VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jirka at 2012-01-23 20:01:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 15 GB (25%) free of 57 GB
Total RAM: 383 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:02:17, on 23.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe
C:\Program Files\Kalendar\kalendar.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Jirka\Plocha\RSIT.exe
C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=1955&gct=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss ... ffID=17981
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://license.avira.com/de/renew.html ... EyNjQ3NCI=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ScenicReflections Toolbar - {3a47260c-5db6-4371-91ce-f3c30748704f} - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - (no file)
O2 - BHO: Updater For ScenicReflections Toolbar - {cd9094dd-9c64-45c6-8cab-7c3b96825be3} - C:\Program Files\scenicreflectionstb\auxi\scenicreflectionsAu.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O3 - Toolbar: ScenicReflections Toolbar - {3a47260c-5db6-4371-91ce-f3c30748704f} - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SJelite3Launch] C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe
O4 - HKCU\..\Run: [Kalendar] C:\Program Files\Kalendar\kalendar.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 8466 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jirka\Data aplikací\Mozilla\Firefox\Profiles\e33nq699.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, ffxtlbr@babylon.com:1.1.3, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"
prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=100888&tt ... 3ab00eb&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fe_5.0@nokia.com"=C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_5.0
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
quickstores@quickstores.de
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
scenicreflectionstb.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3a47260c-5db6-4371-91ce-f3c30748704f}]
ScenicReflections Toolbar - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll [2011-03-10 86696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-01-07 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cd9094dd-9c64-45c6-8cab-7c3b96825be3}]
Updater For ScenicReflections Toolbar - C:\Program Files\scenicreflectionstb\auxi\scenicreflectionsAu.dll [2011-03-10 262312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-01-07 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-01-07 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
{3a47260c-5db6-4371-91ce-f3c30748704f} - ScenicReflections Toolbar - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll [2011-03-10 86696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-04-17 110592]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2006-04-27 344064]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-04-17 16143872]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-06-01 573440]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-01-27 761946]
"Power_Gear"=C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-03-14 90112]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2006-05-30 811008]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-01-10 281768]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2004-03-04 172032]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SJelite3Launch"=C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe [2010-06-28 180224]
"Kalendar"=C:\Program Files\Kalendar\kalendar.exe [2005-11-09 580608]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
""= []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Anti-phishing Domain Advisor]
C:\Documents and Settings\All Users\Data aplikací\Anti-phishing Domain Advisor\visicom_antiphishing.exe [2011-03-10 232104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files\Ask.com\Updater\Updater.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BabylonToolbar]
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe /md I []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2004-02-18 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Praetorian]
C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Yandex\Updater\praetorian.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe [2005-01-12 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VW100 Connection Manager]
C:\Program Files\Vertex Wireless\VW100 Connection Manager\Connection Manager.exe [2009-11-04 11910144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-04-27 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Condor\Condor.exe"="C:\Program Files\Condor\Condor.exe:*:Enabled:Condor"
"C:\UDK\Q.U.B.E\Binaries\Win32\UDK.exe"="C:\UDK\Q.U.B.E\Binaries\Win32\UDK.exe:*:Enabled:UDK"
"C:\Program Files\scenicreflectionstb\dtUser.exe"="C:\Program Files\scenicreflectionstb\dtUser.exe:*:Enabled:ScenicReflections Toolbar DTX Broker"
"C:\Documents and Settings\Jirka\Plocha\ProSim737-v1.00\ProSim737\Prosim737.exe"="C:\Documents and Settings\Jirka\Plocha\ProSim737-v1.00\ProSim737\Prosim737.exe:*:Enabled:ProSim737"
"C:\Program Files\JeSim\cw5run.exe"="C:\Program Files\JeSim\cw5run.exe:*:Enabled:Control Web 5"
"C:\Program Files\NovaLogic\MIG-29 Fulcrum\M29.exe"="C:\Program Files\NovaLogic\MIG-29 Fulcrum\M29.exe:*:Enabled:MiG29"
"C:\Program Files\Smokin' Guns\smokinguns.exe"="C:\Program Files\Smokin' Guns\smokinguns.exe:*:Disabled:smokinguns"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=serwvdrv.dll
"vidc.ffds"=ffdshow.ax

