VIRY.CZ

Dobrý den, přikládám log.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Tom at 2012-07-14 08:26:38
Systém Microsoft Windows XP Professional Service Pack 1
System drive C: has 12 GB (31%) free of 38 GB
Total RAM: 502 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:27:03, on 14.7.2012
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\Real\RealPlayer\update\realsched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\System32\igfxpers.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Tom\Plocha\RSIT.exe
C:\Program Files\trend micro\Tom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\System32\igfxpers.exe
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O20 - AppInit_DLLs: C:\WINDOWS\System32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\System32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Broadcom ASF IP Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 7235 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1004.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1004.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.7.1.3, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, jqs@sun.com:1.0, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.4.7&q="

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\WINDOWS\System32\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609]
"Description"=12.0.1.609
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
nppl3260.dll
nprjplug.dll
nprpjplug.dll

C:\Program Files\Mozilla Firefox\searchplugins\
amazondotcom.xml
answers.xml
babylon.xml
bing.xml
creativecommons.xml
eBay.xml
google.xml
twitter.xml
wikipedia.xml
yahoo.xml

C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-01-02 382720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-05-13 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-05-13 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-05-13 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E718888-423F-11D2-876E-00A0C9082467} - &Rádio - C:\WINDOWS\System32\msdxm.ocx [2002-09-23 844828]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-03-07 4241512]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2011-01-02 274608]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216]
"Persistence"=C:\WINDOWS\System32\igfxpers.exe [2005-04-05 114688]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256]
"IgfxTray"=C:\WINDOWS\System32\igfxtray.exe [2005-04-05 94208]
"HPDJ Taskbar Utility"=C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe [2001-10-12 196608]
"HotKeysCmds"=C:\WINDOWS\System32\hkcmd.exe [2005-04-05 77824]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-06-30 2554696]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_7 []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized []
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2002-08-20 1511453]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-12-05 2295072]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe silent []
"CTFMON.EXE"=C:\WINDOWS\System32\ctfmon.exe [2002-09-23 13312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\WINDOWS\System32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe [2012-06-24 686280]

C:\Documents and Settings\Tom\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\System32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-04-05 131072]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-07-14 08:26:40 ----D---- C:\Program Files\trend micro
2012-07-14 08:26:38 ----D---- C:\rsit
2012-07-14 08:03:34 ----D---- C:\Program Files\CCleaner
2012-07-01 09:57:56 ----D---- C:\Program Files\HLPSOFT

======List of files/folders modified in the last 1 month======

2012-07-14 08:26:40 ----RD---- C:\Program Files
2012-07-14 08:26:37 ----D---- C:\WINDOWS\Prefetch
2012-07-14 08:22:45 ----D---- C:\Documents and Settings\Tom\Data aplikací\Media Player Classic
2012-07-14 08:17:38 ----RSHDC---- C:\WINDOWS\System32\dllcache
2012-07-14 08:16:30 ----D---- C:\WINDOWS\System32\CatRoot2
2012-07-14 08:15:01 ----D---- C:\WINDOWS
2012-07-14 08:09:19 ----D---- C:\WINDOWS\Debug
2012-07-14 08:09:00 ----D---- C:\WINDOWS\Temp
2012-07-14 07:49:05 ----D---- C:\WINDOWS\system32
2012-07-14 07:49:02 ----D---- C:\WINDOWS\System32\drivers
2012-07-14 07:48:05 ----D---- C:\Documents and Settings\Tom\Data aplikací\uTorrent
2012-07-09 14:42:23 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-07-09 14:20:40 ----D---- C:\Documents and Settings\Tom\Data aplikací\ZoomBrowser EX
2012-07-09 14:19:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\ZoomBrowser
2012-07-01 10:16:22 ----D---- C:\Program Files\Mozilla Firefox
2012-07-01 10:15:49 ----SHD---- C:\WINDOWS\Installer
2012-07-01 10:15:49 ----D---- C:\WINDOWS\Help
2012-07-01 10:15:48 ----D---- C:\WINDOWS\security
2012-06-25 14:03:05 ----A---- C:\Documents and Settings\Tom\Data aplikací\trueburner.ini
2012-06-24 12:42:07 ----A---- C:\WINDOWS\System32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2011-06-30 17416]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2002-09-23 13952]
R2 BASFND;BASFND; \??\C:\Program Files\Broadcom\ASFIPMon\BASFND.sys []
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [2006-05-10 156160]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-09-23 9600]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2005-04-05 830684]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-09-23 12160]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2002-09-23 19328]
S1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-06-30 242600]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\System32\DRIVERS\adiusbaw.sys []
S3 CAM1210;USB video camera; C:\WINDOWS\System32\Drivers\cam1210.sys [2007-02-14 92416]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 INIDVD;Initio USB DVD Filter Driver; C:\WINDOWS\system32\DRIVERS\inidvd.sys [2007-11-07 7936]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\System32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 upperdev;upperdev; C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2002-08-29 28160]
S3 usbprint;Třída USB Printer; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2002-08-29 24960]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2002-08-29 14208]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2001-08-17 24192]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\System32\DRIVERS\usbser_lowerfltj.sys [2008-05-07 8064]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-09-23 21760]
S3 Wdf01000;Wdf01000; C:\WINDOWS\System32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASFIPmon;Broadcom ASF IP Monitor; C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe [2005-03-08 61440]
R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2006-03-30 96341]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-05-13 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-12-05 79136]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-05-14 272024]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\System32\wdfmgr.exe [2004-08-11 38912]
R3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-06-30 1793712]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-24 250056]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-06 129976]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]

