VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Poprosim o kontrolu logu - kasanos

https://forum.viry.cz:443/viewtopic.php?t=124102

Stránka 1 z 1

Poprosim o kontrolu logu - kasanos

Napsal: 03 zář 2012 19:27
od kasanos
Zdravím
Ctěl bych Vás poprosit o kontrolu logu a zároveň poděkovat za pomoc kterou tu podáváte.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Kasa at 2012-09-03 20:22:32
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 54 GB (13%) free of 410 GB
Total RAM: 2559 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:23:02, on 3.9.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\OSCAR Editor X7\OscarEditor.exe
C:\Program Files\Creative\Software Update 3\SoftAuto.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Steam\steam.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files\AnvSoft\Any Video Converter Ultimate\AVCUltimate.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conhost.exe
C:\Program Files\AnvSoft\Any Video Converter Ultimate\gnu\adc\mencoder.exe
C:\Users\Kasa\Desktop\stahování\RSIT.exe
C:\Program Files\trend micro\Kasa.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx ... =11&lng=cs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://toolbar.inbox.com/help/sa_custom ... tbid=80093
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - mscoree.dll (file missing)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [USBToolTip] c:\progra~1\pinnacle\shared~1\programs\usbtip\usbtip.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Google Update] "C:\Users\Kasa\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [SoftAuto.exe] "C:\Program Files\Creative\Software Update 3\SoftAuto.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_SC264.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
O4 - Global Startup: AML Device Install.lnk = C:\Program Files\AMD AVT\bin\kdbsync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{8EA6732B-18E9-4A8F-B4CC-9BCDEB3B94CB}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate1cb0b176489c170) (gupdate1cb0b176489c170) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 13008 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, videosurf_enhanced@videosurf.com:0.79, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"support@vdownloader.com"=C:\Program Files\VDownloader\Addons\FireFox


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633]
"Description"=RealJukebox Netscape Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633]
"Description"=12.0.1.633
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsILegitCheckPlugin.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npLegitCheckPlugin.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
nprjplug.dll
nprpjplug.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions\
2020Player_IKEA@2020Technologies.com
videosurf_enhanced@videosurf.com
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\
askcom.xml
crawlersrch.xml
inbox-hledat.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-03-09 381656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-05-09 329504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7b523e7c-f096-4e36-a0cb-7efeb5c675c1}]
IEExtension.VDownloaderBHO - C:\Windows\system32\mscoree.dll [2010-11-04 297808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-03-02 4296864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-05-09 59168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21 1219152]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-08-21 1227224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-08-21 4282728]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-12-13 11487848]
"USBToolTip"=c:\progra~1\pinnacle\shared~1\programs\usbtip\usbtip.exe [2007-02-20 199752]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-07-03 462920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-02-14 636032]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []
"Google Update"=C:\Users\Kasa\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-20 136176]
"OscarEditor"=C:\Program Files\OSCAR Editor X7\OscarEditor.exe [2010-07-22 2636800]
"SoftAuto.exe"=C:\Program Files\Creative\Software Update 3\SoftAuto.exe [2008-08-13 405504]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]
"Steam"=C:\Program Files\Steam\steam.exe [2012-07-22 1353080]
"EPSON Stylus DX4400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2012-07-27 393216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AML Device Install.lnk - C:\Program Files\AMD AVT\bin\kdbsync.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-06-07 203776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"msacm.siren"=sirenacm.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"msacm.ac3filter"=ac3filter.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"VIDC.IV41"=ir41_32.ax
"VIDC.IV32"=ir32_32.dll
"vidc.iv31"=ir32_32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-09-03 19:27:43 ----D---- C:\ProgramData\FarmFrenzy-PizzaParty
2012-09-03 19:24:51 ----D---- C:\ProgramData\FarmFrenzy3_Madagascar
2012-09-03 18:38:27 ----D---- C:\Program Files\Alawar
2012-09-02 10:27:43 ----A---- C:\Users\Kasa\AppData\Roaming\inst.exe
2012-09-02 09:32:00 ----D---- C:\Program Files\Dungeon Defenders
2012-09-01 18:08:50 ----D---- C:\Program Files\Trendy Entertainment
2012-09-01 17:42:29 ----D---- C:\Program Files\Vivendi Universal Games
2012-09-01 17:22:18 ----D---- C:\Program Files\Microsoft WSE
2012-08-31 08:37:29 ----D---- C:\Program Files\LogMeIn Hamachi
2012-08-30 08:48:44 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2012-08-29 10:20:35 ----D---- C:\Users\Kasa\AppData\Roaming\AnvSoft
2012-08-29 10:15:40 ----N---- C:\Windows\system32\drivers\anvsnddrv.sys
2012-08-29 10:15:13 ----D---- C:\Program Files\AnvSoft
2012-08-29 10:10:14 ----D---- C:\Program Files\ProgDVB
2012-08-29 09:47:29 ----N---- C:\Windows\system32\TubeFinder.exe
2012-08-29 09:47:24 ----N---- C:\Windows\system32\VB6FR.DLL
2012-08-29 09:47:24 ----N---- C:\Windows\system32\PCCLPFR.DLL
2012-08-29 09:47:24 ----N---- C:\Windows\system32\MSCMCFR.DLL
2012-08-29 09:47:21 ----N---- C:\Windows\system32\CMDLGFR.DLL
2012-08-29 09:47:20 ----D---- C:\Users\Kasa\AppData\Roaming\FreeFLVConverter
2012-08-29 09:47:20 ----D---- C:\Program Files\Free FLV Converter
2012-08-29 09:31:49 ----D---- C:\Program Files\ConvertHelper
2012-08-29 09:15:25 ----D---- C:\Users\Kasa\AppData\Roaming\VDownloader
2012-08-29 09:15:06 ----A---- C:\Program Files\Common Files\WinPcapNmap.exe
2012-08-29 09:14:59 ----D---- C:\Program Files\VDownloader
2012-08-21 18:20:38 ----D---- C:\Program Files\Sapphire TRIXX
2012-08-21 14:41:31 ----D---- C:\Program Files\EDDICA
2012-08-21 14:38:00 ----D---- C:\Users\Kasa\AppData\Roaming\ATI
2012-08-21 14:38:00 ----D---- C:\ProgramData\ATI
2012-08-21 14:29:13 ----D---- C:\Program Files\AMD AVT
2012-08-21 14:29:11 ----D---- C:\Program Files\AMD
2012-08-21 14:29:08 ----D---- C:\Program Files\AMD APP
2012-08-21 14:29:04 ----D---- C:\Program Files\Common Files\ATI Technologies
2012-08-21 14:28:04 ----D---- C:\ProgramData\AMD
2012-08-21 14:27:54 ----N---- C:\Windows\system32\drivers\amdiox86.sys
2012-08-21 14:26:06 ----D---- C:\Program Files\ATI
2012-08-21 14:22:23 ----D---- C:\Program Files\ATI Technologies
2012-08-21 14:21:04 ----D---- C:\AMD
2012-08-21 09:59:30 ----D---- C:\Program Files\VideoLAN
2012-08-21 09:47:13 ----N---- C:\Windows\system32\lagarith.dll
2012-08-21 09:47:11 ----N---- C:\Windows\system32\xvidvfw.dll
2012-08-21 09:47:11 ----N---- C:\Windows\system32\xvidcore.dll
2012-08-21 09:47:04 ----N---- C:\Windows\system32\unrar.dll
2012-08-21 09:46:49 ----N---- C:\Windows\system32\ff_vfw.dll
2012-08-21 09:46:26 ----D---- C:\Program Files\K-Lite Codec Pack
2012-08-16 20:07:46 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-16 20:07:45 ----A---- C:\Windows\system32\iertutil.dll
2012-08-16 20:07:44 ----A---- C:\Windows\system32\ieui.dll
2012-08-16 20:07:43 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-16 20:07:43 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-16 20:07:42 ----A---- C:\Windows\system32\wininet.dll
2012-08-16 20:07:42 ----A---- C:\Windows\system32\jscript.dll
2012-08-16 20:07:41 ----A---- C:\Windows\system32\jscript9.dll
2012-08-16 20:07:40 ----A---- C:\Windows\system32\url.dll
2012-08-16 20:07:38 ----A---- C:\Windows\system32\urlmon.dll
2012-08-16 20:07:34 ----A---- C:\Windows\system32\mshtml.dll
2012-08-16 20:07:34 ----A---- C:\Windows\system32\ieframe.dll
2012-08-16 20:02:22 ----A---- C:\Windows\system32\win32k.sys
2012-08-16 20:02:06 ----A---- C:\Windows\system32\localspl.dll
2012-08-16 20:02:05 ----A---- C:\Windows\system32\browser.dll
2012-08-16 20:02:04 ----A---- C:\Windows\system32\netapi32.dll
2012-08-16 20:02:03 ----A---- C:\Windows\system32\browcli.dll
2012-08-12 09:31:21 ----D---- C:\7ad5af080cb141c2d7c51e
2012-08-12 09:21:09 ----D---- C:\Unmechanical

======List of files/folders modified in the last 1 month======

2012-09-03 20:23:04 ----D---- C:\Windows\temp
2012-09-03 20:23:02 ----D---- C:\Program Files\trend micro
2012-09-03 20:22:35 ----D---- C:\Windows\Prefetch
2012-09-03 20:12:51 ----D---- C:\Users\Kasa\AppData\Roaming\Skype
2012-09-03 19:27:43 ----D---- C:\ProgramData
2012-09-03 19:15:03 ----D---- C:\Windows\system32\config
2012-09-03 19:12:49 ----D---- C:\Program Files\Steam
2012-09-03 18:38:27 ----D---- C:\Program Files
2012-09-03 18:05:53 ----D---- C:\Windows\System32
2012-09-03 18:05:53 ----D---- C:\Windows\inf
2012-09-03 18:05:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-03 16:35:38 ----D---- C:\Users\Kasa\AppData\Roaming\vlc
2012-09-03 16:17:59 ----SHD---- C:\System Volume Information
2012-09-03 12:23:04 ----D---- C:\ProgramData\Adobe
2012-09-03 11:52:47 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-09-02 18:38:55 ----D---- C:\Windows\WindowsMobile
2012-09-02 18:38:55 ----D---- C:\Windows\system32\drivers
2012-09-02 18:36:53 ----D---- C:\Program Files\Shank 2
2012-09-02 18:36:53 ----D---- C:\Program Files\LostInReefs
2012-09-02 10:46:05 ----SHD---- C:\Windows\Installer
2012-09-02 10:46:03 ----SHD---- C:\Config.Msi
2012-09-02 10:46:02 ----D---- C:\Program Files\Pinnacle
2012-09-02 10:43:45 ----D---- C:\ProgramData\Pinnacle
2012-09-02 10:43:45 ----D---- C:\Program Files\Common Files
2012-09-02 10:35:51 ----D---- C:\Program Files\Common Files\Adobe
2012-09-02 10:34:42 ----D---- C:\Program Files\Adobe
2012-09-02 10:31:26 ----RSD---- C:\Windows\assembly
2012-09-02 10:31:25 ----D---- C:\Program Files\Sony
2012-09-02 10:30:00 ----D---- C:\Program Files\Pinocchio ENG
2012-09-02 10:29:45 ----D---- C:\Users\Kasa\AppData\Roaming\.minecraft
2012-09-02 10:29:26 ----D---- C:\Program Files\Samsung
2012-09-02 10:29:11 ----HD---- C:\Program Files\InstallShield Installation Information
2012-09-02 10:27:44 ----D---- C:\Users\Kasa\AppData\Roaming\Vso
2012-09-02 10:07:45 ----D---- C:\Program Files\Electronic Arts
2012-08-30 10:04:07 ----D---- C:\Windows\Minidump
2012-08-30 10:02:44 ----D---- C:\Program Files\WinUtilities
2012-08-30 09:59:10 ----D---- C:\ProgramData\Media Center Programs
2012-08-30 08:39:03 ----D---- C:\Program Files\Mozilla Firefox
2012-08-29 10:16:34 ----D---- C:\Windows\system32\DriverStore
2012-08-29 09:47:29 ----SD---- C:\ProgramData\Microsoft
2012-08-29 08:22:39 ----D---- C:\Program Files\JDownloader
2012-08-28 21:36:34 ----D---- C:\Windows\system32\Tasks
2012-08-28 21:36:32 ----D---- C:\Windows
2012-08-26 22:48:53 ----D---- C:\Windows\system32\catroot2
2012-08-24 20:13:51 ----D---- C:\Users\Kasa\AppData\Roaming\Mozilla
2012-08-24 13:43:05 ----D---- C:\Program Files\Common Files\Steam
2012-08-23 13:15:59 ----D---- C:\Program Files\Activision
2012-08-21 15:54:52 ----D---- C:\Program Files\Trojan Remover
2012-08-21 15:48:14 ----D---- C:\Program Files\Diablo III
2012-08-21 14:30:42 ----D---- C:\Windows\system32\catroot
2012-08-21 14:07:37 ----D---- C:\Program Files\NVIDIA Corporation
2012-08-21 13:34:43 ----RD---- C:\Users
2012-08-21 13:30:41 ----D---- C:\NVIDIA
2012-08-21 11:12:23 ----N---- C:\Windows\system32\aswBoot.exe
2012-08-21 09:42:50 ----D---- C:\ProgramData\Win7codecs
2012-08-21 09:22:32 ----D---- C:\Program Files\MediaMonkey
2012-08-17 11:47:08 ----D---- C:\Windows\winsxs
2012-08-16 23:05:52 ----D---- C:\Windows\system32\migration
2012-08-16 23:05:51 ----D---- C:\Program Files\Internet Explorer
2012-08-16 20:16:52 ----D---- C:\ProgramData\Microsoft Help
2012-08-16 20:10:25 ----N---- C:\Windows\system32\MRT.exe
2012-08-13 17:33:28 ----D---- C:\Windows\Microsoft.NET
2012-08-12 19:43:36 ----D---- C:\Windows\Tasks
2012-08-12 09:31:31 ----D---- C:\Windows\system32\cs-CZ
2012-08-11 12:57:58 ----D---- C:\Users\Kasa\AppData\Roaming\MediaMonkey
2012-08-06 09:45:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-08-06 09:42:04 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2005-02-23 6656]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-10-11 158272]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-06-15 477240]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258); C:\Windows\system32\DRIVERS\tdrpm258.sys [2010-10-11 911680]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-10-11 581984]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\Windows\system32\DRIVERS\Amfilter.sys [2007-05-15 9216]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-08-21 44784]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-08-21 729752]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-08-21 355632]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-08-21 54232]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R2 ASPI32;ASPI32; C:\Windows\System32\drivers\aspi32.sys [2009-10-11 16512]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-08-21 21256]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-08-21 58680]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-15 9182208]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-15 264704]
R3 anvsnddrv;AnvSoft Virtual Sound Device; C:\Windows\system32\drivers\anvsnddrv.sys [2011-11-28 32896]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-12-05 86032]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2012-07-03 22344]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2005-04-04 48640]
S0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\Windows\System32\drivers\sfsync02.sys [2005-04-14 19968]
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 46976]
S3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2010-10-11 160288]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\Windows\system32\DRIVERS\Amusbprt.sys [2007-05-15 14336]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 40320]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 catchme;catchme; \??\C:\Users\Kasa\AppData\Local\Temp\catchme.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2009-12-22 18136]
S3 epmntdrv;epmntdrv; \??\C:\Windows\system32\epmntdrv.sys [2011-07-29 14216]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\system32\EuGdiDrv.sys [2011-07-29 8456]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Users\Kasa\AppData\Local\Temp\Rar$EX00.513\EVEREST Ultimate Edition\kerneld.wnt []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-04-28 54632]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 52608]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-11-10 47360]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\Windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TRIXX;TRIXX; \??\C:\Users\Kasa\AppData\Local\Temp\TRIXX.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 VMUVC;Vimicro Camera Service VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [2010-04-29 254720]
S3 vvftUVC;Vimicro Camera Filter Service VMUVC; C:\Windows\system32\drivers\vvftUVC.sys [2008-07-01 398720]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-02-15 163328]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-14 291840]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-08-21 44808]
R2 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
R2 CTDevice_Srv;CT Device Query service; C:\Program Files\Creative\Shared Files\CTDevSrv.exe [2007-04-02 61440]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2010-05-01 217088]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 1385896]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-03-15 75136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-08-24 529744]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1cb0b176489c170;Služba Google Update (gupdate1cb0b176489c170); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-13 133104]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-03 250568]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 CTUPnPSv;Creative Centrale Media Server; C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [2008-05-21 64000]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-14 1045256]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-04-28 704872]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-13 133104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-13 1343400]
S4 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe [2009-11-26 661008]
S4 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2010-10-11 2480048]
S4 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe []
S4 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2009-12-22 95568]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Re: Poprosim o kontrolu logu - kasanos

