Prosím o preventívnu kontrolu

Zpráva

Iva212 · #1 Příspěvek od **Iva212** » 01 čer 2012 20:49

Je to PC mojej sestry a majú extrémne málo miesta na disku.
Prosím o kontrolu či sa tam nedajú ešte nejaké zbytočnosti zmazať.
Dúfam, že to nevadí, ale pred vygenerovním logu som použila TFC, OTC a CClener - z toho istého dôvodu - majú (mali) tu málo miesta. Pred ich použitím tam bolo iba okolo 2,73 GB voľného miesta. Tak sa to dosť prečistilo.
Na noc chcem ešte pustiť defragmentáciu disku.
Takže tu je log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by ivo at 2012-06-01 21:42:06
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 17 GB (42%) free of 40 GB
Total RAM: 3071 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:42:14, on 1.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Teta_Iva\Instalacky\RSIT.exe
C:\Program Files\trend micro\ivo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000& ... 11B1087A34}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000& ... 11B1087A34}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=stonicla& ... Terms}&f=4
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - (no file)
O2 - BHO: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - mscoree.dll (file missing)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: (no name) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - (no file)
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1165696359
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: ServiceLayer - Unknown owner - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 10456 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-AS-FADEDE8895E8-ivo.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://search.babylon.com/?babsrc=HP_Prot"
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165, {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.21, support@predictad.com:1.11, toolbar@ask.com:3.11.3.15590, ffxtlbr@babylon.com:1.1.3, ffxtlbr@Facemoods.com:1.2.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://websearch.ask.com/redirect?clien ... Y^YY^SK&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"support@vdownloader.com"=C:\Program Files\VDownloader\Addons\FireFox

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

D:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\
centrumpomocnik@centrum.cz
ffxtlbr@babylon.com
support@predictad.com
toolbar@ask.com
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\
askcom.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
AC-Pro - C:\Program Files\AutocompletePro\AutocompletePro.dll [2010-07-14 97760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll [2011-08-14 270960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-11-08 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}]
IEExtension.VDownloaderBHO - C:\WINDOWS\system32\mscoree.dll [2009-11-07 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-09-21 3853984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-11-08 1619352]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]
{98889811-442D-49dd-99D7-DC866BE87DBC} - Babylon Toolbar - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll [2011-08-14 237680]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-02-19 1337648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-11-02 2508104]
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-07-26 397992]
"Adobe Reader Speed Launcher"=D:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2012-02-16 114992]
"Sweetpacks Communicator"=C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-10-05 500208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
C:\Program Files\BitComet\BitComet.exe /tray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods]
C:\Program Files\facemoods.com\facemoods\1.4.17.6\facemoodssrv.exe /md I []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
C:\Program Files\Samsung\Kies\KiesHelper.exe /s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
C:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

C:\Documents and Settings\ivo\Nabídka Start\Programy\Po spuštění
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"ConsentPromptBehaviorAdmin"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe"="C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Enabled:Zoo Tycoon 2 Executable"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"D:\Program Files\Opera\opera.exe"="D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe"="C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe"="C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe"="C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-06-01 21:42:06 ----D---- C:\rsit
2012-06-01 21:42:06 ----D---- C:\Program Files\trend micro
2012-05-28 15:39:13 ----D---- C:\Program Files\Barbie(TM)
2012-05-27 16:35:08 ----D---- C:\Program Files\Defraggler
2012-05-27 16:28:43 ----D---- C:\Program Files\CCleaner
2012-05-22 18:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2012-05-22 18:46:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2012-05-22 18:44:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2012-05-22 18:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$

======List of files/folders modified in the last 1 month======

2012-06-01 21:42:14 ----D---- C:\WINDOWS\Prefetch
2012-06-01 21:42:06 ----RD---- C:\Program Files
2012-06-01 20:59:59 ----D---- C:\Documents and Settings\ivo\Data aplikací\Winamp
2012-06-01 20:59:58 ----D---- C:\WINDOWS
2012-06-01 19:53:26 ----SD---- C:\WINDOWS\Tasks
2012-06-01 19:47:58 ----D---- C:\WINDOWS\system32
2012-06-01 19:47:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-06-01 19:44:26 ----D---- C:\WINDOWS\Temp
2012-06-01 19:42:37 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-06-01 19:42:36 ----D---- C:\WINDOWS\system32\CatRoot2
2012-06-01 17:48:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
2012-05-28 15:39:52 ----HD---- C:\Program Files\InstallShield Installation Information
2012-05-28 15:39:47 ----A---- C:\WINDOWS\ka.ini
2012-05-27 16:29:53 ----D---- C:\Documents and Settings\ivo\Data aplikací\Media Player Classic
2012-05-27 16:29:52 ----D---- C:\WINDOWS\Debug
2012-05-25 14:20:53 ----HD---- C:\WINDOWS\inf
2012-05-22 20:44:55 ----D---- C:\WINDOWS\Microsoft.NET
2012-05-22 20:44:53 ----RSD---- C:\WINDOWS\assembly
2012-05-22 18:56:32 ----SHD---- C:\WINDOWS\Installer
2012-05-22 18:56:32 ----SHD---- C:\Config.Msi
2012-05-22 18:56:17 ----D---- C:\WINDOWS\WinSxS
2012-05-22 18:52:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-05-22 18:46:24 ----N---- C:\WINDOWS\system32\MRT.exe
2012-05-22 18:46:03 ----HD---- C:\WINDOWS\$hf_mig$
2012-05-22 18:45:21 ----D---- C:\Program Files\Microsoft Security Client
2012-05-22 18:44:57 ----D---- C:\WINDOWS\system32\drivers
2012-05-22 18:35:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-05-18 14:56:12 ----A---- C:\WINDOWS\NeroDigital.ini
2012-05-14 11:35:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-08-14 105344]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-01-27 50704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2011-04-27 20032]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\F:\Test\Lavalys.EVEREST.Ultimate.Edition.v5.30.1990.Beta\EVEREST.Ultimate.Edition.5.30.2054\kerneld.wnt []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2010-05-06 96416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2010-05-06 12704]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2010-05-06 121504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2010-05-13 217088]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-21 136176]
S2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-04-14 604488]
S2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-21 136176]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe []
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-04-14 361288]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **Márty84** » 01 čer 2012 21:47

Dobry vecer

Nekolik veci na smazani tam opravdu vidim. Moc mista na disku uz to neuvolni, ale chod pc by se mohl zrychlit. Abych to mohl odstranit vsechno, hodte mi sem logy z OTL

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Iva212 · #3 Příspěvek od **Iva212** » 01 čer 2012 21:52

Ďakujem za kontrolu.
Ja už u nich ale nie som.
Takže to budem môcť urobiť až zajtra, príp. v nedeľu.
Keď sa k nim prepracujem tak tie logy sem hodím.
Zatiaľ ďakujem.

#4 Příspěvek od **Márty84** » 01 čer 2012 22:03

OK

Zatim tedy neni zac, jeste jsem nic neudelal

Iva212 · #5 Příspěvek od **Iva212** » 02 čer 2012 09:38

Hotovo, prikladám logy: OTL.txt 1. časť:

OTL logfile created on: 2.6.2012 10:24:33 - Run 1
OTL by OldTimer - Version 3.2.45.0 Folder = C:\Documents and Settings\ivo\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 80,75% Memory free
4,34 Gb Paging File | 3,88 Gb Available in Paging File | 89,33% Paging File free
Paging file location(s): c:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 16,29 Gb Free Space | 41,69% Space Free | Partition Type: NTFS
Drive D: | 109,98 Gb Total Space | 10,11 Gb Free Space | 9,20% Space Free | Partition Type: NTFS
Drive G: | 465,76 Gb Total Space | 465,66 Gb Free Space | 99,98% Space Free | Partition Type: NTFS

Computer Name: AS-FADEDE8895E8 | User Name: ivo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.06.02 10:21:47 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ivo\Plocha\OTL.exe
PRC - [2012.03.26 17:08:12 | 000,931,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012.03.26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012.03.18 20:48:29 | 000,924,600 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.02.26 16:01:44 | 000,295,728 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012.02.16 15:29:02 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2010.05.13 07:31:10 | 000,217,088 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2009.11.02 02:30:00 | 002,508,104 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
PRC - [2009.07.20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009.02.26 15:24:50 | 000,097,680 | ---- | M] (Microsoft Corporation) -- D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
PRC - [2009.02.10 18:01:49 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.07.13 16:59:48 | 000,131,131 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
PRC - [2006.07.13 16:59:32 | 000,065,599 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
PRC - [2006.04.03 18:04:02 | 000,020,543 | ---- | M] (Apache Software Foundation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe

========== Modules (No Company Name) ==========

MOD - [2012.05.22 18:56:14 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2012.03.18 20:48:28 | 001,969,080 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.10.11 06:42:44 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2011.09.05 15:46:29 | 000,043,520 | ---- | M] () -- C:\WINDOWS\system32\CmdLineExt03.dll
MOD - [2011.06.29 14:04:41 | 011,800,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\1fb5d8788c9a9a7f44e2d0fa19c62729\System.Web.ni.dll
MOD - [2011.06.29 14:03:16 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\48f8b951a598647dd309ca2031807a5d\System.Configuration.ni.dll
MOD - [2011.06.29 14:02:32 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d9228d58804dfd75fd92a4d12ffac8af\Accessibility.ni.dll
MOD - [2011.06.29 13:18:12 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f354057a5b4fad4c399da28449ba0d92\System.Xml.ni.dll
MOD - [2011.06.29 13:18:08 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\29d16d2f164fe2263539789ecd0d9d4f\System.Windows.Forms.ni.dll
MOD - [2011.06.29 13:17:57 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\a59b17e6040e3f6286a2227dfdb17096\System.Drawing.ni.dll
MOD - [2011.06.29 13:15:05 | 007,950,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\f6a9a002526806f3a5b745cf5c407cae\System.ni.dll
MOD - [2011.06.29 13:14:59 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll
MOD - [2010.04.14 10:22:56 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.dll
MOD - [2010.04.14 10:22:56 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.dll
MOD - [2010.04.14 10:22:56 | 000,007,680 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3693.42556__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.dll
MOD - [2010.04.14 10:22:56 | 000,007,680 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.dll
MOD - [2010.04.14 10:22:55 | 001,728,512 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:55 | 000,364,544 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3693.42522__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:55 | 000,290,816 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3693.42442__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:55 | 000,204,800 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:55 | 000,077,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3693.42517__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:55 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3693.42456__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:55 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:55 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3693.42451__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:54 | 000,491,520 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:54 | 000,139,264 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:54 | 000,106,496 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:54 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3693.42450__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:54 | 000,069,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3693.42499__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:54 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:53 | 000,364,544 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:53 | 000,094,208 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:53 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3693.42503__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:51 | 000,811,008 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3693.42488__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:51 | 000,405,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3693.42512__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
MOD - [2010.04.14 10:22:50 | 000,712,704 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3693.42452__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:50 | 000,589,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:50 | 000,225,280 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:50 | 000,126,976 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:50 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:50 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:49 | 000,798,720 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3693.42518__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:49 | 000,450,560 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3693.42482__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:49 | 000,438,272 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2010.04.14 10:22:49 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:49 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3693.42466__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:49 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3693.42497__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:48 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2010.04.14 10:22:48 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3309.28608__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3309.28629__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3309.28645__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3309.28627__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
MOD - [2010.04.14 10:22:48 | 000,007,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
MOD - [2010.04.14 10:22:45 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.3309.28604__90ba9c70f846762e\CLI.Foundation.dll
MOD - [2010.04.14 10:22:45 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3309.28618__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
MOD - [2010.04.14 10:22:45 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.3309.28601__90ba9c70f846762e\LOG.Foundation.dll
MOD - [2010.04.14 10:22:45 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3309.28603__90ba9c70f846762e\NEWAEM.Foundation.dll
MOD - [2010.04.14 10:22:45 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3309.28669__90ba9c70f846762e\CLI.Foundation.XManifest.dll
MOD - [2010.04.14 10:22:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3309.28630__90ba9c70f846762e\DEM.OS.I0602.dll
MOD - [2010.04.14 10:22:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3309.28620__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3309.28611__90ba9c70f846762e\CLI.Component.Client.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.3309.28626__90ba9c70f846762e\MOM.Foundation.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.3309.28645__90ba9c70f846762e\DEM.OS.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.3309.28630__90ba9c70f846762e\DEM.Graphics.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
MOD - [2010.04.14 10:22:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3309.28624__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3309.28632__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3309.28627__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3309.28635__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2010.04.14 10:22:43 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.3309.28626__90ba9c70f846762e\APM.Foundation.dll
MOD - [2010.04.14 10:22:43 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Server.Shared.dll
MOD - [2010.04.14 10:22:42 | 000,503,808 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3693.42564__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
MOD - [2010.04.14 10:22:42 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3693.42545__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
MOD - [2010.04.14 10:22:42 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
MOD - [2010.04.14 10:22:42 | 000,014,848 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
MOD - [2010.04.14 10:22:42 | 000,013,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll
MOD - [2010.04.14 10:22:42 | 000,007,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3693.42437__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
MOD - [2010.04.14 10:22:41 | 000,544,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3693.42525__90ba9c70f846762e\CLI.Component.Systemtray.dll
MOD - [2010.04.14 10:22:41 | 000,405,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3693.42455__90ba9c70f846762e\CLI.Component.Wizard.dll
MOD - [2010.04.14 10:22:41 | 000,106,496 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3693.42531__90ba9c70f846762e\MOM.Implementation.dll
MOD - [2010.04.14 10:22:41 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3693.42530__90ba9c70f846762e\LOG.Foundation.Implementation.dll
MOD - [2010.04.14 10:22:41 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3309.28608__90ba9c70f846762e\CLI.Foundation.Private.dll
MOD - [2010.04.14 10:22:41 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3309.28614__90ba9c70f846762e\LOG.Foundation.Private.dll
MOD - [2010.04.14 10:22:41 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3309.28627__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
MOD - [2010.04.14 10:22:41 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3309.28612__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
MOD - [2010.04.14 10:22:41 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3309.28626__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
MOD - [2010.04.14 10:22:40 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3693.42440__90ba9c70f846762e\CLI.Component.Runtime.dll
MOD - [2010.04.14 10:22:40 | 000,057,344 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3693.42441__90ba9c70f846762e\CLI.Component.SkinFactory.dll
MOD - [2010.04.14 10:22:40 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3309.28628__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
MOD - [2010.04.14 10:22:38 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3309.28624__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
MOD - [2010.04.14 10:22:37 | 001,142,784 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3693.42446__90ba9c70f846762e\CLI.Component.Dashboard.dll
MOD - [2010.04.14 10:22:36 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.3693.42440__90ba9c70f846762e\ATIDEMOS.dll
MOD - [2010.04.14 10:22:36 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3309.28621__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
MOD - [2010.04.14 10:22:36 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
MOD - [2010.04.14 10:22:36 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3693.42531__90ba9c70f846762e\CCC.Implementation.dll
MOD - [2010.04.14 10:22:36 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3309.28637__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
MOD - [2010.04.14 10:22:35 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3693.42439__90ba9c70f846762e\APM.Server.dll
MOD - [2010.04.14 10:22:35 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3693.42438__90ba9c70f846762e\AEM.Server.dll
MOD - [2010.02.10 18:10:10 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2009.11.24 13:36:36 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2009.02.10 18:01:49 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
MOD - [2006.04.03 18:04:02 | 000,876,544 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libeay32.dll
MOD - [2006.04.03 18:04:02 | 000,159,744 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\ssleay32.dll
MOD - [2006.04.03 18:04:02 | 000,024,691 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012.03.26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2010.05.13 07:31:10 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010.04.14 10:41:26 | 000,604,488 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc)
SRV - [2010.04.14 10:41:24 | 000,361,288 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.11.16 12:25:48 | 000,029,000 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009.07.20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009.02.10 18:01:49 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2008.04.14 05:22:38 | 000,111,616 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm)
SRV - [2008.04.14 05:22:38 | 000,111,616 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDE)
SRV - [2008.04.14 05:22:14 | 000,033,280 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\clipsrv.exe -- (ClipSrv)
SRV - [2008.04.14 05:21:48 | 000,033,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\msgsvc.dll -- (Messenger)
SRV - [2008.04.14 05:21:46 | 000,053,248 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\mprdim.dll -- (RemoteAccess)
SRV - [2008.04.14 05:21:36 | 000,017,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\alrsvc.dll -- (Alerter)
SRV - [2006.11.03 19:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV - [2006.07.13 16:59:48 | 000,131,131 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -- (nSvcIp)
SRV - [2006.07.13 16:59:32 | 000,065,599 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -- (nSvcLog)
SRV - [2006.04.03 18:04:02 | 000,020,543 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe -- (ForcewareWebInterface)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- F:\Test\Lavalys.EVEREST.Ultimate.Edition.v5.30.1990.Beta\EVEREST.Ultimate.Edition.5.30.2054\kerneld.wnt -- (EverestDriver)
DRV - [2011.04.27 14:19:28 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010.05.13 07:31:10 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010.05.06 12:28:14 | 000,121,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2010.05.06 12:28:14 | 000,096,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2010.05.06 12:28:14 | 000,012,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010.02.11 09:38:10 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.01.27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.14 04:40:45 | 000,120,064 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia)
DRV - [2008.04.14 04:31:03 | 000,153,856 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\dmio.sys -- (dmio)
DRV - [2008.04.14 04:30:48 | 000,800,000 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot)
DRV - [2008.04.13 21:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\fastfat.sys -- (Fastfat)
DRV - [2008.04.13 20:32:36 | 000,066,048 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\udfs.sys -- (Udfs)
DRV - [2006.08.14 08:51:28 | 000,105,344 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2006.07.11 15:38:30 | 000,020,480 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2006.07.11 15:38:28 | 000,057,856 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2006.06.18 23:59:28 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.03.17 11:18:58 | 000,392,960 | R--- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2006.03.02 14:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k)
DRV - [2006.03.02 14:00:00 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC)
DRV - [2006.03.02 14:00:00 | 000,005,888 | ---- | M] (Microsoft Corp., Veritas Software.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\dmload.sys -- (dmload)
DRV - [2004.08.13 04:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000& ... 11B1087A34}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=stonicla& ... Terms}&f=4
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?sr ... 11B1087A34}

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE8HP&PC=B8MC
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000& ... 11B1087A34}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... orm=IE8SRC
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=stonicla& ... Terms}&f=4
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTer ... 11b1087a34
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... FC0ED0393A
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss ... ffID=17981
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{6A560494-DBB6-460E-A622-89774FBA6673}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?sr ... 11B1087A34}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.21
FF - prefs.js..extensions.enabledItems: support@predictad.com:1.11
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.11.3.15590
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.3
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.1
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?clien ... Y^YY^SK&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Ask.com"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?AF=100888&ba ... 11b1087a34"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012.03.18 20:48:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins

[2010.04.14 09:55:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Extensions
[2012.05.03 21:51:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions
[2011.01.26 11:28:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.09.20 22:17:44 | 000,000,000 | ---D | M] (Centrum domĂ©novĂ˝ pomocnĂk) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\centrumpomocnik@centrum.cz
[2011.09.20 22:24:51 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com
[2010.08.06 15:10:59 | 000,000,000 | ---D | M] ("AutocompletePro - Your handy search suggestions tool") -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\support@predictad.com
[2012.05.24 11:38:10 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com
[2012.06.01 17:49:14 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\askcom.xml
[2012.04.24 20:35:15 | 000,003,992 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\sweetim.xml
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\CENTRUMPOMOCNIK@CENTRUM.CZ
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\FFXTLBR@BABYLON.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\FFXTLBR@FACEMOODS.COM.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\ivo\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Documents and Settings\ivo\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8312_0\npSkypeChromePlugin.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Adobe Acrobat (Disabled) = D:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: AutocompletePro plugin for chrome = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.0_0\
CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8312_0\
CHR - Extension: Gmail = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: YouTube = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: AutocompletePro plugin for chrome = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.0_0\
CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of
CHR - Extension: SweetIM for Facebook = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8312_0\
CHR - Extension: Gmail = C:\Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2006.03.02 14:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {64182481-4F71-486b-A045-B233BD0DA8FC} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\ivo\Nabídka Start\Programy\Po spuštění\Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html ()
O9 - Extra Button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 1165696359 (MUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DCA70F8F-B2AF-4E65-BFF9-37D34040B6B8}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\ivo\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ivo\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.04.02 18:36:20 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011.05.05 01:16:22 | 000,000,000 | -H-D | M] - G:\autorun -- [ NTFS ]
O32 - AutoRun File - [2002.10.17 04:56:50 | 000,000,036 | RH-- | M] () - G:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.06.02 10:21:43 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\ivo\Plocha\OTL.exe
[2012.06.01 21:42:06 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.06.01 21:42:06 | 000,000,000 | ---D | C] -- C:\rsit
[2012.06.01 20:59:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ivo\Recent
[2012.05.28 15:39:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Barbie(TM)
[2012.05.28 15:39:13 | 000,000,000 | ---D | C] -- C:\Program Files\Barbie(TM)
[2012.05.27 16:35:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Defraggler
[2012.05.27 16:35:08 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler
[2012.05.27 16:28:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ivo\Nabídka Start\Programy\CCleaner
[2012.05.27 16:28:43 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner

========== Files - Modified Within 30 Days ==========

[2012.06.02 10:26:35 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.06.02 10:24:06 | 000,519,474 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.06.02 10:24:06 | 000,512,894 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.06.02 10:24:06 | 000,123,528 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.06.02 10:24:06 | 000,104,616 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.06.02 10:21:47 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ivo\Plocha\OTL.exe
[2012.06.02 10:19:54 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.06.02 10:19:42 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.06.02 09:01:00 | 000,000,230 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2012.06.02 09:00:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.06.02 05:37:31 | 000,000,396 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012.06.01 19:38:51 | 003,476,448 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.05.28 15:39:47 | 000,000,100 | ---- | M] () -- C:\WINDOWS\ka.ini
[2012.05.28 15:39:45 | 000,001,369 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Barbie(TM) Explorer(TM).lnk
[2012.05.28 02:00:00 | 000,000,338 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-AS-FADEDE8895E8-ivo.job
[2012.05.27 16:35:10 | 000,001,591 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Defraggler.lnk
[2012.05.27 16:28:44 | 000,000,693 | ---- | M] () -- C:\Documents and Settings\ivo\Plocha\CCleaner.lnk
[2012.05.24 14:04:42 | 000,001,824 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2012.05.22 18:45:21 | 000,001,912 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2012.05.18 14:56:12 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012.05.18 14:47:54 | 005,925,657 | ---- | M] () -- C:\Documents and Settings\ivo\Plocha\striho.mp4
[2012.05.15 20:29:38 | 000,002,443 | ---- | M] () -- C:\Documents and Settings\ivo\Plocha\Microsoft Office Word 2007 (2).lnk

========== Files Created - No Company Name ==========

[2012.06.02 10:26:35 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.05.28 20:07:48 | 000,254,304 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.05.28 15:39:45 | 000,001,369 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Barbie(TM) Explorer(TM).lnk
[2012.05.27 16:35:10 | 000,001,591 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Defraggler.lnk
[2012.05.27 16:28:44 | 000,000,693 | ---- | C] () -- C:\Documents and Settings\ivo\Plocha\CCleaner.lnk
[2012.05.22 18:55:18 | 000,000,396 | -H-- | C] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2012.05.22 18:45:19 | 000,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Security Essentials.lnk
[2012.05.18 14:56:26 | 005,925,657 | ---- | C] () -- C:\Documents and Settings\ivo\Plocha\striho.mp4
[2012.04.29 13:50:46 | 000,000,485 | ---- | C] () -- C:\WINDOWS\mamba.ini
[2012.02.17 11:15:18 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.09.05 13:35:15 | 000,000,100 | ---- | C] () -- C:\WINDOWS\ka.ini
[2011.07.22 21:49:22 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011.06.08 14:28:23 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\ivo\Data aplikací\Launch Internet Explorer Browser.lnk
[2011.05.29 08:18:04 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.05.29 08:18:04 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.05.29 08:17:49 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\ivo\Data aplikací\$_hpcst$.hpc
[2011.04.27 14:19:30 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.04.27 14:19:30 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.04.27 14:19:30 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.04.27 14:19:30 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010.12.06 13:56:24 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010.11.17 12:31:00 | 000,000,800 | ---- | C] () -- C:\Documents and Settings\ivo\Local Settings\Data aplikací\SRDownloader.nast
[2010.11.17 12:30:38 | 000,000,046 | ---- | C] () -- C:\Documents and Settings\ivo\Local Settings\Data aplikací\SRDownloader.err
[2010.10.18 14:01:57 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2010.08.11 12:08:48 | 000,000,383 | ---- | C] () -- C:\WINDOWS\SYMGAMES.INI
[2010.06.30 13:59:39 | 000,000,179 | ---- | C] () -- C:\WINDOWS\boxworld.ini