-----------------EOF-----------------

Zdravim

Nejdrive se zeptam, jake pouzivate zabezpeceni. Vidim tam Avast a Comodo IS. Ale od Avastu nevidim zadnou sluzbu, ani driver. Jak to tedy je?

Dobrý den,


COmodo mám, ale Avast jsem odinstalovala.

Dobra, odstranim zbytky pomoci skriptu, uz ho sepisuju, jeste chvilku to potrva

Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe , ulozte nejlepe na plochu a spustte.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands) Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Bohus
->Temp folder emptied: 899 bytes
->Temporary Internet Files folder emptied: 1476202 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Linda
->Temp folder emptied: 6723 bytes
->Temporary Internet Files folder emptied: 30410525 bytes
->FireFox cache emptied: 79963480 bytes
->Flash cache emptied: 790 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 402 bytes

User: Pavel
->Temp folder emptied: 172538 bytes
->Temporary Internet Files folder emptied: 19836709 bytes
->FireFox cache emptied: 30735247 bytes
->Flash cache emptied: 646 bytes

User: Tom
->Temp folder emptied: 1159605 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 4263118 bytes
->FireFox cache emptied: 225620285 bytes
->Flash cache emptied: 1109 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 11203287 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 386,00 mb


[EMPTYFLASH]

User: All Users

User: Bohus

User: Default User

User: Linda
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Pavel
->Flash cache emptied: 0 bytes

User: Tom
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
========== SERVICES/DRIVERS ==========
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1003.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1004.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1003.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1004.job moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files\Mozilla Firefox\searchplugins\bing.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\askcom.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-1.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-10.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-11.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-12.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-13.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-2.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-3.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-4.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-5.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-6.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-7.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-8.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin-9.xml moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin.gif moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin.src moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\searchplugins\icqplugin.xml moved successfully.
C:\Program Files\Alwil Software\Avast5\Setup folder moved successfully.
C:\Program Files\Alwil Software\Avast5 folder moved successfully.
C:\Program Files\Alwil Software folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\avast5 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RemoteControl deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LanguageShortcut deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\IgfxTray deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\updateMgr deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\FlashPlayerUpdate not found.

OTM by OldTimer - Version 3.1.21.0 log created on 07152012_162858

Files moved on Reboot...

Registry entries deleted on Reboot...

OTM provedlo co melo. Jak je na tom pc, nastala nejaka zmena?



Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

OTL logfile created on: 16.7.2012 9:42:09 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Documents and Settings\Tom\Plocha
Windows XP Professional Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2800.1106)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

502,07 Mb Total Physical Memory | 181,02 Mb Available Physical Memory | 36,05% Memory free
1,20 Gb Paging File | 0,94 Gb Available in Paging File | 78,19% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,24 Gb Total Space | 11,77 Gb Free Space | 31,59% Space Free | Partition Type: NTFS

Computer Name: BEROUNEK | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.07.16 09:41:14 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tom\Plocha\OTL.exe
PRC - [2012.05.06 15:25:34 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.05.18 11:50:18 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2009.05.18 11:50:18 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2006.03.30 10:15:44 | 000,096,341 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe
PRC - [2005.03.08 20:46:12 | 000,061,440 | ---- | M] (Broadcom Corporation) -- C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
PRC - [2002.09.23 14:00:00 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2001.10.12 10:13:03 | 000,196,608 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe


========== Modules (No Company Name) ==========

MOD - [2012.05.06 15:25:32 | 001,952,696 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2009.05.15 01:28:28 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2007.08.14 15:43:46 | 006,365,184 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll
MOD - [2007.07.12 13:55:52 | 000,131,072 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2007.07.12 13:55:28 | 001,581,056 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012.05.06 15:25:35 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011.06.30 10:37:28 | 001,793,712 | ---- | M] (COMODO) [Auto | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2008.08.07 12:17:30 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2006.03.30 10:15:44 | 000,096,341 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2005.03.08 20:46:12 | 000,061,440 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe -- (ASFIPmon)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand | Stopped] -- Reg Error: Invalid data type. -- (INIDVD)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\DRIVERS\adiusbaw.sys -- (adiusbaw)
DRV - File not found [Kernel | Auto | Stopped] -- System32\Drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys)
DRV - [2011.06.30 10:38:14 | 000,242,600 | ---- | M] (COMODO) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2011.06.30 10:38:12 | 000,017,416 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd)
DRV - [2008.06.06 10:24:44 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008.05.07 08:38:36 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008.05.07 08:38:20 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008.05.07 08:38:20 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2007.09.17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007.02.14 18:10:34 | 000,092,416 | ---- | M] (USB video camera) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cam1210.sys -- (CAM1210)
DRV - [2006.05.10 16:00:16 | 000,156,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2004.09.17 10:02:54 | 000,732,928 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (senfilt)
DRV - [2003.04.24 16:21:50 | 000,006,025 | R--- | M] (Broadcom Corporation) [Kernel | Auto | Running] -- C:\Program Files\Broadcom\ASFIPMon\BASFND.sys -- (BASFND)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1275210071-746137067-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
IE - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://tbsearch.ask.com/redirect?client ... cale=en_EU
IE - HKU\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.4.7&q="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\System32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.01.02 13:02:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.05.06 15:25:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.04.15 09:48:32 | 000,000,000 | ---D | M]