======List of files/folders created in the last 1 month======

2012-01-23 20:01:56 ----D---- C:\Program Files\trend micro
2012-01-23 20:01:53 ----D---- C:\rsit
2012-01-23 19:52:05 ----SHD---- C:\Config.Msi
2012-01-23 18:09:40 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes
2012-01-23 18:09:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2012-01-23 11:34:30 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Talkback
2012-01-23 11:33:59 ----A---- C:\WINDOWS\MozillaUninstall.exe
2012-01-23 11:33:21 ----A---- C:\WINDOWS\GREUninstall.exe
2012-01-23 11:33:16 ----A---- C:\WINDOWS\mozver.dat
2012-01-23 11:33:12 ----D---- C:\Program Files\Common Files\mozilla.org
2012-01-23 11:32:52 ----D---- C:\Program Files\mozilla.org
2012-01-21 11:30:15 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Settlement. Colossus
2012-01-21 11:25:38 ----D---- C:\Program Files\DoubleGames.tv
2012-01-21 11:25:21 ----D---- C:\Program Files\Alawarhry.cz
2012-01-20 09:36:41 ----D---- C:\Program Files\Pět vražedných démonů
2012-01-19 22:09:56 ----D---- C:\Program Files\bfgclient
2012-01-19 21:16:49 ----D---- C:\WINDOWS\Sun
2012-01-19 19:38:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\BOONTY
2012-01-19 19:37:53 ----D---- C:\Program Files\Common Files\BOONTY Shared
2012-01-19 19:26:48 ----D---- C:\Program Files\BoontyGames
2012-01-19 19:26:44 ----D---- C:\Program Files\Boonty
2012-01-18 20:46:05 ----D---- C:\Program Files\3D Scooper
2012-01-18 19:10:11 ----D---- C:\Elektrogames
2012-01-18 14:36:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-01-13 14:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-13 14:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-11 12:56:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-11 12:56:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-11 12:56:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-01-11 08:21:57 ----D---- C:\Program Files\Defraggler
2012-01-08 18:11:28 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Ubisoft
2012-01-08 10:26:35 ----D---- C:\Program Files\Ubisoft
2012-01-07 21:58:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\DayTerium
2012-01-07 21:52:01 ----D---- C:\Program Files\Smokin' Guns
2012-01-07 21:34:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2012-01-07 18:13:02 ----D---- C:\Documents and Settings\Jirka\Data aplikací\.minecraft
2012-01-07 18:11:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2012-01-07 18:11:20 ----D---- C:\Program Files\Common Files\Java
2012-01-07 18:09:03 ----A---- C:\WINDOWS\system32\javaws.exe
2012-01-07 18:09:03 ----A---- C:\WINDOWS\system32\javaw.exe
2012-01-07 18:09:03 ----A---- C:\WINDOWS\system32\java.exe
2012-01-07 18:09:03 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-01-07 18:07:45 ----D---- C:\Program Files\Java
2012-01-07 18:06:15 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Sun
2012-01-07 14:11:09 ----D---- C:\Program Files\Paradox Entertainment
2012-01-07 14:10:25 ----D---- C:\Program Files\directx
2012-01-06 21:57:33 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2012-01-06 21:57:32 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2012-01-06 21:57:32 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2012-01-06 21:57:31 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2012-01-06 21:57:30 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2012-01-06 21:57:29 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2012-01-06 21:57:29 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2012-01-06 21:57:28 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2012-01-06 21:53:29 ----D---- C:\Program Files\Vstep
2012-01-06 21:38:37 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2012-01-06 21:38:14 ----D---- C:\Program Files\DAEMON Tools Lite
2012-01-06 18:17:01 ----D---- C:\Documents and Settings\Jirka\Data aplikací\dvdcss
2012-01-06 18:15:41 ----D---- C:\Documents and Settings\Jirka\Data aplikací\vlc
2012-01-06 18:12:16 ----D---- C:\Program Files\VideoLAN
2012-01-03 07:36:42 ----D---- C:\Program Files\Centauri
2012-01-01 21:51:39 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Meridian93
2012-01-01 16:01:55 ----D---- C:\Program Files\ORBX
2012-01-01 14:39:03 ----D---- C:\Program Files\Trymedia
2012-01-01 01:54:40 ----D---- C:\TopCD
2012-01-01 01:53:36 ----D---- C:\WINDOWS\system32\AGEIA
2012-01-01 01:53:33 ----D---- C:\Program Files\AGEIA Technologies
2012-01-01 01:52:34 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-12-31 21:46:01 ----D---- C:\Program Files\JeSim
2011-12-31 21:19:00 ----D---- C:\Documents and Settings\Jirka\Data aplikací\FarmingSimulator2008
2011-12-31 20:54:37 ----D---- C:\Program Files\Bagger-Simulator 2008
2011-12-30 21:37:05 ----D---- C:\Documents and Settings\Jirka\Data aplikací\IDM
2011-12-30 21:37:04 ----D---- C:\Documents and Settings\Jirka\Data aplikací\DMCache
2011-12-30 21:36:58 ----D---- C:\Program Files\Internet Download Manager
2011-12-30 21:17:38 ----D---- C:\SotS GE Demo
2011-12-30 17:35:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\FileCure
2011-12-30 17:35:45 ----D---- C:\Program Files\ParetoLogic
2011-12-30 17:10:08 ----A---- C:\WINDOWS\iun6002.exe
2011-12-30 17:09:48 ----D---- C:\Program Files\FA-18 Operation Desert Storm Demo
2011-12-30 16:49:39 ----D---- C:\Program Files\NovaLogic
2011-12-30 16:37:19 ----D---- C:\WINDOWS\Desktop
2011-12-30 16:26:09 ----D---- C:\Program Files\VertiSim
2011-12-30 15:57:33 ----D---- C:\Program Files\Common Files\Adobe
2011-12-30 15:13:36 ----D---- C:\Program Files\RealRailway
2011-12-30 15:02:15 ----D---- C:\Program Files\MyPlayBus.com
2011-12-30 13:26:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Premium
2011-12-30 13:26:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallMate
2011-12-30 10:48:17 ----D---- C:\Program Files\HeliSim
2011-12-30 10:46:34 ----D---- C:\Program Files\RC_Flight_Simulator
2011-12-30 10:17:30 ----D---- C:\Program Files\FMS
2011-12-29 11:41:58 ----D---- C:\ClearViewRC
2011-12-29 11:28:13 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Yandex
2011-12-28 16:46:22 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Subversion
2011-12-28 16:45:12 ----D---- C:\Documents and Settings\Jirka\Data aplikací\fltk.org
2011-12-28 16:06:32 ----D---- C:\Program Files\FlightGear 2.4.0
2011-12-28 14:53:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Anti-phishing Domain Advisor
2011-12-28 14:53:43 ----D---- C:\Documents and Settings\Jirka\Data aplikací\scenicreflectionstb
2011-12-28 14:53:36 ----A---- C:\user.js
2011-12-28 14:53:00 ----D---- C:\Program Files\scenicreflectionstb
2011-12-28 14:52:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Babylon
2011-12-28 14:52:51 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Babylon
2011-12-28 12:59:21 ----D---- C:\WINDOWS\speech
2011-12-28 12:58:30 ----HD---- C:\Infovox2.lic
2011-12-26 12:10:20 ----D---- C:\Program Files\Microsoft Chart Controls
2011-12-26 12:10:14 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-12-26 12:10:14 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-12-26 12:10:14 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-12-26 12:10:11 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-12-26 12:10:10 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-12-26 12:10:00 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-12-26 12:08:47 ----D---- C:\UDK
2011-12-24 21:05:21 ----D---- C:\iEntertainment Network

======List of files/folders modified in the last 1 month======

2012-01-23 20:01:56 ----D---- C:\Program Files
2012-01-23 19:57:33 ----D---- C:\WINDOWS
2012-01-23 19:57:00 ----SHD---- C:\WINDOWS\Installer
2012-01-23 19:55:43 ----RSD---- C:\WINDOWS\assembly
2012-01-23 19:52:06 ----SD---- C:\WINDOWS\Tasks
2012-01-23 19:46:54 ----D---- C:\WINDOWS\Temp
2012-01-23 19:46:03 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-23 19:44:51 ----SHD---- C:\WINDOWS\CSC
2012-01-23 19:31:07 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-01-23 19:30:11 ----D---- C:\WINDOWS\system32\drivers
2012-01-23 18:29:31 ----HDC---- C:\WINDOWS\ie8
2012-01-23 11:56:36 ----D---- C:\Program Files\Mozilla Firefox
2012-01-23 11:34:36 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Mozilla
2012-01-23 11:33:54 ----A---- C:\WINDOWS\win.ini
2012-01-23 11:33:12 ----D---- C:\Program Files\Common Files
2012-01-23 08:15:49 ----D---- C:\WINDOWS\Debug
2012-01-19 22:10:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\BigFishGamesCache
2012-01-19 22:10:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Big Fish Games
2012-01-19 19:25:37 ----D---- C:\WINDOWS\Prefetch
2012-01-18 20:01:36 ----HD---- C:\WINDOWS\inf
2012-01-18 20:01:02 ----D---- C:\WINDOWS\system32\DirectX
2012-01-18 16:14:32 ----D---- C:\WINDOWS\system32
2012-01-18 14:36:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-14 06:58:20 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-11 12:56:58 ----A---- C:\WINDOWS\system32\MRT.exe
2012-01-09 09:45:32 ----D---- C:\Program Files\Hry.cz
2012-01-09 09:37:56 ----D---- C:\Program Files\Cross Racing Championship
2012-01-08 18:07:45 ----HD---- C:\Program Files\InstallShield Installation Information
2012-01-07 21:36:05 ----D---- C:\Program Files\GameTop.com
2012-01-07 10:48:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-06 21:44:39 ----D---- C:\Documents and Settings\Jirka\Data aplikací\DAEMON Tools Lite
2012-01-03 16:27:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-01-01 21:00:37 ----D---- C:\WINDOWS\WinSxS
2012-01-01 20:55:25 ----D---- C:\Program Files\FlightGear
2012-01-01 10:18:39 ----D---- C:\Program Files\Winter Games
2012-01-01 10:17:02 ----D---- C:\Program Files\Polda
2012-01-01 10:15:41 ----D---- C:\Program Files\Legie
2012-01-01 10:13:41 ----D---- C:\Program Files\Google
2012-01-01 01:54:29 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-01 01:54:14 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-12-31 22:52:42 ----D---- C:\WINDOWS\Microsoft.NET
2011-12-30 16:13:51 ----SD---- C:\Documents and Settings\Jirka\Data aplikací\Microsoft
2011-12-30 16:13:51 ----D---- C:\Documents and Settings\Jirka\Data aplikací\Adobe
2011-12-30 15:57:33 ----D---- C:\Program Files\Adobe
2011-12-28 21:02:58 ----D---- C:\WINDOWS\Minidump
2011-12-28 20:59:17 ----D---- C:\Documents and Settings\Jirka\Data aplikací\flightgear.org
2011-12-28 20:30:34 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2011-12-28 20:30:34 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2011-12-28 17:13:36 ----D---- C:\bestgames
2011-12-24 13:23:51 ----D---- C:\Program Files\FatFunky