========== LOP Check ==========

[2011.12.27 13:35:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2011.07.01 22:27:30 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2011.11.20 19:45:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJ
[2011.07.03 16:06:10 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJEGV
[2011.07.14 21:09:39 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJEPPEX
[2011.07.14 21:09:21 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJMyPrinter
[2012.06.01 17:48:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
[2011.07.01 23:25:41 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJScan
[2011.07.01 23:59:10 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJSolutionMenu
[2011.12.27 13:35:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\InstallMate
[2011.05.29 13:00:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2011.12.27 13:35:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Premium
[2010.09.30 20:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\regid.1986-12.com.adobe
[2011.09.20 21:56:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2012.05.14 11:35:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SweetIM
[2010.04.14 10:40:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2010.04.14 10:40:30 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
[2011.12.27 13:35:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Babylon
[2011.04.02 11:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\BabylonToolbar
[2011.06.10 12:57:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\BitComet
[2010.08.02 19:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Black Sea Studios
[2011.07.02 20:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Canon
[2011.07.01 23:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Canon Easy-WebPrint EX
[2011.08.10 15:01:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\DVDVideoSoft
[2011.04.02 11:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\facemoods.com
[2010.04.14 09:49:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\GHISLER
[2011.08.01 09:44:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy
[2011.06.12 11:28:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Opera
[2011.05.29 13:00:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\PC Suite
[2011.05.30 14:41:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Samsung
[2010.12.06 14:01:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\SketchGames
[2010.04.14 10:41:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\TuneUp Software
[2011.11.13 13:05:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\VDownloader
[2012.06.02 09:01:00 | 000,000,230 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

========== Purity Check ==========

Iva212 · #6 Příspěvek od **Iva212** » 02 čer 2012 09:38

2. časť:

========== Custom Scans ==========

< >

< >

< MD5 for: AGP440.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.03.02 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2006.03.02 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2006.03.02 14:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2006.03.02 14:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2006.03.02 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2006.03.02 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2011.06.07 21:50:34 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2006.03.02 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2006.03.02 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.03.02 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2006.03.02 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: NVATA.SYS >
[2006.08.14 08:51:28 | 000,105,344 | R--- | M] (NVIDIA Corporation) MD5=947C4A0E7B25BCECC3B40F0F1070378B -- C:\WINDOWS\system32\drivers\nvata.sys

< MD5 for: SCECLI.DLL >
[2006.03.02 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2006.03.02 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2006.03.02 14:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2006.03.02 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2006.03.02 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1118 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\0538ec675ef0fc2eeb3020c5d098ff73\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\0538ec675ef0fc2eeb3020c5d098ff73\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\0f5dd42fadd8b583934229efc73ec540\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\0f5dd42fadd8b583934229efc73ec540\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\5dbe76ddd1fcd4015285031d7cf74338\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\5dbe76ddd1fcd4015285031d7cf74338\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\62a91f7a9f570d1ab2a19f7601463194\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\62a91f7a9f570d1ab2a19f7601463194\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\74de2a7f78552797850c881ceaa0edaf\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\74de2a7f78552797850c881ceaa0edaf\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\77463100ec7324ac49ca0f9251aabd15\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\77463100ec7324ac49ca0f9251aabd15\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\92419a04207fd81ce55728a49575bf37\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\92419a04207fd81ce55728a49575bf37\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a6a2c87ac05436e8b609edbda7142cc3\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a6a2c87ac05436e8b609edbda7142cc3\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\caac973ff1a1b0ad1760d5614b2d6c10\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\caac973ff1a1b0ad1760d5614b2d6c10\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\e8711812986a372c9a45aaff7b9e7e83\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\e8711812986a372c9a45aaff7b9e7e83\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\f23cbea7360cfe2afe8a33556b0945d1\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\f23cbea7360cfe2afe8a33556b0945d1\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\f78bf2bb8cdee4ec4de35ae36361cab4\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\f78bf2bb8cdee4ec4de35ae36361cab4\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2010.10.01 23:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Adobe
[2010.04.14 10:23:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\ATI
[2011.12.27 13:35:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Babylon
[2011.04.02 11:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\BabylonToolbar
[2011.06.10 12:57:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\BitComet
[2010.08.02 19:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Black Sea Studios
[2011.07.02 20:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Canon
[2011.07.01 23:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Canon Easy-WebPrint EX
[2011.08.10 15:01:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\DVDVideoSoft
[2011.04.02 11:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\facemoods.com
[2010.04.14 09:49:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\GHISLER
[2010.05.24 21:03:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Google
[2010.04.02 18:49:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Help
[2010.04.02 18:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Identities
[2012.01.12 16:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\InstallShield
[2010.04.14 09:55:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Macromedia
[2012.05.27 16:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Media Player Classic
[2011.07.22 17:21:48 | 000,000,000 | --SD | M] -- C:\Documents and Settings\ivo\Data aplikací\Microsoft
[2010.08.16 16:34:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Microsoft Games
[2010.04.14 09:55:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Mozilla
[2011.07.17 17:48:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Nero
[2011.08.01 09:44:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy
[2011.06.12 11:28:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Opera
[2011.05.29 13:00:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\PC Suite
[2011.05.30 14:41:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Samsung
[2010.12.06 14:01:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\SketchGames
[2012.04.12 22:33:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Skype
[2011.07.17 11:07:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\skypePM
[2010.04.14 10:41:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\TuneUp Software
[2011.11.13 13:05:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\VDownloader
[2012.06.01 20:59:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Winamp
[2010.04.29 15:09:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\WinRAR

< %APPDATA%\*.exe /s >
[2009.02.03 14:21:10 | 000,239,104 | ---- | M] (Igor Pavlov) -- C:\Documents and Settings\ivo\Data aplikací\7za.exe
[2011.08.01 09:44:51 | 000,416,160 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy\OpenCandy_9804A8E906784E8CBF9D930B643260E8\LatestDLMgr.exe
[2010.12.18 00:07:06 | 000,043,440 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy\OpenCandy_9804A8E906784E8CBF9D930B643260E8\SpeedstarterCZ.exe
[2010.12.17 19:48:22 | 001,720,472 | ---- | M] (Speedchecker Limited ) -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy\OpenCandy_9804A8E906784E8CBF9D930B643260E8\ZrychleniPocitace.exe
[2011.08.01 09:45:00 | 001,842,096 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\OpenCandy\OpenCandy_9804A8E906784E8CBF9D930B643260E8\ZrychleniPocitace_p2v1.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2011.06.07 22:02:29 | 000,282,624 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011.06.07 19:47:05 | 000,262,144 | ---- | M] () -- C:\WINDOWS\System32\config\security.sav
[2011.06.07 22:02:29 | 025,952,256 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011.06.07 22:02:29 | 004,718,592 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.06.01 19:38:51 | 003,476,448 | ---- | M] () -- C:\WINDOWS\system32\FNTCACHE.DAT
[2012.06.02 10:24:06 | 000,123,528 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.06.02 10:24:06 | 000,104,616 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.06.02 10:24:06 | 000,512,894 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.06.02 10:24:06 | 000,519,474 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.06.02 10:24:06 | 001,278,786 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.06.02 10:26:35 | 000,000,512 | ---- | M] () MD5=1E32E6FC273BE52EC70A60DAE7EAD50B -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *loader* /s >
[2009.07.20 11:52:26 | 000,000,232 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2012.02.17 15:27:17 | 000,000,991 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Photo Album Downloader for Yahoo 2.6.1.6\Help Photo Album Downloader for Yahoo.lnk
[2012.02.17 15:27:17 | 000,000,991 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Photo Album Downloader for Yahoo 2.6.1.6\Photo Album Downloader for Yahoo.lnk
[2012.02.17 15:27:17 | 000,000,931 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\Photo Album Downloader for Yahoo 2.6.1.6\Uninstall Photo Album Downloader for Yahoo.lnk
[2011.11.13 13:04:11 | 000,001,561 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VDownloader\VDownloader.lnk
[2011.12.31 22:47:53 | 000,001,336 | ---- | M] () -- \Documents and Settings\All Users\Plocha\VDownloader.lnk
[2012.06.01 21:04:42 | 000,001,336 | ---- | M] () -- \Documents and Settings\ivo\Data aplikací\Microsoft\Internet Explorer\Quick Launch\VDownloader.lnk
[2011.10.14 14:52:50 | 015,240,116 | ---- | M] () -- \Documents and Settings\ivo\Dokumenty\Downloads\VDownloaderSetup (1).exe
[2011.11.13 13:03:26 | 015,240,116 | ---- | M] () -- \Documents and Settings\ivo\Dokumenty\Downloads\VDownloaderSetup (2).exe
[2011.10.03 15:43:56 | 015,240,116 | ---- | M] () -- \Documents and Settings\ivo\Dokumenty\Downloads\VDownloaderSetup.exe
[2010.11.17 12:30:38 | 000,000,046 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\SRDownloader.err
[2010.11.17 12:36:29 | 000,000,800 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\SRDownloader.nast
[2011.12.05 16:16:21 | 004,348,416 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_12801\CRX_INSTALL\npVDownloader.dll
[2011.11.11 15:19:58 | 003,539,968 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_13222\CRX_INSTALL\npVDownloader.dll
[2011.11.11 15:19:59 | 000,000,053 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_13222\CRX_INSTALL\.svn\prop-base\npVDownloader.dll.svn-base
[2011.11.11 15:19:59 | 003,539,968 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_13222\CRX_INSTALL\.svn\text-base\npVDownloader.dll.svn-base
[2011.11.09 21:31:51 | 003,539,968 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_13318\CRX_INSTALL\npVDownloader.dll
[2011.12.17 11:12:15 | 004,348,416 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_29402\CRX_INSTALL\npVDownloader.dll
[2011.12.02 17:53:39 | 004,348,416 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_4625\CRX_INSTALL\npVDownloader.dll
[2011.11.03 17:21:03 | 003,539,968 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Google\Chrome\User Data\Temp\scoped_dir_7995\CRX_INSTALL\npVDownloader.dll
[2011.08.01 09:41:43 | 000,000,879 | ---- | M] () -- \Documents and Settings\ivo\Local Settings\Data aplikací\Opera\Opera\icons\http%3A%2F%2Fvdownloader.com%2Ffavicon.png
[2012.02.17 15:27:17 | 000,000,979 | ---- | M] () -- \Documents and Settings\ivo\Plocha\Photo Album Downloader for Yahoo.lnk
[2005.10.14 12:18:16 | 001,975,296 | ---- | M] () -- \Program Files\RSBR-Software\Photo Album Downloader for Yahoo 2.6.1.6\PhotoAlbumDownloader.exe
[2004.09.12 11:35:28 | 000,006,057 | ---- | M] () -- \Program Files\RSBR-Software\Photo Album Downloader for Yahoo 2.6.1.6\PhotoAlbumDownloader.htm
[2003.05.21 18:02:02 | 000,000,033 | ---- | M] () -- \Program Files\RSBR-Software\Photo Album Downloader for Yahoo 2.6.1.6\PhotoAlbumDownloader.ini
[2010.02.10 18:10:12 | 000,045,056 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2006.03.02 14:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2011.09.29 19:01:20 | 000,082,784 | ---- | M] () -- \WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2012.06.01 21:04:44 | 000,067,582 | ---- | M] () -- \WINDOWS\Prefetch\VDOWNLOADER.EXE-2D1E9AF6.pf
[2011.09.25 10:53:09 | 000,000,000 | ---- | M] () -- \WINDOWS\Prefetch\VDOWNLOADERSETUPP.EXE-3ACA89F5.pf
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 20:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 20:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 05:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2010.04.07 23:57:06 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2006.03.02 14:00:00 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2010.04.14 10:16:17 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap.resources\1.0.5000.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.04.14 10:55:57 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.05.22 18:56:14 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.07.23 23:14:42 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2011.07.23 23:39:34 | 002,347,008 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\383e6869cead55d5eb3c6e4df7a1ea49\System.Runtime.Serialization.ni.dll
[2011.06.29 14:04:24 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\503ccbb50e9c06c2f0b02ad8c3f2d100\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2004.07.15 14:31:54 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2003.04.07 19:24:52 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC12763\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC15572\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC17965\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC33214\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC37506\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC39764\System.Runtime.Serialization.Formatters.Soap.dll
[2010.04.07 23:57:06 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2008.04.14 04:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2006.03.02 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