[2009.12.20 10:06:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Tom\Data aplikací\Mozilla\Extensions
[2012.05.04 20:16:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions
[2012.04.01 10:01:50 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.05.13 21:04:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.05.13 21:04:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\TOM\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\XOJBEHVR.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
[2012.05.13 21:03:43 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2012.05.06 15:25:35 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.05.13 21:03:25 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.02.25 11:18:36 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012.07.15 16:29:56 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Rádio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)
O3 - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe (HP)
O4 - Startup: C:\Documents and Settings\Tom\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-746137067-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()
O9 - Extra 'Tools' menuitem : @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\Web\related.htm ()
O12 - Plugin for: .mp3 - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll (Apple Computer, Inc.)
O15 - HKU\S-1-5-21-1275210071-746137067-725345543-1003\..Trusted Domains: ([]msn in Tento počítač)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ADAF2355-18F3-4472-BEC0-2B94622511FE}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\System32\guard32.dll) - C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Tom\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Tom\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.02.06 03:08:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.07.16 09:41:14 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Tom\Plocha\OTL.exe
[2012.07.15 16:28:58 | 000,000,000 | ---D | C] -- C:\_OTM
[2012.07.15 16:27:47 | 000,522,240 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Tom\Plocha\OTM.exe
[2012.07.15 09:42:07 | 009,822,920 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2012.07.14 08:26:40 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.07.14 08:26:38 | 000,000,000 | ---D | C] -- C:\rsit
[2012.07.14 08:03:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2012.07.14 08:03:34 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.07.01 09:57:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\HLP Free PC Cleaner
[2012.07.01 09:57:56 | 000,000,000 | ---D | C] -- C:\Program Files\HLPSOFT
[2012.06.24 13:12:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Tom\Plocha\magda

========== Files - Modified Within 30 Days ==========

[2012.07.16 09:43:26 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.07.16 09:41:14 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tom\Plocha\OTL.exe
[2012.07.16 09:39:28 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1003.job
[2012.07.16 09:38:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.07.15 17:56:27 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1003.job
[2012.07.15 16:38:52 | 000,045,558 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\fernet.jpg
[2012.07.15 16:34:46 | 001,426,958 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\botky.jpg
[2012.07.15 16:29:56 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2012.07.15 16:27:45 | 000,522,240 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tom\Plocha\OTM.exe
[2012.07.15 10:27:31 | 000,651,669 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\vajicka.jpg
[2012.07.15 09:43:14 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012.07.15 09:43:13 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.07.15 09:42:13 | 009,822,920 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2012.07.15 08:54:49 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.07.15 07:42:02 | 001,470,404 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\15072012272.jpg
[2012.07.14 08:26:12 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\RSIT.exe
[2012.07.14 08:14:09 | 000,040,960 | ---- | M] () -- C:\Documents and Settings\Tom\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.07.14 08:03:53 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.07.14 07:49:02 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012.07.09 14:25:40 | 000,066,280 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\IMG_2032.JPG
[2012.07.09 14:24:38 | 000,043,063 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\IMG_2030.JPG
[2012.07.09 08:28:19 | 000,042,275 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\uhrada-pojistneho-20120709072001.pdf
[2012.07.06 08:36:34 | 001,266,294 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\06072012231.jpg
[2012.07.06 08:35:18 | 001,491,860 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\06072012225.jpg
[2012.07.05 18:44:46 | 001,531,459 | ---- | M] () -- C:\Documents and Settings\Tom\Plocha\05072012214.jpg
[2012.07.02 09:00:52 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2012.06.25 14:03:05 | 000,000,530 | ---- | M] () -- C:\Documents and Settings\Tom\Data aplikací\trueburner.ini