Napsal: 03 zář 2012 20:59
od vyosek
Zdravim a vitam vas u nas na foru :welcome:

:arrow: Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
  • Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku[
[/list]

Re: Poprosim o kontrolu logu - kasanos

Napsal: 04 zář 2012 09:03
od kasanos
Díky za reakci.
Udělal jsem podle návodu program pracoval asi 35 min pak vyskočí okénko se zprávou "list index out of bounds(25)" kliknu na ok a nic se neděje.Zkusil jsem podruhé a stále to samé. Co s tím :o

Re: Poprosim o kontrolu logu - kasanos

Napsal: 04 zář 2012 11:46
od vyosek
Zkuste OTL aplikovat v nouzovem rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Re: Poprosim o kontrolu logu - kasanos

Napsal: 04 zář 2012 14:00
od kasanos
Tak bohužel i v nouzovém režimu to samé.Ještě otázka nemůže to být antvirem? :shock:

Re: Poprosim o kontrolu logu - kasanos

Napsal: 04 zář 2012 15:49
od kasanos
Takže ani při vypnutém antiviru pořád stejná hláška.Co dále pleas? :???:

Re: Poprosim o kontrolu logu - kasanos

Napsal: 04 zář 2012 20:41
od vyosek
Jeste jej zkuste spustit bez skriptu a ja se poptam kolegy

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 10:14
od kasanos
Tak bez sriptu se podařilo.
Otl.Txt
OTL logfile created on: 5.9.2012 10:53:34 - Run 1
OTL by OldTimer - Version 3.2.60.0 Folder = C:\Users\Kasa\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,50 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 54,24% Memory free
11,49 Gb Paging File | 9,78 Gb Available in Paging File | 85,12% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 400,32 Gb Total Space | 46,29 Gb Free Space | 11,56% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 11,14 Gb Free Space | 7,48% Space Free | Partition Type: NTFS
Drive E: | 14,52 Gb Total Space | 2,05 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive F: | 65,44 Gb Total Space | 4,76 Gb Free Space | 7,28% Space Free | Partition Type: NTFS

Computer Name: KASA-PC | User Name: Kasa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.09.04 07:54:06 | 000,599,040 | ---- | M] (OldTimer Tools) -- C:\Users\Kasa\Desktop\OTL.exe
PRC - [2012.09.03 11:52:47 | 001,807,560 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe
PRC - [2012.08.30 08:39:02 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012.08.29 12:03:38 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.08.29 12:03:36 | 001,385,896 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012.08.24 09:33:17 | 000,529,744 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe
PRC - [2012.08.21 11:12:26 | 004,282,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012.08.21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.07.22 19:14:44 | 001,353,080 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\steam.exe
PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.04.17 17:19:40 | 003,671,872 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2012.02.15 05:13:20 | 000,405,504 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012.02.15 05:12:48 | 000,163,328 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012.02.14 22:15:30 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2012.01.17 18:04:11 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.10.13 18:21:52 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE
PRC - [2010.11.20 05:17:48 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010.07.22 15:18:08 | 002,636,800 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\OscarEditor.exe
PRC - [2010.05.01 08:51:28 | 000,217,088 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2008.08.13 05:49:30 | 000,405,504 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Software Update 3\SoftAuto.exe
PRC - [2008.06.11 22:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
PRC - [2007.04.02 08:15:40 | 000,061,440 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTDevSrv.exe
PRC - [2007.03.01 06:01:00 | 000,180,736 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE
PRC - [2007.02.20 12:07:40 | 000,199,752 | ---- | M] (Pinnacle Systems GmbH) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe


========== Modules (No Company Name) ==========

MOD - [2012.09.03 11:52:46 | 009,813,704 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_4_402_265.dll
MOD - [2012.08.30 08:39:01 | 002,242,528 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012.08.24 09:33:15 | 020,317,008 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2012.08.24 09:33:10 | 001,099,616 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll
MOD - [2012.08.24 09:33:10 | 000,902,480 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2012.08.24 09:33:10 | 000,190,816 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll
MOD - [2012.08.24 09:33:10 | 000,123,232 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll
MOD - [2012.07.21 14:23:16 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll
MOD - [2012.07.21 14:03:37 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll
MOD - [2012.07.21 14:03:22 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
MOD - [2012.07.21 14:03:02 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.07.21 14:02:53 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.07.21 14:02:48 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
MOD - [2012.05.29 07:38:43 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012.05.29 07:16:21 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012.05.29 07:15:59 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
MOD - [2012.05.29 07:15:16 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ca2eff60beb3ba00a529a2d42dceca22\UIAutomationProvider.ni.dll
MOD - [2012.05.29 07:15:02 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.05.29 07:14:55 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.05.29 07:14:50 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.05.29 07:14:48 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.05.29 07:14:34 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.02.14 22:15:36 | 000,095,232 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
MOD - [2012.02.14 22:13:24 | 000,369,152 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2010.11.13 04:37:08 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 03:54:19 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.11.04 18:53:46 | 000,237,568 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010.11.04 18:53:34 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_cs_b77a5c561934e089\System.resources.dll
MOD - [2010.07.22 15:18:08 | 002,636,800 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\OscarEditor.exe
MOD - [2010.06.01 12:41:38 | 000,098,816 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_MouseDeviceManager.dll
MOD - [2010.05.08 00:05:57 | 000,042,496 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\Data\X7\Forms\OSD_Text\OSD_Text.dll
MOD - [2010.04.03 12:37:14 | 000,127,488 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_Wheel4D.dll
MOD - [2010.04.03 12:37:09 | 000,094,208 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_ZoomControl.dll
MOD - [2010.04.03 12:37:07 | 000,062,976 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_ScrollbarControl.dll
MOD - [2010.04.03 12:37:02 | 000,069,632 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_AnalyzeGesturesInRight.dll
MOD - [2010.04.03 12:36:58 | 000,069,632 | ---- | M] () -- C:\Program Files\OSCAR Editor X7\dll\DLL_AnalyzeGesturesInOne.dll
MOD - [2010.03.15 11:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Services (SafeList) ==========

SRV - [2012.09.03 11:52:48 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.08.29 12:03:36 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.08.24 09:33:17 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.08.21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.06.07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.02.15 05:12:48 | 000,163,328 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012.02.14 22:15:30 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2011.10.21 16:23:42 | 000,196,176 | ---- | M] (Microsoft Corporation.) [Disabled | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.10.13 18:21:52 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2010.10.11 21:18:05 | 002,480,048 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2010.09.14 16:56:49 | 001,045,256 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.06.13 16:07:48 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.05.01 08:51:28 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009.12.22 04:31:02 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Disabled | Stopped] -- C:\Windows\System32\dgdersvc.exe -- (dgdersvc)
SRV - [2009.11.26 17:45:48 | 000,661,008 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009.09.12 00:34:12 | 001,488,128 | ---- | M] (O&O Software GmbH) [Disabled | Stopped] -- C:\Program Files\OO Software\Defrag\oodag.exe -- (O&O Defrag)
SRV - [2009.07.14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.05.21 13:42:56 | 000,064,000 | ---- | M] (Creative Technology Ltd) [On_Demand | Stopped] -- C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe -- (CTUPnPSv)
SRV - [2007.05.31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007.04.02 08:15:40 | 000,061,440 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTDevSrv.exe -- (CTDevice_Srv)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\TRIXX.sys -- (TRIXX)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\nvlddmkm.sys -- (nvlddmkm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\Rar$EX00.513\EVEREST Ultimate Edition\kerneld.wnt -- (EverestDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (as1xq1zn)
DRV - [2012.08.21 11:13:15 | 000,729,752 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.08.21 11:13:15 | 000,355,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.08.21 11:13:15 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.08.21 11:13:14 | 000,058,680 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012.08.21 11:13:14 | 000,044,784 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2012.08.21 11:13:13 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.06.15 15:22:24 | 000,477,240 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2012.03.07 02:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2012.02.15 05:47:12 | 009,182,208 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012.02.15 04:12:48 | 000,264,704 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011.12.05 21:47:16 | 000,086,032 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)
DRV - [2011.11.28 14:51:44 | 000,032,896 | ---- | M] (AnvSoft Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\anvsnddrv.sys -- (anvsnddrv)
DRV - [2011.07.29 14:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2011.07.29 14:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2010.11.20 05:30:16 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 05:30:16 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 05:30:16 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 03:24:42 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 02:59:46 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2010.11.20 02:14:46 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 02:14:42 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010.10.11 21:18:06 | 000,160,288 | ---- | M] (Acronis) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\afcdp.sys -- (afcdp)
DRV - [2010.10.11 21:18:01 | 000,911,680 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tdrpm258.sys -- (tdrpman258)
DRV - [2010.10.11 21:17:57 | 000,581,984 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\timntr.sys -- (timounter)
DRV - [2010.10.11 21:17:49 | 000,158,272 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\snapman.sys -- (snapman)
DRV - [2010.04.29 10:06:58 | 000,254,720 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMUVC.sys -- (VMUVC)
DRV - [2010.02.18 09:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2009.12.22 04:31:26 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.12.22 04:31:02 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2009.10.11 15:58:10 | 000,016,512 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\Aspi32.sys -- (ASPI32)
DRV - [2009.09.19 07:30:10 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009.09.19 07:30:10 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bserd.sys -- (ss_bserd)
DRV - [2009.09.19 07:30:10 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus)
DRV - [2009.09.19 07:30:10 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV - [2009.07.14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
DRV - [2009.03.18 16:35:40 | 000,026,176 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.07.01 11:12:32 | 000,398,720 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vvftUVC.sys -- (vvftUVC)
DRV - [2007.05.15 05:41:46 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2007.05.15 05:38:22 | 000,009,216 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2005.09.23 23:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005.04.14 14:12:32 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02)
DRV - [2005.04.04 12:43:22 | 000,048,640 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2005.02.23 17:59:54 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 D7 F5 F5 CD 13 CB 01 [binary data]
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\URLSearchHook: {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatche ... tbid=60040
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{27E66A54-79C4-40CF-8AC2-A57315F2605C}: "URL" = http://websearch.ask.com/redirect?clien ... 409B7CF31F
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://toolbar.inbox.com/search/dispatc ... 093&lng=cs
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: videosurf_enhanced@videosurf.com:0.79
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.2
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Kasa\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Kasa\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kasa\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kasa\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.03.09 18:17:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012.08.28 21:36:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox [2012.08.29 09:15:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b1\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 1\components [2011.03.09 18:17:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0b1\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 1\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.08.30 08:39:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.08.16 14:57:20 | 000,000,000 | ---D | M]