< End of report >

Iva212 · #7 Příspěvek od **Iva212** » 02 čer 2012 09:40

Extras.Txt:

OTL Extras logfile created on: 2.6.2012 10:24:33 - Run 1
OTL by OldTimer - Version 3.2.45.0 Folder = C:\Documents and Settings\ivo\Plocha
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 80,75% Memory free
4,34 Gb Paging File | 3,88 Gb Available in Paging File | 89,33% Paging File free
Paging file location(s): c:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 16,29 Gb Free Space | 41,69% Space Free | Partition Type: NTFS
Drive D: | 109,98 Gb Total Space | 10,11 Gb Free Space | 9,20% Space Free | Partition Type: NTFS
Drive G: | 465,76 Gb Total Space | 465,66 Gb Free Space | 99,98% Space Free | Partition Type: NTFS

Computer Name: AS-FADEDE8895E8 | User Name: ivo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- D:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"9702:TCP" = 9702:TCP:*:Enabled:BitComet 9702 TCP
"9702:UDP" = 9702:UDP:*:Enabled:BitComet 9702 UDP

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe" = C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2 -- ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe" = C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server -- (Apache Software Foundation)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe" = C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Enabled:Zoo Tycoon 2 Executable -- (Microsoft Corporation)
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
"D:\Program Files\Opera\opera.exe" = D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe" = C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2 -- ()
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager -- (SweetIM Technologies Ltd.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}" = SweetIM for Messenger 3.6
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series" = Canon MP550 series MP Drivers
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{17CA32D1-73BD-4990-B8F6-369D8D34B05D}" = Microsoft Antimalware Service CS-CZ Language Pack
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6423DE-7959-4178-80E0-023C7EAA5347}" = NVIDIA ForceWare Network Access Manager
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{34610DE0-3C13-42CA-8E32-01FFA38AB6E8}" = PC Connectivity Solution
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{4D43D635-6FDA-4fa5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client CS-CZ Language Pack
"{55A29068-F2CE-456C-9148-C869879E2357}" = TuneUp Utilities 2009
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5B58EF61-85F2-4977-97A5-84C19F926579}" = SweetPacks Toolbar for Internet Explorer 4.5
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{5F71EB81-C72E-4B28-8D90-FDEECFEBC2DE}" = Drive Image
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{731CC4F1-DD69-46E9-B372-65F1081666B8}" = Staň sa svetobežníkom
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{7911C404-9AFA-4BB2-B9B7-E47423D87528}_is1" = Knights of Honor
"{808249bf-acfe-46c2-bc1c-797d28fdbb91}" = Nero 9 Essentials
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{90120000-0010-041B-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Slovak) 12
"{90120000-0016-041B-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Slovak) 2007
"{90120000-0016-041B-0000-0000000FF1CE}_HOMESTUDENTR_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-041B-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Slovak) 2007
"{90120000-0018-041B-0000-0000000FF1CE}_HOMESTUDENTR_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-041B-0000-0000000FF1CE}" = Microsoft Office Word MUI (Slovak) 2007
"{90120000-001B-041B-0000-0000000FF1CE}_HOMESTUDENTR_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040E-0000-0000000FF1CE}" = Microsoft Office Proof (Hungarian) 2007
"{90120000-001F-040E-0000-0000000FF1CE}_HOMESTUDENTR_{0AD4BB83-13B4-4C9D-9BAC-7F64E0B2D5D7}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-041B-0000-0000000FF1CE}" = Microsoft Office Proofing (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Slovak) 2007
"{90120000-006E-041B-0000-0000000FF1CE}_HOMESTUDENTR_{8382BA92-20E3-47B6-971B-F673F0492D4E}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-041B-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Slovak) 2007
"{90120000-00A1-041B-0000-0000000FF1CE}_HOMESTUDENTR_{4754EB3B-ED3D-4095-A2FD-684A3058A4FF}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1029-7B44-A95000000001}" = Adobe Reader 9.5.1 - Czech
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BAA7291A-6D13-4156-9E4B-62EC5F7E03E1}" = Barbie(TM) Explorer(TM)
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{C884B05A-F5D9-4AE4-9D84-E6BD9F6E7890}" = FlatOut2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{dba84796-8503-4ff0-af57-1747dd9a166d}" = Nero Online Upgrade
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FB697452-8CA4-46B4-98B1-165C922A2EF3}" = Update Manager for SweetPacks 1.0
"3FA1705966809259F916AF817C59B4F389F4572C" = Balíček ovladače systému Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"504244733D18C8F63FF584AEB290E3904E791693" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = Softarová utilita ATI - Odinstalovat
"ATI Display Driver" = ATI Display Driver
"AutocompletePro3_is1" = AutocompletePro
"BabylonToolbar" = Babylon toolbar on IE
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Defraggler" = Defraggler
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"FormatFactory" = FormatFactory 2.60
"Google Chrome" = Google Chrome
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{1F6423DE-7959-4178-80E0-023C7EAA5347}" = NVIDIA ForceWare Network Access Manager
"InstallShield_{5F71EB81-C72E-4B28-8D90-FDEECFEBC2DE}" = PowerQuest Drive Image 2002
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.8.3 (Full)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 11.0 (x86 cs)" = Mozilla Firefox 11.0 (x86 cs)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero8Lite_is1" = Nero 8 Lite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Opera 11.51.1087" = Opera 11.51
"Photo Album Downloader for Yahoo_is1" = Photo Album Downloader for Yahoo 2.6.1.6
"PohadkaDemo" = Demo Pohádky o Mrazíkovi, Ivanovi a Nastěnce
"Pro-Rally LE" = Pro-Rally LE
"Q Surf 1 - English" = Q Surf 1 - English
"Q Surf 2 - English" = Q Surf 2 - English
"Registrace uživatele zařízení Canon MP550 series" = Registrace uživatele zařízení Canon MP550 series
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archivátor
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Zoo Tycoon 2" = Zoo Tycoon 2

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 31.5.2012 11:39:00 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 31.5.2012 13:00:27 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 31.5.2012 15:07:13 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 7:37:10 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 8:34:29 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 10:34:29 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 13:38:32 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 13:43:39 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 1.6.2012 23:27:54 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

Error - 2.6.2012 4:20:04 | Computer Name = AS-FADEDE8895E8 | Source = SecurityCenter | ID = 1802
Description = Službě Centrum zabezpečení systému Windows se nepodařilo vytvořit
dotazy na události na službu WMI v zájmu sledování antivirového programu a brány
firewall třetí strany.

[ System Events ]
Error - 1.6.2012 13:40:02 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7034
Description = Služba Forceware Web Interface byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 1.6.2012 13:40:02 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7034
Description = Služba Canon Inkjet Printer/Scanner/Fax Extended Survey Program byla
neočekávaně ukončena. Tento stav nastal již 1krát.

Error - 1.6.2012 13:40:02 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7031
Description = Služba Nero BackItUp Scheduler 4.0 byla nečekaně ukončena. Stalo se
to 1 krát. Následující opravná akce bude spuštěna za 500 milisekund: Restartovat
službu.

Error - 1.6.2012 13:40:03 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7034
Description = Služba FsUsbExService byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 1.6.2012 13:40:03 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7034
Description = Služba ForceWare user log service byla neočekávaně ukončena. Tento
stav nastal již 1krát.

Error - 1.6.2012 13:40:03 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7034
Description = Služba ForceWare IP service byla neočekávaně ukončena. Tento stav
nastal již 1krát.

Error - 1.6.2012 13:44:57 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7000
Description = Služba TuneUp Theme Extension neuspěla při spuštění v důsledku následující
chyby: %%1083

Error - 1.6.2012 23:27:28 | Computer Name = AS-FADEDE8895E8 | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.1.33 pro síťovou kartu s adresou 001E8C1A1EDE
byla serverem DHCP 192.168.1.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 1.6.2012 23:29:00 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7000
Description = Služba TuneUp Theme Extension neuspěla při spuštění v důsledku následující
chyby: %%1083

Error - 2.6.2012 4:21:18 | Computer Name = AS-FADEDE8895E8 | Source = Service Control Manager | ID = 7000
Description = Služba TuneUp Theme Extension neuspěla při spuštění v důsledku následující
chyby: %%1083

[ TuneUp Events ]
Error - 31.5.2012 11:39:03 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 31.5.2012 13:00:27 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 31.5.2012 15:07:13 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 7:37:10 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 8:34:29 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 10:34:29 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 13:38:31 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 13:43:38 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 1.6.2012 23:27:54 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

Error - 2.6.2012 4:20:04 | Computer Name = AS-FADEDE8895E8 | Source = TuneUp Program Statistics | ID = 131840
Description = SQL Error: database disk image is malformed; when executing SQL: ATTACH
DATABASE ':memory:' AS MemDB; CREATE TABLE IF NOT EXISTS Config(Name TEXT UNIQUE
PRIMARY KEY, Value TEXT); INSERT OR IGNORE INTO Config Values('DBVersion', '1005');
CREATE TABLE IF NOT EXISTS MemDB.MemApplications (id INTEGER PRIMARY KEY AUTOINCREMENT,
Exe TEXT, Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE
TABLE IF NOT EXISTS Applications (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT,
Started DATE, Ended DATE, State INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT
EXISTS MemDB.ActiveApps (id INTEGER PRIMARY KEY AUTOINCREMENT, Exe TEXT, Started
DATE, ProcID INTEGER, Resumed INTEGER(1)); CREATE TABLE IF NOT EXISTS ExeFiles
(Exe TEXT UNIQUE PRIMARY KEY, ProductID TEXT, AnalyzeTime DATE); CREATE TABLE IF
NOT EXISTS Products (Date DATE, ProductID TEXT, StartCounter INTEGER, RunningTime
INTEGER, GUIActivateCount INTEGER, GUIIdleFocusTime INTEGER, GUIVisibleTime INTEGER,
GUIAvgScreenCoverage INTEGER); CREATE