========== Files Created - No Company Name ==========

[2012.07.16 09:43:26 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.07.15 17:56:28 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1003.job
[2012.07.15 17:56:27 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1003.job
[2012.07.15 10:21:33 | 001,514,066 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012105.jpg
[2012.07.15 10:21:31 | 001,472,851 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012104.jpg
[2012.07.15 10:21:29 | 001,323,495 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012103.jpg
[2012.07.15 10:21:25 | 001,751,472 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012102.jpg
[2012.07.15 10:21:21 | 001,646,855 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012100.jpg
[2012.07.15 10:21:19 | 001,646,061 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\14042012101.jpg
[2012.07.15 10:21:16 | 001,333,900 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\09042012091.jpg
[2012.07.15 10:21:13 | 000,651,669 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\vajicka.jpg
[2012.07.15 10:20:25 | 001,531,459 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\05072012214.jpg
[2012.07.15 10:20:22 | 001,426,958 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\botky.jpg
[2012.07.15 10:20:16 | 001,266,294 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\06072012231.jpg
[2012.07.15 10:20:12 | 001,491,860 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\06072012225.jpg
[2012.07.15 10:19:46 | 001,470,404 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\15072012272.jpg
[2012.07.15 10:19:40 | 000,045,558 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\fernet.jpg
[2012.07.14 08:26:17 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\RSIT.exe
[2012.07.14 08:03:50 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2012.07.09 14:20:44 | 000,043,063 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\IMG_2030.JPG
[2012.07.09 14:20:26 | 000,066,280 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\IMG_2032.JPG
[2012.07.09 08:28:25 | 000,042,275 | ---- | C] () -- C:\Documents and Settings\Tom\Plocha\uhrada-pojistneho-20120709072001.pdf
[2011.02.05 18:38:25 | 000,000,530 | ---- | C] () -- C:\Documents and Settings\Tom\Data aplikací\trueburner.ini
[2010.11.06 10:57:47 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Tom\.gtk-bookmarks
[2010.11.06 10:45:11 | 000,144,346 | ---- | C] () -- C:\Documents and Settings\Tom\.fonts.cache-1
[2009.02.06 20:33:46 | 000,040,960 | ---- | C] () -- C:\Documents and Settings\Tom\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== LOP Check ==========

[2010.10.28 14:40:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2012.03.11 16:32:58 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\Common Files
[2012.04.22 10:34:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2010.10.31 16:42:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.12.06 18:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Installations
[2009.02.06 03:52:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LightScribe
[2012.03.11 16:32:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MFAData
[2009.07.18 09:01:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OLYMPUS
[2009.12.06 18:23:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OviInstallerCache
[2010.01.01 21:19:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Linda\Data aplikací\ICQ
[2010.11.27 19:12:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\ICQ
[2012.02.19 18:16:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\MP3Rocket
[2011.03.04 00:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\OpenOffice.org
[2012.07.14 07:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\uTorrent

========== Purity Check ==========



========== Custom Scans ==========

< >

< >

< MD5 for: ATAPI.SYS >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2002.09.23 14:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\drivers\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2002.09.23 14:00:00 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=82CD2AA659D68781D29BA87421BE0E40 -- C:\WINDOWS\system32\autochk.exe
[2002.09.23 14:00:00 | 000,578,048 | ---- | M] (Microsoft Corporation) MD5=82CD2AA659D68781D29BA87421BE0E40 -- C:\WINDOWS\system32\dllcache\autochk.exe

< MD5 for: CDROM.SYS >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2002.09.23 14:00:00 | 000,047,488 | ---- | M] (Microsoft Corporation) MD5=6506E033AD04CFEC9EE56DBEFD1083DD -- C:\WINDOWS\system32\drivers\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2002.09.23 14:00:00 | 000,053,248 | ---- | M] (Microsoft Corporation) MD5=031E7FF41B13B658CAE7D6C98086F76A -- C:\WINDOWS\system32\cryptsvc.dll
[2002.09.23 14:00:00 | 000,053,248 | ---- | M] (Microsoft Corporation) MD5=031E7FF41B13B658CAE7D6C98086F76A -- C:\WINDOWS\system32\dllcache\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2002.09.23 14:00:00 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=E8508E7F865490D8AE71D00C8DF4D227 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2002.09.23 14:00:00 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=E8508E7F865490D8AE71D00C8DF4D227 -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2002.09.23 14:00:00 | 001,004,544 | ---- | M] (Microsoft Corporation) MD5=11D80755545CFB5EB9659EE88440EAE2 -- C:\WINDOWS\explorer.exe
[2002.09.23 14:00:00 | 001,004,544 | ---- | M] (Microsoft Corporation) MD5=11D80755545CFB5EB9659EE88440EAE2 -- C:\WINDOWS\system32\dllcache\explorer.exe
[1999.05.05 23:22:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=81EF5B254642034E4139BC589B45D629 -- C:\Documents and Settings\Tom\Dokumenty\WINDOWS\EXPLORER.EXE

< MD5 for: HAL.DLL >
[2002.09.23 14:00:00 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2002.09.23 14:00:00 | 000,127,872 | ---- | M] (Microsoft Corporation) MD5=E8D2B5D5186A9B93D7019D7A74D77A1E -- C:\WINDOWS\system32\hal.dll