[2010.06.13 16:17:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Extensions
[2012.09.04 10:04:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions
[2012.08.13 19:46:08 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012.08.29 09:21:56 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.08.18 19:49:48 | 000,000,000 | ---D | M] (20-20 3D Viewer - IKEA) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions\2020Player_IKEA@2020Technologies.com
[2011.03.09 22:29:30 | 000,000,000 | ---D | M] (VideoSurf Videos at a Glance) -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\extensions\videosurf_enhanced@videosurf.com
[2011.04.19 12:28:32 | 000,002,397 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\askcom.xml
[2010.07.13 17:16:24 | 000,001,355 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\crawlersrch.xml
[2010.07.13 17:16:26 | 000,002,180 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\inbox-hledat.xml
[2012.09.03 22:50:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.05.31 20:04:18 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.05.09 19:06:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
[2012.09.03 22:50:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012.08.29 09:15:05 | 000,000,000 | ---D | M] (VDownloader) -- C:\PROGRAM FILES\VDOWNLOADER\ADDONS\FIREFOX
[2012.08.30 08:39:02 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.06.18 15:47:28 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2012.06.18 15:47:28 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.06.18 15:47:28 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2012.06.18 15:47:28 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.06.18 15:47:28 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage: http://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.89\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Kasa\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Kasa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Kasa\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Kasa\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U32 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.320.5 (Enabled) = C:\Windows\system32\npdeployJava1.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Media Go Detector (Enabled) = C:\Program Files\Sony\Media Go\npmediago.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - Extension: avast! WebRep = C:\Users\Kasa\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Kasa\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3_0\
CHR - Extension: Skype Click to Call = C:\Users\Kasa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\

Hosts file not found
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [USBToolTip] c:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe (Pinnacle Systems GmbH)
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [EPSON Stylus DX4400 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [OscarEditor] C:\Program Files\OSCAR Editor X7\OscarEditor.exe ()
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [SoftAuto.exe] C:\Program Files\Creative\Software Update 3\SoftAuto.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Převést do Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Připojit k existujícímu PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.74.192.252 94.74.192.244
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8EA6732B-18E9-4A8F-B4CC-9BCDEB3B94CB}: DhcpNameServer = 94.74.192.252 94.74.192.244
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8EA6732B-18E9-4A8F-B4CC-9BCDEB3B94CB}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 7 Days ==========

[2012.09.04 08:03:21 | 000,599,040 | ---- | C] (OldTimer Tools) -- C:\Users\Kasa\Desktop\OTL.exe
[2012.09.03 22:50:14 | 000,157,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2012.09.03 22:50:14 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2012.09.03 22:50:14 | 000,149,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2012.09.03 19:27:43 | 000,000,000 | ---D | C] -- C:\ProgramData\FarmFrenzy-PizzaParty
[2012.09.03 19:24:51 | 000,000,000 | ---D | C] -- C:\ProgramData\FarmFrenzy3_Madagascar
[2012.09.03 18:38:43 | 000,000,000 | ---D | C] -- C:\Users\Kasa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Farm Frenzy 3 American Pie
[2012.09.03 18:38:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Farm Frenzy 3 American Pie
[2012.09.03 18:38:27 | 000,000,000 | ---D | C] -- C:\Program Files\Alawar
[2012.09.02 09:32:00 | 000,000,000 | ---D | C] -- C:\Program Files\Dungeon Defenders
[2012.09.01 18:08:50 | 000,000,000 | ---D | C] -- C:\Program Files\Trendy Entertainment
[2012.09.01 17:42:29 | 000,000,000 | ---D | C] -- C:\Program Files\Vivendi Universal Games
[2012.09.01 17:42:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vivendi Universal Games
[2012.09.01 17:22:18 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE
[2012.08.31 18:11:54 | 000,000,000 | ---D | C] -- C:\Users\Kasa\Desktop\chorvatsko 2011
[2012.08.31 08:37:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.08.31 08:37:29 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2012.08.30 08:49:15 | 000,000,000 | ---D | C] -- C:\Users\Kasa\AppData\Local\Microsoft Corporation
[2010.11.10 19:36:18 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Kasa\AppData\Roaming\pcouffin.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.09.05 10:51:01 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.09.05 10:48:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.05 10:24:07 | 000,014,256 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.05 10:24:07 | 000,014,256 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.05 10:17:09 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.09.05 10:16:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.05 10:16:34 | 2012,127,232 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.04 22:13:00 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000UA.job
[2012.09.04 16:55:49 | 000,002,290 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012.09.04 15:19:36 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.09.04 08:57:59 | 000,666,406 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2012.09.04 08:57:59 | 000,652,150 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.09.04 08:57:59 | 000,140,102 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2012.09.04 08:57:59 | 000,020,730 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.09.04 08:02:10 | 000,000,102 | ---- | M] () -- C:\Windows\System32\_WKERNEL.SYL
[2012.09.04 07:54:06 | 000,599,040 | ---- | M] (OldTimer Tools) -- C:\Users\Kasa\Desktop\OTL.exe
[2012.09.04 07:13:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000Core.job
[2012.09.03 19:27:53 | 000,002,231 | ---- | M] () -- C:\Users\Kasa\Desktop\FarmFrenzyPizzaParty – zástupce.lnk
[2012.09.03 19:27:31 | 000,002,205 | ---- | M] () -- C:\Users\Kasa\Desktop\FarmFrenzy3_Madagascar – zástupce.lnk
[2012.09.03 18:38:44 | 000,002,046 | ---- | M] () -- C:\Users\Kasa\Desktop\Alawar Games.lnk
[2012.09.03 11:52:47 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.09.03 11:52:47 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.09.02 10:27:43 | 000,087,608 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\inst.exe
[2012.09.02 10:27:43 | 000,047,360 | ---- | M] (VSO Software) -- C:\Users\Kasa\AppData\Roaming\pcouffin.sys
[2012.09.02 10:27:43 | 000,007,887 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\pcouffin.cat
[2012.09.02 10:27:43 | 000,001,144 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\pcouffin.inf
[2012.09.01 17:46:40 | 000,002,207 | ---- | M] () -- C:\Users\Public\Desktop\The Simpsons Hit & Run.lnk
[2012.08.31 19:07:03 | 000,000,861 | ---- | M] () -- C:\Users\Kasa\Desktop\foto – zástupce.lnk
[2012.08.31 08:37:33 | 000,000,856 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2012.08.30 08:48:45 | 000,002,033 | ---- | M] () -- C:\Users\Public\Desktop\Poradce pro upgrade na systém Windows 7.lnk
[2012.08.29 16:48:40 | 000,001,631 | ---- | M] () -- C:\Users\Kasa\Desktop\Game – zástupce.lnk
[2012.08.29 11:57:28 | 000,005,085 | ---- | M] () -- C:\ProgramData\mxnhytee.feu
[2012.08.29 11:47:57 | 000,001,039 | ---- | M] () -- C:\Users\Kasa\Desktop\Free FLV Converter.lnk
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.09.04 08:11:09 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.09.03 19:27:53 | 000,002,231 | ---- | C] () -- C:\Users\Kasa\Desktop\FarmFrenzyPizzaParty – zástupce.lnk
[2012.09.03 19:27:31 | 000,002,205 | ---- | C] () -- C:\Users\Kasa\Desktop\FarmFrenzy3_Madagascar – zástupce.lnk
[2012.09.03 18:38:44 | 000,002,046 | ---- | C] () -- C:\Users\Kasa\Desktop\Alawar Games.lnk
[2012.09.02 10:27:43 | 000,087,608 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\inst.exe
[2012.09.01 17:46:40 | 000,002,207 | ---- | C] () -- C:\Users\Public\Desktop\The Simpsons Hit & Run.lnk
[2012.08.31 19:07:03 | 000,000,861 | ---- | C] () -- C:\Users\Kasa\Desktop\foto – zástupce.lnk
[2012.08.30 08:48:45 | 000,002,033 | ---- | C] () -- C:\Users\Public\Desktop\Poradce pro upgrade na systém Windows 7.lnk
[2012.08.29 16:48:40 | 000,001,631 | ---- | C] () -- C:\Users\Kasa\Desktop\Game – zástupce.lnk
[2012.08.29 11:46:33 | 000,005,085 | ---- | C] () -- C:\ProgramData\mxnhytee.feu
[2012.08.29 09:15:06 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2012.08.21 14:31:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.08.21 09:47:13 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2012.08.21 09:47:11 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012.08.21 09:47:11 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012.08.21 09:47:04 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012.08.21 09:46:49 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012.06.27 20:49:32 | 000,000,030 | ---- | C] () -- C:\Users\Kasa\user.cfg
[2012.02.29 13:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012.02.15 04:28:34 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2012.02.15 04:28:32 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2012.02.14 22:05:16 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2012.01.31 06:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll
[2012.01.29 09:38:31 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2012.01.29 09:28:48 | 000,000,076 | ---- | C] () -- C:\Windows\System32\w3url.dll
[2012.01.20 18:45:14 | 000,020,312 | ---- | C] () -- C:\Windows\System32\RegistryDefragBootTime.exe
[2012.01.10 23:10:08 | 000,601,728 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011.12.28 23:05:17 | 000,200,468 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2011.12.24 00:43:18 | 000,007,602 | ---- | C] () -- C:\Users\Kasa\AppData\Local\Resmon.ResmonCfg
[2011.11.13 12:40:38 | 002,469,760 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2011.11.13 12:40:38 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2011.11.13 12:40:38 | 000,019,840 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2011.11.13 12:40:38 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2011.11.13 12:40:38 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2011.09.25 20:15:25 | 000,056,320 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
[2011.09.20 19:38:29 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011.06.26 18:32:07 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2011.06.26 17:13:24 | 000,000,043 | ---- | C] () -- C:\Users\Kasa\gsview32.ini
[2011.06.23 19:07:17 | 000,000,177 | ---- | C] () -- C:\Windows\disneysy.ini
[2011.06.21 16:43:13 | 000,000,058 | ---- | C] () -- C:\Users\Kasa\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2011.06.09 21:14:23 | 000,000,287 | ---- | C] () -- C:\Windows\game.ini
[2011.06.07 14:10:17 | 000,006,348 | ---- | C] () -- C:\Windows\disney.ini
[2011.05.30 17:58:43 | 000,000,067 | ---- | C] () -- C:\Users\Kasa\startwin.bat
[2011.04.12 15:11:04 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2011.04.12 08:40:03 | 000,000,000 | ---- | C] () -- C:\Windows\SETUP32.INI
[2011.04.12 08:39:11 | 000,000,053 | ---- | C] () -- C:\Windows\WININIT.INI
[2011.03.08 22:38:48 | 000,002,528 | ---- | C] () -- C:\Users\Kasa\AppData\Local\SRDownloader.nast
[2011.02.27 20:26:14 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.02.18 19:30:21 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat
[2011.02.15 23:20:59 | 000,001,383 | ---- | C] () -- C:\Windows\compedia.ini
[2011.01.25 16:05:51 | 000,000,066 | ---- | C] () -- C:\Windows\Power Video Converter.INI
[2011.01.02 19:35:42 | 000,000,584 | ---- | C] () -- C:\Windows\System32\sprally2.dat
[2010.12.27 18:31:26 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2010.12.27 18:31:26 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010.12.27 18:31:26 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2010.12.27 18:31:26 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010.12.27 18:31:26 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010.11.22 19:51:51 | 000,682,280 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2010.11.11 23:00:50 | 000,000,067 | ---- | C] () -- C:\Windows\Easy DVD Creator.INI
[2010.11.10 19:37:20 | 000,001,057 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\vso_ts_preview.xml
[2010.11.10 19:36:18 | 000,007,887 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\pcouffin.cat
[2010.11.10 19:36:18 | 000,001,144 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\pcouffin.inf
[2010.11.08 19:30:31 | 000,005,318 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\froggy_scorebox
[2010.11.08 19:30:31 | 000,000,906 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\pl_accounts.pl_acc
[2010.11.08 19:30:31 | 000,000,556 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\Troll.options
[2010.10.26 18:05:47 | 000,001,024 | ---- | C] () -- C:\Users\Kasa\.rnd
[2010.10.13 17:10:52 | 002,601,752 | ---- | C] () -- C:\Windows\System32\pbsvc_moh.exe
[2010.08.28 19:42:22 | 000,022,328 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\PnkBstrK.sys
[2010.07.16 17:55:40 | 000,016,384 | ---- | C] () -- C:\Users\Kasa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.02 19:08:36 | 000,002,528 | ---- | C] () -- C:\Users\Kasa\AppData\Roaming\$_hpcst$.hpc
[2010.06.13 18:43:30 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