< End of report >

#8 Příspěvek od **Márty84** » 02 čer 2012 10:21

Znovu spustte OTL
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

:otl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={31A412A7-8E3C-11E1-904D-0011B1087A34}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=stonicla&s={searchTerms}&f=4
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?sr ... 1010000&q={searchTerms}&barid={31A412A7-8E3C-11E1-904D-0011B1087A34}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE8HP&PC=B8MC
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={31A412A7-8E3C-11E1-904D-0011B1087A34}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=stonicla&s={searchTerms}&f=4
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100888&babsrc=SP_ss&mntrId=3046bcee0000000000000011b1087a34
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=en_EU&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^SK&apn_uid=009b1e56-6210-4ce5-b5f6-a143f85bcc4c&apn_sauid=E78F3EB1-B449-473E-AA05-75FC0ED0393A
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=3046bcee0000000000000011b1087a34&tlver=1.4.19.19&ss=1&affID=17981
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{6A560494-DBB6-460E-A622-89774FBA6673}: "URL" = http://www.bing.com/search?q={searchTerms}&form=B8MCDF&pc=B8MC&src=IE-SearchBox
IE - HKU\S-1-5-21-1993962763-764733703-725345543-1004\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?sr ... 1010000&q={searchTerms}&barid={31A412A7-8E3C-11E1-904D-0011B1087A34}
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?babsrc=HP_Prot"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.11.3.15590
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.3
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.1
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=DVS2&o=1586&locale=en_EU&apn_uid=009b1e56-6210-4ce5-b5f6-a143f85bcc4c&apn_ptnrs=^AAA&apn_sauid=E78F3EB1-B449-473E-AA05-75FC0ED0393A&apn_dtid=^YYYYYY^YY^SK&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Ask.com"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?AF=100888&babsrc=HP_ss&mntrId=3046bcee0000000000000011b1087a34"
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
[2011.09.20 22:24:51 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com
[2012.05.24 11:38:10 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com
[2012.06.01 17:49:14 | 000,002,399 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\askcom.xml
[2012.04.24 20:35:15 | 000,003,992 | ---- | M] () -- C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\sweetim.xml
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\FFXTLBR@BABYLON.COM
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\FFXTLBR@FACEMOODS.COM.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\IVO\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\TCBHLT6T.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM
[2011.12.27 13:35:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Babylon
[2011.12.27 13:35:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\Babylon
[2011.04.02 11:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ivo\Data aplikací\BabylonToolbar
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1118 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\0538ec675ef0fc2eeb3020c5d098ff73\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\0538ec675ef0fc2eeb3020c5d098ff73\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\0f5dd42fadd8b583934229efc73ec540\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\0f5dd42fadd8b583934229efc73ec540\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\5dbe76ddd1fcd4015285031d7cf74338\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\5dbe76ddd1fcd4015285031d7cf74338\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\62a91f7a9f570d1ab2a19f7601463194\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\62a91f7a9f570d1ab2a19f7601463194\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\74de2a7f78552797850c881ceaa0edaf\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\74de2a7f78552797850c881ceaa0edaf\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\77463100ec7324ac49ca0f9251aabd15\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\77463100ec7324ac49ca0f9251aabd15\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\92419a04207fd81ce55728a49575bf37\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\92419a04207fd81ce55728a49575bf37\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a6a2c87ac05436e8b609edbda7142cc3\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a6a2c87ac05436e8b609edbda7142cc3\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\caac973ff1a1b0ad1760d5614b2d6c10\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\caac973ff1a1b0ad1760d5614b2d6c10\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\e8711812986a372c9a45aaff7b9e7e83\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\e8711812986a372c9a45aaff7b9e7e83\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\f23cbea7360cfe2afe8a33556b0945d1\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\f23cbea7360cfe2afe8a33556b0945d1\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\f78bf2bb8cdee4ec4de35ae36361cab4\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\f78bf2bb8cdee4ec4de35ae36361cab4\*.tmp -> ]

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Program Files\Ask.com
C:\Program Files\BabylonToolbar
C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-AS-FADEDE8895E8-ivo.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}"=-
"{759D9886-0C6F-4498-BAB6-4A5F47C6C72F}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{98889811-442D-49dd-99D7-DC866BE87DBC}"=-
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=-
"CanonSolutionMenu"=-
"CanonMyPrinter"=-
""=-
"ApnUpdater"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"SweetIM"=-
"Sweetpacks Communicator"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]

:services
Nero BackItUp Scheduler 4.0
gupdate
gupdatem
SwitchBoard

:commands
[RESETHOSTS]
[EMPTYTEMP]
[Purity]
[EMPTYFLASH]

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Iva212 · #9 Příspěvek od **Iva212** » 02 čer 2012 10:29