< MD5 for: ISAPNP.SYS >
[2002.09.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2002.09.23 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2002.09.23 14:00:00 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=32F7074BAC9A5F899CCA9C046C9FA6EB -- C:\WINDOWS\system32\dllcache\lsass.exe
[2002.09.23 14:00:00 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=32F7074BAC9A5F899CCA9C046C9FA6EB -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2002.09.23 14:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) MD5=3B350E5A2A5E951453F3993275A4523A -- C:\WINDOWS\system32\dllcache\ndis.sys
[2002.09.23 14:00:00 | 000,167,552 | ---- | M] (Microsoft Corporation) MD5=3B350E5A2A5E951453F3993275A4523A -- C:\WINDOWS\system32\drivers\ndis.sys

< MD5 for: NETLOGON.DLL >
[2002.09.23 14:00:00 | 000,399,360 | ---- | M] (Microsoft Corporation) MD5=CF03E300B5CEEFFEFBE6F67532BD0EF1 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2002.09.23 14:00:00 | 000,399,360 | ---- | M] (Microsoft Corporation) MD5=CF03E300B5CEEFFEFBE6F67532BD0EF1 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2002.09.23 14:00:00 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B2666CAB5E8C8A741D63F18D551A47FB -- C:\WINDOWS\system32\dllcache\scecli.dll
[2002.09.23 14:00:00 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B2666CAB5E8C8A741D63F18D551A47FB -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2002.09.23 14:00:00 | 000,045,568 | ---- | M] (Microsoft Corporation) MD5=7763D73255AD4046FA999D42EAF22C26 -- C:\WINDOWS\system32\dllcache\smss.exe
[2002.09.23 14:00:00 | 000,045,568 | ---- | M] (Microsoft Corporation) MD5=7763D73255AD4046FA999D42EAF22C26 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2002.09.23 14:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=329945887A0C684C38A4845330BC9100 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2002.09.23 14:00:00 | 000,012,800 | ---- | M] (Microsoft Corporation) MD5=329945887A0C684C38A4845330BC9100 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2002.09.23 14:00:00 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2002.09.23 14:00:00 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- C:\WINDOWS\system32\drivers\tcpip.sys

< MD5 for: USERINIT.EXE >
[2002.09.23 14:00:00 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B26871B5CE92F9D95AE6E62119799EB9 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2002.09.23 14:00:00 | 000,022,016 | ---- | M] (Microsoft Corporation) MD5=B26871B5CE92F9D95AE6E62119799EB9 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2002.09.23 14:00:00 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=FF8857D1AF59071F172C0FAD0FD33E87 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2002.09.23 14:00:00 | 000,516,608 | ---- | M] (Microsoft Corporation) MD5=FF8857D1AF59071F172C0FAD0FD33E87 -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2002.09.23 14:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=748494B94A871A828C64D1D5C738D2B7 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2002.09.23 14:00:00 | 000,075,264 | ---- | M] (Microsoft Corporation) MD5=748494B94A871A828C64D1D5C738D2B7 -- C:\WINDOWS\system32\ws2_32.dll
[1999.05.05 23:22:00 | 000,073,728 | ---- | M] (Microsoft Corporation) MD5=B61FD94EA42E742C4E45CD93C92A5886 -- C:\Documents and Settings\Tom\Dokumenty\WINDOWS\SYSTEM\WS2_32.DLL

< >

< %systemroot%*.* /U /s >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.04.10 11:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Adobe
[2011.04.10 10:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\AdobeUM
[2009.03.07 09:24:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Ahead
[2009.03.01 18:48:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\CyberLink
[2010.11.27 19:12:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\ICQ
[2009.02.06 03:20:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Identities
[2009.03.01 20:27:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Macromedia
[2012.07.14 08:22:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Media Player Classic
[2011.04.10 11:33:00 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Tom\Data aplikací\Microsoft
[2009.12.20 10:06:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Mozilla
[2012.02.19 18:16:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\MP3Rocket
[2009.12.20 09:53:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\MSN6
[2011.03.04 00:01:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\OpenOffice.org
[2011.05.23 07:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Real
[2011.10.09 14:57:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Skype
[2011.08.07 19:50:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\skypePM
[2009.09.27 19:43:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Sun
[2012.07.14 07:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\uTorrent
[2010.02.20 22:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\WinRAR
[2009.03.23 21:42:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\Yahoo!
[2012.07.09 14:20:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tom\Data aplikací\ZoomBrowser EX