========== LOP Check ==========

[2011.12.23 09:56:56 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AlderGames
[2012.01.06 15:50:23 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Disney Interactive Studios
[2012.02.04 07:48:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\IObit
[2012.03.23 11:40:21 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\MediaMonkey
[2012.05.27 06:31:47 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\MyHeritage
[2012.01.06 15:50:18 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Uniblue
[2012.09.02 10:29:45 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\.minecraft
[2011.12.10 12:56:37 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Ace
[2010.10.11 21:24:21 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Acronis
[2011.06.03 11:37:19 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Activision
[2012.02.28 18:46:20 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Alawar
[2011.11.26 11:51:15 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\AlderGames
[2011.03.11 18:50:48 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\aliasworlds
[2012.08.29 10:20:38 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\AnvSoft
[2011.07.20 21:03:16 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Ashampoo
[2010.06.14 20:27:27 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Astroburn Lite
[2010.09.15 19:03:17 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Autodesk
[2010.12.21 16:49:47 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\BlackBean
[2012.01.29 10:27:21 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\BlamGames
[2011.12.31 15:48:55 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Boolat Games
[2011.12.10 11:09:16 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Braid
[2010.12.29 17:04:36 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Broad Intelligence
[2011.06.26 18:32:20 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\CAD-KAS
[2010.10.27 17:58:43 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Christofer Persson
[2011.05.20 17:34:41 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Coyotes Tale
[2012.06.18 14:57:35 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\DAEMON Tools Lite
[2011.05.04 22:46:22 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Digital Red
[2011.08.28 11:33:03 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Disney Interactive
[2011.10.21 19:36:50 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Disney Interactive Studios
[2011.05.17 00:01:36 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\DisneyInteractiveStudios
[2011.11.25 23:29:16 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\DivoGames
[2010.09.14 18:08:33 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\DMCache
[2011.06.21 16:43:13 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\DonationCoder
[2012.03.11 11:45:01 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Doublefine
[2011.08.07 17:58:04 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\EleFun Games
[2010.10.21 16:34:08 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\EPSON
[2011.09.14 07:35:17 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ERS G-Studio
[2012.06.25 14:55:32 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Farm Mania 2
[2011.09.18 10:19:59 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\FatShark
[2010.06.21 22:16:31 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\FLVPlayer4Free
[2011.05.22 11:00:01 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\foobar2000
[2012.01.11 19:33:02 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ForgottenRiddles2
[2012.08.29 09:47:40 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\FreeFLVConverter
[2011.01.04 17:05:06 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Friday's games
[2011.01.04 17:01:14 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Gaijin Ent
[2011.02.15 23:21:15 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Gamelab
[2010.06.13 19:18:55 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\GHISLER
[2011.11.19 00:23:44 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Hive Cluster
[2011.09.13 10:18:27 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\HLSW
[2011.03.31 16:57:00 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ICQ
[2011.04.26 22:17:46 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ICSharpCode
[2011.12.25 20:21:39 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ImgBurn
[2012.01.15 10:58:20 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\IObit
[2012.01.29 09:28:14 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\J River
[2012.04.18 18:17:42 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Jpeg Resampler
[2011.09.19 19:52:40 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Kastner software
[2010.06.30 18:28:47 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\LangSoft
[2012.04.15 16:41:59 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\LucasArts
[2011.05.20 17:32:30 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Magic Academy 2
[2010.11.08 19:19:52 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\MagicBall3
[2012.08.11 12:57:58 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\MediaMonkey
[2011.11.20 15:27:44 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Meridian93
[2012.07.04 11:44:08 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Might & Magic Heroes VI
[2012.04.05 20:08:03 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Need for Speed World
[2010.12.12 18:51:03 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Opera
[2010.08.29 19:28:08 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\PC Suite
[2011.10.10 19:28:22 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Picsoft
[2010.08.31 19:07:22 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\PLANStudio Setup
[2011.03.15 22:28:04 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\PunkBuster
[2011.08.27 11:10:09 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\RainbowGames
[2012.02.07 15:17:49 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Rovio
[2010.08.29 20:15:01 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Samsung
[2012.01.14 09:09:42 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Settlement. Colossus
[2010.12.29 17:26:19 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Sony
[2011.08.18 20:11:30 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Super-Cow
[2011.04.11 19:26:46 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\The Creative Assembly
[2012.06.21 20:37:24 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\TinyAndBigGrandpasLeftovers
[2011.12.08 18:15:18 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Trine2
[2011.02.15 19:06:35 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Trio
[2011.12.20 22:51:51 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\TS3Client
[2011.12.20 22:15:01 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\ts3overlay
[2010.11.09 18:28:47 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Tunngle
[2011.11.30 16:47:01 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Ubisoft
[2011.02.10 20:36:19 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Uniblue
[2011.01.06 19:05:04 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\URSE Games
[2011.08.30 18:35:54 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\V-Games
[2012.08.29 09:17:26 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\VDownloader
[2010.09.11 10:00:38 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\VitySoft
[2012.09.02 10:27:44 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Vso
[2012.03.29 21:29:43 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\wargaming.net
[2012.06.26 15:55:11 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Warner Bros. Interactive Entertainment
[2012.01.15 11:11:06 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\WB Games
[2010.11.04 19:58:23 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\WebcamMax
[2011.06.23 18:08:19 | 000,000,000 | -HSD | M] -- C:\Users\Kasa\AppData\Roaming\wyUpdate AU
[2012.06.14 21:15:56 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\XBMC
[2011.02.15 21:00:19 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\YoudaGames
[2010.11.09 17:27:36 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Zak&Jack
[2011.08.27 11:09:56 | 000,000,000 | ---D | M] -- C:\Users\Kasa\AppData\Roaming\Špidla Data Processing, s.r.o
[2012.08.21 14:01:42 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:FBFC061F
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:A7BFF8A2
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:8401B6D5
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:F6E5C7FB

< End of report >

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 10:15
od kasanos
A druhý textový soubor
Extras.Txt
OTL Extras logfile created on: 5.9.2012 10:53:34 - Run 1
OTL by OldTimer - Version 3.2.60.0 Folder = C:\Users\Kasa\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,50 Gb Total Physical Memory | 1,36 Gb Available Physical Memory | 54,24% Memory free
11,49 Gb Paging File | 9,78 Gb Available in Paging File | 85,12% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 400,32 Gb Total Space | 46,29 Gb Free Space | 11,56% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 11,14 Gb Free Space | 7,48% Space Free | Partition Type: NTFS
Drive E: | 14,52 Gb Total Space | 2,05 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive F: | 65,44 Gb Total Space | 4,76 Gb Free Space | 7,28% Space Free | Partition Type: NTFS