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2011-06-28 138192]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-01-06 239168]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2011-06-28 66616]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-04-27 1540096]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-04-17 4262912]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2002-09-23 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-07-12 51328]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-18 80512]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-06-01 894336]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-01-27 191936]
R3 ZD1211BU(ASUS);ASUS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ASUS); C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2006-06-14 425472]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 vwmfbus;Vertex Wireless Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\vwmfbus.sys [2009-05-29 90240]
S3 vwmfdiag;Vertex Wireless Diagnostic Monitor Port Driver (WDM); C:\WINDOWS\system32\DRIVERS\vwmfdiag.sys [2009-05-29 98688]
S3 vwmfmdfl;~Vertex Wireless CDC Modem Filter~; C:\WINDOWS\system32\DRIVERS\vwmfmdfl.sys [2009-05-29 14976]
S3 vwmfmdm;Vertex Wireless CDC Modem Driver; C:\WINDOWS\system32\DRIVERS\vwmfmdm.sys [2009-05-29 121984]
S3 vwmfserd;Vertex Wireless Device Management Port Driver (WDM); C:\WINDOWS\system32\DRIVERS\vwmfserd.sys [2009-05-29 98688]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-06-28 269480]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-04-27 405504]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-01-07 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-06-07 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2012-01-19 69120]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-06-07 136176]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-10-27 718384]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravím.

Dej mi minutku, hnedle se na to mrknu.

Pokud to jde, odinstaluj Babylon a ScenicReflections Toolbar.


Potom fixni v HJT níže uvedené položky.

• Fixnout znamená, že spustíš HJT, zvolíš možnost [Do a system scan only] a zaškrtneš čtvereček vlevo od mnou vypsaných položek. Poté klikneš na [Fix checked] a odsouhlasíš [ANO].
• Položky, které v seznamu nenajdeš, prostě přeskoč.
• HJT najdeš zde: C:\Program Files\trend micro\Jirka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=1955&gct=hp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss ... ffID=17981
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://license.avira.com/de/renew.html ... EyNjQ3NCI=
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ScenicReflections Toolbar - {3a47260c-5db6-4371-91ce-f3c30748704f} - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - (no file)
O2 - BHO: Updater For ScenicReflections Toolbar - {cd9094dd-9c64-45c6-8cab-7c3b96825be3} - C:\Program Files\scenicreflectionstb\auxi\scenicreflectionsAu.dll
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O3 - Toolbar: ScenicReflections Toolbar - {3a47260c-5db6-4371-91ce-f3c30748704f} - C:\Program Files\scenicreflectionstb\scenicreflectionsDx.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)


Dále stáhni OTL z tohoto odkazu a ulož jej na Plochu.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Zaškrtni okénko Pro všechny uživatele.
• Zaškrtni okénko Kontrola na havěť "LOP".
• Zaškrtni okénko Kontrola na havěť "Purity".
• Stáři souborů změň z 30 dnů na 7 dnů!!
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Prohledat].
• Po dokončení skenu se objeví logy OTL.txt a Extras.txt, oba mi sem vlož.
• Logy se nevejdou do jednoho, rozděl je tedy prosím do více příspěvků.

OTL logfile created on: 24.1.2012 16:06:34 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jirka\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

383,36 Mb Total Physical Memory | 108,71 Mb Available Physical Memory | 28,36% Memory free
920,52 Mb Paging File | 530,59 Mb Available in Paging File | 57,64% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55,88 Gb Total Space | 14,12 Gb Free Space | 25,26% Space Free | Partition Type: NTFS

Computer Name: JIRKA-F8A7DBC60 | User Name: Jirka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.01.24 16:05:26 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jirka\Plocha\OTL.exe
PRC - [2011.12.21 08:39:32 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.06.28 18:25:22 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.04.27 16:45:10 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011.01.10 14:23:29 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.06.28 10:56:08 | 000,180,224 | ---- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe
PRC - [2010.01.14 21:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.05.30 10:28:20 | 000,811,008 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2006.04.17 10:24:30 | 000,110,592 | R--- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
PRC - [2006.04.01 09:37:00 | 002,170,880 | R--- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2006.03.14 17:46:00 | 000,090,112 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
PRC - [2005.11.09 21:12:44 | 000,580,608 | ---- | M] () -- C:\Program Files\Kalendar\kalendar.exe
PRC - [2005.07.06 15:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\WINDOWS\system32\ACEngSvr.exe
PRC - [2004.03.04 16:46:24 | 000,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe


========== Modules (No Company Name) ==========

MOD - [2011.12.21 08:39:32 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.12.06 13:27:57 | 008,527,008 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2010.06.28 10:56:08 | 000,180,224 | ---- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe
MOD - [2010.06.17 14:27:22 | 000,355,688 | ---- | M] () -- C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2010.05.13 09:25:14 | 000,263,680 | ---- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\asmtusb.dll
MOD - [2006.04.17 10:24:30 | 000,110,592 | R--- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
MOD - [2006.04.13 08:17:00 | 000,163,840 | R--- | M] () -- C:\WINDOWS\ATK0100\ASUSNet.dll
MOD - [2006.04.01 09:37:00 | 002,170,880 | R--- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
MOD - [2005.11.09 21:12:44 | 000,580,608 | ---- | M] () -- C:\Program Files\Kalendar\kalendar.exe
MOD - [2005.07.29 11:05:16 | 000,049,152 | ---- | M] () -- C:\Program Files\ASUS\Splendid\GLCDdll.dll
MOD - [2004.05.28 03:13:10 | 000,057,344 | R--- | M] () -- C:\WINDOWS\ATK0100\CMSSC.dll


========== Win32 Services (SafeList) ==========

SRV - [2012.01.19 19:37:53 | 000,069,120 | ---- | M] (BOONTY) [On_Demand | Stopped] -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)
SRV - [2011.10.27 10:34:30 | 000,718,384 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011.06.28 18:25:22 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.04.27 16:45:10 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)


========== Driver Services (SafeList) ==========

DRV - [2012.01.06 21:38:38 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.08.17 12:56:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011.08.17 12:56:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011.08.17 12:56:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011.08.17 12:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2011.06.28 18:25:27 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.06.28 18:25:27 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.06.17 14:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.06.17 14:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.05.29 09:02:20 | 000,121,984 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vwmfmdm.sys -- (vwmfmdm)
DRV - [2009.05.29 09:02:20 | 000,098,688 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vwmfserd.sys -- (vwmfserd) Vertex Wireless Device Management Port Driver (WDM)
DRV - [2009.05.29 09:02:20 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vwmfmdfl.sys -- (vwmfmdfl)
DRV - [2009.05.29 09:02:18 | 000,098,688 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vwmfdiag.sys -- (vwmfdiag) Vertex Wireless Diagnostic Monitor Port Driver (WDM)
DRV - [2009.05.29 09:02:18 | 000,090,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vwmfbus.sys -- (vwmfbus) Vertex Wireless Composite Device driver (WDM)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006.06.14 18:16:00 | 000,425,472 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZD1211BU.sys -- (ZD1211BU(ASUS)) ASUS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ASUS)
DRV - [2006.06.01 07:03:00 | 000,894,336 | R--- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2006.04.27 02:46:50 | 001,540,096 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.04.17 09:31:26 | 004,262,912 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.01.18 11:41:58 | 000,080,512 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2005.07.14 12:14:34 | 000,027,904 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\risdptsk.sys -- (risdptsk)
DRV - [2005.07.12 19:00:30 | 000,051,328 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005.02.17 16:07:48 | 000,005,632 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2004.08.03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2002.09.09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1708537768-606747145-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-1708537768-606747145-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.51
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.3
FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100888&tt ... 3ab00eb&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_5.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_5.0 [2011.11.29 11:04:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla 1.7.13\Extensions\\Components: C:\Program Files\mozilla.org\Mozilla\Components [2012.01.23 13:57:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla 1.7.13\Extensions\\Plugins: C:\Program Files\mozilla.org\Mozilla\Plugins [2012.01.23 11:33:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.23 11:56:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2011.11.29 11:04:34 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla 1.7.13\Extensions\\Components: C:\Program Files\mozilla.org\Mozilla\Components [2012.01.23 13:57:43 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla 1.7.13\Extensions\\Plugins: C:\Program Files\mozilla.org\Mozilla\Plugins [2012.01.23 11:33:31 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Jirka\Data aplikací\IDM\idmmzcc5