< %APPDATA%\*.exe /s >
[2011.04.10 10:38:24 | 004,638,960 | ---- | M] (Adobe Systems ) -- C:\Documents and Settings\Tom\Data aplikací\Adobe\Acrobat\7.0\Updater\Extended_language_pack.exe
[2012.07.08 19:20:10 | 000,315,544 | ---- | M] (RealNetworks, Inc.) -- C:\Documents and Settings\Tom\Data aplikací\Real\Update\UpgradeHelper\RealPlayer\9.11\rnupgagent.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2009.02.06 05:01:29 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2009.02.06 05:01:29 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2009.02.06 05:01:29 | 000,413,696 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.07.14 07:49:02 | 000,002,504 | ---- | M] () -- C:\WINDOWS\system32\CONFIG.NT
[2012.07.15 09:43:14 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\system32\FlashPlayerApp.exe
[2012.07.15 09:43:13 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
[2012.07.15 09:42:13 | 009,822,920 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\system32\FlashPlayerInstaller.exe
[2012.07.15 08:54:49 | 000,013,646 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"LightScribe Control Panel" = C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden -- [2007.12.05 13:30:28 | 002,295,072 | ---- | M] (Hewlett-Packard Company)
"CTFMON.EXE" = C:\WINDOWS\System32\ctfmon.exe -- [2002.09.23 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.07.16 09:43:26 | 000,000,512 | ---- | M] () MD5=28A0C3E24AED16A9CE7BA457B4120935 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2010.10.05 04:50:56 | 000,062,238 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\share\gimp\2.0\patterns\cracked.pat

< *keygen* /s >

< *loader* /s >
[2011.01.02 13:02:49 | 000,001,399 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2011.01.02 13:02:49 | 000,000,319 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2012.03.06 18:24:38 | 000,010,145 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.10.0.1\ExternalLibraryLoader.jsm
[2011.08.16 16:31:18 | 000,010,145 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.6.0.10\ExternalLibraryLoader.jsm
[2011.09.27 14:08:32 | 000,010,144 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.7.0.6\ExternalLibraryLoader.jsm
[2011.11.07 13:19:44 | 000,010,144 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.8.0.8\ExternalLibraryLoader.jsm
[2011.12.06 06:02:24 | 000,010,144 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.8.1.0\ExternalLibraryLoader.jsm
[2012.01.10 19:40:30 | 000,010,144 | ---- | M] () -- \Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm
[2001.10.12 15:51:46 | 000,003,065 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\Program Files\Hewlett-Packard\hp deskjet assistant\bin\components\uriloader.xpt
[2004.07.07 16:56:32 | 000,003,286 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\Program Files\ICQLite\LiteDataFiles\loader.gif
[2004.02.29 14:56:58 | 000,005,795 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\Program Files\ICQLite\LiteDataFiles\loader.jpg
[2004.07.07 14:06:32 | 000,005,520 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\Program Files\ICQLite\LiteDataFiles\loader.swf
[2001.10.30 09:10:00 | 000,030,720 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSBCKUP\DMLOADER.DLL
[2001.10.30 09:10:00 | 000,030,720 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSTEM\DMLOADER.DLL
[2006.03.24 21:11:36 | 000,002,931 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\Temporary Internet Files\Content.IE5\07G3BVID\preloader[1].swf
[2006.03.24 21:11:34 | 000,002,475 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\Temporary Internet Files\Content.IE5\2OPIAQ24\preloader[1].js
[2010.02.08 04:40:00 | 000,000,543 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\etc\gtk-2.0\gdk-pixbuf.loaders
[2009.12.16 00:58:18 | 000,017,056 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2009.12.16 00:58:20 | 000,018,592 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2009.12.16 00:58:24 | 000,026,272 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2009.12.16 00:58:26 | 000,012,960 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2009.12.16 00:58:28 | 000,017,568 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2009.12.16 00:58:56 | 000,019,616 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2009.12.16 00:59:04 | 000,015,008 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2009.12.16 00:59:06 | 000,019,104 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2009.12.16 00:59:10 | 000,017,056 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2009.12.16 00:59:14 | 000,012,448 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2009.12.16 00:59:16 | 000,016,544 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2009.12.16 00:59:20 | 000,016,544 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2009.12.16 00:59:22 | 000,011,936 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2009.12.16 00:59:24 | 000,013,984 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2009.12.16 00:59:28 | 000,028,320 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2009.05.02 02:42:00 | 000,009,880 | ---- | M] () -- \Documents and Settings\Tom\Plocha\GIMPPortable\App\gimp\lib\gtk-2.0\2.10.0\loaders\svg_loader.dll
[2001.10.12 11:36:47 | 000,003,065 | ---- | M] () -- \Program Files\Hewlett-Packard\hp deskjet assistant\bin\components\uriloader.xpt
[2009.05.18 10:51:58 | 000,006,308 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2009.05.15 01:28:34 | 000,022,528 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2009.05.18 11:50:42 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2009.05.15 01:28:28 | 000,029,696 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2009.05.18 10:18:34 | 000,003,872 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2008.06.20 20:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2002.12.12 01:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll
[2002.12.12 01:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2002.12.12 01:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[1999.05.05 23:22:00 | 000,049,152 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSBCKUP\DPSERIAL.DLL
[1999.05.05 23:22:00 | 000,049,152 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSTEM\DPSERIAL.DLL
[1999.05.05 23:22:00 | 000,018,625 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSTEM\SERIAL.VXD
[1998.05.15 21:01:00 | 000,012,271 | ---- | M] () -- \Documents and Settings\Tom\Dokumenty\WINDOWS\SYSTEM\SERIALUI.DLL
[2002.09.23 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2002.09.23 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2002.09.23 14:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2002.09.23 14:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2002.09.23 14:00:00 | 000,062,208 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys

< *w7lxe* /s >

< End of report >

OTL Extras logfile created on: 16.7.2012 9:42:09 - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Documents and Settings\Tom\Plocha
Windows XP Professional Edition Service Pack 1 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2800.1106)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

502,07 Mb Total Physical Memory | 181,02 Mb Available Physical Memory | 36,05% Memory free
1,20 Gb Paging File | 0,94 Gb Available in Paging File | 78,19% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,24 Gb Total Space | 11,77 Gb Free Space | 31,59% Space Free | Partition Type: NTFS

Computer Name: BEROUNEK | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL %1,%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL %1,%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071B9AFA-EBE8-4ABF-8F4A-9F92612F517E}" = Broadcom ASF Management Applications
"{1A524CFE-DF85-4555-8BC2-0C89DBD8BC2C}" = PC Connectivity Solution
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{23E797E9-F852-4AEA-93F0-772ED2B9D9F9}" = OpenOffice.org 3.1
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{30BB4D60-81DB-11D5-BB77-00400536ABAC}" = OLYMPUS CAMEDIA Master 4.1
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7E369B27-13E2-41A5-9879-358EE1C8B5AD}" = Broadcom Gigabit Integrated Controller
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{A61AAA3C-7FC1-4F9F-8AE6-CB3040E8CA14}_is1" = HLP Free PC Cleaner 1.4
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Czech
"{B3164E9E-BE08-4F3B-94BC-C6D09C0205E1}" = Nokia Connectivity Cable Driver
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BE90CE58-41DE-4708-9291-A9D1D49B1029}" = SecurDisc Viewer
"{CBCF859F-04BE-4A07-B6FA-F4FAD69EF1ED}" = LightScribe System Software 1.10.27.1
"{E819CB61-79E9-4D84-AEA9-2C9207CA481D}" = USB Video Camera Driver v1.52
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Balíček ovladače systému Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CAL" = Canon Camera Access Library
"CameraWindowDVC5" = Canon Camera Window DC_DV 5 for ZoomBrowser EX
"CameraWindowDVC6" = Canon Camera Window DC_DV 6 for ZoomBrowser EX
"CameraWindowMC" = Canon Camera Window MC 6 for ZoomBrowser EX
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CCleaner" = CCleaner
"CSCLIB" = Canon Camera Support Core Library
"EOS Utility" = Canon Utilities EOS Utility
"hp deskjet 656c series" = hp deskjet 656c series (Pouze odstranit)
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.4.8 (Full) BETA
"LG USB Booster_is1" = Booster 1.03
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"Mozilla Firefox 12.0 (x86 en-US)" = Mozilla Firefox 12.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PhotoStitch" = Canon Utilities PhotoStitch
"QuickTime" = QuickTime
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RealPlayer 12.0" = RealPlayer
"RemoteCaptureTask" = Canon RemoteCapture Task for ZoomBrowser EX
"True Burner_is1" = True Burner 1.1
"Visage" = Vizážista
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = WinRAR
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 23.12.2011 12:02:19 | Computer Name = BEROUNEK | Source = Perflib | ID = 1017
Description = Sběr dat čítače výkonu od služby PerfProc byl vypnut z důvodu jedné
nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyba (nebo
chyby) která vyvolala tuto akci, byla zapsána do protokolu událostí aplikace . Chyba
(nebo chyby) by měla být opravena před novým zapnutím čítače výkonu pro tuto službu.
r

Error - 27.12.2011 3:54:35 | Computer Name = BEROUNEK | Source = Perflib | ID = 2002
Description = Procedura Open služby WmiApRpl v knihovně DLL C:\WINDOWS\System32\wbem\wmiaprpl.dll
trvala déle, než čas určený pro čekání. Pravděpodobně došlo k potížím s tímto rozšířeným
čítačem nebo se službou, od níž získává čítač data, nebo byl systém při obdržení
volání velice zaneprázdněn.

Error - 2.1.2012 4:18:09 | Computer Name = BEROUNEK | Source = Application Error | ID = 1000
Description = Chybující aplikace iexplore.exe, verze 6.0.2800.1106, chybující modul
mshtml.dll, verze 6.0.2800.1106, adresa chyby 0x000f5033.

Error - 29.1.2012 4:50:44 | Computer Name = BEROUNEK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 9.0.1.4371, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 30.1.2012 7:21:38 | Computer Name = BEROUNEK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 9.0.1.4371, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 5.2.2012 9:53:02 | Computer Name = BEROUNEK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace IEXPLORE.EXE, verze 6.0.2800.1106, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 5.2.2012 9:53:03 | Computer Name = BEROUNEK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace IEXPLORE.EXE, verze 6.0.2800.1106, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 5.2.2012 9:53:06 | Computer Name = BEROUNEK | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace IEXPLORE.EXE, verze 6.0.2800.1106, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 12.2.2012 3:52:03 | Computer Name = BEROUNEK | Source = Perflib | ID = 2002
Description = Procedura Open služby WmiApRpl v knihovně DLL C:\WINDOWS\System32\wbem\wmiaprpl.dll
trvala déle, než čas určený pro čekání. Pravděpodobně došlo k potížím s tímto rozšířeným
čítačem nebo se službou, od níž získává čítač data, nebo byl systém při obdržení
volání velice zaneprázdněn.