Computer Name: KASA-PC | User Name: Kasa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10CCBA96-6E71-4047-AD9A-B433D363B1CF}" = rport=139 | protocol=6 | dir=out | app=system |
"{16320CA4-CDCD-4BD8-8C65-F581DB17C799}" = rport=137 | protocol=17 | dir=out | app=system |
"{187893D1-0BE5-468A-BE59-6697D2CF6439}" = lport=138 | protocol=17 | dir=in | app=system |
"{19930755-9230-44CB-881B-844DED836F97}" = lport=2869 | protocol=6 | dir=in | app=system |
"{49535938-011D-48E6-AD61-C4C886980CB1}" = rport=138 | protocol=17 | dir=out | app=system |
"{4C688234-A77E-43F1-BE6C-D06FF24305CA}" = lport=139 | protocol=6 | dir=in | app=system |
"{5A2D498C-9CB3-49E6-99C9-EF9D67F2F59A}" = rport=445 | protocol=6 | dir=out | app=system |
"{634E9DFB-52E6-4C97-9515-2DAF87202F89}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9DAC3774-701E-4067-8EA6-D644532292BE}" = lport=445 | protocol=6 | dir=in | app=system |
"{D67A4729-1931-45E9-9C11-4AADCC0FFF9C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DDA829B1-2FEB-4D34-B0DD-064F075521C8}" = lport=137 | protocol=17 | dir=in | app=system |
"{F56DFACC-A6A7-4B7F-B6D5-C39E690F6A0F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{FE94367B-E0C9-4CB1-B8A7-37AFBD3DF451}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FFEDE7F4-F10C-427D-BDEE-14996BABA1D9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01CCEC70-6332-476A-B735-FB33C877EF2A}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{088C321D-26DF-47AF-B582-5AE850786BA8}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{096B32C1-A7E7-4760-90D1-8C05DDD3BEF2}" = protocol=17 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{0A4D90C9-884A-47A6-AB7D-3F9708761992}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{0A834040-7170-4080-AEA9-719E2F3B020A}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{0E8463F7-8507-45F2-A87D-57EF635BB107}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{0EFAE22F-03AE-46EB-AFE3-E124EDAFAC82}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{12A63491-A498-476D-BA1E-6C08B2C1DB95}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{1324B4A3-6AD6-42FE-89E7-1DA6AAFBBD46}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe |
"{16F2CB55-7CC1-4DDE-A0DA-910D53AC84B1}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{17EB8E5B-29BF-47C7-ACC9-FB6366CD8248}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 14\programs\umi.exe |
"{180F167B-DD4D-4959-BE70-976E49BB7939}" = protocol=6 | dir=in | app=c:\program files\ubisoft\the adventures of tintin - the secret of the unicorn\tintin.exe |
"{18C0A9C1-7FBB-4BF3-8ED0-167F9B93D5D6}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{1A125E8B-58F6-4819-ABF9-E374988593F2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1267\agent.exe |
"{1E622FF3-7416-4384-AA6C-9D2E501AD7D8}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{22614A8D-6E08-4D24-B76D-084A9B7E2911}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{22987285-FE9F-4D0D-A5A1-757A6808DDA4}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{262F28A8-8FCF-4C33-A93D-487428D1996F}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{26EA99B8-BBDD-4B30-B9AF-C93BFE556680}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{27A2A260-46E3-43F6-8DF2-21BB6EA18266}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\initengine.exe |
"{28DDFA76-5F2F-4CF0-8241-8978432FBD61}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{2944D628-5411-4817-AD17-AB05538C0AD2}" = protocol=17 | dir=in | app=c:\program files\ubisoft\the adventures of tintin - the secret of the unicorn\tintin.exe |
"{2D5BFC99-2D18-4020-BB15-8CB641EE8EF6}" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires iii\age3.exe |
"{31A1C0BA-F1DD-4BD3-B9B2-5D77304CFF7E}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\anno5.exe |
"{31CE3DCD-FA13-4B16-B421-3F5BC129EA9A}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe |
"{3372151F-783B-4339-9986-79BEBF344423}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{357BE01D-37B3-4339-A26D-187511198E3C}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{3627B9C5-20A3-4FA7-BB13-5BF6A241CC5C}" = protocol=6 | dir=in | app=c:\program files\iobit\advanced systemcare 5\licenseconverter.exe |
"{370C43F8-D693-441E-A73C-C8B8F87D20E1}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{386F624E-ECD5-471C-89EF-388EA38A624A}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{392FD53E-FA4F-48AB-A589-CDF1793E6B07}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 14\programs\studio.exe |
"{3C010487-F8AD-4BB0-B738-94746B85E5DE}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{3F8A62E3-6E4C-4C1D-B638-4B0B2602D8C1}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{4285BD98-9165-43A9-84E2-43BD5E09D13E}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{44779AA6-0D45-4DF6-B374-8E1885413607}" = dir=out | app=%programfiles%\iobit\advanced systemcare 5\asc.exe |
"{44CE81B6-55B7-4915-A0D0-EC1005A09B33}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{457F3533-F24D-47D9-AC6E-8BC71A5249C8}" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires iii\age3.exe |
"{45A37122-CCF7-4060-A93D-41659E04010A}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{4A02E91C-2120-4C73-9CB2-43117DBE1944}" = protocol=17 | dir=in | app=c:\program files\ubisoft\might & magic heroes vi\might & magic heroes vi.exe |
"{4B1C082A-8D8A-4DDD-A05F-DB9CA4EF3BF7}" = protocol=17 | dir=in | app=c:\program files\real spy monitor\winrsm.exe |
"{4E4FB4B0-ED44-4DF9-9D5A-ACEA1B7C8075}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 14\programs\rm.exe |
"{4F6908E0-D948-4045-8555-75E060F40484}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{51F914ED-D8D0-432A-8A6B-EB159E938AA5}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{55A8A106-6B99-49F3-B55B-83BA2CCDA768}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{56735A13-9454-42BF-BC83-9BA6F85F7806}" = protocol=17 | dir=in | app=c:\program files\activision\shrek forever after(tm)\shrekforeverafter.exe |
"{58162DBF-E9B1-47AB-BD22-FCB8C5F95693}" = protocol=6 | dir=in | app=c:\program files\gamespy arcade\aphex.exe |
"{5D244697-4EC1-413F-8C84-77DD783C694A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{5F3D1B9E-779B-4A9B-AAE9-CBC9639D5AC2}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{5FCD8429-4470-4E15-95EB-EF8CB969B5B1}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{61277182-150C-4649-AA80-7F49D61572E0}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6162997F-20E0-442E-A73A-8DCA45A98CD4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{63975874-3996-4906-9650-A7FAA014873D}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6A791DF0-B048-4668-974B-2D4FE962EE92}" = protocol=6 | dir=in | app=c:\users\kasa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{6ADD1F30-9BF7-401C-8624-4955F2296B1E}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{6E2D2EE0-7F7B-492B-9EFB-60C9B9A5668F}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed brotherhood\acbmp.exe |
"{6FC5B0C4-A8E1-47DB-BC2B-B805C9E8EC3C}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5mp.exe |
"{700EA6B9-57D5-40EB-9329-36F4FDDDD566}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{7175B65F-1EE8-4431-A871-72EE189679D3}" = protocol=6 | dir=in | app=c:\program files\activision\shrek forever after(tm)\shrekforeverafter.exe |
"{73B92BEE-637A-4C3E-9259-7F10123750E0}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{74BBFB51-EE78-42CB-B96A-BDF84E3ECAF8}" = protocol=6 | dir=in | app=c:\program files\pandora.tv\panservice\pandoraservice.exe |
"{77714E61-4C30-4FE5-9926-DD6388358BAC}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{786D8A31-4093-43E8-8C93-04768FDE5868}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 14\programs\studio.exe |
"{7A286261-314B-45C7-9257-79133DB91753}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{7CE0483D-04C5-48C2-B9EA-D10E9EB1021A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{7D9598F1-B45D-4121-B551-BB0265981A69}" = protocol=58 | dir=in | app=system |
"{7DA3156A-DC3D-45D8-9834-C6D6D61F5A12}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe |
"{7DE39633-064F-43E2-AF70-608BCDB51D99}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{7E344092-3666-4EB6-8AE5-4280639E4418}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\anno5.exe |
"{80F6C220-4F0C-45AF-BCBC-F3D7A58F4A10}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe |
"{827EFAB7-3C91-41AB-B026-ADABD6FC5980}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{85055EEA-D287-4475-884E-660542929BB4}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{8B354B4D-D5BE-42BF-A03C-13AF95BC7A07}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{8B40B291-42DF-4DCA-917E-12E38E3A3A8A}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{8F6E88A7-5047-4302-9A44-17E252B89FE5}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{904A9DC0-828C-4EA9-9639-D3F2F8B665EE}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1199\agent.exe |
"{9332DBF1-253F-4534-94F9-1F336328C8FB}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{95BEB347-31AD-4644-B1EB-CC1467E48DD8}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{96CC1C05-8BBE-41E9-BA59-607762441100}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{97A613A8-F30E-4BE8-948F-2BC44AE723A2}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{98D22AAF-C28E-434A-B233-E33FE9C4B584}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{9D5DBDAA-291B-4F3E-87D0-C9991658398A}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\call of duty modern warfare 3\iw5sp.exe |
"{9F7926D6-CA81-412D-BA78-932222B42B15}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{A05392A0-87EA-482C-A8E9-76EFE60F3D38}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A1D00FFA-BBFD-43BF-B563-C0A61B4EBD51}" = protocol=17 | dir=in | app=c:\program files\iobit\advanced systemcare 5\licenseconverter.exe |
"{A47D1BC6-70AC-4B23-B1AF-91CB71FE8736}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{ABF2F30B-47BE-4C76-A5FA-75044614B2ED}" = protocol=6 | dir=in | app=c:\program files\ubisoft\might & magic heroes vi\might & magic heroes vi.exe |
"{AF73563E-7E74-4F91-8002-C62FAC10B73E}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{B08D694C-164A-4E43-8DE0-BC5E9CBFF9C3}" = protocol=6 | dir=in | app=c:\program files\diablo iii\diablo iii.exe |
"{B313545D-DB1D-4066-B5A9-4B8974EDFEE6}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\initengine.exe |
"{B8251FFC-86C1-4ECA-871D-9B93BA83D629}" = protocol=6 | dir=in | app=c:\program files\real spy monitor\winrsm.exe |
"{C179B4AE-4E20-4FBA-B6E8-326C984211FE}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{C1E1AB03-3214-4EFF-8E56-1F690169A4E6}" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\autopatcher.exe |
"{C3137525-52EF-4C71-BF82-18DDBD48D992}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{C5C207C5-383C-49D3-A05B-EE7E65974C53}" = protocol=17 | dir=in | app=c:\program files\diablo iii\diablo iii.exe |
"{C82CF58B-C60E-4F18-B26A-B455E891FD0E}" = protocol=1 | dir=in | name=hlsw icmp |
"{CAFCAC74-E7A9-4E94-ACE1-0F755F02C55A}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{D71F3F0B-7AE8-4001-A659-DD14AB8FCA8B}" = dir=in | app=%userprofile%\desktop\nová složka\rapget.rs_premium_v1.1.1.7_cz\rapgetrs.exe |
"{D9494E04-0087-4F26-9547-2F7AA9F246B7}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{DAADD230-AEDA-4C2B-AC43-97B626AA4D0F}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DCFF182D-E39B-4560-A0BE-3A268B5327F5}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E13D2594-F0B5-4EDC-890A-CED4273631A2}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe |
"{E4AB052D-1F8A-4FCF-AA5C-B2B4285033EC}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E4E5B1E9-11A7-4D6D-8FB1-C8FF25817563}" = protocol=17 | dir=in | app=c:\users\kasa\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{E6BA4086-D8D7-4C78-ACC8-7C23DDD691A3}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{EBA15678-6A20-4E7E-A761-BC2437128736}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe |
"{EC56EC7E-5234-4F1D-9C0D-A8F911E176C6}" = protocol=17 | dir=in | app=c:\program files\gamespy arcade\aphex.exe |
"{EC5CEC65-F5A7-4615-B6C4-68DD3A5622E6}" = dir=in | app=%programfiles%\ubisoft\related designs\anno 2070\anno5.exe |
"{EDCF87DE-0B8C-4CA4-8DC1-CEC90420993B}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{EEA6C882-2EC3-4F3F-B7B0-C922E1723B79}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe |
"{EEAB5909-EE67-496E-B70A-6EB317120390}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F2AF9FA8-4031-46CB-90D3-3CA601553E51}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{F3B363F6-D05A-4478-99F2-9A948C5DE27A}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F61D9026-70F0-4B82-A950-75FE9441AD72}" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 2070\autopatcher.exe |
"{F66E5F1F-9570-45BE-AF8E-DC141EE73B59}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{FBA18225-3EA4-4450-AD04-97C88179BB83}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 14\programs\rm.exe |
"{FBD04CCF-A7B9-40B1-B837-4B0274E04107}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{FCB2DBA5-1552-4A4C-8EE8-A6E99C156DAD}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{FEA2229A-7FF3-45C4-842C-46742A4C09B8}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 14\programs\umi.exe |
"TCP Query User{0766F499-79BD-49C6-B1CA-89E1D2DB0F67}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe |
"TCP Query User{1B5F9931-4286-426F-A2F7-3260789ECA02}C:\windows\system32\dpnsvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dpnsvr.exe |
"TCP Query User{1E9157DD-8917-4849-8989-996CBFFC073E}C:\program files\thechineseroom\dear esther\dearesther.exe" = protocol=6 | dir=in | app=c:\program files\thechineseroom\dear esther\dearesther.exe |
"TCP Query User{29311C23-6945-4C3F-A086-956517A28790}C:\program files\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base15405\sc2.exe |
"TCP Query User{30D0AA34-7F07-4D27-BA96-0E9E4B6E7542}C:\program files\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files\xfire\xfire.exe |
"TCP Query User{34453AD6-17CE-45D1-8DB4-09F628BCD952}C:\program files\madballs in babo invasion\baboinvasion.exe" = protocol=6 | dir=in | app=c:\program files\madballs in babo invasion\baboinvasion.exe |
"TCP Query User{3DD491D1-C61C-4796-AA14-940F7CFC48BF}C:\program files\progdvb\progdvbnet.exe" = protocol=6 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"TCP Query User{42173F4D-087D-4FFD-BC48-BF47786BCD30}C:\programdata\battle.net\agent\agent.976\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"TCP Query User{42442672-E31F-490E-9985-78C0F52343E3}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{4A6BE315-0FB6-4BB2-AE62-AF035E1EDD26}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{4AF963E8-5518-44A8-A776-D40C672B7BA6}C:\program files\infogrames\robot arena 2\robot arena 2.exe" = protocol=6 | dir=in | app=c:\program files\infogrames\robot arena 2\robot arena 2.exe |
"TCP Query User{55E00A78-EC1A-44A6-A952-4ED51EDB45B1}C:\program files\activision\call of duty - black ops\blackopsmp.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - black ops\blackopsmp.exe |
"TCP Query User{56892C85-87EF-451D-B438-F08BFB6695F5}C:\users\kasa\desktop\stahování\diablo-iii-8370-engb-installer-downloader.exe" = protocol=6 | dir=in | app=c:\users\kasa\desktop\stahování\diablo-iii-8370-engb-installer-downloader.exe |
"TCP Query User{5E7CE47A-B635-454D-8521-F7678F197601}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"TCP Query User{72748F01-13B5-41D8-819D-DC6BDB3518E3}C:\program files\activision\call of duty - black ops\blackops.exe" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - black ops\blackops.exe |
"TCP Query User{73BB20C3-57DA-4AAE-9FD9-11F092F6859A}C:\program files\rock of ages\binaries\win32\roa.exe" = protocol=6 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"TCP Query User{8A73064A-F8C5-4563-9772-869A8F999759}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"TCP Query User{8C73FA14-6D92-4430-BCF7-F10E5B2E008A}C:\casino\paradisecasino\casino.exe" = protocol=6 | dir=in | app=c:\casino\paradisecasino\casino.exe |
"TCP Query User{956573E9-50E8-45E0-861A-6FEBFE179128}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{981F6E5C-7C2E-40C6-AAD9-A8C60AE74D09}C:\program files\ea games\dead space 2\deadspace2.exe" = protocol=6 | dir=in | app=c:\program files\ea games\dead space 2\deadspace2.exe |
"TCP Query User{98361751-C2A9-4436-97AF-9DE219C5BB09}C:\program files\crasher\crasher.exe" = protocol=6 | dir=in | app=c:\program files\crasher\crasher.exe |
"TCP Query User{AE210141-5AEF-4FAC-9C8C-2565016B1B43}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
"TCP Query User{B93A28EE-7306-4F5C-90D2-5CF200FCE481}C:\program files\electronic arts\crytek\crysis 2\bin32\crysis2.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\crytek\crysis 2\bin32\crysis2.exe |
"TCP Query User{BA145955-44E0-4DD6-B4AA-4AB7705038D5}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{BF18E58A-F579-406E-956E-422343C3BCBE}C:\program files\java\jre6\launch4j-tmp\frd.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\frd.exe |
"TCP Query User{C1DC9059-3A25-494B-8E6E-DED57500BF13}C:\program files\duty calls\binaries\win32\dutycalls.exe" = protocol=6 | dir=in | app=c:\program files\duty calls\binaries\win32\dutycalls.exe |
"TCP Query User{C60EC6B1-111B-4428-A76E-940C8188582B}C:\program files\uber entertainment\monday night combat\binaries\win32\mnc.exe" = protocol=6 | dir=in | app=c:\program files\uber entertainment\monday night combat\binaries\win32\mnc.exe |
"TCP Query User{D07B84CF-4FAE-4D37-A57A-BB22B12270F1}C:\unmechanical\binaries\win32\udk.exe" = protocol=6 | dir=in | app=c:\unmechanical\binaries\win32\udk.exe |
"TCP Query User{D88E9AB6-D16D-4E61-B561-466D1EB0A2B9}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{D8A88F4E-FFB6-478B-917B-235DEB59FE86}C:\program files\electronic arts\shift 2 unleashed\shift2u.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\shift 2 unleashed\shift2u.exe |
"TCP Query User{DAD84ADD-DFC2-449C-9608-91A8DC6C5BEE}C:\program files\atari\tdu2\testdrive2.exe" = protocol=6 | dir=in | app=c:\program files\atari\tdu2\testdrive2.exe |
"TCP Query User{E88257F0-60A9-4621-BED5-0611F11569F4}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"TCP Query User{EB3649BF-2AAE-4EBE-A7CB-2429F2E716DB}C:\users\kasa\appdata\local\temp\rar$ex00.088\teamspeak3-server_win32\ts3server_win32.exe" = protocol=6 | dir=in | app=c:\users\kasa\appdata\local\temp\rar$ex00.088\teamspeak3-server_win32\ts3server_win32.exe |
"TCP Query User{EE90C53A-9D1E-46BA-A7EF-E0D9225874CE}C:\program files\atari\tdu2\uplauncher.exe" = protocol=6 | dir=in | app=c:\program files\atari\tdu2\uplauncher.exe |
"TCP Query User{EEE1980B-FC51-4CEF-BE67-818C4F2AEAE7}C:\program files\hlsw\hlsw.exe" = protocol=6 | dir=in | app=c:\program files\hlsw\hlsw.exe |
"TCP Query User{F0CEDD5A-AF44-44C5-8F3B-53C5FDFC2199}C:\program files\double fine productions\stacking\stack.exe" = protocol=6 | dir=in | app=c:\program files\double fine productions\stacking\stack.exe |
"TCP Query User{F1607F91-FF6D-403A-B213-EC633FB89391}C:\program files\recoil games\rochard\rochard.exe" = protocol=6 | dir=in | app=c:\program files\recoil games\rochard\rochard.exe |
"TCP Query User{F2259302-A02A-466F-BDE9-BD7A06EE1C55}C:\program files\atari\tdu2\_uplauncher.exe" = protocol=6 | dir=in | app=c:\program files\atari\tdu2\_uplauncher.exe |
"TCP Query User{F313AFEE-C12F-4236-883E-483E01604F4F}C:\programdata\battle.net\agent\agent.1225\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"TCP Query User{F7B4A92A-0133-4515-AE55-CA495F9C0CBB}C:\users\kasa\desktop\abababababa\teamspeak3-server_win32\ts3server_win32.exe" = protocol=6 | dir=in | app=c:\users\kasa\desktop\abababababa\teamspeak3-server_win32\ts3server_win32.exe |
"UDP Query User{05B093DF-F988-4392-BD35-8CBC6737C772}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{1420FD5E-7FBE-41AF-933C-73572A749EDB}C:\program files\activision\call of duty - black ops\blackopsmp.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - black ops\blackopsmp.exe |
"UDP Query User{18C10126-46F2-4C86-90AE-23ECD354A75E}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{1B213709-E117-4D1A-B02F-DCD5BB49AAC7}C:\program files\thechineseroom\dear esther\dearesther.exe" = protocol=17 | dir=in | app=c:\program files\thechineseroom\dear esther\dearesther.exe |