[2011.03.11 11:52:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jirka\Data aplikací\Mozilla\Extensions
[2012.01.23 19:59:40 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jirka\Data aplikací\Mozilla\Firefox\Profiles\e33nq699.default\extensions
[2012.01.23 11:56:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.04.18 20:02:01 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
[2011.10.01 18:48:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.12.21 08:39:32 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.12.30 15:28:19 | 000,002,351 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011.12.21 07:21:58 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2011.12.21 07:21:58 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.03.10 17:58:36 | 000,002,201 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\scenicreflectionstb.xml
[2011.12.21 07:21:58 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2011.12.21 07:21:58 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2011.12.21 07:21:58 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.75\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.75\pdf.dll
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Documents and Settings\Jirka\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Gmail = C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

O1 HOSTS File: ([2002.09.23 14:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-1708537768-606747145-725345543-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1708537768-606747145-725345543-1003\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP)
O4 - HKLM..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.)
O4 - HKU\S-1-5-21-1708537768-606747145-725345543-1003..\Run: [] File not found
O4 - HKU\S-1-5-21-1708537768-606747145-725345543-1003..\Run: [Kalendar] C:\Program Files\Kalendar\kalendar.exe ()
O4 - HKU\S-1-5-21-1708537768-606747145-725345543-1003..\Run: [SJelite3Launch] C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1708537768-606747145-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCAAE037-3D20-442C-8FAE-15376D2348B9}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jirka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.03.10 22:30:13 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2b8188b0-5013-11e0-8814-0018f3ab00eb}\Shell - "" = AutoRun
O33 - MountPoints2\{2b8188b0-5013-11e0-8814-0018f3ab00eb}\Shell\AutoRun\command - "" = E:\VW100_Modem_Installation.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: wave1 - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.01.24 16:05:24 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jirka\Plocha\OTL.exe
[2012.01.23 20:01:56 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.23 20:01:53 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.23 19:57:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jirka\Recent
[2012.01.23 19:52:05 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.01.23 18:09:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes
[2012.01.23 18:09:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2012.01.23 11:34:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Data aplikací\Talkback
[2012.01.23 11:33:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\mozilla.org
[2012.01.23 11:32:52 | 000,000,000 | ---D | C] -- C:\Program Files\mozilla.org
[2012.01.21 11:30:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Data aplikací\Settlement. Colossus
[2012.01.21 11:29:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\APN
[2012.01.21 11:29:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\DoubleGames
[2012.01.21 11:25:38 | 000,000,000 | ---D | C] -- C:\Program Files\DoubleGames.tv
[2012.01.21 11:25:21 | 000,000,000 | ---D | C] -- C:\Program Files\Alawarhry.cz
[2012.01.20 09:36:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Pět vražedných démonů
[2012.01.20 09:36:41 | 000,000,000 | ---D | C] -- C:\Program Files\Pět vražedných démonů
[2012.01.19 22:09:56 | 000,000,000 | ---D | C] -- C:\Program Files\bfgclient
[2012.01.19 21:16:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2012.01.19 19:38:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\BOONTY
[2012.01.19 19:37:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BOONTY Shared
[2012.01.19 19:26:48 | 000,000,000 | ---D | C] -- C:\Program Files\BoontyGames
[2012.01.19 19:26:44 | 000,000,000 | ---D | C] -- C:\Program Files\Boonty
[2012.01.18 20:46:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\3D Scooper
[2012.01.18 20:46:05 | 000,000,000 | ---D | C] -- C:\Program Files\3D Scooper
[2012.01.18 19:10:11 | 000,000,000 | ---D | C] -- C:\Elektrogames
[2012.01.17 19:18:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jirka\Plocha\hry
[2004.11.24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.01.24 16:08:22 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.24 16:05:26 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jirka\Plocha\OTL.exe
[2012.01.24 15:49:11 | 000,000,938 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.01.24 15:43:16 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.01.24 15:43:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.23 20:01:33 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\RSIT.exe
[2012.01.23 11:36:04 | 000,001,584 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Defraggler.lnk
[2012.01.23 11:34:30 | 000,000,335 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2012.01.23 11:33:59 | 000,099,024 | ---- | M] () -- C:\WINDOWS\MozillaUninstall.exe
[2012.01.23 11:33:59 | 000,008,138 | ---- | M] () -- C:\WINDOWS\mozver.dat
[2012.01.23 11:33:21 | 000,098,512 | ---- | M] () -- C:\WINDOWS\GREUninstall.exe
[2012.01.23 07:48:14 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.19 21:03:23 | 000,050,176 | ---- | M] () -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.01.24 16:08:22 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.23 20:01:26 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Jirka\Plocha\RSIT.exe
[2012.01.23 11:33:59 | 000,099,024 | ---- | C] () -- C:\WINDOWS\MozillaUninstall.exe
[2012.01.23 11:33:21 | 000,098,512 | ---- | C] () -- C:\WINDOWS\GREUninstall.exe
[2012.01.23 11:33:16 | 000,008,138 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2011.12.30 17:04:10 | 000,000,080 | ---- | C] () -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\X-Plane Installer.prf
[2011.06.03 15:59:35 | 000,036,734 | ---- | C] () -- C:\WINDOWS\System32\OggDSuninst.exe
[2011.04.07 19:08:04 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011.03.16 22:19:08 | 000,010,614 | ---- | C] () -- C:\WINDOWS\hpdj3740.ini
[2011.03.15 19:06:48 | 000,050,176 | ---- | C] () -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.03.11 15:31:47 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011.03.11 11:52:29 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.03.10 23:48:00 | 000,536,576 | ---- | C] () -- C:\WINDOWS\System32\ASWL2K.exe
[2011.03.10 23:48:00 | 000,496,640 | ---- | C] () -- C:\WINDOWS\System32\ASWLSVC.exe
[2011.03.10 23:48:00 | 000,159,827 | ---- | C] () -- C:\WINDOWS\System32\RemSvc.exe
[2011.03.10 23:25:03 | 000,000,024 | ---- | C] () -- C:\WINDOWS\ATKPF.ini
[2011.03.10 23:16:57 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.03.10 23:15:22 | 000,115,768 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.03.10 22:42:27 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2011.03.10 22:42:27 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2011.03.10 22:39:12 | 000,127,619 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.03.10 22:38:17 | 000,005,632 | R--- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2011.03.10 22:37:35 | 000,007,424 | R--- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS
[2011.03.10 22:33:47 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.03.10 22:26:01 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.04.22 16:03:16 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.04.22 16:03:14 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.04.22 16:03:14 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.04.22 16:03:14 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2004.11.29 15:43:20 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2004.10.12 06:40:58 | 002,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2004.10.12 06:39:48 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2004.10.12 06:39:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2004.10.09 06:40:16 | 000,454,144 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2004.10.05 08:16:08 | 000,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2004.10.03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2004.08.17 16:58:58 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.03.17 14:12:48 | 000,000,362 | ---- | C] () -- C:\WINDOWS\hpfins_s04_main.dat
[2004.03.17 14:11:51 | 000,005,428 | ---- | C] () -- C:\WINDOWS\hpfmdl_s04_main.dat
[2002.10.06 19:42:57 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2002.10.05 00:04:25 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2002.10.05 00:04:24 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2002.10.05 00:04:17 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2002.09.23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2002.09.23 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2002.09.23 14:00:00 | 000,433,138 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2002.09.23 14:00:00 | 000,429,704 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2002.09.23 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2002.09.23 14:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2002.09.23 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2002.09.23 14:00:00 | 000,078,676 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2002.09.23 14:00:00 | 000,068,094 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2002.09.23 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2002.09.23 14:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2002.09.23 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2002.09.23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2002.09.23 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001.12.19 21:51:14 | 000,001,327 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2001.11.14 20:40:12 | 000,047,887 | ---- | C] () -- C:\WINDOWS\OptimizerXP.dll