Error - 19.2.2012 12:10:53 | Computer Name = BEROUNEK | Source = Perflib | ID = 2002
Description = Procedura Open služby WmiApRpl v knihovně DLL C:\WINDOWS\System32\wbem\wmiaprpl.dll
trvala déle, než čas určený pro čekání. Pravděpodobně došlo k potížím s tímto rozšířeným
čítačem nebo se službou, od níž získává čítač data, nebo byl systém při obdržení
volání velice zaneprázdněn.

[ System Events ]
Error - 15.7.2012 11:50:59 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\Program Files\Real\RealPlayer\plugins\rmxrend.dll
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 15.7.2012 11:54:12 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.DebugCRT nebyla nalezena
a poslední chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 15.7.2012 11:54:12 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.DebugCRT se nezdařila.
Referenční chybová zpráva: Sestavení určené odkazem není v systému nainstalováno.
.

Error - 15.7.2012 11:54:12 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\Program Files\Real\RealPlayer\plugins\rmxrend.dll
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 15.7.2012 11:55:45 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.DebugCRT nebyla nalezena
a poslední chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 15.7.2012 11:55:45 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.DebugCRT se nezdařila.
Referenční chybová zpráva: Sestavení určené odkazem není v systému nainstalováno.
.

Error - 15.7.2012 11:55:45 | Computer Name = BEROUNEK | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\Program Files\Real\RealPlayer\plugins\rmxrend.dll
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 16.7.2012 3:39:42 | Computer Name = BEROUNEK | Source = Service Control Manager | ID = 7000
Description = Služba General Purpose USB Driver (adildr.sys) neuspěla při spuštění
v důsledku následující chyby: %%2

Error - 16.7.2012 3:39:42 | Computer Name = BEROUNEK | Source = Service Control Manager | ID = 7009
Description = Vypršel časový limit (30000 milisekund) čekání na připojení služby
COMODO Internet Security Helper Service.

Error - 16.7.2012 3:39:42 | Computer Name = BEROUNEK | Source = Service Control Manager | ID = 7000
Description = Služba COMODO Internet Security Helper Service neuspěla při spuštění
v důsledku následující chyby: %%1053


< End of report >

Znovu spustte OTL
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands) Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.



Pokud jsem to neprehledl, neodpovedela jste, jak je na tom pc, jestli se neco zmenilo. Jak to tedy vypada?



Aktualizujte windows. Mate Service Pack 1, ale uz je SP3

Díky za pomoc, zase o víkendu budu na tom počítači, tak dám vědět.
Jinak něco se zrychlilo, něco ne... Internet se například načítá rychleji, ale stále se mi seká, hlavně když mám otevřená třeba 2 okna. Také po zapnutí pc se automaticky otevírá okno s dokumenty, aniž bych to nastavovala. Neumím to nastavit.

OK. Uvidime, jak to bude vypadat po provedenych krocich

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Bohus
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Linda
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Pavel
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Tom
->Temp folder emptied: 65864 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 1758313 bytes
->FireFox cache emptied: 55418624 bytes
->Flash cache emptied: 678 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 55,00 mb


[EMPTYFLASH]

User: All Users

User: Bohus

User: Default User

User: Linda
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Pavel
->Flash cache emptied: 0 bytes

User: Tom
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7 removed from extensions.enabledItems
Prefs.js: {7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.7.1.3 removed from extensions.enabledItems
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.4.7&q=" removed from keyword.URL
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Documents and Settings\Tom\Data aplikací\Mozilla\Firefox\Profiles\xojbehvr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
Registry value HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry value HKEY_USERS\S-1-5-21-1275210071-746137067-725345543-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ not found.
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-746137067-725345543-1003.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-746137067-725345543-1003.job moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\sounds folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\report folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\moved folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\log folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\journal folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\integ folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\HtmlData folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\fw folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\chest folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\backup folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\arpot\TEMP folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5\arpot folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software\Avast5 folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\Alwil Software folder moved successfully.

OTL by OldTimer - Version 3.2.54.0 log created on 07212012_094022

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

OTL provedlo co melo.

Pokud uz je aktualizovany windows na service Pack 3, udelejte toto:

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar, jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk
Stahnete napriklad program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci



Pak mi tu vlozte novy log z RSIT a napiste, jak je na tom pocitac.

Tak jsem vše provedla,
Počítač je opravdu o dost rychlejší, zatím se neseká, jen občas facebook, ale s tím jsem počítala.
Akorát nevím, jak mám log zkopírovat, žádné okno se mi neotevřelo jako u předchozích testů