"UDP Query User{2CFC2D13-B454-45E9-A987-7D465D2D6227}C:\program files\uber entertainment\monday night combat\binaries\win32\mnc.exe" = protocol=17 | dir=in | app=c:\program files\uber entertainment\monday night combat\binaries\win32\mnc.exe |
"UDP Query User{31DBF688-B81B-4247-8422-47EBA0CC9DC4}C:\program files\duty calls\binaries\win32\dutycalls.exe" = protocol=17 | dir=in | app=c:\program files\duty calls\binaries\win32\dutycalls.exe |
"UDP Query User{3B1FEA4F-92DD-4BBA-846D-9467F9ADCBDD}C:\programdata\battle.net\agent\agent.998\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.998\agent.exe |
"UDP Query User{48938C6D-9851-4F44-B812-454F53099C49}C:\program files\rock of ages\binaries\win32\roa.exe" = protocol=17 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"UDP Query User{4E01EDB6-E6ED-4BF9-8462-E30A4CF54A88}C:\program files\atari\tdu2\uplauncher.exe" = protocol=17 | dir=in | app=c:\program files\atari\tdu2\uplauncher.exe |
"UDP Query User{518C5E7B-FA21-4B87-A62F-D92929764285}C:\program files\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base15405\sc2.exe |
"UDP Query User{53CE6B52-7647-45DD-B209-D92358D76C43}C:\users\kasa\appdata\local\temp\rar$ex00.088\teamspeak3-server_win32\ts3server_win32.exe" = protocol=17 | dir=in | app=c:\users\kasa\appdata\local\temp\rar$ex00.088\teamspeak3-server_win32\ts3server_win32.exe |
"UDP Query User{53F095A5-C3F9-4D82-A532-313347D72EB0}C:\program files\progdvb\progdvbnet.exe" = protocol=17 | dir=in | app=c:\program files\progdvb\progdvbnet.exe |
"UDP Query User{59DD84CD-E328-4A7B-A91B-5B099E6803DC}C:\program files\activision\call of duty 2\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 2\cod2mp_s.exe |
"UDP Query User{6112D261-10EF-440D-A407-354B8E99DB50}C:\casino\paradisecasino\casino.exe" = protocol=17 | dir=in | app=c:\casino\paradisecasino\casino.exe |
"UDP Query User{612BF08F-19C3-4A78-AF55-B43ECB87F9FC}C:\program files\recoil games\rochard\rochard.exe" = protocol=17 | dir=in | app=c:\program files\recoil games\rochard\rochard.exe |
"UDP Query User{65041BED-1B21-44F9-BAD2-06C64EEDC542}C:\windows\system32\dpnsvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dpnsvr.exe |
"UDP Query User{6D455F90-DA41-4CEF-A7A5-3E8BCC7AFEFC}C:\unmechanical\binaries\win32\udk.exe" = protocol=17 | dir=in | app=c:\unmechanical\binaries\win32\udk.exe |
"UDP Query User{6EDA56FC-554B-4FA9-AC23-DB1D14689C72}C:\program files\atari\tdu2\testdrive2.exe" = protocol=17 | dir=in | app=c:\program files\atari\tdu2\testdrive2.exe |
"UDP Query User{72394855-3165-47C3-834A-E90AA79F7FED}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{7ACB62BD-C3D6-4318-8880-24A2B775BBDC}C:\program files\hlsw\hlsw.exe" = protocol=17 | dir=in | app=c:\program files\hlsw\hlsw.exe |
"UDP Query User{7B058240-97C4-4DC2-ADC4-3F859C35695F}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{7BE8845E-182B-4CC3-85AB-BB160F61B7A8}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
"UDP Query User{7C775E07-5599-4C8A-B8F5-9DC422B3EB9B}C:\program files\atari\tdu2\_uplauncher.exe" = protocol=17 | dir=in | app=c:\program files\atari\tdu2\_uplauncher.exe |
"UDP Query User{82182BB2-9EA7-45C4-A11F-B6B50BF30DEF}C:\users\kasa\desktop\abababababa\teamspeak3-server_win32\ts3server_win32.exe" = protocol=17 | dir=in | app=c:\users\kasa\desktop\abababababa\teamspeak3-server_win32\ts3server_win32.exe |
"UDP Query User{82295119-C6ED-498B-912C-6935078192B9}C:\program files\infogrames\robot arena 2\robot arena 2.exe" = protocol=17 | dir=in | app=c:\program files\infogrames\robot arena 2\robot arena 2.exe |
"UDP Query User{852A96F1-4D22-42A6-8E5D-5040DCE3E5E8}C:\programdata\battle.net\agent\agent.976\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.976\agent.exe |
"UDP Query User{86603786-683C-40AB-AAF9-D6C85CBD1101}C:\program files\electronic arts\crytek\crysis 2\bin32\crysis2.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\crytek\crysis 2\bin32\crysis2.exe |
"UDP Query User{9D41AF64-726A-4D51-8C9B-0F49FD824426}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{AB6C003A-1E26-4DC1-A924-B9B60C139E6F}C:\program files\madballs in babo invasion\baboinvasion.exe" = protocol=17 | dir=in | app=c:\program files\madballs in babo invasion\baboinvasion.exe |
"UDP Query User{C14BFD01-C8CB-4814-A16D-076A20CC9D57}C:\program files\activision\call of duty - black ops\blackops.exe" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - black ops\blackops.exe |
"UDP Query User{CA11D9EE-48FC-4DD5-8C3B-13D85B65DED1}C:\program files\crasher\crasher.exe" = protocol=17 | dir=in | app=c:\program files\crasher\crasher.exe |
"UDP Query User{CAEFCD02-816F-461E-8134-14DA491B05FE}C:\users\kasa\desktop\stahování\diablo-iii-8370-engb-installer-downloader.exe" = protocol=17 | dir=in | app=c:\users\kasa\desktop\stahování\diablo-iii-8370-engb-installer-downloader.exe |
"UDP Query User{CB330DB2-6EE7-48BD-BE0C-9F3A210E4A45}C:\program files\double fine productions\stacking\stack.exe" = protocol=17 | dir=in | app=c:\program files\double fine productions\stacking\stack.exe |
"UDP Query User{CE8A1C92-D442-478D-8245-6DC2FE754D42}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{D9CAA40C-F1A9-4C62-B2FA-314B13154C86}C:\program files\ea games\dead space 2\deadspace2.exe" = protocol=17 | dir=in | app=c:\program files\ea games\dead space 2\deadspace2.exe |
"UDP Query User{DDE20E42-D28C-4964-8085-E44C472E557D}C:\program files\electronic arts\shift 2 unleashed\shift2u.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\shift 2 unleashed\shift2u.exe |
"UDP Query User{E0FA00C7-002A-45BD-B5A0-2B2594A996F3}C:\program files\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files\xfire\xfire.exe |
"UDP Query User{E13766F9-70F6-4E67-B8A4-2E578BF319F2}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"UDP Query User{F348EE83-EA1C-4DE2-BB67-1356648EDD85}C:\program files\java\jre6\launch4j-tmp\frd.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\launch4j-tmp\frd.exe |
"UDP Query User{FE780BC9-957D-41B9-8F41-2E29D1A2962D}C:\programdata\battle.net\agent\agent.1225\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0197B632-CA8B-21D9-A8B7-62160173D107}" = CCC Help Thai
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07BE4679-4318-4413-9701-B3D91354F10C}" = Heroes of Might & Magic V: Hammers of Fate
"{07BE4679-4318-4413-9701-B3D92354F11D}" = Heroes of Might and Magic V - Tribes of the East
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Pomocník pro přihlášení ke službě Windows Live ID
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{0F3BEAD5-4368-4CBC-9876-11B8475DE285}" = OSCAR Editor
"{0FFC48C5-C74B-498E-B908-74CB44D30E32}" = LEGO® Batman™
"{12EB3782-71A4-4828-B54C-891D2F5D6B0E}" = Farm Frenzy - Viking Heroes
"{1419B671-B248-48A6-87F2-D7B786CFB5F2}" = Shrek Forever After(TM)
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1A4DBC4E-731A-C87C-5A4F-C1F7F9DBF743}" = CCC Help Spanish
"{1D6FB37A-CBCA-11D6-8940-0002A5E32BEF}" = Prasátko a jeho velký piknik
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22743ADB-81A2-77E4-8FC4-986B288AF9C1}" = CCC Help Russian
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2523A0F0-03E8-455C-B692-0E1A7CC7640A}" = Walt Disney Pictures Bolt
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java(TM) 6 Update 35
"{27D0F814-5332-15EA-E17C-C2C1CFE4978C}" = Catalyst Control Center Graphics Previews Common
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{39740FC3-1E2F-7A17-94B9-575B7B968A27}" = CCC Help English
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CC49D98-2914-4444-88F1-6739EBBD140E}_is1" = The Adventures of Tintin - The Secret of the Unicorn 1.0
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4442AB48-DEC4-4B39-B067-1F75BF8017E7}" = Creative Centrale
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{491DF2DE-DF40-4AB9-8EE3-1948A269758C}" = Škola hrou - Čísla & Písmena
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D068F64-0156-B972-8CC1-2227E06CA098}" = CCC Help Japanese
"{4E2EA555-3DAE-4BE1-96BF-6A632ACFE8DE}" = LEGO® Batman™ 2: DC Super Heroes
"{4F198874-3C7D-5983-02EB-9E234C43F174}" = AMD Steady Video Plug-In
"{55D39D7E-0475-450B-A7A9-919EBCBC9F53}" = Camera RAW Plug-In for EPSON Creativity Suite
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{58F12B00-D1F0-CDBB-4D34-DD324C158D20}" = CCC Help Finnish
"{5C5A944F-096E-4ADD-B8E8-887F18BA6228}" = LEGO® Harry Potter™: Years 5-7
"{5FE7B011-E4D4-0E44-ACF8-CC2745E9D95A}" = CCC Help German
"{61DB7F8F-D68B-C286-29C8-2666D1E63C29}" = CCC Help Italian
"{61ECC1DB-8531-AB39-1E6A-AEF92FD01ADD}" = CCC Help Norwegian
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{64958DA4-79D3-43FD-AF06-720DAD044F9E}" = LEGO® Pirates of the Caribbean The Video Game
"{67ED38A3-4882-448B-B44D-3428AB00D7D5}" = Acronis True Image Home
"{69F524B9-B18B-4FFD-8515-418586483CB4}" = Příšerky, s.r.o., Strašidelný ostrov
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7245813E-C330-C7D0-FBD8-B54A534F8BAC}" = CCC Help Czech
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{745D37C2-26F4-4B65-BA13-F9840EBFA75B}" = Might & Magic Heroes VI
"{74F541C8-EB78-4606-8234-0955ED803787}" = TurboFLOORPLAN Dum & Interiér & Zahrada Pro v12
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79F2E544-0854-F553-B301-8FD7C0B28C41}" = CCC Help Greek
"{7B4A5C13-069F-4AFE-AE57-C497B4E33C7E}" = Call of Duty(R) 2 Patch 1.3
"{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"{7F57C5DC-8BA6-4835-A94A-D114D1FD9539}" = Sweex Universal Webcam Driver
"{8265F2BC-5961-4A0D-8A34-F08C02E8974D}" = Disney Universe
"{8307B54E-D6AA-F401-E589-F9651FDE5C43}" = CCC Help Hungarian
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{861D5CB1-7B4B-7698-5B15-E1724EB07DD4}" = AMD Drag and Drop Transcoding
"{86604C06-DA30-425E-AECE-47304FE81C45}" = Creative Software Update
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8829DAD4-8F07-4A96-B995-15498EBB8045}" = Heroes of Might and Magic V
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{88B1EB6F-F15E-9946-1413-D1FD3AF6A346}" = AMD VISION Engine Control Center
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Centrum zařízení Windows Mobile
"{91C0B95B-B83A-4828-A775-BBE2DD421029}" = Nero 7 Ultra Edition
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96334581-5554-3E5F-8BC9-924C3C3AC5BE}" = Google Talk Plugin
"{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
"{9A200E68-D5F4-4E70-910F-2871753A0E2B}" = Worms World Party
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B0AC7ED-E425-4BD9-8196-D4D5D31FFD37}" = Activision(R)
"{9B58B653-7E64-E4BA-38DB-A2DDC7274B5B}" = CCC Help Chinese Traditional
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F479685-180E-4C05-9400-D59292A1B29C}" = Windows Live Movie Maker
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A3D11978-F110-419E-8981-2CCFC17ADE64}" = Scooby-Doo!(TM) Počátky strachu
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 3.9.1195
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAFD160A-2333-40D8-AA25-42D1989CA0F2}" = Toy Story 3
"{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-1029-4770-7760-000000000004}{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Czech
"{AC853A11-2047-4AAE-9EF1-9084C5B35926}" = KalkulacniProgram
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B258F953-A3BA-1A71-9C1F-73AB886D9FD5}" = AMD Fuel
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
"{B4089055-D468-45A4-A6BA-5A138DD715FC}" = Bing Bar
"{B489D5F8-D960-4399-9286-C59BF21991B5}" = Medvědí bratři
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi
"{B8DAC2F9-D1C4-4BE9-9E30-AB18B95CF197}" = Bořek stavitel - Lunapark
"{B94C6815-7BCC-4124-AC39-9208A06FFFA7}" = Disney-Pixar Ratatouille
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BD71ADC0-0616-4EC2-A43A-8A7EBF3A85E6}" = Tygrova výprava
"{BF9D2E61-64C4-64EA-6AF7-29EB5A110C26}" = AMD Catalyst Install Manager
"{C18D104D-9E86-5504-4EE1-91B933533381}" = CCC Help French
"{C2747A8A-2371-6183-7F1D-88CCA7DFBA38}" = AMD Media Foundation Decoders
"{C289BABC-7B44-93C2-9D0A-61AF3F0DB0F3}" = Catalyst Control Center Localization All
"{C35BBC64-E7B7-B699-E5D8-CE5989061F93}" = HydraVision
"{C6AC04F5-5916-4A02-BC36-AF5BC0A3CBD4}" = Media Go
"{C756A743-4105-49D0-A9C8-3DEDDD3FA505}" = Scooby-Doo (TM) - Přízrak tajemného rytíře
"{CC1BFD0D-7432-5606-3128-9AD5DE2C7528}" = CCC Help Turkish
"{CD154795-D077-10E7-54F2-EA9A55E395D7}" = ccc-utility
"{CD2B8A2A-431F-648F-3EA1-87CEC338E24E}" = CCC Help Swedish
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D4CC45F9-9F8B-329B-3624-58DE4A11AE2E}" = AMD Accelerated Video Transcoding
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}" = Windows Live Family Safety
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.1.17.362
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DE5ECBF6-8A4A-4855-98D0-D6576145EBFF}" = G-Force
"{Dobry nacelnik}_is1" = Dobrý náčelník 1.0
"{E024B763-6EF3-E882-DAA1-8A316B1C6EE7}" = CCC Help Portuguese
"{E04C7925-A4B9-DCF0-818B-1A8ED1AB6F23}" = CCC Help Polish
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{E705367E-CF17-36B0-A6FF-0288FD289B1C}" = CCC Help Danish
"{EA49EE35-1D08-E2F6-9B67-9B8BCF7B6246}" = CCC Help Chinese Standard
"{ED6C5ECD-5AA4-4054-BF67-8F49526E5765}" = O&O Defrag Professional
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F5DB6D6B-DC27-118B-FDC1-7E5DADCCC0F6}" = CCC Help Korean
"{F79AAB3A-B8B4-4AC7-94AB-1C4C076C6A89}" = The Simpsons Hit & Run(TM)
"{F8A43536-3A52-49BE-BD1C-4A51C943F2B7}" = Windows 7 Manager
"{F8C02517-4AC3-4026-8292-ACF23E98A7D7}" = Activision(R)
"{F9862604-E7DE-9994-054F-ACB10AC59EF7}" = CCC Help Dutch
"{FC274982-5AAD-4C20-848D-4424A5043009}_is1" = WinUtilities 10.42 Professional Edition
"{FC3DCCA5-52FE-4BAB-B495-F3760767E4D1}" = O&O DiskRecovery
"{FC529949-EECA-2BF6-02AC-8041AD76B4B5}" = Application Profiles
"{FEF19B15-9DC0-FBCF-4728-AE02501CAD62}" = Media Go Video Playback Engine 1.48.106.10090
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF895069-BD9A-11D5-986D-00500443CF9F}" = Moorhuhn 3 DL
"{Kouzelny morsky svet 3 - Dobrodruzstvi v Atlantide}_is1" = Kouzelný mořský svět 3 - Dobrodružství v Atlantidě 1.0
"{Moje cukrárna 2}_is1" = Moje cukrárna 2 1.0
"7-Zip" = 7-Zip 4.64
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Any Video Converter Ultimate_is1" = Any Video Converter Ultimate 4.4.2
"Astroburn Lite" = Astroburn Lite
"avast" = avast! Free Antivirus
"Botanicula_is1" = Botanicula
"Bugs Bunny & Taz - Time Busters" = Bugs Bunny & Taz - Time Busters
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Creative Centrale" = Creative Centrale
"DAEMON Tools Lite" = DAEMON Tools Lite
"Diablo III" = Diablo III
"Divoký míč 3" = Divoký míč 3
"DUA1" = Domácí učitel angličtiny 1 (odstranění)
"EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 9.1.0 Home Edition
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Printer and Utilities" = Software tiskárny EPSON
"Farm Frenzy 3: American Pie" = Farm Frenzy 3: American Pie
"Farm Frenzy: Gone Fishing" = Farm Frenzy: Gone Fishing
"Farm Mania 2 1.00" = Farm Mania 2 1.00
"FLV Player" = FLV Player 2.0 (build 25)
"Free FLV Converter_is1" = Free FLV Converter V 7.4.0
"FSCZ_is1" = FORM studio
"GameSpy Arcade" = GameSpy Arcade
"Google Chrome" = Google Chrome
"GSview 4.9" = GSview 4.9
"HLSW_is1" = HLSW v1.3.3.8c
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"ImgBurn" = ImgBurn
"Indeo® Software" = Indeo® Software
"Insanely Twisted Shadow Planet_is1" = skidrow
"InstallShield_{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch
"InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty(R) - World at War(TM) 1.6 Patch
"InstallShield_{0F3BEAD5-4368-4CBC-9876-11B8475DE285}" = X7 Oscar Editor
"InstallShield_{0FFC48C5-C74B-498E-B908-74CB44D30E32}" = LEGO® Batman™
"InstallShield_{1419B671-B248-48A6-87F2-D7B786CFB5F2}" = Shrek Forever After(TM)
"InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty(R) - World at War(TM) 1.3 Patch
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch
"InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
"InstallShield_{5D7767FA-7FE8-4627-9F09-AEF7A25F1E07}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch
"InstallShield_{74F541C8-EB78-4606-8234-0955ED803787}" = TurboFLOORPLAN Dum & Interiér & Zahrada Pro v12
"InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty(R) - World at War(TM) 1.7 Patch
"InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III
"InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{9B0AC7ED-E425-4BD9-8196-D4D5D31FFD37}" = Ice Age Dawn of the Dinosaurs(TM)
"InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty(R) - World at War(TM) 1.4 Patch
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{BD71ADC0-0616-4EC2-A43A-8A7EBF3A85E6}" = Tygrova výprava
"InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty(R) - World at War(TM) 1.5 Patch
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"InstallShield_{E5141379-B2D9-4BBC-BB2A-5805541571DD}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch
"InstallShield_{F8C02517-4AC3-4026-8292-ACF23E98A7D7}" = Madagaskar 2(TM)
"JDownloader" = JDownloader
"Joboshare DVD Ripper Platinum" = Joboshare DVD Ripper Platinum
"JpegResampler2010_is1" = Jpeg Resampler Vs 6+
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.2.0
"LEGO Star Wars III The Clone Wars" = LEGO Star Wars III The Clone Wars
"Liška Ryška - nová dobrodružství" = Liška Ryška - nová dobrodružství
"Liška Ryška - Vodní dobrodružství" = Liška Ryška - Vodní dobrodružství
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magic Bullet Looks Studio" = Magic Bullet Looks Studio
"Machinarium" = Machinarium
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.62.0.1300
"MediaCoder" = MediaCoder 0.7.5.4798
"Medvěd Míša - Nová dobrodružství" = Medvěd Míša - Nová dobrodružství
"Medvěd Míša - Zakletý hrad" = Medvěd Míša - Zakletý hrad
"Medvěd Míša ve vesmíru" = Medvěd Míša ve vesmíru
"Mesto zabavy" = Mesto zabavy
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"MiKTeX 2.9" = MiKTeX 2.9
"Mistr kuchař" = Mistr kuchař
"Moje farma" = Moje farma
"Mořské dobrodružství" = Mořské dobrodružství
"Mozilla Firefox (4.0b1)" = Mozilla Firefox (4.0b1)
"Mozilla Firefox 9.0.1 (x86 cs)" = Mozilla Firefox 9.0.1 (x86 cs)
"Nádherná zahrada" = Nádherná zahrada
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"OpenAL" = OpenAL
"Osada: Kolos" = Osada: Kolos
"Ovečky" = Ovečky
"PDF Editor 3" = PDF Editor 3
"Picasa 3" = Picasa 3
"Pohádkový příběh" = Pohádkový příběh
"Polární dobrodružství 2" = Polární dobrodružství 2
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 12.0" = RealPlayer
"Roads Of Rome 2 1.00" = Roads Of Rome 2 1.00
"Roboball" = Roboball
"Rochard_is1" = Rochard
"Sapphire TRIXX" = Sapphire TRIXX
"Scooby-Doo(TM), Case File #1 Glowing Bugman" = Scooby-Doo(TM), Case File #1 Glowing Bugman
"ScreenshotCaptor_is1" = Screenshot Captor 2.95.01
"Server CFG Creator 2.0 for Call of Duty 2" = Server CFG Creator 2.0 for Call of Duty 2
"Sonic Generations_is1" = Sonic Generations
"SpongeBob SquarePants Bubble Rush" = SpongeBob SquarePants Bubble Rush
"ST6UNST #1" = RCON 4 Call Of Duty 2 V1.0 (10/Nov/05)
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Steam App 42680" = Call of Duty: Modern Warfare 3
"Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer
"Strike Ball 3" = Strike Ball 3
"Táta hrdina" = Táta hrdina
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"The Amazing Spider-Man_is1" = The Amazing Spider-Man
"The Elder Scrolls V - Skyrim_is1" = The Elder Scrolls V - Skyrim
"The Grinch" = The Grinch
"TONICT" = TONICT
"Total Uninstall 6_is1" = Total Uninstall 6.2.0
"Totalcmd" = Total Commander (Remove or Repair)
"TurboFloorPlan-1.0.0" = Knihovna TurboFLOORPLANu
"TurboFloorPlan-5.0.0" = Knihovna TurboFLOORPLANu
"TurboFloorPlan-6.0.0" = Knihovna TurboFLOORPLANu
"Turtix" = Turtix
"UDK-bd65a5bd-b79b-4b87-ad9d-24cc7693c48d" = Unmechanical
"Verbatim GREEN BUTTON_is1" = Verbatim GREEN BUTTON 1.46
"Veselé motory_is1" = Veselé motory
"VLC media player" = VLC media player 2.0.3
"Vypínač na dobrou noc_is1" = Vypínač na dobrou noc verze 2.0
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Youda Farmer 2 - Save the Village Just For Fun Games" = Youda Farmer 2 - Save the Village Just For Fun Games
"ZENSTYLESERIESUG" = Creative ZEN Style Series Documentation