========== LOP Check ==========

[2011.11.27 11:46:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
[2011.03.11 12:18:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ashampoo
[2011.11.27 11:46:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AWEM
[2011.12.30 15:28:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2012.01.19 22:10:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Big Fish Games
[2012.01.19 19:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BOONTY
[2011.06.06 19:09:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2012.01.07 21:58:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DayTerium
[2011.12.31 22:27:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\FileCure
[2011.12.30 15:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\InstallMate
[2011.11.29 11:01:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nokia
[2011.06.12 14:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaAccount
[2011.08.12 18:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
[2011.06.12 14:45:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.12.30 13:26:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Premium
[2011.11.26 11:13:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ticno
[2011.08.29 15:48:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Vertex Wireless
[2012.01.07 18:13:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\.minecraft
[2011.03.11 12:20:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ashampoo
[2011.12.29 13:24:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Babylon
[2011.11.26 11:13:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Breakpad
[2012.01.06 21:44:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\DAEMON Tools Lite
[2011.12.03 20:43:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\digipen
[2011.12.30 22:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\DMCache
[2011.12.31 21:21:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\FarmingSimulator2008
[2011.12.28 20:59:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\flightgear.org
[2011.12.28 16:45:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\fltk.org
[2011.12.07 11:20:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Friday's games
[2011.12.30 21:51:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\IDM
[2011.11.08 20:12:11 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Jirka\Data aplikací\IFViewer
[2011.11.27 11:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\md studio
[2012.01.01 21:51:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Meridian93
[2011.08.12 19:15:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Nokia
[2011.08.12 19:15:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Nokia Ovi Suite
[2011.03.15 18:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\PC Suite
[2012.01.21 11:30:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Settlement. Colossus
[2011.07.30 18:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\simon4
[2011.12.28 16:46:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Subversion
[2011.12.01 17:00:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ticno
[2011.11.26 11:13:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\TicnoTemp
[2011.03.12 07:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Transcend
[2012.01.08 18:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ubisoft
[2011.12.07 10:10:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\VendelGAMES
[2012.01.06 21:44:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Yandex

========== Purity Check ==========



========== Custom Scans ==========


< netsvc >


< MD5 for: ATAPI.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 16:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 23:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 16:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 16:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.14 00:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.03 23:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 16:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 16:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.04 00:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 16:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 16:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< %systemroot%*.* /U /s >
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[14 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[2 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.01.07 18:13:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\.minecraft
[2011.12.30 16:13:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Adobe
[2011.03.12 07:02:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\AdobeUM
[2011.03.11 12:20:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ashampoo
[2011.03.10 23:18:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Avira
[2011.12.29 13:24:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Babylon
[2011.11.26 11:13:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Breakpad
[2011.03.11 15:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\CyberLink
[2012.01.06 21:44:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\DAEMON Tools Lite
[2011.12.03 20:43:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\digipen
[2011.12.30 22:18:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\DMCache
[2012.01.06 18:17:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\dvdcss
[2011.12.31 21:21:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\FarmingSimulator2008
[2011.12.28 20:59:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\flightgear.org
[2011.12.28 16:45:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\fltk.org
[2011.12.07 11:20:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Friday's games
[2011.06.07 18:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Google
[2011.03.29 19:21:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Help
[2011.03.10 22:36:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Identities
[2011.12.30 21:51:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\IDM
[2011.11.08 20:12:11 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\Jirka\Data aplikací\IFViewer
[2011.03.11 19:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Macromedia
[2012.01.23 18:09:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes
[2011.11.27 11:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\md studio
[2011.12.07 13:25:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Media Player Classic
[2012.01.01 21:51:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Meridian93
[2011.12.30 16:13:51 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft
[2012.01.23 11:34:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Mozilla
[2011.08.12 19:15:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Nokia
[2011.08.12 19:15:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Nokia Ovi Suite
[2011.03.15 18:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\PC Suite
[2011.10.02 06:29:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Real
[2012.01.21 11:30:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Settlement. Colossus
[2011.07.30 18:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\simon4
[2011.12.28 16:46:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Subversion
[2012.01.07 18:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Sun
[2012.01.23 11:34:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Talkback
[2011.12.01 17:00:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ticno
[2011.11.26 11:13:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\TicnoTemp
[2011.03.12 07:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Transcend
[2012.01.08 18:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Ubisoft
[2011.12.07 10:10:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\VendelGAMES
[2012.01.06 21:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\vlc
[2011.04.05 19:15:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\WinRAR
[2012.01.06 21:44:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Yandex

< %APPDATA%\*.exe /s >
[2011.12.29 12:48:46 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft\Installer\{3877E508-FD52-4095-A60C-9B2FC0341397}\_6FED32D6CC4E59378DB8A9.exe
[2011.12.29 12:48:46 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft\Installer\{3877E508-FD52-4095-A60C-9B2FC0341397}\_6FEFF9B68218417F98F549.exe
[2011.12.29 12:48:46 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft\Installer\{3877E508-FD52-4095-A60C-9B2FC0341397}\_72DDC45897EBB8C7344763.exe
[2011.12.29 12:48:46 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft\Installer\{3877E508-FD52-4095-A60C-9B2FC0341397}\_A35DB61474463CDAE3067C.exe
[2011.12.29 12:48:46 | 000,002,238 | R--- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Microsoft\Installer\{3877E508-FD52-4095-A60C-9B2FC0341397}\_F512A1C2E2B91D665AFC76.exe
[2011.11.26 11:13:01 | 007,287,112 | ---- | M] (Media Labs Ltd.) -- C:\Documents and Settings\Jirka\Data aplikací\TicnoTemp\multibar_setup.exe
[2010.06.28 10:56:08 | 000,180,224 | ---- | M] () -- C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.01.24 15:43:16 | 000,000,934 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2012.01.24 15:49:11 | 000,000,938 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2011.03.10 23:14:29 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011.03.10 23:14:29 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011.03.10 23:14:29 | 000,466,944 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.01.23 07:48:14 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %userprofile%\Plocha\*.* >
[2011.03.28 17:04:50 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Acala 3GP Movies Free.lnk
[2012.01.07 21:50:52 | 000,000,753 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\DAEMON Tools Lite.lnk
[2011.04.18 20:01:01 | 000,000,859 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Format Factory.lnk
[2012.01.24 16:05:26 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jirka\Plocha\OTL.exe
[2012.01.23 20:01:33 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\RSIT.exe
[2011.08.29 15:48:47 | 000,001,090 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Ufonův 3G mobilní internet.lnk
[2011.12.28 17:32:26 | 000,000,808 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - balabolka.lnk
[2011.12.01 19:18:54 | 000,001,371 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Cimrman video.lnk
[2011.10.01 17:42:55 | 000,000,547 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Hudba.lnk
[2011.03.11 00:45:40 | 000,000,145 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Jednotka CD-ROM.lnk
[2011.04.05 18:19:48 | 000,001,371 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Mluvené slovo.lnk
[2011.03.12 07:11:01 | 000,000,596 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - pomocnik.lnk
[2011.04.13 16:28:49 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Sešit1.lnk
[2011.03.28 17:00:26 | 000,000,467 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Telefon.lnk
[2011.03.12 06:10:34 | 000,001,040 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Zástupce - Transcend (E).lnk

< %userprofile%\Desktop\*.* >

< %ALLUSERSPROFILE%\Plocha\*.* >
[2011.03.11 12:18:49 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Ashampoo Burning Studio 6.lnk
[2011.03.11 12:27:40 | 000,001,644 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\ASUSTek ASUSDVD.lnk
[2011.03.10 23:08:40 | 000,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Avira AntiVir Control Center.lnk
[2011.03.11 15:22:22 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.01.23 11:36:04 | 000,001,584 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Defraggler.lnk
[2011.11.29 11:05:18 | 000,001,749 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Nokia Suite.lnk
[2012.01.06 18:14:34 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\VLC media player.lnk

< %ALLUSERSPROFILE%\Desktop\*.* >

< *crack* /s >
[2007.03.23 18:11:06 | 000,048,994 | ---- | M] () -- \bestgames\sound\crack.wav
[2009.08.27 06:26:32 | 000,022,274 | ---- | M] () -- \Program Files\ORBX\ORBX\FTX_AU\FTXAA_ORBXLIBS\Scenery\ORBX_Cracks_Stains.bgl
[2009.07.09 06:39:08 | 000,000,969 | ---- | M] () -- \Program Files\ORBX\ORBX\FTX_AU\FTXAA_ORBXLIBS\Scenery\ORBX_Cracks_Stains.txt
[2009.07.05 14:48:12 | 001,398,256 | ---- | M] () -- \Program Files\ORBX\ORBX\FTX_AU\FTXAA_ORBXLIBS\Texture\ORBX_cracks.dds
[2002.03.18 21:46:18 | 000,608,256 | R--- | M] () -- \Program Files\Paradox Entertainment\Airfix Dogfighter\CrackNoCD.exe

< *keygen* /s >

< *loader* /s >
[2011.04.05 12:30:42 | 000,002,602 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\controls\b9_preloader.gif
[2011.04.05 12:30:42 | 000,002,602 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\controls\b9_preloader.gif
[2011.08.19 05:15:24 | 000,000,289 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Big Fish Games\Game Manager\resources\default\images\static_loader.gif
[2011.12.30 22:03:21 | 000,319,568 | ---- | M] () -- \Documents and Settings\Jirka\Dokumenty\Downloads\Programs\SoftonicDownloader_for_soaring-simulator.exe
[2010.04.08 16:11:38 | 000,009,225 | ---- | M] () -- \Documents and Settings\Jirka\Plocha\Tata\Programy\Firefox\Profiles\ydk2g95f.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\content\scriptdownloader.js
[2007.10.02 12:08:06 | 000,972,619 | ---- | M] () -- \Documents and Settings\Jirka\Plocha\Tata\Tata\Směs\PRAČKY\Electrolux\Electrolux 07\Pračky_sušičky\Top loading machines\Toploader_CZ.pdf
[2007.11.13 03:54:34 | 000,070,944 | ---- | M] () -- \Program Files\AGEIA Technologies\demos\physxloader.dll
[2011.06.28 18:25:23 | 000,034,664 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avnetworkloader.dll
[2011.06.28 18:25:23 | 000,343,400 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avnetworkloadergui.dll
[2011.06.28 18:25:24 | 000,214,184 | ---- | M] () -- \Program Files\Avira\AntiVir Desktop\avwebloader.exe
[2011.08.19 05:15:24 | 000,000,289 | ---- | M] () -- \Program Files\bfgclient\resources\default\images\static_loader.gif
[2006.04.14 22:11:00 | 000,003,095 | ---- | M] () -- \Program Files\Common Files\mozilla.org\GRE\1.7.13_2006041421\components\uriloader.xpt
[2011.09.01 12:13:30 | 000,112,128 | ---- | M] () -- \Program Files\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2010.01.22 18:43:50 | 000,119,175 | ---- | M] () -- \Program Files\FlightGear\data\Models\Airport\cloader-ba.ac
[2010.01.22 18:43:50 | 000,001,320 | ---- | M] () -- \Program Files\FlightGear\data\Models\Airport\cloader.xml
[2010.01.22 18:44:32 | 000,015,262 | ---- | M] () -- \Program Files\FlightGear\data\Models\Airport\loader-ba.ac
[2010.01.22 18:44:32 | 000,001,318 | ---- | M] () -- \Program Files\FlightGear\data\Models\Airport\loader.xml
[2008.05.17 05:05:58 | 000,028,160 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\BuildingBlocks\CryptedLoader.dll
[2008.05.17 04:46:44 | 000,046,592 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\3dsLoader.dll
[2008.05.17 04:46:48 | 000,026,624 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\AscLoader.dll
[2008.05.17 04:47:26 | 000,462,848 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\ColladaLoader.dll
[2008.05.17 04:48:32 | 000,118,784 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\JpgLoader.dll
[2008.05.17 04:48:38 | 000,094,208 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\PngLoader.dll
[2008.05.17 04:48:50 | 000,028,160 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\VirtoolsLoader.dll
[2008.05.17 04:50:32 | 000,151,552 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\Vrmlloader.dll
[2008.05.17 04:51:04 | 000,102,400 | ---- | M] () -- \Program Files\RC_Flight_Simulator\Bin\Plugins\XLoader.dll
[2004.08.17 16:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.14 00:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 00:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2008.05.26 11:15:14 | 000,070,936 | ---- | M] () -- \WINDOWS\system32\PhysXLoader.dll
[2 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]

< *RemoveWAT* /s >

< *minodlogin* /s >

< *tnod* /s >

< *TemDono* /s >

< *AutoKMS* /s >

< *KMSEmulator* /s >

< *activator* /s >

< *serial* /s >
[2004.12.04 13:42:24 | 000,001,138 | ---- | M] () -- \Program Files\FlightGear\data\Protocol\f1serial.xml
[2010.04.07 23:48:30 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2004.08.17 16:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2011.12.31 18:12:39 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.03.20 07:33:49 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011.10.15 07:56:34 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2011.10.15 07:55:07 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
[2008.07.25 07:08:04 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.04.07 23:48:30 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2008.04.14 07:47:26 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 07:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2007.06.27 18:29:04 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2002.09.23 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2002.09.23 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2002.09.23 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2002.09.23 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 07:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2006.06.01 07:03:00 | 000,894,336 | R--- | M] () -- \WINDOWS\system32\drivers\smserial.sys
[2006.06.01 07:03:00 | 000,894,336 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0001\DriverFiles\smserial.hda
[2006.06.01 06:55:58 | 000,060,508 | R--- | M] () -- \WINDOWS\system32\ReinstallBackups\0001\DriverFiles\smserial.inf
[2011.03.10 22:45:11 | 000,088,572 | ---- | M] () -- \WINDOWS\system32\ReinstallBackups\0001\DriverFiles\smserial.PNF

< *w7lxe* /s >

< *AutoRearm* /s >

< HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run /s >
"HControl" = C:\WINDOWS\ATK0100\HControl.exe -- [2006.04.17 10:24:30 | 000,110,592 | R--- | M] ()
"ATIPTA" = "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" -- [2006.04.27 08:57:00 | 000,344,064 | ---- | M] (ATI Technologies, Inc.)
"RTHDCPL" = RTHDCPL.EXE -- [2006.04.17 08:34:42 | 016,143,872 | R--- | M] (Realtek Semiconductor Corp.)
"SynTPEnh" = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe -- [2006.01.27 04:51:16 | 000,761,946 | ---- | M] (Synaptics, Inc.)
"Power_Gear" = C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 -- [2006.03.14 17:46:00 | 000,090,112 | ---- | M] (ASUSTeK Computer Inc.)
"ACMON" = C:\Program Files\ASUS\Splendid\ACMON.exe -- [2006.05.30 10:28:20 | 000,811,008 | ---- | M] (ATK)
"avgnt" = "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min -- [2011.01.10 14:23:29 | 000,281,768 | ---- | M] (Avira GmbH)
"HPDJ Taskbar Utility" = C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe -- [2004.03.04 16:46:24 | 000,172,032 | ---- | M] (HP)
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed" = 1
"NoChange" = 1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed" = 1

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 08:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"SJelite3Launch" = C:\Documents and Settings\Jirka\Data aplikací\Transcend\SJelite3\SJelite3Launch.exe -- [2010.06.28 10:56:08 | 000,180,224 | ---- | M] ()
"Kalendar" = C:\Program Files\Kalendar\kalendar.exe -- [2005.11.09 21:12:44 | 000,580,608 | ---- | M] ()
"" =

< HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemRoot%\System32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.24 16:08:22 | 000,000,512 | ---- | M] () MD5=46E7D15E82834D460F52FFED6F7037C2 -- C:\PhysicalMBR.bin

< End of report >

OTL Extras logfile created on: 24.1.2012 16:06:34 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jirka\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

383,36 Mb Total Physical Memory | 108,71 Mb Available Physical Memory | 28,36% Memory free
920,52 Mb Paging File | 530,59 Mb Available in Paging File | 57,64% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55,88 Gb Total Space | 14,12 Gb Free Space | 25,26% Space Free | Partition Type: NTFS

Computer Name: JIRKA-F8A7DBC60 | User Name: Jirka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = MozillaHTML] -- C:\Program Files\mozilla.org\Mozilla\mozilla.exe (Mozilla Foundation)

[HKEY_USERS\S-1-5-21-1708537768-606747145-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE -url "%1" (Mozilla Foundation)
https [open] -- C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE -url "%1" (Mozilla Foundation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" = C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process
"C:\Program Files\Condor\Condor.exe" = C:\Program Files\Condor\Condor.exe:*:Enabled:Condor -- (Condor Team - Uros Bergant & Gregor Rozman)
"C:\UDK\Q.U.B.E\Binaries\Win32\UDK.exe" = C:\UDK\Q.U.B.E\Binaries\Win32\UDK.exe:*:Enabled:UDK
"C:\Documents and Settings\Jirka\Plocha\ProSim737-v1.00\ProSim737\Prosim737.exe" = C:\Documents and Settings\Jirka\Plocha\ProSim737-v1.00\ProSim737\Prosim737.exe:*:Enabled:ProSim737
"C:\Program Files\JeSim\cw5run.exe" = C:\Program Files\JeSim\cw5run.exe:*:Enabled:Control Web 5 -- (Moravské přístroje®)
"C:\Program Files\NovaLogic\MIG-29 Fulcrum\M29.exe" = C:\Program Files\NovaLogic\MIG-29 Fulcrum\M29.exe:*:Enabled:MiG29 -- (NovaLogic)
"C:\Program Files\Smokin' Guns\smokinguns.exe" = C:\Program Files\Smokin' Guns\smokinguns.exe:*:Disabled:smokinguns


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = Ovládací panel ATI
"{11AE6807-50D2-4F59-82B3-2C3E695E94C2}" = NVIDIA PhysX v8.05.26
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216030FF}" = Java(TM) 6 Update 30
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3877E508-FD52-4095-A60C-9B2FC0341397}" = ClearView
"{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{55EB7967-5BB1-4EA2-8AFF-B2F9E487E553}" = PC Connectivity Solution
"{5FAAF230-8E1C-4295-ADFA-829BFE895850}" = SAPI51
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = ASUSDVD
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}" = ATI Parental Control & Encoder
"{8F722FA9-B994-4C9B-B292-FD32D6206EDF}" = ASUS WLAN Card Utilities/Driver
"{90280405-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional s aplikací FrontPage
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Czech
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet NIC Driver
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AF88496B-4BBA-4922-97E9-2582D3A28358}" = Nokia Connectivity Cable Driver
"{B81023A5-71ED-46EB-BE3B-9F974D1155F1}" = HP Software Update
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{CCF6C317-6428-4407-B52F-DD11B266EDC4}" = Visual C++ 8.0 Runtime Setup Package
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D9C70541-ADA5-40A4-B176-6AAFCBA05C8F}" = Airfix Dogfighter
"{DB24A9E5-A068-43DD-88D0-B51BED3C0B99}" = Nokia Suite
"{DDD446ED-4932-45B0-B58C-C8A98D11AD6B}_is1" = RC Flight Simulator beta 0.9c
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F901CA6D-A074-42D3-A11D-33AAE6FFD0C1}" = HP Deskjet 3740
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"3D Scooper" = 3D Scooper 1.0
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Acala 3GP Movies Free_is1" = Acala 3GP Movies Free 2.4.4
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = Softarová utilita ATI - Odinstalovat
"Ashampoo Burning Studio 6" = Ashampoo Burning Studio 6
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BFGC" = Big Fish Games: Game Manager
"CCleaner" = CCleaner
"Combat Flight Simulator 3.0" = Microsoft Combat Flight Simulator 3.0
"Condor: The Competition Soaring Simulator" = Condor: The Competition Soaring Simulator 1.0.8
"DAEMON Tools Lite" = DAEMON Tools Lite
"Defraggler" = Defraggler
"FlightGear_is1" = FlightGear v2.0.0
"FMS" = FMS
"FormatFactory" = FormatFactory 2.30
"GameOver" = Domácí násilí - Game Over
"Google Chrome" = Google Chrome
"HControl" = ATK0100 ACPI UTILITY
"ie8" = Windows Internet Explorer 8
"JeSim2006_is1" = JeSim 1.2
"Kalendář_is1" = Kalendář v0.1.21
"Kat" = Kat
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft.Net.Client.3.5" = Microsoft .NET Framework Client Profile
"MIG-29 Fulcrum" = MIG-29 Fulcrum
"Mozilla (1.7.13)" = Mozilla (1.7.13)
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nokia Suite" = Nokia Suite
"OggDS" = Direct Show Ogg Vorbis Filter (remove only)
"OpenAL" = OpenAL
"Osada: Kolos" = Osada: Kolos
"Pack Secrets of Vatican and Hollywood_is1" = Pack Secrets of Vatican and Hollywood ml
"PAKOON v1.ONE (beta)" = PAKOON v1.ONE (beta)
"Pět vražedných démonů_is1" = Pět vražedných démonů
"ReadManiac_is1" = ReadManiac 2.5.2
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Vertex Wireless USB Modem Driver" = Vertex Wireless USB Modem Driver Software
"VertiSim" = VertiSim
"VLC media player" = VLC media player 1.1.11
"VW100 Connection Manager" = Odinstalovat U:fonův 3G mobilní internet
"Warbirds 277 R3" = Warbirds 277 R3
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.00 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XP Codec Pack" = XP Codec Pack

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1.1.2012 13:50:18 | Computer Name = JIRKA-F8A7DBC60 | Source = Application Error | ID = 1000
Description = Chybující aplikace m29.exe, verze 1.0.0.1, chybující modul m29.exe,
verze 1.0.0.1, adresa chyby 0x00113811.

Error - 6.1.2012 17:16:52 | Computer Name = JIRKA-F8A7DBC60 | Source = .NET Runtime 2.0 Error Reporting | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, stamp 48025c30,
faulting module urlmon.dll, version 8.0.6001.19165, stamp 4eb4396b, debug? 0, fault
address 0x0003e542.

Error - 7.1.2012 7:16:41 | Computer Name = JIRKA-F8A7DBC60 | Source = Application Error | ID = 1000
Description = Chybující aplikace prism3d.exe, verze 1.0.0.1, chybující modul p3core.dll,
verze 0.0.0.0, adresa chyby 0x0003e81e.

Error - 7.1.2012 9:22:58 | Computer Name = JIRKA-F8A7DBC60 | Source = Application Error | ID = 1000
Description = Chybující aplikace dogfighter.exe, verze 0.0.0.0, chybující modul
ntdll.dll, verze 5.1.2600.6055, adresa chyby 0x00001278.

Error - 7.1.2012 18:31:54 | Computer Name = JIRKA-F8A7DBC60 | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 11.1.2012 13:31:57 | Computer Name = JIRKA-F8A7DBC60 | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 14.1.2012 1:51:26 | Computer Name = JIRKA-F8A7DBC60 | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 17.1.2012 7:07:41 | Computer Name = JIRKA-F8A7DBC60 | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 18.1.2012 14:24:50 | Computer Name = JIRKA-F8A7DBC60 | Source = Application Error | ID = 1000
Description = Chybující aplikace labyrinth.exe, verze 0.0.0.0, chybující modul ntdll.dll,
verze 5.1.2600.6055, adresa chyby 0x000116f4.

Error - 23.1.2012 8:50:11 | Computer Name = JIRKA-F8A7DBC60 | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

[ System Events ]
Error - 23.1.2012 13:33:07 | Computer Name = JIRKA-F8A7DBC60 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 23.1.2012 13:33:23 | Computer Name = JIRKA-F8A7DBC60 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2

Error - 23.1.2012 14:32:17 | Computer Name = JIRKA-F8A7DBC60 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 23.1.2012 14:33:16 | Computer Name = JIRKA-F8A7DBC60 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2

Error - 23.1.2012 14:44:56 | Computer Name = JIRKA-F8A7DBC60 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 23.1.2012 14:45:05 | Computer Name = JIRKA-F8A7DBC60 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2

Error - 24.1.2012 4:46:50 | Computer Name = JIRKA-F8A7DBC60 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 24.1.2012 4:46:59 | Computer Name = JIRKA-F8A7DBC60 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2

Error - 24.1.2012 10:43:06 | Computer Name = JIRKA-F8A7DBC60 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 24.1.2012 10:43:17 | Computer Name = JIRKA-F8A7DBC60 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2


< End of report >

Znovu spusť OTL.

• Pokud používáš Win Vista či Win7, klikni na OTL pravým myšítkem a dej Run As Administrator či Spustit jako správce.
• Pokud používáš 64bitový OS, zkontroluj, zda-li je zaškrtnutý čtvereček Pro 64 bitové OS. Pokud ne, zaškrtni jej.
• Do spodního okénka Vlastní skenování/opravy vlož tento script (pouze zelená písmenka v bílém poli!):

• Klikni na tlačítko [Opravit].
• Po dokončení skenu se objeví log, ten mi sem vlož.
• Pokud se log nevejde do jednoho příspěvku, rozděl jej na více částí.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Jirka
->Temp folder emptied: 3296188 bytes
->Temporary Internet Files folder emptied: 7267755 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 51278265 bytes
->Google Chrome cache emptied: 5936900 bytes
->Flash cache emptied: 3508 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33237 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2134153 bytes
%systemroot%\System32 .tmp files removed: 102344 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 36562 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 358430981 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 409,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: Jirka
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore points cleared and new OTL Restore Point set!
========== OTL ==========
Service Boonty Games stopped successfully!
Service Boonty Games deleted successfully!
C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-1708537768-606747145-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Ask.com" removed from browser.search.selectedEngine
Prefs.js: ffxtlbr@babylon.com:1.1.3 removed from extensions.enabledItems
Prefs.js: "http://search.babylon.com/?AF=100888&tt ... 3ab00eb&q=" removed from keyword.URL
Prefs.js: "" removed from sweetim.toolbar.previous.browser.search.defaulturl
C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de folder moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
File C:\Documents and Settings\Jirka\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll not found.
Registry value HKEY_USERS\S-1-5-21-1708537768-606747145-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_USERS\S-1-5-21-1708537768-606747145-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
Registry value HKEY_USERS\S-1-5-21-1708537768-606747145-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP130.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D3.tmp\jsc.exe deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D3.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F5.tmp\WindowsBase.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F5.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP246.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2D8.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3B3.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3C2.tmp\mscorlib.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3C2.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4A0.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP4C9.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP55.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC.tmp folder deleted successfully.
C:\WINDOWS\CSC\csc1.tmp deleted successfully.
========== FILES ==========
C:\Program Files\Common Files\BOONTY Shared\Service folder moved successfully.
C:\Program Files\Common Files\BOONTY Shared folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware\Logs folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Malwarebytes folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware\Logs folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware\Configuration folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Malwarebytes folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\js folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\rslt folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\Ftxt folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\frameIE6 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\frame2_ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\frame\Tabs folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\frame folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\dropdown folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\controls folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\Btn folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6\banner1_ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img-ie6 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\rslt folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\Ftxt folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\frame2 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\frame\Tabs folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\frame folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\dropdown folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\crsl_ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\controls folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\cmnty folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\Btn folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img\banner_ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI\img folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\LocalUI folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon\Gloss folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\BOONTY\Licenses folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\BOONTY folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Babylon\updates folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Babylon\Content\icons folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Babylon\Content folder moved successfully.
C:\Documents and Settings\Jirka\Data aplikací\Babylon folder moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Program Files\Paradox Entertainment\Airfix Dogfighter\CrackNoCD.exe deleted successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.

OTL by OldTimer - Version 3.2.31.0 log created on 01242012_182631

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

OK, OTL provedlo, co mělo.

Jak je na tom počítač? Můžeme dočistit?

Zdá se že je na tom lépe

Super, takže dočistíme a máme hotovo.

Spusť znovu OTL a klikni na tlačítko [CleanUp!], čímž po sobě program uklidí.

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stáhni a spusť.
• Klikni na Start a potvrď OK.
• Program uklidí a může (nemusí) restartovat PC.
• Po použití utilitu smaž.

Pokud nemáš, stáhni CCleaner z tohoto odkazu.

• Panel čistič
• Vše nech jak je, jen dej Analyzovat a poté Spustit CCleaner.

• Panel registry
• Klikni na Hledej problémy.
• Následně na Opravit problémy - zálohu registrů doporučuji udělat, oprav všechny problémy.
• Postup opakuj, dokud nebude bez problémů - většinou cca 3x.

• Panel nástroje
• Zde můžeš odinstalovat nepotřebné programy.

CCleaner doporučuji používat cca jednou za týden.

... a pokud nejsou žádné dotazy, bylo by to z mé strany vše.

ok, díky moc

Není vůbec zač a rádo se stalo. Přeji pěkný den.