Hotovo:
1. časť

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-1993962763-764733703-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ deleted successfully.
C:\Program Files\Ask.com\GenericAskToolbar.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ deleted successfully.
C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll moved successfully.
HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0D7562AE-8EF6-416d-A838-AB665251703A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{6A560494-DBB6-460E-A622-89774FBA6673}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A560494-DBB6-460E-A622-89774FBA6673}\ not found.
Registry key HKEY_USERS\S-1-5-21-1993962763-764733703-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Ask.com" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "http://search.babylon.com/?babsrc=HP_Prot" removed from browser.startup.homepage
Prefs.js: toolbar@ask.com:3.11.3.15590 removed from extensions.enabledItems
Prefs.js: ffxtlbr@babylon.com:1.1.3 removed from extensions.enabledItems
Prefs.js: ffxtlbr@Facemoods.com:1.2.1 removed from extensions.enabledItems
Prefs.js: "http://websearch.ask.com/redirect?clien ... Y^YY^SK&q=" removed from keyword.URL
Prefs.js: "Ask.com" removed from sweetim.toolbar.previous.browser.search.defaultenginename
Prefs.js: "Ask.com" removed from sweetim.toolbar.previous.browser.search.selectedEngine
Prefs.js: "http://search.babylon.com/?AF=100888&ba ... 11b1087a34" removed from browser.startup.homepage
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll not found.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\content folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com\components folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\ffxtlbr@babylon.com folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\searchplugins folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\logs folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\defaults\preferences folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\defaults folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\datastore folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-10-Aug-2011-13-01-29-GMT folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Wed-09-Nov-2011-14-46-03-GMT folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Tue-20-Sep-2011-20-18-32-GMT folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\temp\ff-config.Thu-24-May-2012-09-38-09-GMT folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\temp folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\skin folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome\content folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com\chrome folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\toolbar@ask.com folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\askcom.xml moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\searchplugins\sweetim.xml moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Babylon folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\Babylon folder moved successfully.
C:\Documents and Settings\ivo\Data aplikací\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1BE.tmp\PresentationCore.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1BE.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D3.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP209.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP242.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29F.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP487.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP56E.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP59.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP594.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5A7.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP76.tmp\mscorlib.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP76.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7F.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP80.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9C.tmp folder deleted successfully.
C:\WINDOWS\Installer\MSI10.tmp deleted successfully.
C:\WINDOWS\Installer\MSI100.tmp deleted successfully.
C:\WINDOWS\Installer\MSI101.tmp deleted successfully.
C:\WINDOWS\Installer\MSI102.tmp deleted successfully.
C:\WINDOWS\Installer\MSI103.tmp deleted successfully.
C:\WINDOWS\Installer\MSI104.tmp deleted successfully.
C:\WINDOWS\Installer\MSI105.tmp deleted successfully.
C:\WINDOWS\Installer\MSI106.tmp deleted successfully.
C:\WINDOWS\Installer\MSI107.tmp deleted successfully.
C:\WINDOWS\Installer\MSI108.tmp deleted successfully.
C:\WINDOWS\Installer\MSI109.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI10F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11.tmp deleted successfully.
C:\WINDOWS\Installer\MSI110.tmp deleted successfully.
C:\WINDOWS\Installer\MSI111.tmp deleted successfully.
C:\WINDOWS\Installer\MSI112.tmp deleted successfully.
C:\WINDOWS\Installer\MSI113.tmp deleted successfully.
C:\WINDOWS\Installer\MSI114.tmp deleted successfully.
C:\WINDOWS\Installer\MSI115.tmp deleted successfully.
C:\WINDOWS\Installer\MSI116.tmp deleted successfully.
C:\WINDOWS\Installer\MSI117.tmp deleted successfully.
C:\WINDOWS\Installer\MSI118.tmp deleted successfully.
C:\WINDOWS\Installer\MSI119.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI11F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12.tmp deleted successfully.
C:\WINDOWS\Installer\MSI120.tmp deleted successfully.
C:\WINDOWS\Installer\MSI121.tmp deleted successfully.
C:\WINDOWS\Installer\MSI122.tmp deleted successfully.
C:\WINDOWS\Installer\MSI123.tmp deleted successfully.
C:\WINDOWS\Installer\MSI124.tmp deleted successfully.
C:\WINDOWS\Installer\MSI125.tmp deleted successfully.
C:\WINDOWS\Installer\MSI126.tmp deleted successfully.
C:\WINDOWS\Installer\MSI127.tmp deleted successfully.
C:\WINDOWS\Installer\MSI128.tmp deleted successfully.
C:\WINDOWS\Installer\MSI129.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI12F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13.tmp deleted successfully.
C:\WINDOWS\Installer\MSI130.tmp deleted successfully.
C:\WINDOWS\Installer\MSI131.tmp deleted successfully.
C:\WINDOWS\Installer\MSI132.tmp deleted successfully.
C:\WINDOWS\Installer\MSI133.tmp deleted successfully.
C:\WINDOWS\Installer\MSI134.tmp deleted successfully.
C:\WINDOWS\Installer\MSI135.tmp deleted successfully.
C:\WINDOWS\Installer\MSI136.tmp deleted successfully.
C:\WINDOWS\Installer\MSI137.tmp deleted successfully.
C:\WINDOWS\Installer\MSI138.tmp deleted successfully.
C:\WINDOWS\Installer\MSI139.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI13F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14.tmp deleted successfully.
C:\WINDOWS\Installer\MSI140.tmp deleted successfully.
C:\WINDOWS\Installer\MSI141.tmp deleted successfully.
C:\WINDOWS\Installer\MSI142.tmp deleted successfully.
C:\WINDOWS\Installer\MSI143.tmp deleted successfully.
C:\WINDOWS\Installer\MSI144.tmp deleted successfully.
C:\WINDOWS\Installer\MSI145.tmp deleted successfully.
C:\WINDOWS\Installer\MSI146.tmp deleted successfully.
C:\WINDOWS\Installer\MSI147.tmp deleted successfully.
C:\WINDOWS\Installer\MSI148.tmp deleted successfully.
C:\WINDOWS\Installer\MSI149.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI14F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15.tmp deleted successfully.
C:\WINDOWS\Installer\MSI150.tmp deleted successfully.
C:\WINDOWS\Installer\MSI151.tmp deleted successfully.
C:\WINDOWS\Installer\MSI152.tmp deleted successfully.
C:\WINDOWS\Installer\MSI153.tmp deleted successfully.
C:\WINDOWS\Installer\MSI154.tmp deleted successfully.
C:\WINDOWS\Installer\MSI155.tmp deleted successfully.
C:\WINDOWS\Installer\MSI156.tmp deleted successfully.
C:\WINDOWS\Installer\MSI157.tmp deleted successfully.
C:\WINDOWS\Installer\MSI158.tmp deleted successfully.
C:\WINDOWS\Installer\MSI159.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI15F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16.tmp deleted successfully.
C:\WINDOWS\Installer\MSI160.tmp deleted successfully.
C:\WINDOWS\Installer\MSI161.tmp deleted successfully.
C:\WINDOWS\Installer\MSI162.tmp deleted successfully.
C:\WINDOWS\Installer\MSI163.tmp deleted successfully.
C:\WINDOWS\Installer\MSI164.tmp deleted successfully.
C:\WINDOWS\Installer\MSI165.tmp deleted successfully.
C:\WINDOWS\Installer\MSI166.tmp deleted successfully.
C:\WINDOWS\Installer\MSI167.tmp deleted successfully.
C:\WINDOWS\Installer\MSI168.tmp deleted successfully.
C:\WINDOWS\Installer\MSI169.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI16F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17.tmp deleted successfully.
C:\WINDOWS\Installer\MSI170.tmp deleted successfully.
C:\WINDOWS\Installer\MSI171.tmp deleted successfully.
C:\WINDOWS\Installer\MSI172.tmp deleted successfully.
C:\WINDOWS\Installer\MSI173.tmp deleted successfully.
C:\WINDOWS\Installer\MSI174.tmp deleted successfully.
C:\WINDOWS\Installer\MSI175.tmp deleted successfully.
C:\WINDOWS\Installer\MSI176.tmp deleted successfully.
C:\WINDOWS\Installer\MSI177.tmp deleted successfully.
C:\WINDOWS\Installer\MSI178.tmp deleted successfully.
C:\WINDOWS\Installer\MSI179.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI17F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18.tmp deleted successfully.
C:\WINDOWS\Installer\MSI180.tmp deleted successfully.
C:\WINDOWS\Installer\MSI181.tmp deleted successfully.
C:\WINDOWS\Installer\MSI182.tmp deleted successfully.
C:\WINDOWS\Installer\MSI183.tmp deleted successfully.
C:\WINDOWS\Installer\MSI184.tmp deleted successfully.
C:\WINDOWS\Installer\MSI185.tmp deleted successfully.
C:\WINDOWS\Installer\MSI186.tmp deleted successfully.
C:\WINDOWS\Installer\MSI187.tmp deleted successfully.
C:\WINDOWS\Installer\MSI188.tmp deleted successfully.
C:\WINDOWS\Installer\MSI189.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI18F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19.tmp deleted successfully.
C:\WINDOWS\Installer\MSI190.tmp deleted successfully.
C:\WINDOWS\Installer\MSI191.tmp deleted successfully.
C:\WINDOWS\Installer\MSI192.tmp deleted successfully.
C:\WINDOWS\Installer\MSI193.tmp deleted successfully.
C:\WINDOWS\Installer\MSI194.tmp deleted successfully.
C:\WINDOWS\Installer\MSI195.tmp deleted successfully.
C:\WINDOWS\Installer\MSI196.tmp deleted successfully.
C:\WINDOWS\Installer\MSI197.tmp deleted successfully.
C:\WINDOWS\Installer\MSI198.tmp deleted successfully.
C:\WINDOWS\Installer\MSI199.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI19F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1A9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1AF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1B9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BB0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BB4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1BF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1C9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1CF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1D9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1DF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1E9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1EA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1EB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1EC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1ED.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1EE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1EF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1F9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI1FF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20.tmp deleted successfully.
C:\WINDOWS\Installer\MSI200.tmp deleted successfully.
C:\WINDOWS\Installer\MSI201.tmp deleted successfully.
C:\WINDOWS\Installer\MSI202.tmp deleted successfully.
C:\WINDOWS\Installer\MSI203.tmp deleted successfully.
C:\WINDOWS\Installer\MSI204.tmp deleted successfully.
C:\WINDOWS\Installer\MSI205.tmp deleted successfully.
C:\WINDOWS\Installer\MSI206.tmp deleted successfully.
C:\WINDOWS\Installer\MSI207.tmp deleted successfully.
C:\WINDOWS\Installer\MSI208.tmp deleted successfully.
C:\WINDOWS\Installer\MSI209.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI20F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21.tmp deleted successfully.
C:\WINDOWS\Installer\MSI210.tmp deleted successfully.
C:\WINDOWS\Installer\MSI211.tmp deleted successfully.
C:\WINDOWS\Installer\MSI212.tmp deleted successfully.
C:\WINDOWS\Installer\MSI213.tmp deleted successfully.
C:\WINDOWS\Installer\MSI214.tmp deleted successfully.
C:\WINDOWS\Installer\MSI215.tmp deleted successfully.
C:\WINDOWS\Installer\MSI216.tmp deleted successfully.
C:\WINDOWS\Installer\MSI217.tmp deleted successfully.
C:\WINDOWS\Installer\MSI218.tmp deleted successfully.
C:\WINDOWS\Installer\MSI219.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI21F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22.tmp deleted successfully.
C:\WINDOWS\Installer\MSI220.tmp deleted successfully.
C:\WINDOWS\Installer\MSI221.tmp deleted successfully.
C:\WINDOWS\Installer\MSI222.tmp deleted successfully.
C:\WINDOWS\Installer\MSI223.tmp deleted successfully.
C:\WINDOWS\Installer\MSI224.tmp deleted successfully.
C:\WINDOWS\Installer\MSI225.tmp deleted successfully.
C:\WINDOWS\Installer\MSI226.tmp deleted successfully.
C:\WINDOWS\Installer\MSI227.tmp deleted successfully.
C:\WINDOWS\Installer\MSI228.tmp deleted successfully.
C:\WINDOWS\Installer\MSI229.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI22F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23.tmp deleted successfully.
C:\WINDOWS\Installer\MSI230.tmp deleted successfully.
C:\WINDOWS\Installer\MSI231.tmp deleted successfully.
C:\WINDOWS\Installer\MSI232.tmp deleted successfully.
C:\WINDOWS\Installer\MSI233.tmp deleted successfully.
C:\WINDOWS\Installer\MSI234.tmp deleted successfully.
C:\WINDOWS\Installer\MSI235.tmp deleted successfully.
C:\WINDOWS\Installer\MSI236.tmp deleted successfully.
C:\WINDOWS\Installer\MSI237.tmp deleted successfully.
C:\WINDOWS\Installer\MSI238.tmp deleted successfully.
C:\WINDOWS\Installer\MSI239.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI23F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24.tmp deleted successfully.
C:\WINDOWS\Installer\MSI240.tmp deleted successfully.
C:\WINDOWS\Installer\MSI241.tmp deleted successfully.
C:\WINDOWS\Installer\MSI242.tmp deleted successfully.
C:\WINDOWS\Installer\MSI243.tmp deleted successfully.
C:\WINDOWS\Installer\MSI244.tmp deleted successfully.
C:\WINDOWS\Installer\MSI245.tmp deleted successfully.
C:\WINDOWS\Installer\MSI246.tmp deleted successfully.
C:\WINDOWS\Installer\MSI247.tmp deleted successfully.
C:\WINDOWS\Installer\MSI248.tmp deleted successfully.
C:\WINDOWS\Installer\MSI249.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI24F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25.tmp deleted successfully.
C:\WINDOWS\Installer\MSI250.tmp deleted successfully.
C:\WINDOWS\Installer\MSI251.tmp deleted successfully.
C:\WINDOWS\Installer\MSI252.tmp deleted successfully.
C:\WINDOWS\Installer\MSI253.tmp deleted successfully.
C:\WINDOWS\Installer\MSI254.tmp deleted successfully.
C:\WINDOWS\Installer\MSI255.tmp deleted successfully.
C:\WINDOWS\Installer\MSI256.tmp deleted successfully.
C:\WINDOWS\Installer\MSI257.tmp deleted successfully.
C:\WINDOWS\Installer\MSI258.tmp deleted successfully.
C:\WINDOWS\Installer\MSI259.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI25F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26.tmp deleted successfully.
C:\WINDOWS\Installer\MSI260.tmp deleted successfully.
C:\WINDOWS\Installer\MSI261.tmp deleted successfully.
C:\WINDOWS\Installer\MSI262.tmp deleted successfully.
C:\WINDOWS\Installer\MSI263.tmp deleted successfully.
C:\WINDOWS\Installer\MSI264.tmp deleted successfully.
C:\WINDOWS\Installer\MSI265.tmp deleted successfully.
C:\WINDOWS\Installer\MSI266.tmp deleted successfully.
C:\WINDOWS\Installer\MSI267.tmp deleted successfully.
C:\WINDOWS\Installer\MSI268.tmp deleted successfully.
C:\WINDOWS\Installer\MSI269.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI26F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27.tmp deleted successfully.
C:\WINDOWS\Installer\MSI270.tmp deleted successfully.
C:\WINDOWS\Installer\MSI271.tmp deleted successfully.
C:\WINDOWS\Installer\MSI272.tmp deleted successfully.
C:\WINDOWS\Installer\MSI273.tmp deleted successfully.
C:\WINDOWS\Installer\MSI274.tmp deleted successfully.
C:\WINDOWS\Installer\MSI275.tmp deleted successfully.
C:\WINDOWS\Installer\MSI276.tmp deleted successfully.
C:\WINDOWS\Installer\MSI277.tmp deleted successfully.
C:\WINDOWS\Installer\MSI278.tmp deleted successfully.
C:\WINDOWS\Installer\MSI279.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI27F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28.tmp deleted successfully.
C:\WINDOWS\Installer\MSI280.tmp deleted successfully.
C:\WINDOWS\Installer\MSI281.tmp deleted successfully.
C:\WINDOWS\Installer\MSI282.tmp deleted successfully.
C:\WINDOWS\Installer\MSI283.tmp deleted successfully.
C:\WINDOWS\Installer\MSI284.tmp deleted successfully.
C:\WINDOWS\Installer\MSI285.tmp deleted successfully.
C:\WINDOWS\Installer\MSI286.tmp deleted successfully.
C:\WINDOWS\Installer\MSI287.tmp deleted successfully.
C:\WINDOWS\Installer\MSI288.tmp deleted successfully.
C:\WINDOWS\Installer\MSI289.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI28F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29.tmp deleted successfully.
C:\WINDOWS\Installer\MSI290.tmp deleted successfully.
C:\WINDOWS\Installer\MSI291.tmp deleted successfully.
C:\WINDOWS\Installer\MSI292.tmp deleted successfully.
C:\WINDOWS\Installer\MSI293.tmp deleted successfully.
C:\WINDOWS\Installer\MSI294.tmp deleted successfully.
C:\WINDOWS\Installer\MSI295.tmp deleted successfully.
C:\WINDOWS\Installer\MSI296.tmp deleted successfully.
C:\WINDOWS\Installer\MSI297.tmp deleted successfully.
C:\WINDOWS\Installer\MSI298.tmp deleted successfully.
C:\WINDOWS\Installer\MSI299.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI29F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2A9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2AF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2B9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2BF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2C9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2CF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2D9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2DF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2E9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2EA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2EB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2EC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2ED.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2EE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2EF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2F9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI2FF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30.tmp deleted successfully.
C:\WINDOWS\Installer\MSI300.tmp deleted successfully.
C:\WINDOWS\Installer\MSI301.tmp deleted successfully.
C:\WINDOWS\Installer\MSI302.tmp deleted successfully.
C:\WINDOWS\Installer\MSI303.tmp deleted successfully.
C:\WINDOWS\Installer\MSI304.tmp deleted successfully.
C:\WINDOWS\Installer\MSI305.tmp deleted successfully.
C:\WINDOWS\Installer\MSI306.tmp deleted successfully.
C:\WINDOWS\Installer\MSI307.tmp deleted successfully.
C:\WINDOWS\Installer\MSI308.tmp deleted successfully.
C:\WINDOWS\Installer\MSI309.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI30F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31.tmp deleted successfully.
C:\WINDOWS\Installer\MSI310.tmp deleted successfully.
C:\WINDOWS\Installer\MSI311.tmp deleted successfully.
C:\WINDOWS\Installer\MSI312.tmp deleted successfully.
C:\WINDOWS\Installer\MSI313.tmp deleted successfully.
C:\WINDOWS\Installer\MSI314.tmp deleted successfully.
C:\WINDOWS\Installer\MSI315.tmp deleted successfully.
C:\WINDOWS\Installer\MSI316.tmp deleted successfully.
C:\WINDOWS\Installer\MSI317.tmp deleted successfully.
C:\WINDOWS\Installer\MSI318.tmp deleted successfully.
C:\WINDOWS\Installer\MSI319.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI31F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32.tmp deleted successfully.
C:\WINDOWS\Installer\MSI320.tmp deleted successfully.
C:\WINDOWS\Installer\MSI321.tmp deleted successfully.
C:\WINDOWS\Installer\MSI322.tmp deleted successfully.
C:\WINDOWS\Installer\MSI323.tmp deleted successfully.
C:\WINDOWS\Installer\MSI324.tmp deleted successfully.
C:\WINDOWS\Installer\MSI325.tmp deleted successfully.
C:\WINDOWS\Installer\MSI326.tmp deleted successfully.
C:\WINDOWS\Installer\MSI327.tmp deleted successfully.
C:\WINDOWS\Installer\MSI328.tmp deleted successfully.
C:\WINDOWS\Installer\MSI329.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI32F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33.tmp deleted successfully.
C:\WINDOWS\Installer\MSI330.tmp deleted successfully.
C:\WINDOWS\Installer\MSI331.tmp deleted successfully.
C:\WINDOWS\Installer\MSI332.tmp deleted successfully.
C:\WINDOWS\Installer\MSI333.tmp deleted successfully.
C:\WINDOWS\Installer\MSI334.tmp deleted successfully.
C:\WINDOWS\Installer\MSI335.tmp deleted successfully.
C:\WINDOWS\Installer\MSI336.tmp deleted successfully.
C:\WINDOWS\Installer\MSI337.tmp deleted successfully.
C:\WINDOWS\Installer\MSI338.tmp deleted successfully.
C:\WINDOWS\Installer\MSI339.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI33F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34.tmp deleted successfully.
C:\WINDOWS\Installer\MSI340.tmp deleted successfully.
C:\WINDOWS\Installer\MSI341.tmp deleted successfully.
C:\WINDOWS\Installer\MSI342.tmp deleted successfully.
C:\WINDOWS\Installer\MSI343.tmp deleted successfully.
C:\WINDOWS\Installer\MSI344.tmp deleted successfully.
C:\WINDOWS\Installer\MSI345.tmp deleted successfully.
C:\WINDOWS\Installer\MSI346.tmp deleted successfully.
C:\WINDOWS\Installer\MSI347.tmp deleted successfully.
C:\WINDOWS\Installer\MSI348.tmp deleted successfully.
C:\WINDOWS\Installer\MSI349.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI34F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35.tmp deleted successfully.
C:\WINDOWS\Installer\MSI350.tmp deleted successfully.
C:\WINDOWS\Installer\MSI351.tmp deleted successfully.
C:\WINDOWS\Installer\MSI352.tmp deleted successfully.
C:\WINDOWS\Installer\MSI353.tmp deleted successfully.
C:\WINDOWS\Installer\MSI354.tmp deleted successfully.
C:\WINDOWS\Installer\MSI355.tmp deleted successfully.
C:\WINDOWS\Installer\MSI356.tmp deleted successfully.
C:\WINDOWS\Installer\MSI357.tmp deleted successfully.
C:\WINDOWS\Installer\MSI358.tmp deleted successfully.
C:\WINDOWS\Installer\MSI359.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI35F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI36.tmp deleted successfully.
C:\WINDOWS\Installer\MSI360.tmp deleted successfully.
C:\WINDOWS\Installer\MSI361.tmp deleted successfully.
C:\WINDOWS\Installer\MSI362.tmp deleted successfully.
C:\WINDOWS\Installer\MSI363.tmp deleted successfully.
C:\WINDOWS\Installer\MSI364.tmp deleted successfully.
C:\WINDOWS\Installer\MSI365.tmp deleted successfully.
C:\WINDOWS\Installer\MSI37.tmp deleted successfully.
C:\WINDOWS\Installer\MSI378.tmp deleted successfully.
C:\WINDOWS\Installer\MSI38.tmp deleted successfully.
C:\WINDOWS\Installer\MSI39.tmp deleted successfully.
C:\WINDOWS\Installer\MSI396.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3A9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3AF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3B9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3BA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3BB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3BC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3BD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3BE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3D4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3E1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI3F7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40.tmp deleted successfully.
C:\WINDOWS\Installer\MSI402.tmp deleted successfully.
C:\WINDOWS\Installer\MSI403.tmp deleted successfully.
C:\WINDOWS\Installer\MSI404.tmp deleted successfully.
C:\WINDOWS\Installer\MSI405.tmp deleted successfully.
C:\WINDOWS\Installer\MSI406.tmp deleted successfully.
C:\WINDOWS\Installer\MSI407.tmp deleted successfully.
C:\WINDOWS\Installer\MSI408.tmp deleted successfully.
C:\WINDOWS\Installer\MSI409.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI40F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41.tmp deleted successfully.
C:\WINDOWS\Installer\MSI410.tmp deleted successfully.
C:\WINDOWS\Installer\MSI411.tmp deleted successfully.
C:\WINDOWS\Installer\MSI412.tmp deleted successfully.
C:\WINDOWS\Installer\MSI413.tmp deleted successfully.
C:\WINDOWS\Installer\MSI414.tmp deleted successfully.
C:\WINDOWS\Installer\MSI415.tmp deleted successfully.
C:\WINDOWS\Installer\MSI416.tmp deleted successfully.
C:\WINDOWS\Installer\MSI417.tmp deleted successfully.
C:\WINDOWS\Installer\MSI418.tmp deleted successfully.
C:\WINDOWS\Installer\MSI419.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI41F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI42.tmp deleted successfully.
C:\WINDOWS\Installer\MSI420.tmp deleted successfully.
C:\WINDOWS\Installer\MSI421.tmp deleted successfully.
C:\WINDOWS\Installer\MSI422.tmp deleted successfully.
C:\WINDOWS\Installer\MSI423.tmp deleted successfully.
C:\WINDOWS\Installer\MSI424.tmp deleted successfully.
C:\WINDOWS\Installer\MSI425.tmp deleted successfully.
C:\WINDOWS\Installer\MSI426.tmp deleted successfully.
C:\WINDOWS\Installer\MSI43.tmp deleted successfully.
C:\WINDOWS\Installer\MSI44.tmp deleted successfully.
C:\WINDOWS\Installer\MSI45.tmp deleted successfully.
C:\WINDOWS\Installer\MSI452.tmp deleted successfully.
C:\WINDOWS\Installer\MSI46.tmp deleted successfully.
C:\WINDOWS\Installer\MSI47.tmp deleted successfully.
C:\WINDOWS\Installer\MSI475.tmp deleted successfully.
C:\WINDOWS\Installer\MSI477.tmp deleted successfully.
C:\WINDOWS\Installer\MSI48.tmp deleted successfully.
C:\WINDOWS\Installer\MSI49.tmp deleted successfully.
C:\WINDOWS\Installer\MSI491.tmp deleted successfully.
C:\WINDOWS\Installer\MSI492.tmp deleted successfully.
C:\WINDOWS\Installer\MSI494.tmp deleted successfully.
C:\WINDOWS\Installer\MSI49C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4A4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4A5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4A8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4B0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4B2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4BA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4DC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4DD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4DE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4DF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4E9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4EA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4EB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4EC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4ED.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4EE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4EF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI4F0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI50.tmp deleted successfully.
C:\WINDOWS\Installer\MSI50C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI50D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI50E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI50F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51.tmp deleted successfully.
C:\WINDOWS\Installer\MSI510.tmp deleted successfully.
C:\WINDOWS\Installer\MSI511.tmp deleted successfully.
C:\WINDOWS\Installer\MSI512.tmp deleted successfully.
C:\WINDOWS\Installer\MSI513.tmp deleted successfully.
C:\WINDOWS\Installer\MSI514.tmp deleted successfully.
C:\WINDOWS\Installer\MSI515.tmp deleted successfully.
C:\WINDOWS\Installer\MSI516.tmp deleted successfully.
C:\WINDOWS\Installer\MSI517.tmp deleted successfully.
C:\WINDOWS\Installer\MSI518.tmp deleted successfully.
C:\WINDOWS\Installer\MSI519.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI51F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI52.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53.tmp deleted successfully.
C:\WINDOWS\Installer\MSI530.tmp deleted successfully.
C:\WINDOWS\Installer\MSI531.tmp deleted successfully.
C:\WINDOWS\Installer\MSI532.tmp deleted successfully.
C:\WINDOWS\Installer\MSI533.tmp deleted successfully.
C:\WINDOWS\Installer\MSI534.tmp deleted successfully.
C:\WINDOWS\Installer\MSI535.tmp deleted successfully.
C:\WINDOWS\Installer\MSI536.tmp deleted successfully.
C:\WINDOWS\Installer\MSI537.tmp deleted successfully.
C:\WINDOWS\Installer\MSI538.tmp deleted successfully.
C:\WINDOWS\Installer\MSI539.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI53F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54.tmp deleted successfully.
C:\WINDOWS\Installer\MSI540.tmp deleted successfully.
C:\WINDOWS\Installer\MSI541.tmp deleted successfully.
C:\WINDOWS\Installer\MSI542.tmp deleted successfully.
C:\WINDOWS\Installer\MSI543.tmp deleted successfully.
C:\WINDOWS\Installer\MSI544.tmp deleted successfully.
C:\WINDOWS\Installer\MSI545.tmp deleted successfully.
C:\WINDOWS\Installer\MSI546.tmp deleted successfully.
C:\WINDOWS\Installer\MSI547.tmp deleted successfully.
C:\WINDOWS\Installer\MSI548.tmp deleted successfully.
C:\WINDOWS\Installer\MSI549.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI54F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55.tmp deleted successfully.
C:\WINDOWS\Installer\MSI550.tmp deleted successfully.
C:\WINDOWS\Installer\MSI551.tmp deleted successfully.
C:\WINDOWS\Installer\MSI552.tmp deleted successfully.
C:\WINDOWS\Installer\MSI553.tmp deleted successfully.
C:\WINDOWS\Installer\MSI554.tmp deleted successfully.
C:\WINDOWS\Installer\MSI555.tmp deleted successfully.
C:\WINDOWS\Installer\MSI556.tmp deleted successfully.
C:\WINDOWS\Installer\MSI557.tmp deleted successfully.
C:\WINDOWS\Installer\MSI558.tmp deleted successfully.
C:\WINDOWS\Installer\MSI559.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI55F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56.tmp deleted successfully.
C:\WINDOWS\Installer\MSI560.tmp deleted successfully.
C:\WINDOWS\Installer\MSI561.tmp deleted successfully.
C:\WINDOWS\Installer\MSI562.tmp deleted successfully.
C:\WINDOWS\Installer\MSI563.tmp deleted successfully.
C:\WINDOWS\Installer\MSI564.tmp deleted successfully.
C:\WINDOWS\Installer\MSI565.tmp deleted successfully.
C:\WINDOWS\Installer\MSI566.tmp deleted successfully.
C:\WINDOWS\Installer\MSI567.tmp deleted successfully.
C:\WINDOWS\Installer\MSI568.tmp deleted successfully.
C:\WINDOWS\Installer\MSI569.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI56F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI57.tmp deleted successfully.
C:\WINDOWS\Installer\MSI570.tmp deleted successfully.
C:\WINDOWS\Installer\MSI58.tmp deleted successfully.
C:\WINDOWS\Installer\MSI581.tmp deleted successfully.
C:\WINDOWS\Installer\MSI59.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5B8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5CD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D4.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5D9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DA.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DB.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DD.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DE.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5DF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5E0.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5E1.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5E2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5E3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI5F5.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI60.tmp deleted successfully.
C:\WINDOWS\Installer\MSI61.tmp deleted successfully.
C:\WINDOWS\Installer\MSI61E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI62.tmp deleted successfully.
C:\WINDOWS\Installer\MSI62B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI62F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63.tmp deleted successfully.
C:\WINDOWS\Installer\MSI638.tmp deleted successfully.
C:\WINDOWS\Installer\MSI639.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI63F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI64.tmp deleted successfully.
C:\WINDOWS\Installer\MSI642.tmp deleted successfully.
C:\WINDOWS\Installer\MSI65.tmp deleted successfully.
C:\WINDOWS\Installer\MSI658.tmp deleted successfully.
C:\WINDOWS\Installer\MSI66.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67.tmp deleted successfully.
C:\WINDOWS\Installer\MSI670.tmp deleted successfully.
C:\WINDOWS\Installer\MSI671.tmp deleted successfully.
C:\WINDOWS\Installer\MSI672.tmp deleted successfully.
C:\WINDOWS\Installer\MSI673.tmp deleted successfully.
C:\WINDOWS\Installer\MSI674.tmp deleted successfully.
C:\WINDOWS\Installer\MSI675.tmp deleted successfully.
C:\WINDOWS\Installer\MSI676.tmp deleted successfully.
C:\WINDOWS\Installer\MSI677.tmp deleted successfully.
C:\WINDOWS\Installer\MSI678.tmp deleted successfully.
C:\WINDOWS\Installer\MSI679.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI67F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI68.tmp deleted successfully.
C:\WINDOWS\Installer\MSI689.tmp deleted successfully.
C:\WINDOWS\Installer\MSI69.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6A3.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6CF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6EC.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI6F8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7.tmp deleted successfully.
C:\WINDOWS\Installer\MSI70.tmp deleted successfully.
C:\WINDOWS\Installer\MSI71.tmp deleted successfully.
C:\WINDOWS\Installer\MSI72.tmp deleted successfully.
C:\WINDOWS\Installer\MSI73.tmp deleted successfully.
C:\WINDOWS\Installer\MSI74.tmp deleted successfully.
C:\WINDOWS\Installer\MSI75.tmp deleted successfully.
C:\WINDOWS\Installer\MSI76.tmp deleted successfully.
C:\WINDOWS\Installer\MSI77.tmp deleted successfully.
C:\WINDOWS\Installer\MSI78.tmp deleted successfully.
C:\WINDOWS\Installer\MSI79.tmp deleted successfully.
C:\WINDOWS\Installer\MSI79F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7A2.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7F6.tmp deleted successfully.
C:\WINDOWS\Installer\MSI7FF.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8.tmp deleted successfully.
C:\WINDOWS\Installer\MSI80.tmp deleted successfully.
C:\WINDOWS\Installer\MSI81.tmp deleted successfully.
C:\WINDOWS\Installer\MSI82.tmp deleted successfully.
C:\WINDOWS\Installer\MSI82C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI83.tmp deleted successfully.
C:\WINDOWS\Installer\MSI84.tmp deleted successfully.
C:\WINDOWS\Installer\MSI85.tmp deleted successfully.
C:\WINDOWS\Installer\MSI857.tmp deleted successfully.
C:\WINDOWS\Installer\MSI86.tmp deleted successfully.
C:\WINDOWS\Installer\MSI860.tmp deleted successfully.
C:\WINDOWS\Installer\MSI87.tmp deleted successfully.
C:\WINDOWS\Installer\MSI88.tmp deleted successfully.
C:\WINDOWS\Installer\MSI89.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI8F.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9.tmp deleted successfully.
C:\WINDOWS\Installer\MSI90.tmp deleted successfully.
C:\WINDOWS\Installer\MSI91.tmp deleted successfully.
C:\WINDOWS\Installer\MSI92.tmp deleted successfully.
C:\WINDOWS\Installer\MSI93.tmp deleted successfully.
C:\WINDOWS\Installer\MSI94.tmp deleted successfully.
C:\WINDOWS\Installer\MSI95.tmp deleted successfully.
C:\WINDOWS\Installer\MSI96.tmp deleted successfully.
C:\WINDOWS\Installer\MSI97.tmp deleted successfully.
C:\WINDOWS\Installer\MSI98.tmp deleted successfully.
C:\WINDOWS\Installer\MSI99.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9A.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9B.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9C.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9D.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9E.tmp deleted successfully.
C:\WINDOWS\Installer\MSI9F.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA0.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA1.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA2.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA3.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA4.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA5.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA6.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA7.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA8.tmp deleted successfully.
C:\WINDOWS\Installer\MSIA9.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAB.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAD.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAE.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAF.tmp deleted successfully.
C:\WINDOWS\Installer\MSIAFD.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB0.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB4.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB5.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB7.tmp deleted successfully.
C:\WINDOWS\Installer\MSIB8.tmp deleted successfully.
C:\WINDOWS\Installer\MSIBA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIBC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIBD.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC0.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC1.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC2.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC3.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC4.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC5.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC6.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC7.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC8.tmp deleted successfully.
C:\WINDOWS\Installer\MSIC9.tmp deleted successfully.
C:\WINDOWS\Installer\MSICA.tmp deleted successfully.
C:\WINDOWS\Installer\MSICB.tmp deleted successfully.
C:\WINDOWS\Installer\MSICC.tmp deleted successfully.
C:\WINDOWS\Installer\MSICD.tmp deleted successfully.
C:\WINDOWS\Installer\MSICE.tmp deleted successfully.
C:\WINDOWS\Installer\MSICF.tmp deleted successfully.
C:\WINDOWS\Installer\MSID.tmp deleted successfully.
C:\WINDOWS\Installer\MSID0.tmp deleted successfully.
C:\WINDOWS\Installer\MSID1.tmp deleted successfully.
C:\WINDOWS\Installer\MSID2.tmp deleted successfully.
C:\WINDOWS\Installer\MSID3.tmp deleted successfully.
C:\WINDOWS\Installer\MSID4.tmp deleted successfully.
C:\WINDOWS\Installer\MSID5.tmp deleted successfully.
C:\WINDOWS\Installer\MSID6.tmp deleted successfully.
C:\WINDOWS\Installer\MSID7.tmp deleted successfully.
C:\WINDOWS\Installer\MSID8.tmp deleted successfully.
C:\WINDOWS\Installer\MSID9.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDB.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDD.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDE.tmp deleted successfully.
C:\WINDOWS\Installer\MSIDF.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE0.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE1.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE2.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE3.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE4.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE5.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE6.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE7.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE8.tmp deleted successfully.
C:\WINDOWS\Installer\MSIE9.tmp deleted successfully.
C:\WINDOWS\Installer\MSIEA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIEB.tmp deleted successfully.
C:\WINDOWS\Installer\MSIEC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIED.tmp deleted successfully.
C:\WINDOWS\Installer\MSIEE.tmp deleted successfully.
C:\WINDOWS\Installer\MSIEF.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF0.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF1.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF2.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF3.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF4.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF5.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF6.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF7.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF8.tmp deleted successfully.
C:\WINDOWS\Installer\MSIF9.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFA.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFB.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFC.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFD.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFE.tmp deleted successfully.
C:\WINDOWS\Installer\MSIFF.tmp deleted successfully.

Iva212 · #10 Příspěvek od **Iva212** » 02 čer 2012 10:30

2. časť:

C:\WINDOWS\SoftwareDistribution\Download\0538ec675ef0fc2eeb3020c5d098ff73\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\0f5dd42fadd8b583934229efc73ec540\BIT5.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\5dbe76ddd1fcd4015285031d7cf74338\BITB3.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\62a91f7a9f570d1ab2a19f7601463194\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\74de2a7f78552797850c881ceaa0edaf\BIT7.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\77463100ec7324ac49ca0f9251aabd15\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\92419a04207fd81ce55728a49575bf37\BIT5.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\a6a2c87ac05436e8b609edbda7142cc3\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\caac973ff1a1b0ad1760d5614b2d6c10\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\e8711812986a372c9a45aaff7b9e7e83\BIT4.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\f23cbea7360cfe2afe8a33556b0945d1\BIT3.tmp deleted successfully.
C:\WINDOWS\SoftwareDistribution\Download\f78bf2bb8cdee4ec4de35ae36361cab4\BIT387.tmp deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
C:\Program Files\Ask.com\Updater folder moved successfully.
C:\Program Files\Ask.com\assets\oobe folder moved successfully.
C:\Program Files\Ask.com\assets folder moved successfully.
C:\Program Files\Ask.com folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17 folder moved successfully.
C:\Program Files\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\Program Files\BabylonToolbar folder moved successfully.
C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-AS-FADEDE8895E8-ivo.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job moved successfully.
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{64182481-4F71-486b-A045-B233BD0DA8FC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DB4E9724-F518-4dfd-9C7C-78B52103CAB9}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\StartCCC deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\CanonSolutionMenu deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\CanonMyPrinter deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SweetIM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Sweetpacks Communicator deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\facemoods\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard\ deleted successfully.
========== SERVICES/DRIVERS ==========
Service Nero BackItUp Scheduler 4.0 stopped successfully!
Service Nero BackItUp Scheduler 4.0 deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service SwitchBoard stopped successfully!
Service SwitchBoard deleted successfully!
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: ivo
->Temp folder emptied: 1727307 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 70875642 bytes
->Google Chrome cache emptied: 19762376 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 657 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 11664 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8804 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 88,00 mb

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Flash cache emptied: 0 bytes

User: ivo
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.45.0 log created on 06022012_112353

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

#11 Příspěvek od **Márty84** » 02 čer 2012 10:33

Fajn, OTL provedlo co melo. Dejte mi sem novy log z RSIT a napiste, jak to vypada s pc

Iva212 · #12 Příspěvek od **Iva212** » 02 čer 2012 10:37

Na disku je aktuálne 19,6 GB voľného miesta, takže super. To tu nemali už dávno

Chceli sme PC vyčistiť a mať istotu, že tu nie je nejaký nezvaný hosť.
Takisto sa im tu nedali sťahovať aktualizácie systému a antivíru kvôli nedostatku miesta. Tak ich teraz, keď už je tu voľno, skúsim stiahnuť.

nový RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by ivo at 2012-06-02 11:34:36
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 20 GB (50%) free of 40 GB
Total RAM: 3071 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:34:41, on 2.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Teta_Iva\Instalacky\RSIT\RSIT.exe
C:\Program Files\trend micro\ivo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - Default URLSearchHook is missing
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1165696359
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: ServiceLayer - Unknown owner - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (file missing)
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 6917 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - ""

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"support@vdownloader.com"=C:\Program Files\VDownloader\Addons\FireFox

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

D:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

D:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

D:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\ivo\Data aplikací\Mozilla\Firefox\Profiles\tcbhlt6t.default\extensions\
centrumpomocnik@centrum.cz
support@predictad.com
{20a82645-c095-46ed-80e3-08825760534b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
C:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]

C:\Documents and Settings\ivo\Nabídka Start\Programy\Po spuštění
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"ConsentPromptBehaviorAdmin"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe"="C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Enabled:Zoo Tycoon 2 Executable"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"D:\Program Files\Opera\opera.exe"="D:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe"="C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe"="C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe"="C:\Program Files\Empire Interactive\FlatOut2\flatout2.exe:*:Enabled:FlatOut2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-06-02 11:23:53 ----D---- C:\_OTL
2012-06-02 11:11:13 ----D---- C:\Program Files\Barbie(TM)
2012-06-01 21:42:06 ----D---- C:\rsit
2012-06-01 21:42:06 ----D---- C:\Program Files\trend micro
2012-05-27 16:35:08 ----D---- C:\Program Files\Defraggler
2012-05-27 16:28:43 ----D---- C:\Program Files\CCleaner
2012-05-22 18:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2012-05-22 18:46:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2012-05-22 18:44:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2012-05-22 18:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$

======List of files/folders modified in the last 1 month======

2012-06-02 11:31:07 ----D---- C:\WINDOWS\system32
2012-06-02 11:31:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-06-02 11:28:09 ----D---- C:\WINDOWS\Temp
2012-06-02 11:28:07 ----D---- C:\WINDOWS\system32\CatRoot2
2012-06-02 11:26:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-06-02 11:24:16 ----D---- C:\WINDOWS\system32\drivers\etc
2012-06-02 11:24:00 ----SHD---- C:\WINDOWS\Installer
2012-06-02 11:24:00 ----SD---- C:\WINDOWS\Tasks
2012-06-02 11:24:00 ----RD---- C:\Program Files
2012-06-02 11:11:52 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-02 11:11:47 ----A---- C:\WINDOWS\ka.ini
2012-06-02 11:07:34 ----D---- C:\WINDOWS\Prefetch
2012-06-02 05:27:57 ----D---- C:\WINDOWS
2012-06-01 20:59:59 ----D---- C:\Documents and Settings\ivo\Data aplikací\Winamp
2012-06-01 17:48:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
2012-05-27 16:29:53 ----D---- C:\Documents and Settings\ivo\Data aplikací\Media Player Classic
2012-05-27 16:29:52 ----D---- C:\WINDOWS\Debug
2012-05-25 14:20:53 ----HD---- C:\WINDOWS\inf
2012-05-22 20:44:55 ----D---- C:\WINDOWS\Microsoft.NET
2012-05-22 20:44:53 ----RSD---- C:\WINDOWS\assembly
2012-05-22 18:56:32 ----SHD---- C:\Config.Msi
2012-05-22 18:56:17 ----D---- C:\WINDOWS\WinSxS
2012-05-22 18:52:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-05-22 18:46:24 ----N---- C:\WINDOWS\system32\MRT.exe
2012-05-22 18:46:03 ----HD---- C:\WINDOWS\$hf_mig$
2012-05-22 18:45:21 ----D---- C:\Program Files\Microsoft Security Client
2012-05-22 18:44:57 ----D---- C:\WINDOWS\system32\drivers
2012-05-22 18:35:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-05-18 14:56:12 ----A---- C:\WINDOWS\NeroDigital.ini
2012-05-14 11:35:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-08-14 105344]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-01-27 50704]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2011-04-27 20032]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\F:\Test\Lavalys.EVEREST.Ultimate.Edition.v5.30.1990.Beta\EVEREST.Ultimate.Edition.5.30.2054\kerneld.wnt []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2010-05-06 96416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2010-05-06 12704]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2010-05-06 121504]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2010-05-13 217088]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-04-14 604488]
S2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe []
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-04-14 361288]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#13 Příspěvek od **Márty84** » 02 čer 2012 10:46

Log uz vypada cisty

Radeji se ale jeste podivame, zda tam nekde nelezi neco, co logy neukazaly.

Udelejte uplnou kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a pokud neco najde, dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce.

Iva212 · #14 Příspěvek od **Iva212** » 02 čer 2012 11:54

Takže kontrola bežala cca hodinu a niečo našlo, obsah kopírujem:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.61.0.1400
www.malwarebytes.org

Verze databáze: v2012.06.02.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
ivo :: AS-FADEDE8895E8 [administrátor]

Ochrana: Povolena

2.6.2012 11:55:04
mbam-log-2012-06-02 (12-52-50).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 325950
Uplynulý čas: 56 minut, 56 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 1
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Documents and Settings\ivo\Dokumenty\Downloads\DownloadSetup (52).exe (Affiliate.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\ivo\Data aplikací\Microsoft\a1.7z (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\ivo\Data aplikací\Microsoft\n (Malware.Traces) -> Žádná instrukce nebyla provedena.

(konec)

#15 Příspěvek od **Márty84** » 02 čer 2012 11:58

Vsechno nechte odstranit/opravit.

Co ty aktualizace? Jdou?

VIRY.CZ

Prosím o preventívnu kontrolu

Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu

Re: Prosím o preventívnu kontrolu