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
"XBMC" = XBMC Media Center

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2.9.2012 1:19:19 | Computer Name = Kasa-PC | Source = VSS | ID = 8194
Description =

Error - 2.9.2012 4:39:07 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: MsiExec.exe, verze: 5.0.7601.17514, časové
razítko: 0x4ce792c4 Název chybujícího modulu: MSI92E3.tmp, verze: 14.0.0.168, časové
razítko: 0x471383db Kód výjimky: 0xc0000005 Posun chyby: 0x0009371f ID chybujícího
procesu: 0xb2c Čas spuštění chybující aplikace: 0x01cd88e6630a27f0 Cesta k chybující
aplikaci: C:\Windows\system32\MsiExec.exe Cesta k chybujícímu modulu: C:\Users\Kasa\AppData\Local\Temp\MSI92E3.tmp
ID
zprávy: a7fcf130-f4d9-11e1-8aeb-001a4d9de58f

Error - 2.9.2012 4:39:42 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: MsiExec.exe, verze: 5.0.7601.17514, časové
razítko: 0x4ce792c4 Název chybujícího modulu: MSI1A3C.tmp, verze: 14.0.0.168, časové
razítko: 0x471383db Kód výjimky: 0xc0000005 Posun chyby: 0x0009371f ID chybujícího
procesu: 0x14dc Čas spuštění chybující aplikace: 0x01cd88e67b0f72b0 Cesta k chybující
aplikaci: C:\Windows\system32\MsiExec.exe Cesta k chybujícímu modulu: C:\Windows\Installer\MSI1A3C.tmp
ID
zprávy: bd4e3f80-f4d9-11e1-8aeb-001a4d9de58f

Error - 2.9.2012 6:10:15 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Simpsons.exe, verze: 1.0.0.0, časové razítko:
0x00000000 Název chybujícího modulu: Simpsons.exe, verze: 1.0.0.0, časové razítko:
0x00000000 Kód výjimky: 0xc0000005 Posun chyby: 0x0014f6ad ID chybujícího procesu:
0x1604 Čas spuštění chybující aplikace: 0x01cd88cbed7060a0 Cesta k chybující aplikaci:
C:\Program Files\Vivendi Universal Games\The Simpsons Hit & Run\Simpsons.exe Cesta
k chybujícímu modulu: C:\Program Files\Vivendi Universal Games\The Simpsons Hit
& Run\Simpsons.exe ID zprávy: 63397d68-f4e6-11e1-8aeb-001a4d9de58f

Error - 2.9.2012 6:10:35 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Simpsons.exe, verze: 1.0.0.0, časové razítko:
0x00000000 Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko:
0x4ec49b60 Kód výjimky: 0xc0000029 Posun chyby: 0x00090572 ID chybujícího procesu:
0x1604 Čas spuštění chybující aplikace: 0x01cd88cbed7060a0 Cesta k chybující aplikaci:
C:\Program Files\Vivendi Universal Games\The Simpsons Hit & Run\Simpsons.exe Cesta
k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll ID zprávy: 6f184718-f4e6-11e1-8aeb-001a4d9de58f

Error - 2.9.2012 10:33:47 | Computer Name = Kasa-PC | Source = SideBySide | ID = 16842815
Description = Generování kontextu aktivace pro C:\Program Files\Common Files\Adobe
AIR\Versions\1.0\Adobe AIR.dll se nezdařilo. Chyba v souboru manifestu nebo zásady
C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll na řádku 3. Hodnota
MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR atributu version
v prvku assemblyIdentity je neplatná.

