyword.URL
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\searchplugin folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\META-INF folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\lib folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\defaults folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\components folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\chrome folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\searchplugin folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\META-INF folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\lib folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\DualPackage folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\defaults folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\components folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com\chrome folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\engine@conduit.com folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\defaults folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\chrome\locale folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\chrome\content folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com\chrome folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\extensions\plugin2@gameplaylabs.com folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\daemon-search.xml moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.gif moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.src moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\icqplugin.xml moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\Mozilla\Firefox\Profiles\uog193fh.default\searchplugins\inbox-hledn.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml moved successfully.
Registry value HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}\ not found.
Registry value HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_USERS\S-1-5-21-725345543-2025429265-1801674531-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D6D.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F0B.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP200.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E4.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP347.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5D9.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP869.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP98A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9B1.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPF8D.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI64.tmp deleted successfully.
C:\WINDOWS\Installer\MSI69.tmp deleted successfully.
ADS C:\Documents and Settings\All Users\Data aplikací\TEMP:60466E88 deleted successfully.
========== FILES ==========
File\Folder F:\Program Files\ESET not found.
C:\Program Files\ICQ6Toolbar folder moved successfully.
C:\Program Files\DAEMON Tools Toolbar folder moved successfully.
f:\Program Files\TNod User & Password Finder\TNODUP.exe deleted successfully.
f:\Program Files\TNod User & Password Finder folder deleted successfully.
C:\Program Files\ESET folder deleted successfully.
C:\Program Files\Common Files\AskToolbarInstaller.exe moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\ESET\ESET Smart Security\Antispam folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\ESET\ESET Smart Security folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\ESET folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens\Cache folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\LogonScreens folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens\Cache folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\BootScreens folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\TuneUp Software folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\ESET\ESET Smart Security folder moved successfully.
C:\Documents and Settings\Administrator\Data aplikací\ESET folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\Common folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TuneUp Software folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\ESET\ESET Smart Security\Antispam folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\ESET\ESET Smart Security folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\ESET folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\Inbox Toolbar folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\TuneUp Software\TuneUp Utilities\Backups folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\TuneUp Software\TuneUp Utilities folder moved successfully.
C:\Documents and Settings\jiří paroubek\Data aplikací\TuneUp Software folder moved successfully.
C:\Documents and Settings\Jarda\Data aplikací\uTorrent\MiNODLogin 3.9.6.1.rar.torrent deleted successfully.
File\Folder C:\WINDOWS\Prefetch\MINODLOGIN.EXE-08C32081.pf not found.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLogin.exe.vir deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLogin.jar.vir deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLoginLib.dll.vir deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\MiNODLoginUninst.exe.vir deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin\servidores.xml.vir deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET\MiNODLogin folder deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\ESET folder deleted successfully.
File\Folder C:\WINDOWS\Prefetch\TNODUP.EXE-070C9CEA.pf not found.
C:\WINDOWS\Tasks\MP Scheduled Scan.job moved successfully.
C:\Documents and Settings\Jarda\Cookies\jarda@crackfound[1].txt deleted successfully.
C:\Documents and Settings\Jarda\Data aplikací\uTorrent\Gothic3.en.ger.crack.by.=[-RBTM-]=.rar.torrent deleted successfully.
C:\Documents and Settings\Jarda\Data aplikací\uTorrent\Gothic_III_CRACK_ONLY-Razor1911[www.moviex.info].torrent deleted successfully.
C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1003.job moved successfully.
C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-725345543-2025429265-1801674531-1004.job moved successfully.
C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1003.job moved successfully.
C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-2025429265-1801674531-1004.job moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.

OTL by OldTimer - Version 3.2.31.0 log created on 01112012_143123

Files\Folders moved on Reboot...
C:\Documents and Settings\Jarda\Local Settings\Temp\VBE\MSForms.exd moved successfully.
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temp\~DF6ECF.tmp not found!
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temp\~DF716E.tmp not found!
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temp\~DF7179.tmp not found!
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temp\~DF72CC.tmp not found!
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temp\~DF7562.tmp not found!
C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRF{AF6B2950-6DA9-41E1-A85E-54B75A64CCC3}.tmp moved successfully.
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{0EFB81F3-3775-4C48-841B-39B7BFB49BAA}.tmp not found!
C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{4127F2BF-B11B-401B-8748-E0C7D0DB484E}.tmp moved successfully.
File\Folder C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{5BBE43D7-1937-4D8A-ADDA-623D7289F789}.tmp not found!
C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{7D0F1F82-23BA-4A2F-ADAC-E8D084B4F029}.tmp moved successfully.
C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{D25301A0-D56F-4060-A36B-D6B911559D8C}.tmp moved successfully.
C:\Documents and Settings\Jarda\Local Settings\Temporary Internet Files\Content.Word\~WRS{F7A6E578-B0C2-4602-B797-CF8B9EA88D44}.tmp moved successfully.
File\Folder C:\Documents and Settings\jiří paroubek\Local Settings\Temp\Dočasný adresář 21 pro Banka_pracovnich_listu_cesky_jazyk_a_literatura_ver-8.zip\Banka_pracovnich_listu_cesky_jazyk_a_literatura_ver-8\Český jazyk 8\Rozpracovaná struktura\Vyšší\Grimmelshausen\Dobrodružný Simplicius Simplici not found!
File\Folder C:\Documents and Settings\jiří paroubek\Local Settings\Temp\Dočasný adresář 20 pro Banka_pracovnich_listu_cesky_jazyk_a_literatura_ver-8.zip\Banka_pracovnich_listu_cesky_jazyk_a_literatura_ver-8\Český jazyk 8\Rozpracovaná struktura\Vyšší\Vrchlický\Noc na Karlštejně_V001_r.doc not found!

Registry entries deleted on Reboot...

Super, povedlo se.

Jak je na tom počítač?

hele o dost lépe než na začátku, v google chromu už jdou všechny stránky načítat zdá se v pořádku, ale v mozille,opeře i exploreru trvá načíst google nebo youtube třeba i minutu

Tak se zdá že všechno je už v pořádku. Mockrát děkuju za pomoc a budu vás doporučovat. Jen by mě zajimalo v čem byl ten problém,jestly to jde nějak jednoduše vysvětlit.

Tak to jsem moc rád, že už vše funguje.

Mno, jednoduše to říct nejde, bylo toho trošku více. Jak se říká: "Stokrát nic umoří slona". Hlavně žádné cracky a podobné, to je největší pravděpodobnost si do počítače zatáhnout nějakého nezvaného návštěvníka. O porušování zákonů České republiky a autorských ani nemluvě, že ano.



Ještě ale dočistíme.

Odinstaluj ComboFix.

• Přejmenuj ComboFix na Uninstall.
• Spusť jej.
• Tohle smaže ComboFix a jeho složky.

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stáhni a spusť.
• Pro potvrzení volby mačkej A, Enter.
• Po použití utilitu smaž.
• Antiviry mohou tuto utilitu chybně označit jako vir - jedná se o falešný poplach - takže v pohodě stáhni (případně vypni při stahování antivir).

A ComboFix už nikdy na vlastní triko, jasný?!


A pak ještě...

Spusť znovu OTL a klikni na tlačítko [CleanUp!], čímž po sobě program uklidí.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a může (nemusí) restartovat PC.
• Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.