Error - 2.9.2012 10:35:10 | Computer Name = Kasa-PC | Source = SideBySide | ID = 16842787
Description = Generování kontextu aktivace pro c:\program files\kastner software\form
studio cz\FORMasistent.exe.Manifest se nezdařilo. Chyba v souboru manifestu nebo
zásady c:\program files\kastner software\form studio cz\ManagerISDS.DLL na řádku
2. Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz
je ManagerISDS,type="win32",version="2.2.6.1". Definice je ManagerISDS,type="win32",version="2.2.7.3".
Podrobnější
diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 2.9.2012 10:36:20 | Computer Name = Kasa-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\program files\mediacoder\codecs\vfwenc.exe
se nezdařilo. Závislé sestavení Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 3.9.2012 9:29:28 | Computer Name = Kasa-PC | Source = Application Hang | ID = 1002
Description = Program Explorer.EXE verze 6.1.7601.17567 přestal spolupracovat se
systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: da8 Čas spuštění: 01cd89b5cf84cff0 Čas ukončení: 1219 Cesta k aplikaci: C:\Windows\Explorer.EXE

ID
hlášení: 4ff07b41-f5cb-11e1-915d-001a4d9de58f

Error - 4.9.2012 0:48:55 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: FarmFrenzy3_Madagascar.exe, verze: 0.5.0.0,
časové razítko: 0x4c29f054 Název chybujícího modulu: FarmFrenzy3_Madagascar.exe,
verze: 0.5.0.0, časové razítko: 0x4c29f054 Kód výjimky: 0xc0000005 Posun chyby: 0x001c5c8f
ID
chybujícího procesu: 0x96c Čas spuštění chybující aplikace: 0x01cd8a58941c2500 Cesta
k chybující aplikaci: C:\Users\Kasa\Desktop\stahování\Nová složka (8)\Farm Frenzy
3 Madagascar\FarmFrenzy3_Madagascar.exe Cesta k chybujícímu modulu: C:\Users\Kasa\Desktop\stahování\Nová
složka (8)\Farm Frenzy 3 Madagascar\FarmFrenzy3_Madagascar.exe ID zprávy: d4429920-f64b-11e1-bab5-001a4d9de58f

Error - 4.9.2012 7:14:14 | Computer Name = Kasa-PC | Source = Application Hang | ID = 1002
Description = Program wmplayer.exe verze 12.0.7601.17514 přestal spolupracovat se
systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací
o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID
procesu: 1384 Čas spuštění: 01cd8a8e22237a80 Čas ukončení: 29 Cesta k aplikaci: C:\Program
Files\Windows Media Player\wmplayer.exe ID hlášení: a590b5e1-f681-11e1-a5f7-001a4d9de58f


Error - 4.9.2012 11:30:25 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Dobry nacelnik.exe, verze: 0.0.0.0, časové
razítko: 0x4d53ea38 Název chybujícího modulu: Dobry nacelnik.exe, verze: 0.0.0.0,
časové razítko: 0x4d53ea38 Kód výjimky: 0xc0000005 Posun chyby: 0x0014f25c ID chybujícího
procesu: 0xef8 Čas spuštění chybující aplikace: 0x01cd8aacc87aa020 Cesta k chybující
aplikaci: C:\Program Files\Dobry nacelnik\Dobry nacelnik.exe Cesta k chybujícímu
modulu: C:\Program Files\Dobry nacelnik\Dobry nacelnik.exe ID zprávy: 722a0a20-f6a5-11e1-bf57-001a4d9de58f

Error - 4.9.2012 12:03:06 | Computer Name = Kasa-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Dobry nacelnik.exe, verze: 0.0.0.0, časové
razítko: 0x4d53ea38 Název chybujícího modulu: Dobry nacelnik.exe, verze: 0.0.0.0,
časové razítko: 0x4d53ea38 Kód výjimky: 0xc0000005 Posun chyby: 0x0014f25c ID chybujícího
procesu: 0x126c Čas spuštění chybující aplikace: 0x01cd8ab24bbf9170 Cesta k chybující
aplikaci: C:\Program Files\Dobry nacelnik\Dobry nacelnik.exe Cesta k chybujícímu
modulu: C:\Program Files\Dobry nacelnik\Dobry nacelnik.exe ID zprávy: 02e3eaf0-f6aa-11e1-bf57-001a4d9de58f

[ Media Center Events ]
Error - 7.12.2010 13:59:36 | Computer Name = Kasa-PC | Source = MCUpdate | ID = 0
Description = 18:59:36 - Chyba při připojování k Internetu 18:59:36 - Nelze kontaktovat
server..

Error - 7.12.2010 13:59:46 | Computer Name = Kasa-PC | Source = MCUpdate | ID = 0
Description = 18:59:42 - Chyba při připojování k Internetu 18:59:42 - Nelze kontaktovat
server..

[ OSession Events ]
Error - 8.12.2010 14:37:24 | Computer Name = Kasa-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 10
seconds with 0 seconds of active time. This session ended with a crash.

Error - 17.1.2011 10:22:26 | Computer Name = Kasa-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 9
seconds with 0 seconds of active time. This session ended with a crash.

Error - 4.4.2011 11:56:30 | Computer Name = Kasa-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 40
seconds with 0 seconds of active time. This session ended with a crash.

Error - 6.9.2011 15:13:47 | Computer Name = Kasa-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session
lasted 33 seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 4.9.2012 10:40:55 | Computer Name = Kasa-PC | Source = bowser | ID = 8003
Description =

Error - 4.9.2012 10:51:01 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 4.9.2012 12:48:35 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 4.9.2012 14:48:07 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 4.9.2012 16:48:44 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 5.9.2012 4:16:26 | Computer Name = Kasa-PC | Source = Application Popup | ID = 875
Description = Načtení ovladače sfsync02.sys je blokováno.

Error - 5.9.2012 4:16:28 | Computer Name = Kasa-PC | Source = Application Popup | ID = 875
Description = Načtení ovladače sfdrv01.sys je blokováno.

Error - 5.9.2012 4:16:50 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.

Error - 5.9.2012 4:17:02 | Computer Name = Kasa-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: sfdrv01 sfsync02

Error - 5.9.2012 4:18:53 | Computer Name = Kasa-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Při pokusu o načtení souboru místních hostitelů došlo k chybě.


< End of report >

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 19:51
od vyosek
:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    :otl
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\TRIXX.sys -- (TRIXX)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\nvlddmkm.sys -- (nvlddmkm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\Rar$EX00.513\EVEREST Ultimate Edition\kerneld.wnt -- (EverestDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Kasa\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (as1xq1zn)
DRV - [2011.07.29 14:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2011.07.29 14:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 D7 F5 F5 CD 13 CB 01 [binary data]
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\URLSearchHook: {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatche ... pl=11&qkw={searchTerms}&tbid=60040
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{27E66A54-79C4-40CF-8AC2-A57315F2605C}: "URL" = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=5N&apn_dtid=YYYYYYYYCZ&apn_uid=ccd6ec2d-2899-419f-b40c-6b95ba190d14&apn_sauid=2DD8CF75-DAD5-477F-BDF1-D5409B7CF31F
IE - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://toolbar.inbox.com/search/dispatc ... pl=11&qkw={searchTerms}&tbid=80093&lng=cs
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
[2011.04.19 12:28:32 | 000,002,397 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\askcom.xml
[2010.07.13 17:16:24 | 000,001,355 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\crawlersrch.xml
[2010.07.13 17:16:26 | 000,002,180 | ---- | M] () -- C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\inbox-hledat.xml
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
[2012.02.04 07:48:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\IObit@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:FBFC061F
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:A7BFF8A2
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:8401B6D5
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:F6E5C7FB

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Acrobat Speed Launcher"=-
"Acrobat Assistant 8.0"=-
"AdobeAAMUpdater-1.0"=-
"Adobe ARM"=-
"Malwarebytes' Anti-Malware"=-
"SunJavaUpdateSched"=-
"LogMeIn Hamachi Ui"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"=-
"Google Update"=-
"OscarEditor"=-
"SoftAuto.exe"=-
"Skype"=-
"DAEMON Tools Lite"=-
"Steam"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-

:files
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000UA.job
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 21:08
od kasanos
Vkládám log po provedené opravě.

All processes killed
========== OTL ==========
Service TRIXX stopped successfully!
Service TRIXX deleted successfully!
File C:\Users\Kasa\AppData\Local\Temp\TRIXX.sys not found.
Service pccsmcfd stopped successfully!
Service pccsmcfd deleted successfully!
File system32\DRIVERS\pccsmcfd.sys not found.
Service nvlddmkm stopped successfully!
Service nvlddmkm deleted successfully!
File system32\DRIVERS\nvlddmkm.sys not found.
Service EverestDriver stopped successfully!
Service EverestDriver deleted successfully!
File C:\Users\Kasa\AppData\Local\Temp\Rar$EX00.513\EVEREST Ultimate Edition\kerneld.wnt not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\Users\Kasa\AppData\Local\Temp\catchme.sys not found.
Error: No service named as1xq1zn was found to stop!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\as1xq1zn deleted successfully.
Service epmntdrv stopped successfully!
Service epmntdrv deleted successfully!
C:\Windows\System32\epmntdrv.sys moved successfully.
Service EuGdiDrv stopped successfully!
Service EuGdiDrv deleted successfully!
C:\Windows\System32\EuGdiDrv.sys moved successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKU\S-1-5-21-2274559232-2163966107-2404732510-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}\ not found.
HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ not found.
Registry key HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\SearchScopes\{27E66A54-79C4-40CF-8AC2-A57315F2605C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27E66A54-79C4-40CF-8AC2-A57315F2605C}\ not found.
Registry key HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C04B7D22-5AEC-4561-8F49-27F6269208F6}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Ask.com" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\askcom.xml moved successfully.
C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\crawlersrch.xml moved successfully.
C:\Users\Kasa\AppData\Roaming\Mozilla\Firefox\Profiles\piquqpsw.default\searchplugins\inbox-hledat.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_USERS\S-1-5-21-2274559232-2163966107-2404732510-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
Folder C:\Users\Administrator\AppData\Roaming\IObit@Alternate Data Stream - 178 bytes -> C:\ProgramData\TEMP:FBFC061F\ not found.
ADS C:\ProgramData\TEMP:A7BFF8A2 deleted successfully.
ADS C:\ProgramData\TEMP:8401B6D5 deleted successfully.
ADS C:\ProgramData\TEMP:F6E5C7FB deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Acrobat Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Acrobat Assistant 8.0 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Malwarebytes' Anti-Malware deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\OscarEditor deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SoftAuto.exe deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Skype deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Steam deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
========== FILES ==========
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2274559232-2163966107-2404732510-1000UA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\DXT65AD.tmp moved successfully.
C:\Windows\msdownld.tmp folder moved successfully.
========== COMMANDS ==========
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 81518 bytes
->Temporary Internet Files folder emptied: 41233586 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 36374157 bytes
->Flash cache emptied: 42402 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: dibl
->Temp folder emptied: 54178 bytes
->Temporary Internet Files folder emptied: 1139723 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 41620 bytes

User: Kasa
->Temp folder emptied: 47106962 bytes
->Temporary Internet Files folder emptied: 51267564 bytes
->Java cache emptied: 19083309 bytes
->FireFox cache emptied: 784329302 bytes
->Google Chrome cache emptied: 286337297 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 393998 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 196339202 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 396,00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: dibl
->Flash cache emptied: 0 bytes

User: Kasa
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: Administrator
->Java cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: dibl
->Java cache emptied: 0 bytes

User: Kasa
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.60.0 log created on 09052012_215957

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 21:16
od vyosek
OTL udelalo co melo, jak se chova PC :???:

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 21:26
od kasanos
Díky moc určitě je rychlejší více pozorování můžu posoudit až déle jinak díky moc za vaši snahu a nezapomenu podpořit forum nějakou částkou.Ještě otázečka byl tam nějaký zásadní problém?

Re: Poprosim o kontrolu logu - kasanos

Napsal: 05 zář 2012 21:37
od vyosek
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Za podporu fora jmenem celeho tymu dekuji :worship:

:arrow: Byly tam spise jen zbytecnosti a par prazdnych zapisu v registru, nic vazneho co se bezpecnosti tyce


:arrow: A pokud tedy nejsou problemy ci dotazy, je to z me strany vse :| Jinak nemate zac, rado se stalo :|

Re: Poprosim o kontrolu logu - kasanos

Napsal: 15 zář 2012 03:27
od vyosek
:closed:
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz