VIRY.CZ

Zdravim, blbne my internet (občasný výpadky, rychlost načítání apd).

Přikládám log, díky za rady:


Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-11-06 16:19:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 622 GB (65%) free of 954 GB
Total RAM: 3325 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:19:30, on 6.11.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\YourFileDownloader\YourFileUpdater.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gamesbar\SearchEngineProtection.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\Gridspot\GridspotService.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchnu.com/406
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedi ... t=&gc=1&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedi ... &gc=1&q=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Softonic-Eng7 - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [MediaGet2] C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe --minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SearchEngineProtection] C:\Program Files\Gamesbar\SearchEngineProtection.exe
O4 - HKCU\..\Run: [PokerStrategy.com SideKick] "C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-21-790525478-113007714-725345543-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Mummys Gold Casino - {19ED622B-017A-4A86-AE8A-1E2EFEDCE9AF} - C:\Microgaming\Casino\MummysGoldCasino\casinogame.exe (HKCU)
O9 - Extra button: PartyGammon.com - {59A861EE-32B3-42cd-8CCA-FC130EDF3A44} - C:\Documents and Settings\Administrator\Plocha\PartyGammon.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: PartyGammon.com - {59A861EE-32B3-42cd-8CCA-FC130EDF3A44} - C:\Documents and Settings\Administrator\Plocha\PartyGammon.lnk (file missing) (HKCU)
O9 - Extra button: Unibet - {6672BCBA-B888-4766-85ED-8263922B804E} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O9 - Extra button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Documents and Settings\Administrator\Plocha\PartyCasino.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Documents and Settings\Administrator\Plocha\PartyCasino.lnk (file missing) (HKCU)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GridspotService - Gridspot - C:\Program Files\Gridspot\GridspotService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - c:/postgreSQL/bin/pg_ctl.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 15544 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Norton Security Scan for Administrator.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\tasks\Your File Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default

prefs.js - "browser.startup.homepage" - "http://www.searchnu.com/406"
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {EEE6C361-6118-11DC-9C72-001320C79847}:1.3.0.1, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:6.1.0.10441, gamesbar@oberon-media.com:1.2.1.98, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0, {687578b9-7132-4a7a-80e4-30ee31099e03}:10.10.20.14, {99079a25-328f-4bd4-be04-00955acaa0a7}:4.6.1.01"
prefs.js - "keyword.URL" - "http://dts.search-results.com/sr?src=ff ... 06&sr=0&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0]
"Description"=DivX OVS Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0]
"Description"=npganymedenet
"Path"=C:\Program Files\Ganymede\Plugins\npganymedenet.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@oberon-media.com/ONCAdapter]
"Description"=Oberon com adapter plugin
"Path"=C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
AskSearch.js
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npganymedenet.dll
npganymedenet.xpt
npLegitCheckPlugin.dll
npnul32.dll
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
bingober45669765.xml
google.xml
jyxo-cz.xml
mall-cz.xml
Search_Results.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\
gamesbar@oberon-media.com
{20a82645-c095-46ed-80e3-08825760534b}
{687578b9-7132-4a7a-80e4-30ee31099e03}
{800b5000-a755-47e1-992b-48a1c1357f07}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\
conduit.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin.xml
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof0.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
DataMngr - C:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL [2012-07-25 89016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}]
GamesBarBHO Class - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll [2011-03-03 783760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\prxtbSof0.dll [2011-05-09 176936]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]
{6F282B65-56BF-4BD1-A8B2-A4449A05863D} - GamesBar - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll [2011-03-03 783760]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-10-15 375000]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-02-25 2548552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2008-02-12 536576]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-11-29 421888]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-28 19557480]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"DATAMNGR"=C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE [2012-09-02 1890744]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files\Steam\Steam.exe [2012-08-06 1353080]
"MediaGet2"=C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe [2012-04-01 8138472]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SearchEngineProtection"=C:\Program Files\Gamesbar\SearchEngineProtection.exe [2011-03-03 591248]
"PokerStrategy.com SideKick"=C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms [2011-12-28 450]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-07-26 895376]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-01-09 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2011-01-19 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGet2]
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe [2012-04-01 8138472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2009-03-15 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeechGrid]
C:\Program Files\SpeechGrid\SpeechGrid.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011"
"C:\Program Files\FlightGear\bin\Win32\fgfs.exe"="C:\Program Files\FlightGear\bin\Win32\fgfs.exe:*:Enabled:fgfs"
"C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe"="C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe:*:Enabled:Big Match Striker"
"C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe"="C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe:*:Enabled:BigMatchStriker"
"C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe"="C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe:*:Enabled:UDK"
"C:\Program Files\Clonk Rage\Clonk.exe"="C:\Program Files\Clonk Rage\Clonk.exe:*:Enabled:Clonk Rage"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2011"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2011 - Autorun"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Cossacks\dmcr.exe"="C:\Program Files\Cossacks\dmcr.exe:*:Enabled:dmcr"
"C:\Program Files\Warzone 2100\warzone2100.exe"="C:\Program Files\Warzone 2100\warzone2100.exe:*:Enabled:Warzone 2100"
"C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe"="C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe:*:Enabled:Porsche"
"C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe"="C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe:*:Enabled:Football Manager 2012 Demo"
"C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE"="C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE:*:Enabled:RCT"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe"="C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe:*:Enabled:BattleForge™ Launcher"
"C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe"="C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe:*:Enabled:BattleForge™"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Tunngle\TnglCtrl.exe"="C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service"
"C:\Program Files\Tunngle\Tunngle.exe"="C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2012"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2012 - Autorun"
"C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe"="C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe:*:Enabled:PowerSoccer"
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe"="C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2010"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2010 - Autorun"
"C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe"="C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe:*:Enabled:FIFA 13 Demo"
"C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe"="C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe:*:Enabled:DTX broker"
"C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe"="C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe:*:Enabled:Football Manager 2013 Demo"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=DivX.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.DIVX"=DivX.dll

======List of files/folders created in the last 1 month======

2012-11-06 00:35:33 ----SHD---- C:\Config.Msi
2012-11-02 22:07:50 ----D---- C:\Program Files\8484575754FMFMFMFM13.part1
2012-10-30 17:01:10 ----D---- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
2012-10-24 18:19:57 ----D---- C:\Program Files\minecraft
2012-10-11 12:57:01 ----D---- C:\Program Files\Tennis Elbow 2011-v2
2012-10-07 17:57:39 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Microgaming

======List of files/folders modified in the last 1 month======

2012-11-06 16:19:28 ----D---- C:\Program Files\trend micro
2012-11-06 16:18:55 ----D---- C:\WINDOWS\Prefetch
2012-11-06 16:18:55 ----D---- C:\Program Files\Tennis Elbow 2011
2012-11-06 16:17:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
2012-11-06 16:03:53 ----D---- C:\WINDOWS\system32\LogFiles
2012-11-06 16:03:52 ----D---- C:\WINDOWS\temp
2012-11-06 16:03:52 ----D---- C:\WINDOWS\Logs
2012-11-06 16:03:52 ----D---- C:\WINDOWS
2012-11-06 15:47:36 ----D---- C:\WINDOWS\system32\CatRoot2
2012-11-06 15:46:09 ----D---- C:\Program Files\Steam
2012-11-06 15:44:40 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-11-06 02:23:09 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2012-11-06 01:55:42 ----HD---- C:\WINDOWS\inf
2012-11-06 01:55:18 ----RSD---- C:\WINDOWS\assembly
2012-11-06 01:54:50 ----D---- C:\WINDOWS\system32\DirectX
2012-11-06 00:35:53 ----SHD---- C:\WINDOWS\Installer
2012-11-06 00:35:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-11-05 23:22:11 ----D---- C:\Program Files\Holdem Manager 2
2012-11-05 23:22:11 ----D---- C:\Documents and Settings\Administrator\Data aplikací\HoldemManager
2012-11-05 23:22:06 ----D---- C:\WINDOWS\WinSxS
2012-11-03 15:35:51 ----D---- C:\WINDOWS\system32\config
2012-11-02 22:49:26 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sports Interactive
2012-11-02 22:07:50 ----RD---- C:\Program Files
2012-10-31 18:17:07 ----D---- C:\Documents and Settings\Administrator\Data aplikací\PriceGong
2012-10-31 18:08:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\GamesBar
2012-10-31 16:15:00 ----D---- C:\Program Files\Common Files\Symantec Shared
2012-10-24 17:40:01 ----D---- C:\WINDOWS\system32
2012-10-24 17:39:58 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-10-23 17:16:40 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Party
2012-10-23 17:16:38 ----D---- C:\Program Files\PartyGaming
2012-10-12 16:51:10 ----D---- C:\Program Files\Origin
2012-10-08 22:05:27 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-10-08 13:23:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2012
2012-10-08 11:11:51 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2010
2012-10-08 10:37:18 ----D---- C:\WINDOWS\system32\drivers
2012-10-07 17:47:25 ----D---- C:\Microgaming

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-01-16 94784]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2012-08-25 3333808]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2011-01-16 15592]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-01-16 239368]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-01-16 27576]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-07-30 242240]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-16 31088]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO32\HWiNFO32.SYS []
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-28 6108776]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-05-03 225232]
R3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2011-04-26 26624]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbfilter;AMD USB Filter Driver; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [2009-12-22 30392]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 GridspotVMDriver;GridspotVMDriver; \??\C:\Program Files\Gridspot\VMRuntime\VBoxDrv.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
S3 CFcatchme;CFcatchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CFcatchme.sys []
S3 etdrv;etdrv; \??\C:\WINDOWS\etdrv.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-02-25 1803224]
R2 GridspotService;GridspotService; C:\Program Files\Gridspot\GridspotService.exe [2012-03-20 51568]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 1385896]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2012-06-26 75136]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 -D c:/postgreSQL/data -w []
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
R2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2012-08-25 316888]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-08 250808]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2012-07-19 738152]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravim

Vsak to mate zaliskate jak jetel, tak se ani moc nedivim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Search
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

• Ukoncete vsechny programy
• Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
• Pockejte na dokonceni PreScanu
• Zvolte moznost Prohledat (scan)
• Po dokonceni skenu kliknete na Zpráva (Report)- otevre se log, ten sem vlozte
• Detailni postup vc. obrazku mate zde http://forum.viry.cz/viewtopic.php?f=24&t=120452

ADwcleaner zde:
# AdwCleaner v2.006 - Logfile created 11/06/2012 at 16:45:54
# Updated 30/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Administrator - XYZ-8PB4Y2KQ47T
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Administrator\Plocha\adwcleaner (1).exe
# Option [Search]


***** [Services] *****

Found : ICQ Service

***** [Files / Folders] *****

File Found : C:\Program Files\Mozilla Firefox\.autoreg
File Found : C:\Program Files\Mozilla FireFox\Components\AskSearch.js
File Found : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
File Found : C:\WINDOWS\system32\conduitEngine.tmp
Folder Found : C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\boost_interprocess
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\Babylon
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\OpenCandy
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\PriceGong
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\searchquband
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\Searchqutoolbar
Folder Found : C:\Documents and Settings\Administrator\Data aplikací\ShoppingReport2
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Found : C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Folder Found : C:\Documents and Settings\All Users\Data aplikací\GamesBar
Folder Found : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Folder Found : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Found : C:\Documents and Settings\All Users\Data aplikací\QuestScan
Folder Found : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Folder Found : C:\Documents and Settings\All Users\Nabídka Start\Programy\GamesBar
Folder Found : C:\Program Files\AskSearch
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\GamesBar
Folder Found : C:\Program Files\ICQ6Toolbar
Folder Found : C:\Program Files\Ilivid
Folder Found : C:\Program Files\Searchqu Toolbar
Folder Found : C:\Program Files\Softonic-Eng7
Folder Found : C:\Program Files\uTorrentControl2

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll
Data Found : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll
Key Found : HKCU\Software\AppDataLow\AskBarDis
Key Found : HKCU\Software\AppDataLow\Software
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\PriceGong
Key Found : HKCU\Software\searchqutoolbar
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Softonic-Eng7
Key Found : HKCU\Software\uTorrentControl2
Key Found : HKCU\Toolbar
Key Found : HKLM\Software\AskBarDis
Key Found : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Found : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7F0D0BDD-CE06-4DD2-B731-9BE47C2E1D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
Key Found : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
Key Found : HKLM\SOFTWARE\Classes\sim-packages
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2405280
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\GamesBarSetup
Key Found : HKLM\Software\ilivid
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5472A05B-03B7-47F4-9336-39CE5157380A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{641E508A-566C-41C0-9F9D-C369ECF37A20}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98ADB4A0-93EB-442E-B697-D9770033111C}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1FA4139-0F81-4DBD-B0DC-F50E8A91E473}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestScan
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Softonic-Eng7 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentControl2 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic-Eng7 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Found : HKLM\Software\QuestScan
Key Found : HKLM\Software\SearchquMediabarTb
Key Found : HKLM\Software\Softonic-Eng7
Key Found : HKLM\Software\uTorrentControl2
Key Found : HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
Key Found : HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Found : HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6F282B65-56BF-4BD1-A8B2-A4449A05863D}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchnu.com/406
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&gc=1&q=

*************************

AdwCleaner[R1].txt - [15094 octets] - [06/11/2012 16:45:54]

########## EOF - C:\AdwCleaner[R1].txt - [15155 octets] ##########

-----------------
Teď jdu na ten druhý log a hned ho sem taky šoupnu.

Zde:

RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Administrator [Práva správce]
Mód : Kontrola -- Datum : 11/06/2012 16:49:35

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (:) -> NALEZENO
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD10EARS-003BB1 +++++
--- User ---
[MBR] 140dfc72d7eec47e703df93d897a9ec5
[BSP] b16525f23075c45e974685d669a3c49f : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 953859 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: USB 2.0 USB Flash Drive USB Device +++++
--- User ---
[MBR] 16bb170d881993d75e02499f1e72f5e2
[BSP] dec9f0908d0564afbcbcc26fa1ab4266 : Standard MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 63 | Size: 1927 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[1]_S_11062012_02d1649.txt >>
RKreport[1]_S_11062012_02d1649.txt

Spustte znovu RogueKiller

• Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
• Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
• Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Delete
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Administrator [Práva správce]
Mód : Odebrat -- Datum : 11/06/2012 16:55:09

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (:) -> NEBYLO ODSTRANĚNO, POUŽIJTE PROXYFIX
[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD10EARS-003BB1 +++++
--- User ---
[MBR] 140dfc72d7eec47e703df93d897a9ec5
[BSP] b16525f23075c45e974685d669a3c49f : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 953859 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: USB 2.0 USB Flash Drive USB Device +++++
--- User ---
[MBR] 16bb170d881993d75e02499f1e72f5e2
[BSP] dec9f0908d0564afbcbcc26fa1ab4266 : Standard MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 63 | Size: 1927 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[3]_D_11062012_02d1655.txt >>
RKreport[1]_S_11062012_02d1649.txt ; RKreport[2]_S_11062012_02d1654.txt ; RKreport[3]_D_11062012_02d1655.txt

---------------------
Pak jsem dal oprava host a zpráva a toto je následující log:


RogueKiller V8.2.2 [11/03/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Website: http://tigzy.geekstogo.com/roguekiller.php
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Administrator [Práva správce]
Mód : Oprava HOSTS -- Datum : 11/06/2012 16:56:02

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[4]_H_11062012_02d1656.txt >>
RKreport[1]_S_11062012_02d1649.txt ; RKreport[2]_S_11062012_02d1654.txt ; RKreport[3]_D_11062012_02d1655.txt ; RKreport[4]_H_11062012_02d1656.txt


-------------------------------------------
AdwCleaner jdu spustit, po restartu vložim log.

# AdwCleaner v2.006 - Logfile created 11/06/2012 at 16:58:49
# Updated 30/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Administrator - XYZ-8PB4Y2KQ47T
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Administrator\Plocha\adwcleaner (1).exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : ICQ Service

***** [Files / Folders] *****

Deleted on reboot : C:\Program Files\Searchqu Toolbar
File Deleted : C:\Program Files\Mozilla Firefox\.autoreg
File Deleted : C:\Program Files\Mozilla FireFox\Components\AskSearch.js
File Deleted : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\WINDOWS\system32\conduitEngine.tmp
Folder Deleted : C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\boost_interprocess
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\PriceGong
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\searchquband
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\Searchqutoolbar
Folder Deleted : C:\Documents and Settings\Administrator\Data aplikací\ShoppingReport2
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\GamesBar
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Premium
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\QuestScan
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\SweetIM
Folder Deleted : C:\Documents and Settings\All Users\Nabídka Start\Programy\GamesBar
Folder Deleted : C:\Program Files\AskSearch
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\GamesBar
Folder Deleted : C:\Program Files\ICQ6Toolbar
Folder Deleted : C:\Program Files\Ilivid
Folder Deleted : C:\Program Files\Softonic-Eng7
Folder Deleted : C:\Program Files\uTorrentControl2

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll
Key Deleted : HKCU\Software\AppDataLow\AskBarDis
Key Deleted : HKCU\Software\AppDataLow\Software
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\searchqutoolbar
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Softonic-Eng7
Key Deleted : HKCU\Software\uTorrentControl2
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\Software\AskBarDis
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F0D0BDD-CE06-4DD2-B731-9BE47C2E1D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
Key Deleted : HKLM\SOFTWARE\Classes\sim-packages
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2405280
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\GamesBarSetup
Key Deleted : HKLM\Software\ilivid
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5472A05B-03B7-47F4-9336-39CE5157380A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{641E508A-566C-41C0-9F9D-C369ECF37A20}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98ADB4A0-93EB-442E-B697-D9770033111C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1FA4139-0F81-4DBD-B0DC-F50E8A91E473}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Ask Toolbar_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestScan
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Softonic-Eng7 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentControl2 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9E3BE2AC-D0A2-47AB-ABCC-B642B68705A4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic-Eng7 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Deleted : HKLM\Software\QuestScan
Key Deleted : HKLM\Software\SearchquMediabarTb
Key Deleted : HKLM\Software\Softonic-Eng7
Key Deleted : HKLM\Software\uTorrentControl2
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6F282B65-56BF-4BD1-A8B2-A4449A05863D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchnu.com/406 --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&gc=1&q= --> hxxp://www.google.com

*************************

AdwCleaner[R1].txt - [15225 octets] - [06/11/2012 16:45:54]
AdwCleaner[S1].txt - [14813 octets] - [06/11/2012 16:58:49]

########## EOF - C:\AdwCleaner[S1].txt - [14874 octets] ##########

Poprosim o novy log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-11-06 17:27:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 622 GB (65%) free of 954 GB
Total RAM: 3325 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:28:42, on 6.11.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\YourFileDownloader\YourFileUpdater.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Gridspot\GridspotService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Administrator\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Administrator.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedi ... &gc=1&q=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [DivX Download Manager] "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [MediaGet2] C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe --minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SearchEngineProtection] C:\Program Files\Gamesbar\SearchEngineProtection.exe
O4 - HKCU\..\Run: [PokerStrategy.com SideKick] "C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-21-790525478-113007714-725345543-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'postgres')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Mummys Gold Casino - {19ED622B-017A-4A86-AE8A-1E2EFEDCE9AF} - C:\Microgaming\Casino\MummysGoldCasino\casinogame.exe (HKCU)
O9 - Extra button: PartyGammon.com - {59A861EE-32B3-42cd-8CCA-FC130EDF3A44} - C:\Documents and Settings\Administrator\Plocha\PartyGammon.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: PartyGammon.com - {59A861EE-32B3-42cd-8CCA-FC130EDF3A44} - C:\Documents and Settings\Administrator\Plocha\PartyGammon.lnk (file missing) (HKCU)
O9 - Extra button: Unibet - {6672BCBA-B888-4766-85ED-8263922B804E} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O9 - Extra button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Documents and Settings\Administrator\Plocha\PartyCasino.lnk (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Documents and Settings\Administrator\Plocha\PartyCasino.lnk (file missing) (HKCU)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\WINDOWS\System32\appdrvrem01.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GridspotService - Gridspot - C:\Program Files\Gridspot\GridspotService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) - PostgreSQL Global Development Group - c:/postgreSQL/bin/pg_ctl.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 13677 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Norton Security Scan for Administrator.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\tasks\Your File Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default

prefs.js - "browser.startup.homepage" - "http://www.searchnu.com/406"
prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.1, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, {EEE6C361-6118-11DC-9C72-001320C79847}:1.3.0.1, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:6.1.0.10441, gamesbar@oberon-media.com:1.2.1.98, {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0, {687578b9-7132-4a7a-80e4-30ee31099e03}:10.10.20.14, {99079a25-328f-4bd4-be04-00955acaa0a7}:4.6.1.01"
prefs.js - "keyword.URL" - "http://dts.search-results.com/sr?src=ff ... 06&sr=0&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0]
"Description"=DivX OVS Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0]
"Description"=npganymedenet
"Path"=C:\Program Files\Ganymede\Plugins\npganymedenet.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@oberon-media.com/ONCAdapter]
"Description"=Oberon com adapter plugin
"Path"=C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsILegitCheckPlugin.xpt
nsINIProcessor.js
nsIQTScriptablePlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npganymedenet.dll
npganymedenet.xpt
npLegitCheckPlugin.dll
npnul32.dll
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
bingober45669765.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\
gamesbar@oberon-media.com
{20a82645-c095-46ed-80e3-08825760534b}
{687578b9-7132-4a7a-80e4-30ee31099e03}
{800b5000-a755-47e1-992b-48a1c1357f07}
{99079a25-328f-4bd4-be04-00955acaa0a7}
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\
conduit.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin.xml
Search_Results.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}]
GamesBarBHO Class - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-10-15 375000]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-02-25 2548552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-12-09 1226608]
"DivX Download Manager"=C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2008-02-12 536576]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-11-29 421888]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-28 19557480]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=C:\Program Files\Steam\Steam.exe [2012-08-06 1353080]
"MediaGet2"=C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe [2012-04-01 8138472]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-07-13 17418928]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SearchEngineProtection"=C:\Program Files\Gamesbar\SearchEngineProtection.exe []
"PokerStrategy.com SideKick"=C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms [2011-12-28 450]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2012-07-26 895376]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-01-09 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2011-01-19 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGet2]
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe [2012-04-01 8138472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2009-03-15 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeechGrid]
C:\Program Files\SpeechGrid\SpeechGrid.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011"
"C:\Program Files\FlightGear\bin\Win32\fgfs.exe"="C:\Program Files\FlightGear\bin\Win32\fgfs.exe:*:Enabled:fgfs"
"C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe"="C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe:*:Enabled:Big Match Striker"
"C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe"="C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe:*:Enabled:BigMatchStriker"
"C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe"="C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe:*:Enabled:UDK"
"C:\Program Files\Clonk Rage\Clonk.exe"="C:\Program Files\Clonk Rage\Clonk.exe:*:Enabled:Clonk Rage"
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe"="C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2011"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2011 - Autorun"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Cossacks\dmcr.exe"="C:\Program Files\Cossacks\dmcr.exe:*:Enabled:dmcr"
"C:\Program Files\Warzone 2100\warzone2100.exe"="C:\Program Files\Warzone 2100\warzone2100.exe:*:Enabled:Warzone 2100"
"C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe"="C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe:*:Enabled:Porsche"
"C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe"="C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe:*:Enabled:Football Manager 2012 Demo"
"C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE"="C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE:*:Enabled:RCT"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe"="C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe:*:Enabled:BattleForge™ Launcher"
"C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe"="C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe:*:Enabled:BattleForge™"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\YourFileDownloader\Downloader.exe"="C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\YourFileDownloader\YourFile.exe"="C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Tunngle\TnglCtrl.exe"="C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service"
"C:\Program Files\Tunngle\Tunngle.exe"="C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2012"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2012 - Autorun"
"C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe"="C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe:*:Enabled:PowerSoccer"
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe"="C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2010"
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe"="C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2010 - Autorun"
"C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe"="C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe:*:Enabled:FIFA 13 Demo"
"C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe"="C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe:*:Enabled:DTX broker"
"C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe"="C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe:*:Enabled:Football Manager 2013 Demo"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=DivX.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.DIVX"=DivX.dll

======List of files/folders created in the last 1 month======

2012-11-06 16:58:49 ----A---- C:\AdwCleaner[S1].txt
2012-11-06 16:45:54 ----A---- C:\AdwCleaner[R1].txt
2012-11-06 00:35:33 ----SHD---- C:\Config.Msi
2012-11-02 22:07:50 ----D---- C:\Program Files\8484575754FMFMFMFM13.part1
2012-10-30 17:01:10 ----D---- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
2012-10-24 18:19:57 ----D---- C:\Program Files\minecraft
2012-10-11 12:57:01 ----D---- C:\Program Files\Tennis Elbow 2011-v2
2012-10-07 17:57:39 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Microgaming

======List of files/folders modified in the last 1 month======

2012-11-06 17:28:33 ----D---- C:\Program Files\trend micro
2012-11-06 17:28:06 ----D---- C:\WINDOWS\Prefetch
2012-11-06 17:27:32 ----D---- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
2012-11-06 17:11:45 ----D---- C:\WINDOWS\system32\CatRoot2
2012-11-06 17:10:07 ----D---- C:\WINDOWS\temp
2012-11-06 17:09:55 ----D---- C:\Program Files\Steam
2012-11-06 17:07:49 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-11-06 17:01:21 ----D---- C:\WINDOWS
2012-11-06 17:01:09 ----D---- C:\WINDOWS\system32\LogFiles
2012-11-06 17:00:49 ----RD---- C:\Program Files
2012-11-06 16:59:04 ----D---- C:\WINDOWS\system32
2012-11-06 16:59:04 ----D---- C:\Program Files\Mozilla Firefox
2012-11-06 16:58:19 ----D---- C:\WINDOWS\system32\drivers
2012-11-06 16:46:38 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2012-11-06 16:43:55 ----D---- C:\Program Files\Tennis Elbow 2011
2012-11-06 16:03:52 ----D---- C:\WINDOWS\Logs
2012-11-06 01:55:48 ----D---- C:\WINDOWS\system32\DirectX
2012-11-06 01:55:42 ----HD---- C:\WINDOWS\inf
2012-11-06 01:55:18 ----RSD---- C:\WINDOWS\assembly
2012-11-06 00:35:53 ----SHD---- C:\WINDOWS\Installer
2012-11-06 00:35:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-11-05 23:22:11 ----D---- C:\Program Files\Holdem Manager 2
2012-11-05 23:22:11 ----D---- C:\Documents and Settings\Administrator\Data aplikací\HoldemManager
2012-11-05 23:22:06 ----D---- C:\WINDOWS\WinSxS
2012-11-03 15:35:51 ----D---- C:\WINDOWS\system32\config
2012-11-02 22:49:26 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sports Interactive
2012-10-31 16:15:00 ----D---- C:\Program Files\Common Files\Symantec Shared
2012-10-24 17:39:58 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-10-23 17:16:40 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Party
2012-10-23 17:16:38 ----D---- C:\Program Files\PartyGaming
2012-10-12 16:51:10 ----D---- C:\Program Files\Origin
2012-10-08 22:05:27 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-10-08 13:23:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2012
2012-10-08 11:11:51 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2010
2012-10-07 17:47:25 ----D---- C:\Microgaming

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-01-16 94784]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 appdrv01;Application Driver (01); C:\WINDOWS\System32\Drivers\appdrv01.sys [2012-08-25 3333808]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2011-01-16 15592]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-01-16 239368]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-01-16 27576]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-07-30 242240]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-16 31088]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Program Files\HWiNFO32\HWiNFO32.SYS []
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-28 6108776]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-05-03 225232]
R3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2011-04-26 26624]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbfilter;AMD USB Filter Driver; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [2009-12-22 30392]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 GridspotVMDriver;GridspotVMDriver; \??\C:\Program Files\Gridspot\VMRuntime\VBoxDrv.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
S3 CFcatchme;CFcatchme; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CFcatchme.sys []
S3 etdrv;etdrv; \??\C:\WINDOWS\etdrv.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-02-25 1803224]
R2 GridspotService;GridspotService; C:\Program Files\Gridspot\GridspotService.exe [2012-03-20 51568]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 1385896]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NMSAccess;NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2012-06-26 75136]
R2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4; c:/postgreSQL/bin/pg_ctl.exe runservice -N postgresql-8.4 -D c:/postgreSQL/data -w []
R2 Skype C2C Service;Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
R2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\WINDOWS\System32\appdrvrem01.exe [2012-08-25 316888]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-08 250808]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2012-07-19 738152]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL.txt:


OTL logfile created on: 6.11.2012 17:47:32 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,25 Gb Available Physical Memory | 69,40% Memory free
5,04 Gb Paging File | 3,77 Gb Available in Paging File | 74,72% Paging File free
Paging file location(s): C:\pagefile.sys 2000 4000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 931,50 Gb Total Space | 607,79 Gb Free Space | 65,25% Space Free | Partition Type: NTFS
Drive E: | 1,95 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 1,88 Gb Total Space | 0,06 Gb Free Space | 3,41% Space Free | Partition Type: FAT

Computer Name: XYZ-8PB4Y2KQ47T | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.11.06 17:45:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
PRC - [2012.10.02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012.08.29 11:03:38 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.08.29 11:03:36 | 001,385,896 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012.08.06 09:03:54 | 001,353,080 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2012.07.26 18:16:08 | 000,245,168 | ---- | M] (http://yourfiledownloader.com) -- C:\Program Files\YourFileDownloader\YourFileUpdater.exe
PRC - [2012.07.26 17:09:25 | 000,895,376 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2012.07.10 05:09:02 | 001,250,328 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2012.03.20 02:09:04 | 000,051,568 | ---- | M] (Gridspot) -- C:\Program Files\Gridspot\GridspotService.exe
PRC - [2011.02.25 15:46:22 | 002,548,552 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2011.02.25 15:46:19 | 001,803,224 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2011.01.28 06:15:33 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) -- c:\postgreSQL\bin\pg_ctl.exe
PRC - [2011.01.28 06:13:43 | 004,538,368 | ---- | M] (PostgreSQL Global Development Group) -- c:\postgreSQL\bin\postgres.exe
PRC - [2010.12.09 20:28:24 | 001,226,608 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010.12.08 22:15:44 | 000,063,360 | ---- | M] (DivX, LLC) -- C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe
PRC - [2010.03.04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009.10.15 14:06:42 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.02.12 12:44:52 | 000,536,576 | ---- | M] () -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe


========== Modules (No Company Name) ==========

MOD - [2012.10.25 09:46:07 | 020,317,008 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2012.10.25 09:45:46 | 000,902,480 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2012.10.25 09:45:45 | 000,190,816 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll
MOD - [2012.10.25 09:45:45 | 000,123,232 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll
MOD - [2012.10.25 09:45:44 | 001,099,616 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll
MOD - [2012.08.20 20:04:16 | 004,051,456 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\SwiftShader\1.0.1.3\libGLESv2.dll
MOD - [2012.08.20 20:04:16 | 000,100,864 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\SwiftShader\1.0.1.3\libEGL.dll
MOD - [2012.07.10 05:09:00 | 000,438,296 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\20.0.1132.57\ppgooglenaclpluginchrome.dll
MOD - [2012.07.10 05:08:59 | 003,972,120 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\20.0.1132.57\pdf.dll
MOD - [2012.07.10 05:07:22 | 000,140,328 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\20.0.1132.57\avutil-51.dll
MOD - [2012.07.10 05:07:21 | 000,262,184 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\20.0.1132.57\avformat-54.dll
MOD - [2012.07.10 05:07:19 | 002,386,984 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\Application\20.0.1132.57\avcodec-54.dll
MOD - [2012.04.12 11:52:45 | 011,817,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\db1d2470de43ffcb6f562277208d56e5\System.Web.ni.dll
MOD - [2012.04.12 11:52:31 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\56e433394df8d44e43690a855e403555\System.ServiceProcess.ni.dll
MOD - [2012.04.12 10:08:38 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d96906db18e87ffe2e08f6cda7e2be0f\System.Windows.Forms.ni.dll
MOD - [2012.04.12 00:30:37 | 001,591,808 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\8d886cdc2ca5f0ff97cd1afe8773bb6e\System.Drawing.ni.dll
MOD - [2012.04.12 00:28:07 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2012.02.17 14:03:33 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
MOD - [2012.02.17 13:58:34 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
MOD - [2012.02.17 13:53:01 | 007,953,408 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
MOD - [2011.10.14 11:53:38 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll
MOD - [2011.10.13 23:50:57 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
MOD - [2011.09.26 16:17:21 | 000,011,776 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.dll
MOD - [2011.09.26 16:17:21 | 000,008,704 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.dll
MOD - [2011.09.26 16:17:21 | 000,007,680 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3693.42556__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.dll
MOD - [2011.09.26 16:17:21 | 000,007,680 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.dll
MOD - [2011.09.26 16:17:20 | 000,290,816 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3693.42442__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:20 | 000,204,800 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:20 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3693.42456__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:20 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3693.42451__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:19 | 001,728,512 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:19 | 000,077,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3693.42517__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:18 | 000,069,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3693.42499__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:18 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:17 | 000,491,520 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:17 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3693.42450__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:16 | 000,139,264 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:16 | 000,106,496 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:15 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:14 | 000,364,544 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:14 | 000,094,208 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:14 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3693.42503__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:07 | 000,811,008 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3693.42488__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:07 | 000,405,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3693.42512__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
MOD - [2011.09.26 16:17:07 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:06 | 000,225,280 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:06 | 000,126,976 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:06 | 000,036,864 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:05 | 000,712,704 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3693.42452__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:05 | 000,589,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:05 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3693.42466__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:04 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3693.42497__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:03 | 000,450,560 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3693.42482__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:03 | 000,438,272 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2011.09.26 16:17:03 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:02 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2011.09.26 16:17:00 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
MOD - [2011.09.26 16:17:00 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3309.28608__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
MOD - [2011.09.26 16:17:00 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3309.28629__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll
MOD - [2011.09.26 16:17:00 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3309.28645__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll
MOD - [2011.09.26 16:17:00 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3309.28627__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
MOD - [2011.09.26 16:16:59 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
MOD - [2011.09.26 16:16:59 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
MOD - [2011.09.26 16:16:58 | 000,007,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
MOD - [2011.09.26 16:16:56 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.3309.28601__90ba9c70f846762e\LOG.Foundation.dll
MOD - [2011.09.26 16:16:56 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3309.28603__90ba9c70f846762e\NEWAEM.Foundation.dll
MOD - [2011.09.26 16:16:56 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.3309.28626__90ba9c70f846762e\MOM.Foundation.dll
MOD - [2011.09.26 16:16:55 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3309.28630__90ba9c70f846762e\DEM.OS.I0602.dll
MOD - [2011.09.26 16:16:55 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.3309.28645__90ba9c70f846762e\DEM.OS.dll
MOD - [2011.09.26 16:16:55 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
MOD - [2011.09.26 16:16:54 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
MOD - [2011.09.26 16:16:54 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.3309.28630__90ba9c70f846762e\DEM.Graphics.dll
MOD - [2011.09.26 16:16:54 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
MOD - [2011.09.26 16:16:53 | 000,073,728 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.3309.28604__90ba9c70f846762e\CLI.Foundation.dll
MOD - [2011.09.26 16:16:53 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3309.28669__90ba9c70f846762e\CLI.Foundation.XManifest.dll
MOD - [2011.09.26 16:16:53 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3309.28620__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
MOD - [2011.09.26 16:16:53 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
MOD - [2011.09.26 16:16:52 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3309.28618__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
MOD - [2011.09.26 16:16:52 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3309.28611__90ba9c70f846762e\CLI.Component.Client.Shared.dll
MOD - [2011.09.26 16:16:52 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
MOD - [2011.09.26 16:16:52 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
MOD - [2011.09.26 16:16:52 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2011.09.26 16:16:51 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2011.09.26 16:16:51 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
MOD - [2011.09.26 16:16:51 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll
MOD - [2011.09.26 16:16:48 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2011.09.26 16:16:48 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3309.28632__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2011.09.26 16:16:48 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3309.28635__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2011.09.26 16:16:48 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2011.09.26 16:16:47 | 000,065,536 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2011.09.26 16:16:47 | 000,049,152 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2011.09.26 16:16:47 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3309.28624__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2011.09.26 16:16:47 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2011.09.26 16:16:46 | 000,053,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2011.09.26 16:16:46 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2011.09.26 16:16:46 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3309.28627__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2011.09.26 16:16:45 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
MOD - [2011.09.26 16:16:45 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.3309.28626__90ba9c70f846762e\APM.Foundation.dll
MOD - [2011.09.26 16:16:45 | 000,016,384 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Server.Shared.dll
MOD - [2011.09.26 16:16:44 | 000,503,808 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3693.42564__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll
MOD - [2011.09.26 16:16:44 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3693.42545__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
MOD - [2011.09.26 16:16:43 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3309.28612__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll
MOD - [2011.09.26 16:16:43 | 000,014,848 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll
MOD - [2011.09.26 16:16:43 | 000,013,312 | ---- | M] () -- C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll
MOD - [2011.09.26 16:16:43 | 000,007,168 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3693.42437__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
MOD - [2011.09.26 16:16:42 | 000,106,496 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3693.42531__90ba9c70f846762e\MOM.Implementation.dll
MOD - [2011.09.26 16:16:42 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3693.42530__90ba9c70f846762e\LOG.Foundation.Implementation.dll
MOD - [2011.09.26 16:16:42 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3309.28614__90ba9c70f846762e\LOG.Foundation.Private.dll
MOD - [2011.09.26 16:16:42 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3309.28626__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
MOD - [2011.09.26 16:16:41 | 000,544,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3693.42525__90ba9c70f846762e\CLI.Component.Systemtray.dll
MOD - [2011.09.26 16:16:41 | 000,405,504 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3693.42455__90ba9c70f846762e\CLI.Component.Wizard.dll
MOD - [2011.09.26 16:16:41 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3309.28608__90ba9c70f846762e\CLI.Foundation.Private.dll
MOD - [2011.09.26 16:16:41 | 000,024,576 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3309.28627__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
MOD - [2011.09.26 16:16:40 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3693.42440__90ba9c70f846762e\CLI.Component.Runtime.dll
MOD - [2011.09.26 16:16:40 | 000,057,344 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3693.42441__90ba9c70f846762e\CLI.Component.SkinFactory.dll
MOD - [2011.09.26 16:16:40 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3309.28628__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
MOD - [2011.09.26 16:16:38 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3309.28624__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
MOD - [2011.09.26 16:16:37 | 001,142,784 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3693.42446__90ba9c70f846762e\CLI.Component.Dashboard.dll
MOD - [2011.09.26 16:16:37 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3309.28621__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
MOD - [2011.09.26 16:16:36 | 000,028,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3693.42531__90ba9c70f846762e\CCC.Implementation.dll
MOD - [2011.09.26 16:16:36 | 000,020,480 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3309.28637__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
MOD - [2011.09.26 16:16:35 | 000,081,920 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.3693.42440__90ba9c70f846762e\ATIDEMOS.dll
MOD - [2011.09.26 16:16:35 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3693.42439__90ba9c70f846762e\APM.Server.dll
MOD - [2011.09.26 16:16:35 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3693.42438__90ba9c70f846762e\AEM.Server.dll
MOD - [2011.09.26 16:16:35 | 000,032,768 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
MOD - [2011.01.16 22:07:58 | 000,643,912 | ---- | M] () -- C:\Program Files\COMODO\COMODO Internet Security\scanners\scrtemu.cav
MOD - [2010.12.09 20:29:16 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2010.12.09 20:28:24 | 001,226,608 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010.04.11 18:48:06 | 000,327,680 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2010.03.15 11:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010.03.04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
MOD - [2009.11.24 12:36:36 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2009.06.27 10:11:12 | 000,503,202 | ---- | M] () -- C:\Program Files\DeviceVM\Browser Configuration Utility\sqlite3.dll
MOD - [2008.02.12 12:44:52 | 000,536,576 | ---- | M] () -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
MOD - [2006.08.16 06:05:49 | 000,049,152 | R--- | M] () -- C:\WINDOWS\system32\WIASTIIO.dll
MOD - [2006.08.16 06:05:48 | 000,106,496 | R--- | M] () -- C:\WINDOWS\system32\WIAIPH.dll
MOD - [2006.08.16 06:05:48 | 000,081,920 | R--- | M] () -- C:\WINDOWS\system32\WIAEH.dll
MOD - [2006.08.16 06:05:47 | 000,057,344 | R--- | M] () -- C:\WINDOWS\system32\Sswiadrv.dll


========== Services (SafeList) ==========

SRV - [2012.10.08 22:05:28 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.10.02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.08.29 11:03:36 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.08.25 22:56:33 | 000,316,888 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\WINDOWS\System32\appdrvrem01.exe -- (appdrvrem01)
SRV - [2012.07.19 17:08:04 | 000,738,152 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012.06.07 18:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.03.20 02:09:04 | 000,051,568 | ---- | M] (Gridspot) [Auto | Running] -- C:\Program Files\Gridspot\GridspotService.exe -- (GridspotService)
SRV - [2011.03.16 09:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.02.25 15:46:19 | 001,803,224 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2011.01.28 06:15:33 | 000,066,048 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- c:\postgreSQL\bin\pg_ctl.exe -- (postgresql-8.4)
SRV - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\WINDOWS\system32\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2010.03.04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2009.10.15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\Drivers\SSPORT.sys -- (SSPORT)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\Gridspot\VMRuntime\VBoxDrv.sys -- (GridspotVMDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CFcatchme.sys -- (CFcatchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2012.08.25 22:56:34 | 003,333,808 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\appdrv01.sys -- (appdrv01)
DRV - [2012.07.30 11:41:48 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012.03.14 21:50:29 | 000,024,944 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GVTDrv.sys -- (GVTDrv)
DRV - [2012.03.14 21:48:36 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2011.05.22 21:51:26 | 000,020,216 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Program Files\HWiNFO32\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2011.04.26 10:21:06 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tap0901.sys -- (tap0901)
DRV - [2011.01.16 22:07:37 | 000,094,784 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\inspect.sys -- (Inspect)
DRV - [2011.01.16 22:07:37 | 000,027,576 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011.01.16 22:07:36 | 000,239,368 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2011.01.16 22:07:36 | 000,015,592 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd)
DRV - [2011.01.09 13:44:26 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\etdrv.sys -- (etdrv)
DRV - [2010.07.28 11:27:36 | 006,108,776 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2010.05.03 07:49:18 | 000,225,232 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2010.04.27 11:56:44 | 000,019,496 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AppleCharger.sys -- (AppleCharger)
DRV - [2010.02.11 08:38:10 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010.01.29 11:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2009.12.22 02:26:36 | 000,030,392 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbfilter.sys -- (usbfilter)
DRV - [2009.11.18 00:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009.11.18 00:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009.11.12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009.09.16 07:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tap0901t.sys -- (tap0901t)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.03.15 11:25:46 | 000,056,268 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2008.01.24 02:25:21 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp)
DRV - [2007.04.16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}


IE - HKU\.DEFAULT\..\URLSearchHook: - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-790525478-113007714-725345543-1010\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-790525478-113007714-725345543-1010\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{134A4E65-60BC-4f27-8996-BF9FEFAF87F6}: "URL" = http://search.yahoo.com/search?p={searc ... type=STDVM
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{36377DD7-B3EB-42f5-986F-680BAF59BA9D}: "URL" = http://start.msn.iplay.com/searchresult ... earchTerms}
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{9EEBF001-1719-4426-83C1-8E08A0AD5299}: "URL" = http://www.bing.com/search?q={searchTer ... R2&pc=SPLH
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{D5545205-8F69-4b37-90BB-D9DF0CE64C27}: "URL" = http://www.google.com/cse?cx=partner-pu ... 4067623346
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :

========== FireFox ==========

FF - prefs.js..CT3072253.browser.search.defaultthis.engineName: true
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "http://www.searchnu.com/406"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.3.0.1
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:6.1.0.10441
FF - prefs.js..extensions.enabledItems: gamesbar@oberon-media.com:1.2.1.98
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..extensions.enabledItems: {687578b9-7132-4a7a-80e4-30ee31099e03}:10.10.20.14
FF - prefs.js..extensions.enabledItems: {99079a25-328f-4bd4-be04-00955acaa0a7}:4.6.1.01
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ff ... 06&sr=0&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://start.icq.com/"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://dts.search-results.com/sr?src=ff ... 06&sr=0&q="
FF - prefs.js..browser.search.order.1: "Search Results"

FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port:
FF - user.js..network.proxy.no_proxies_on: ""

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\DOCUME~1\ADMINI~1\DATAAP~1\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.23\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.11.06 16:59:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.23\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.12.01 01:15:12 | 000,000,000 | ---D | M]

[2012.09.16 12:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Extensions
[2011.01.12 16:37:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\extensions
[2011.01.12 16:37:35 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2012.09.16 12:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions
[2011.02.11 11:25:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.07.26 17:10:26 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2011.01.19 14:14:50 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.09.16 12:20:21 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2012.01.18 19:21:15 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012.04.30 21:29:21 | 000,000,000 | ---D | M] (Oberon GamesBar) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\gamesbar@oberon-media.com
[2012.08.09 13:58:43 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\conduit.xml
[2012.04.25 09:10:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin-1.xml
[2012.01.18 20:20:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin-2.xml
[2011.11.07 01:26:39 | 000,001,056 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin.xml
[2012.09.16 12:19:38 | 000,002,519 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\Search_Results.xml
[2012.01.18 19:20:49 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\sweetim.xml
[2012.09.16 12:20:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012.11.06 00:35:38 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.07.14 09:22:44 | 000,120,984 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll
[2012.04.30 21:29:44 | 000,002,064 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bingober45669765.xml
[2011.12.01 01:15:06 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2011.12.01 01:15:06 | 000,001,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mall-cz.xml
[2011.12.01 01:15:06 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2011.12.01 01:15:06 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2011.12.01 01:15:06 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage: http://www.searchnu.com/406
CHR - default_search_provider: Search Results (Enabled)
CHR - default_search_provider: search_url = http://dts.search-results.com/sr?src=cr ... earchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://www.searchnu.com/406
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_268.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Battlefield Play4Free Updater (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\npBP4FUpdater.dll
CHR - plugin: Battlefield Play4Free Updater (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\BP4FUpdater.exe
CHR - plugin: EA Battlefield Heroes Updater (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.145.0_0\npBFHUpdater.dll
CHR - plugin: EA Battlefield Heroes Updater (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.145.0_0\BFHUpdater.exe
CHR - plugin: Skype Click to Call (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.1.0.10441_0\npSkypeChromePlugin.dll
CHR - plugin: Conduit Chrome Plugin (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\plugins/ConduitChromeApiPlugin.dll
CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\plugins\npganymedenet.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Unity Player (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Oberon com adapter (Enabled) = C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll
CHR - plugin: DivX OVS Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Battlefield Play4Free = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\
CHR - Extension: DivX HiQ = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae\2.1.0.900_0\
CHR - Extension: Battlefield Heroes = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.145.0_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.0.900_0\
CHR - Extension: Battlefield Play4Free = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.80.5_0\
CHR - Extension: uTorrentControl2 = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\
CHR - Extension: Gmail = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.11.06 16:56:02 | 000,000,019 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (GamesBarBHO Class) - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-790525478-113007714-725345543-500\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKU\S-1-5-21-790525478-113007714-725345543-500\..\Toolbar\ShellBrowser: (no name) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No CLSID value found.
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [DivX Download Manager] C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [MediaGet2] C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe (MediaGet LLC)
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [PokerStrategy.com SideKick] "C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms" File not found
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [SearchEngineProtection] C:\Program Files\Gamesbar\SearchEngineProtection.exe File not found
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-790525478-113007714-725345543-500..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-790525478-113007714-725345543-1010\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-790525478-113007714-725345543-1010\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-790525478-113007714-725345543-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Administrator\Plocha\PartyPoker.lnk ()
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7B4B7628-EFFB-432D-8D4E-CAB999E344AD}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) - C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Dokumenty\Obrázky\Bez názvu.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Dokumenty\Obrázky\Bez názvu.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.01.08 08:16:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

2.část, musel sem to rozdělit:

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivXNetworks, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.FMVC - C:\WINDOWS\System32\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\DivX.dll (DivXNetworks, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.11.06 17:45:07 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.11.06 16:48:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Plocha\RK_Quarantine
[2012.11.06 16:04:03 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2012.11.06 00:35:33 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012.11.02 22:07:50 | 000,000,000 | ---D | C] -- C:\Program Files\8484575754FMFMFMFM13.part1
[2012.11.02 13:09:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Football Manager 2013 MULTi13-FULL UNLOCKED
[2009.09.04 18:01:10 | 000,525,656 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DXSETUP.exe
[2009.09.04 18:01:08 | 001,691,464 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll
[2009.09.04 18:01:08 | 000,094,024 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.11.06 18:08:03 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.11.06 18:05:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.11.06 17:54:55 | 000,000,482 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
[2012.11.06 17:45:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2012.11.06 17:08:49 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2012.11.06 17:08:40 | 000,000,316 | ---- | M] () -- C:\WINDOWS\tasks\Your File Updater.job
[2012.11.06 17:08:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.11.06 16:48:19 | 000,430,592 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2012.11.06 16:44:17 | 000,540,977 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner (1).exe
[2012.11.06 15:25:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.11.02 13:07:47 | 000,011,876 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\Football Manager 2013 MULTi13-FULL UNLOCKED_SKIDROWGAMES.NET.torrent
[2012.10.31 23:04:25 | 000,117,603 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\unibet9.JPG
[2012.10.31 22:32:19 | 000,117,428 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\unibet7.JPG
[2012.10.31 22:29:30 | 000,216,833 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\unibet5.JPG
[2012.10.31 16:19:27 | 000,000,418 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Administrator.job
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.11.06 18:08:03 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.11.06 16:48:18 | 000,430,592 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2012.11.06 16:44:12 | 000,540,977 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner (1).exe
[2012.11.02 13:07:47 | 000,011,876 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\Football Manager 2013 MULTi13-FULL UNLOCKED_SKIDROWGAMES.NET.torrent
[2012.10.31 23:04:25 | 000,117,603 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\unibet9.JPG
[2012.10.31 22:32:19 | 000,117,428 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\unibet7.JPG
[2012.10.31 22:29:30 | 000,216,833 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\unibet5.JPG
[2012.08.15 18:39:29 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2012.07.28 19:13:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\Access.dat
[2012.06.06 15:32:21 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.06.06 15:32:21 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Administrator\Data aplikací\PnkBstrK.sys
[2012.06.06 15:32:00 | 000,270,240 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012.06.06 15:31:56 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012.05.31 18:21:05 | 000,311,714 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-790525478-113007714-725345543-1012-0.dat
[2012.05.03 20:23:28 | 000,001,042 | ---- | C] () -- C:\WINDOWS\EReg072.dat
[2012.04.07 10:51:50 | 000,004,877 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\bltofzsb.qlf
[2012.03.13 19:44:26 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.03.13 19:44:26 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.03.13 19:44:26 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.03.13 19:44:26 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.03.13 19:44:26 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.02.24 22:35:35 | 000,000,472 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2012.02.16 16:14:32 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.01 22:39:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\HMHud.INI
[2011.12.29 02:58:21 | 005,757,000 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-790525478-113007714-725345543-500-0.dat
[2011.12.29 02:58:20 | 000,312,178 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.12.18 23:44:41 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2011.12.18 23:44:41 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2011.12.18 23:44:41 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2011.12.18 23:44:41 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2011.12.10 21:00:15 | 000,000,089 | ---- | C] () -- C:\WINDOWS\CIV.INI
[2011.09.07 17:12:21 | 000,000,379 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\postgresinstall.bat
[2011.07.28 16:49:12 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll
[2011.06.17 20:20:47 | 000,000,379 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2011.04.07 14:41:50 | 000,036,864 | ---- | C] () -- C:\WINDOWS\Algouinstall.exe
[2011.02.18 10:23:56 | 000,015,360 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.18 10:18:05 | 000,717,096 | ---- | C] () -- C:\WINDOWS\RON 2010 ENGLISH DL Uninstaller.exe
[2011.01.18 21:24:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.01.14 23:02:54 | 000,073,408 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\SRDownloader.err
[2011.01.14 23:00:56 | 000,000,960 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\SRDownloader.nast
[2011.01.10 12:29:50 | 000,008,993 | ---- | C] () -- C:\Documents and Settings\Administrator\Data aplikací\SmarThruOptions.xml
[2011.01.10 12:29:39 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2011.01.10 12:29:00 | 000,000,124 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2011.01.10 12:28:56 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2011.01.10 12:27:28 | 000,479,232 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2011.01.10 12:26:46 | 000,110,592 | ---- | C] () -- C:\WINDOWS\Wiainst.exe
[2011.01.10 12:26:46 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\WIASTIIO.dll
[2011.01.10 12:26:45 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\WIAIPH.dll
[2011.01.10 12:26:45 | 000,081,920 | R--- | C] () -- C:\WINDOWS\System32\WIAEH.dll
[2011.01.10 12:26:45 | 000,057,344 | R--- | C] () -- C:\WINDOWS\System32\Sswiadrv.dll
[2011.01.09 10:39:44 | 000,080,416 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2011.01.08 19:21:11 | 000,000,390 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011.01.08 14:49:48 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011.01.08 14:49:48 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011.01.08 14:49:47 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011.01.08 14:49:46 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011.01.08 14:49:46 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011.01.08 14:44:14 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011.01.08 14:32:53 | 001,474,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2011.01.08 14:15:02 | 000,024,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2011.01.08 14:00:37 | 000,031,272 | ---- | C] () -- C:\WINDOWS\System32\AppleChargerSrv.exe
[2011.01.08 14:00:37 | 000,019,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\AppleCharger.sys
[2011.01.08 13:54:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011.01.08 13:52:05 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011.01.08 13:51:57 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011.01.08 13:51:56 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2011.01.08 13:51:56 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011.01.08 13:51:56 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.01.08 13:40:56 | 000,207,400 | R--- | C] () -- C:\WINDOWS\GSetup.exe
[2011.01.08 13:40:56 | 000,000,010 | ---- | C] () -- C:\WINDOWS\GSetup.ini
[2011.01.08 08:17:48 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.01.08 08:14:13 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011.01.08 06:08:13 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.01.08 06:07:23 | 000,294,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.06.10 14:42:58 | 123,504,223 | ---- | C] () -- C:\Program Files\openofficeorg1.cab
[2010.06.10 14:37:18 | 003,074,560 | ---- | C] () -- C:\Program Files\openofficeorg32.msi
[2010.06.10 14:37:18 | 000,000,290 | ---- | C] () -- C:\Program Files\setup.ini
[2009.09.04 18:01:20 | 001,550,796 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x86.cab
[2009.09.04 18:01:20 | 001,412,894 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x64.cab
[2009.09.04 18:01:20 | 001,127,209 | ---- | C] () -- C:\Program Files\OCT2006_d3dx9_31_x86.cab
[2009.09.04 18:01:20 | 000,994,154 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x64.cab
[2009.09.04 18:01:20 | 000,273,960 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x64.cab
[2009.09.04 18:01:20 | 000,272,603 | ---- | C] () -- C:\Program Files\Nov2008_XAudio_x86.cab
[2009.09.04 18:01:20 | 000,182,361 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x64.cab
[2009.09.04 18:01:20 | 000,138,009 | ---- | C] () -- C:\Program Files\OCT2006_XACT_x86.cab
[2009.09.04 18:01:20 | 000,121,786 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x64.cab
[2009.09.04 18:01:20 | 000,092,676 | ---- | C] () -- C:\Program Files\Nov2008_XACT_x86.cab
[2009.09.04 18:01:20 | 000,086,029 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x64.cab
[2009.09.04 18:01:20 | 000,054,522 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x64.cab
[2009.09.04 18:01:20 | 000,045,351 | ---- | C] () -- C:\Program Files\Oct2005_xinput_x86.cab
[2009.09.04 18:01:20 | 000,021,843 | ---- | C] () -- C:\Program Files\Nov2008_X3DAudio_x86.cab
[2009.09.04 18:01:18 | 001,906,870 | ---- | C] () -- C:\Program Files\Nov2008_d3dx9_40_x64.cab
[2009.09.04 18:01:18 | 001,802,058 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x64.cab
[2009.09.04 18:01:18 | 001,709,360 | ---- | C] () -- C:\Program Files\Nov2007_d3dx9_36_x86.cab
[2009.09.04 18:01:18 | 000,965,421 | ---- | C] () -- C:\Program Files\Nov2008_d3dx10_40_x86.cab
[2009.09.04 18:01:18 | 000,803,876 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x86.cab
[2009.09.04 18:01:18 | 000,196,754 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x64.cab
[2009.09.04 18:01:18 | 000,148,264 | ---- | C] () -- C:\Program Files\NOV2007_XACT_x86.cab
[2009.09.04 18:01:18 | 000,046,144 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x64.cab
[2009.09.04 18:01:18 | 000,018,496 | ---- | C] () -- C:\Program Files\NOV2007_X3DAudio_x86.cab
[2009.09.04 18:01:14 | 001,973,702 | ---- | C] () -- C:\Program Files\Mar2009_d3dx9_41_x64.cab
[2009.09.04 18:01:14 | 001,612,446 | ---- | C] () -- C:\Program Files\Mar2009_d3dx9_41_x86.cab
[2009.09.04 18:01:14 | 001,067,160 | ---- | C] () -- C:\Program Files\Mar2009_d3dx10_41_x64.cab
[2009.09.04 18:01:14 | 001,040,737 | ---- | C] () -- C:\Program Files\Mar2009_d3dx10_41_x86.cab
[2009.09.04 18:01:14 | 000,864,600 | ---- | C] () -- C:\Program Files\Nov2007_d3dx10_36_x64.cab
[2009.09.04 18:01:14 | 000,275,036 | ---- | C] () -- C:\Program Files\Mar2009_XAudio_x64.cab
[2009.09.04 18:01:14 | 000,273,010 | ---- | C] () -- C:\Program Files\Mar2009_XAudio_x86.cab
[2009.09.04 18:01:14 | 000,251,186 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x64.cab
[2009.09.04 18:01:14 | 000,226,242 | ---- | C] () -- C:\Program Files\Mar2008_XAudio_x86.cab
[2009.09.04 18:01:14 | 000,122,336 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x64.cab
[2009.09.04 18:01:14 | 000,121,506 | ---- | C] () -- C:\Program Files\Mar2009_XACT_x64.cab
[2009.09.04 18:01:14 | 000,093,726 | ---- | C] () -- C:\Program Files\Mar2008_XACT_x86.cab
[2009.09.04 18:01:14 | 000,092,732 | ---- | C] () -- C:\Program Files\Mar2009_XACT_x86.cab
[2009.09.04 18:01:14 | 000,054,600 | ---- | C] () -- C:\Program Files\Mar2009_X3DAudio_x64.cab
[2009.09.04 18:01:14 | 000,021,867 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x86.cab
[2009.09.04 18:01:14 | 000,021,298 | ---- | C] () -- C:\Program Files\Mar2009_X3DAudio_x86.cab
[2009.09.04 18:01:12 | 001,769,862 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x64.cab
[2009.09.04 18:01:12 | 001,443,274 | ---- | C] () -- C:\Program Files\Mar2008_d3dx9_37_x86.cab
[2009.09.04 18:01:12 | 000,844,884 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x64.cab
[2009.09.04 18:01:12 | 000,818,260 | ---- | C] () -- C:\Program Files\Mar2008_d3dx10_37_x86.cab
[2009.09.04 18:01:12 | 000,269,620 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x64.cab
[2009.09.04 18:01:12 | 000,269,016 | ---- | C] () -- C:\Program Files\JUN2008_XAudio_x86.cab
[2009.09.04 18:01:12 | 000,121,054 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x64.cab
[2009.09.04 18:01:12 | 000,093,128 | ---- | C] () -- C:\Program Files\JUN2008_XACT_x86.cab
[2009.09.04 18:01:12 | 000,055,050 | ---- | C] () -- C:\Program Files\Mar2008_X3DAudio_x64.cab
[2009.09.04 18:01:12 | 000,021,905 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x86.cab
[2009.09.04 18:01:10 | 001,792,600 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x64.cab
[2009.09.04 18:01:10 | 001,607,766 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x64.cab
[2009.09.04 18:01:10 | 001,607,278 | ---- | C] () -- C:\Program Files\JUN2007_d3dx9_34_x86.cab
[2009.09.04 18:01:10 | 001,463,878 | ---- | C] () -- C:\Program Files\JUN2008_d3dx9_38_x86.cab
[2009.09.04 18:01:10 | 001,362,796 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x64.cab
[2009.09.04 18:01:10 | 001,336,002 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x64.cab
[2009.09.04 18:01:10 | 001,064,925 | ---- | C] () -- C:\Program Files\Jun2005_d3dx9_26_x86.cab
[2009.09.04 18:01:10 | 000,867,828 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x64.cab
[2009.09.04 18:01:10 | 000,849,919 | ---- | C] () -- C:\Program Files\JUN2008_d3dx10_38_x86.cab
[2009.09.04 18:01:10 | 000,699,044 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x64.cab
[2009.09.04 18:01:10 | 000,698,464 | ---- | C] () -- C:\Program Files\JUN2007_d3dx10_34_x86.cab
[2009.09.04 18:01:10 | 000,197,114 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x64.cab
[2009.09.04 18:01:10 | 000,178,359 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x64.cab
[2009.09.04 18:01:10 | 000,152,901 | ---- | C] () -- C:\Program Files\JUN2007_XACT_x86.cab
[2009.09.04 18:01:10 | 000,055,154 | ---- | C] () -- C:\Program Files\JUN2008_X3DAudio_x64.cab
[2009.09.04 18:01:08 | 013,264,168 | ---- | C] () -- C:\Program Files\dxnt.cab
[2009.09.04 18:01:08 | 001,247,499 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x64.cab
[2009.09.04 18:01:08 | 001,084,712 | ---- | C] () -- C:\Program Files\Feb2006_d3dx9_29_x86.cab
[2009.09.04 18:01:08 | 001,013,225 | ---- | C] () -- C:\Program Files\Feb2005_d3dx9_24_x86.cab
[2009.09.04 18:01:08 | 000,194,667 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x64.cab
[2009.09.04 18:01:08 | 000,180,777 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x64.cab
[2009.09.04 18:01:08 | 000,147,983 | ---- | C] () -- C:\Program Files\FEB2007_XACT_x86.cab
[2009.09.04 18:01:08 | 000,133,663 | ---- | C] () -- C:\Program Files\JUN2006_XACT_x86.cab
[2009.09.04 18:01:08 | 000,132,409 | ---- | C] () -- C:\Program Files\Feb2006_XACT_x86.cab
[2009.09.04 18:01:08 | 000,095,637 | ---- | C] () -- C:\Program Files\dxupdate.cab
[2009.09.04 18:01:08 | 000,044,440 | ---- | C] () -- C:\Program Files\dxdllreg_x86.cab
[2009.09.04 18:01:06 | 000,145,591 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x86.cab
[2009.09.04 18:01:04 | 003,319,732 | ---- | C] () -- C:\Program Files\Aug2009_d3dcsx_42_x86.cab
[2009.09.04 18:01:04 | 003,112,103 | ---- | C] () -- C:\Program Files\Aug2009_d3dcsx_42_x64.cab
[2009.09.04 18:01:04 | 001,574,376 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x86.cab
[2009.09.04 18:01:04 | 001,571,154 | ---- | C] () -- C:\Program Files\DEC2006_d3dx9_32_x64.cab
[2009.09.04 18:01:04 | 001,357,968 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x64.cab
[2009.09.04 18:01:04 | 001,155,483 | ---- | C] () -- C:\Program Files\BDANT.cab
[2009.09.04 18:01:04 | 001,079,448 | ---- | C] () -- C:\Program Files\Dec2005_d3dx9_28_x86.cab
[2009.09.04 18:01:04 | 000,975,148 | ---- | C] () -- C:\Program Files\BDAXP.cab
[2009.09.04 18:01:04 | 000,930,108 | ---- | C] () -- C:\Program Files\Aug2009_d3dx9_42_x64.cab
[2009.09.04 18:01:04 | 000,919,036 | ---- | C] () -- C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
[2009.09.04 18:01:04 | 000,900,598 | ---- | C] () -- C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
[2009.09.04 18:01:04 | 000,728,456 | ---- | C] () -- C:\Program Files\Aug2009_d3dx9_42_x86.cab
[2009.09.04 18:01:04 | 000,273,264 | ---- | C] () -- C:\Program Files\Aug2009_XAudio_x64.cab
[2009.09.04 18:01:04 | 000,272,634 | ---- | C] () -- C:\Program Files\Aug2009_XAudio_x86.cab
[2009.09.04 18:01:04 | 000,271,404 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x64.cab
[2009.09.04 18:01:04 | 000,271,038 | ---- | C] () -- C:\Program Files\Aug2008_XAudio_x86.cab
[2009.09.04 18:01:04 | 000,232,635 | ---- | C] () -- C:\Program Files\Aug2009_d3dx10_42_x64.cab
[2009.09.04 18:01:04 | 000,212,799 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x64.cab
[2009.09.04 18:01:04 | 000,192,467 | ---- | C] () -- C:\Program Files\DEC2006_XACT_x64.cab
[2009.09.04 18:01:04 | 000,192,131 | ---- | C] () -- C:\Program Files\Aug2009_d3dx10_42_x86.cab
[2009.09.04 18:01:04 | 000,191,712 | ---- | C] () -- C:\Program Files\DEC2006_d3dx10_00_x86.cab
[2009.09.04 18:01:04 | 000,136,301 | ---- | C] () -- C:\Program Files\Aug2009_d3dx11_42_x64.cab
[2009.09.04 18:01:04 | 000,122,408 | ---- | C] () -- C:\Program Files\Aug2009_XACT_x64.cab
[2009.09.04 18:01:04 | 000,121,764 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x64.cab
[2009.09.04 18:01:04 | 000,105,036 | ---- | C] () -- C:\Program Files\Aug2009_d3dx11_42_x86.cab
[2009.09.04 18:01:04 | 000,093,098 | ---- | C] () -- C:\Program Files\Aug2009_XACT_x86.cab
[2009.09.04 18:01:04 | 000,092,996 | ---- | C] () -- C:\Program Files\Aug2008_XACT_x86.cab
[2009.09.04 18:01:02 | 001,464,664 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x86.cab
[2009.09.04 18:01:00 | 001,800,152 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x64.cab
[2009.09.04 18:01:00 | 001,794,076 | ---- | C] () -- C:\Program Files\Aug2008_d3dx9_39_x64.cab
[2009.09.04 18:01:00 | 001,708,144 | ---- | C] () -- C:\Program Files\AUG2007_d3dx9_35_x86.cab
[2009.09.04 18:01:00 | 001,350,534 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x64.cab
[2009.09.04 18:01:00 | 001,077,644 | ---- | C] () -- C:\Program Files\Aug2005_d3dx9_27_x86.cab
[2009.09.04 18:01:00 | 000,867,604 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x64.cab
[2009.09.04 18:01:00 | 000,852,286 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x64.cab
[2009.09.04 18:01:00 | 000,849,167 | ---- | C] () -- C:\Program Files\Aug2008_d3dx10_39_x86.cab
[2009.09.04 18:01:00 | 000,796,859 | ---- | C] () -- C:\Program Files\AUG2007_d3dx10_35_x86.cab
[2009.09.04 18:01:00 | 000,198,088 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x64.cab
[2009.09.04 18:01:00 | 000,182,903 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x64.cab
[2009.09.04 18:01:00 | 000,153,004 | ---- | C] () -- C:\Program Files\AUG2007_XACT_x86.cab
[2009.09.04 18:01:00 | 000,137,235 | ---- | C] () -- C:\Program Files\AUG2006_XACT_x86.cab
[2009.09.04 18:01:00 | 000,096,817 | ---- | C] () -- C:\Program Files\APR2007_xinput_x64.cab
[2009.09.04 18:01:00 | 000,087,142 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x64.cab
[2009.09.04 18:01:00 | 000,053,294 | ---- | C] () -- C:\Program Files\APR2007_xinput_x86.cab
[2009.09.04 18:01:00 | 000,046,058 | ---- | C] () -- C:\Program Files\AUG2006_xinput_x86.cab
[2009.09.04 18:00:58 | 004,162,630 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86_Archive.cab
[2009.09.04 18:00:58 | 001,607,358 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x64.cab
[2009.09.04 18:00:58 | 001,606,031 | ---- | C] () -- C:\Program Files\APR2007_d3dx9_33_x86.cab
[2009.09.04 18:00:58 | 000,916,430 | ---- | C] () -- C:\Program Files\Apr2006_MDX1_x86.cab
[2009.09.04 18:00:58 | 000,698,612 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x64.cab
[2009.09.04 18:00:58 | 000,695,857 | ---- | C] () -- C:\Program Files\APR2007_d3dx10_33_x86.cab
[2009.09.04 18:00:58 | 000,195,758 | ---- | C] () -- C:\Program Files\APR2007_XACT_x64.cab
[2009.09.04 18:00:58 | 000,179,125 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x64.cab
[2009.09.04 18:00:58 | 000,151,225 | ---- | C] () -- C:\Program Files\APR2007_XACT_x86.cab
[2009.09.04 18:00:58 | 000,133,095 | ---- | C] () -- C:\Program Files\Apr2006_XACT_x86.cab
[2009.09.04 18:00:58 | 000,087,101 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x64.cab
[2009.09.04 18:00:58 | 000,046,002 | ---- | C] () -- C:\Program Files\Apr2006_xinput_x86.cab
[2009.09.04 18:00:56 | 001,397,822 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x64.cab
[2009.09.04 18:00:56 | 001,347,354 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x64.cab
[2009.09.04 18:00:56 | 001,115,221 | ---- | C] () -- C:\Program Files\Apr2006_d3dx9_30_x86.cab
[2009.09.04 18:00:56 | 001,078,954 | ---- | C] () -- C:\Program Files\Apr2005_d3dx9_25_x86.cab
[2004.04.19 13:22:24 | 003,876,391 | ---- | C] () -- C:\Program Files\Computer Press - Microsoft Office Word 2003.pdf

========== ZeroAccess Check ==========

[2011.01.08 13:47:07 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\System32\shdocvw.dll -- [2011.12.19 09:53:25 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\wbemess.dll -- [2008.04.14 08:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.11.02 16:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
[2011.10.29 19:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Atari
[2011.01.08 14:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Canneverbe Limited
[2011.02.12 21:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Clonk
[2011.07.03 21:01:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Clonk Rage
[2011.03.02 13:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\COWON
[2012.08.24 18:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
[2011.04.15 07:53:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\flightgear.org
[2011.04.15 07:41:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\fltk.org
[2011.01.12 16:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Foxit
[2011.04.12 15:10:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Foxit Software
[2011.08.20 17:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\GanymedeNet
[2011.01.08 14:43:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\GHISLER
[2012.01.01 22:16:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\HEM Data
[2012.11.05 23:22:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\HoldemManager
[2012.04.08 02:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ICQ
[2011.10.29 19:14:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Leadertech
[2011.08.29 10:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\LEGO Company
[2011.01.09 14:29:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Local
[2011.09.22 16:07:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Media Get LLC
[2012.11.05 15:29:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Microgaming
[2011.04.25 15:41:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mp3tag
[2012.04.30 21:29:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Oberon Media
[2011.01.15 12:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
[2012.09.11 21:05:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Origin
[2012.10.01 23:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PacificPoker
[2012.10.23 17:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Party
[2011.01.09 11:22:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PhotoFiltre
[2012.08.23 23:17:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge
[2012.10.08 11:11:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2010
[2012.10.08 13:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2012
[2012.08.15 18:39:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sierra
[2011.01.10 12:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\SmarThru4
[2012.11.02 22:49:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sports Interactive
[2012.05.31 17:20:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TeamViewer
[2012.07.28 20:34:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Tunngle
[2012.02.23 16:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Unity
[2012.11.06 18:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
[2012.07.26 18:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\YourFileDownloader
[2011.01.08 14:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Canneverbe Limited
[2011.01.16 22:32:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Daemon tools
[2012.07.30 13:58:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2012.09.11 22:37:05 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\DSS
[2012.09.11 21:01:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
[2012.11.06 16:58:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2011.09.22 16:07:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Media Get LLC
[2012.08.22 16:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MGS
[2011.01.21 18:39:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MSScanAppDataDir
[2012.04.30 21:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Oberon Media
[2012.09.11 21:10:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Origin
[2011.01.14 00:38:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sports Interactive
[2012.04.30 21:33:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2012.07.28 19:12:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Tunngle
[2012.04.12 23:07:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\XHEO INC
[2012.09.04 14:41:02 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{B69EB34A-91EB-4FF3-B741-664179483319}

========== Purity Check ==========



========== Custom Scans ==========

< >
[2011.01.08 08:14:48 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2011.01.08 08:16:17 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2011.02.09 01:38:35 | 000,000,260 | ---- | C] () -- C:\WINDOWS\Tasks\WGASetup.job
[2011.06.24 19:11:53 | 000,000,284 | ---- | C] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2011.07.06 18:49:23 | 000,000,418 | -H-- | C] () -- C:\WINDOWS\Tasks\Norton Security Scan for Administrator.job
[2012.02.29 11:15:43 | 000,000,482 | -H-- | C] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
[2012.06.04 09:39:28 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.07.26 18:16:08 | 000,000,316 | ---- | C] () -- C:\WINDOWS\Tasks\Your File Updater.job

< >

< MD5 for: ATAPI.SYS >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 08:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 15:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:cdrom.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.14 00:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 22:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 15:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2002.09.20 18:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:hal.dll
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.03 22:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 15:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2004.08.17 15:49:28 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=6E401E61F952FBBF708AFBECEFAFAE81 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\ERDNT\cache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 08:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 15:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.14 00:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 23:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 15:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 15:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[19 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[20 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2012.05.31 18:05:00 | 118,354,296 | ---- | M] () -- C:\HM2Setup_2.0.0.6866.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.11.02 16:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
[2011.04.12 15:20:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Adobe
[2011.06.24 19:21:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Apple Computer
[2011.10.29 19:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Atari
[2011.01.08 13:54:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ATI
[2011.01.08 14:44:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Canneverbe Limited
[2011.02.12 21:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Clonk
[2011.07.03 21:01:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Clonk Rage
[2011.03.02 13:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\COWON
[2012.08.24 18:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
[2011.03.06 21:21:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\DivX
[2012.10.03 15:03:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ESTsoft
[2011.04.15 07:53:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\flightgear.org
[2011.04.15 07:41:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\fltk.org
[2011.01.12 16:37:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Foxit
[2011.04.12 15:10:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Foxit Software
[2011.08.20 17:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\GanymedeNet
[2011.01.08 14:43:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\GHISLER
[2011.08.23 14:07:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Google
[2012.07.25 16:51:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Hamachi
[2012.01.01 22:16:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\HEM Data
[2012.11.05 23:22:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\HoldemManager
[2012.04.08 02:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ICQ
[2011.01.08 08:41:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Identities
[2011.01.08 13:59:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\InstallShield
[2011.10.29 19:14:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Leadertech
[2011.08.29 10:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\LEGO Company
[2011.01.09 14:29:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Local
[2011.01.09 11:20:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
[2011.09.22 16:07:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Media Get LLC
[2011.09.26 22:40:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Media Player Classic
[2012.11.05 15:29:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Microgaming
[2012.04.20 08:35:29 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
[2011.01.18 21:24:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
[2011.03.14 19:42:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla-Cache
[2011.04.25 15:41:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mp3tag
[2012.04.30 21:29:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Oberon Media
[2011.01.15 12:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
[2012.09.11 21:05:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Origin
[2012.10.01 23:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PacificPoker
[2012.10.23 17:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Party
[2011.01.09 11:22:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PhotoFiltre
[2012.08.23 23:17:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge
[2012.10.08 11:11:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2010
[2012.10.08 13:23:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Pro Cycling Manager 2012
[2012.08.15 18:39:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sierra
[2012.11.06 18:09:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Skype
[2011.01.10 12:29:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\SmarThru4
[2012.11.02 22:49:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sports Interactive
[2011.01.13 22:11:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Sun
[2012.05.31 17:20:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\TeamViewer
[2012.07.28 20:34:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Tunngle
[2012.02.23 16:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Unity
[2012.11.06 18:21:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
[2012.06.19 15:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\vlc
[2011.01.14 19:41:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\WinRAR
[2012.07.26 18:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\YourFileDownloader

< %APPDATA%\*.exe /s >
[2012.08.24 18:38:04 | 010,145,632 | ---- | M] (ESTsoft Corp.) -- C:\Documents and Settings\Administrator\Data aplikací\ESTsoft\ALUpdate\ALZIP\newfile\TEMP\ALZip851.exe
[2011.06.03 00:18:34 | 000,009,158 | R--- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{3C630BB8-692D-4495-A0BD-40336CD51F99}\_2EB470985960332B60228A.exe
[2011.06.03 00:18:34 | 000,009,158 | R--- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{3C630BB8-692D-4495-A0BD-40336CD51F99}\_69D3F6B3EBD478906B48B0.exe
[2011.06.03 00:18:34 | 000,009,158 | R--- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{3C630BB8-692D-4495-A0BD-40336CD51F99}\_853F67D554F05449430E7E.exe
[2011.06.03 00:18:34 | 000,009,158 | R--- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{3C630BB8-692D-4495-A0BD-40336CD51F99}\_C330E63E95C897CF4F8D14.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\ARPPRODUCTICON.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\ENEXP_8EB1E98D5033491480BDE246EBFDBE0E.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\GREXP_BF91455483C94AD5ACDB00C05D9630FD.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\NewShortcut10_8EE88FC0610D47738DF3088734A6D60A.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\NewShortcut8_60441EEF03FD49C88BAD6994226E140D.exe
[2011.01.09 11:05:18 | 000,045,056 | R--- | M] (Acresso Software Inc.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{54430DDE-31E7-4153-9FEA-09AF73BA1138}\RUEXP_5A9443131B8C4BE1BEECE4DD0CDDF068.exe
[2011.05.14 21:41:41 | 000,669,552 | R--- | M] (Supermassive Games Ltd.) -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft\Installer\{737478D1-D840-4166-8D75-858C92BF77AE}\BigMatchLauncher.exe
[2012.08.23 23:17:35 | 004,211,824 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2012.11.06 18:05:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.10.23 13:31:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2012.10.31 16:19:27 | 000,000,418 | -H-- | M] () -- C:\WINDOWS\Tasks\Norton Security Scan for Administrator.job
[2012.11.06 17:54:55 | 000,000,482 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
[2012.11.06 17:08:49 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
[2012.11.06 17:08:40 | 000,000,316 | ---- | M] () -- C:\WINDOWS\Tasks\Your File Updater.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2011.01.08 06:06:47 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011.01.08 06:06:47 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011.01.08 06:06:47 | 000,417,792 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.11.06 15:25:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2012.05.31 18:05:00 | 118,354,296 | ---- | M] () -- C:\HM2Setup_2.0.0.6866.exe

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Steam" = "C:\Program Files\Steam\Steam.exe" -silent -- [2012.08.06 09:03:54 | 001,353,080 | ---- | M] (Valve Corporation)
"MediaGet2" = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\MediaGet2\mediaget.exe --minimized -- [2012.04.01 10:44:54 | 008,138,472 | ---- | M] (MediaGet LLC)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2012.07.13 12:33:24 | 017,418,928 | R--- | M] (Skype Technologies S.A.)
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 08:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"SearchEngineProtection" = C:\Program Files\Gamesbar\SearchEngineProtection.exe
"PokerStrategy.com SideKick" = "C:\Documents and Settings\Administrator\Nabídka Start\Programy\PokerStrategy.com\PokerStrategy.com SideKick.appref-ms"
"uTorrent" = "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED -- [2012.07.26 17:09:25 | 000,895,376 | ---- | M] (BitTorrent, Inc.)
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2012.04.11 10:54:22 | 003,672,384 | ---- | M] (DT Soft Ltd)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2011.12.01 01:14:56 | 000,912,344 | ---- | M] (Mozilla Corporation) MD5=B6FDDDAB3A8C94CC5B47B6F6C596F9FC -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.03.08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.11.06 18:08:03 | 000,000,512 | ---- | M] () MD5=140DFC72D7EEC47E703DF93D897A9EC5 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2011.12.10 20:19:56 | 061,490,694 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Civilization_2_Multiplayer_Gold_Edition__includes_v1.3_patch___No-CD_crack_.rar
[2011.05.08 14:53:31 | 169,644,333 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\clonk-endeavour-clonk-rage-crack-cestina.zip
[2012.11.06 01:45:32 | 014,143,032 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\FM13.Crack.Only.SKIDROWGAMES.NET.rar
[2011.11.01 20:13:36 | 119,492,270 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Fo54otballMan46ager2012Crack-elamigos.rar
[2011.04.08 20:25:21 | 010,136,679 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Football Manager 2011 Crack Only.rar
[2012.05.07 13:31:57 | 003,930,504 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\football_manager_2011_11.3_crack.rar_downloader_224a.exe
[2012.05.07 14:28:33 | 197,278,022 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Football_Manager_2012_12.2.1_Cracked.rar
[2012.06.24 13:58:54 | 005,120,726 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\gta-san-andreas-crack.rar
[2012.01.18 19:02:41 | 067,246,031 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Holdem.Manager.Suite.v.1.10.01_crack.rar
[2012.01.18 19:06:49 | 014,789,064 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Holdem.Manager.v.1.0.7.1.PRO.CRACKED-EDGiNEA-(1).rar
[2011.07.07 14:22:55 | 001,534,864 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\hw Cracked exe.zip
[2012.10.03 15:03:21 | 054,384,970 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\MAFIA-2-crack.rar
[2012.10.03 13:18:13 | 000,031,315 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Mafia-2-torrent-Komplet-CZ-dabing-včetně-cz-videí-a-cracku.torrent
[2012.08.09 02:19:39 | 235,097,386 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\PCM-2012-Patch-v1.2.0.0-&-Crack (1).zip
[2012.07.31 20:35:20 | 235,097,386 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\PCM-2012-Patch-v1.2.0.0-&-Crack.zip
[2012.07.24 13:40:35 | 002,038,784 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro+Cycling+Manager+Tour+de+France+2011+Crack (1).exe
[2012.07.24 13:36:28 | 002,038,784 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro+Cycling+Manager+Tour+de+France+2011+Crack.exe
[2011.07.07 20:18:24 | 000,003,160 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro.Cycling.Manager.2011-RELOADED.Crack.Only.torrent
[2000.03.11 17:51:20 | 000,023,082 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Guitar Pro Tabs\Stone Temple Pilots\Crackerman.gtp
[2012.09.11 20:07:42 | 000,000,117 | ---- | M] () -- \Documents and Settings\Administrator\FIFA 13 Demo\SKIDROW CRACK.url
[2012.11.01 17:53:39 | 000,009,216 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_skidrowcrack.com_0.localstorage
[2012.11.01 17:53:39 | 000,009,800 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_skidrowcrack.com_0.localstorage-journal
[2012.10.01 18:45:11 | 000,008,192 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_www.crackserialcodes.com_0.localstorage
[2012.10.01 18:45:11 | 000,008,768 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_www.crackserialcodes.com_0.localstorage-journal
[2012.10.01 18:26:46 | 000,007,168 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_www.downloadserialcrack.com_0.localstorage
[2012.10.01 18:26:46 | 000,007,736 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_www.downloadserialcrack.com_0.localstorage-journal
[2012.10.03 13:47:23 | 024,591,859 | ---- | M] () -- \Documents and Settings\Administrator\Mafia II\Mafia II Crack\Mafia2-Crack-SKIDROW-Pahyl.of.BonGo.rar
[2005.06.18 05:26:23 | 000,003,126 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\hry\Scorched3D\data\globalmods\apoc\data\accessories\common\concrete-cracked.bmp
[2012.01.01 03:12:23 | 067,246,031 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\pokr\Holdem.Manager.Suite.v.1.10.01_crack.rar
[2012.05.28 15:07:50 | 000,213,474 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf
[2012.05.28 15:08:30 | 000,028,809 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\bonus\win_msg\bonus_crackpink_txt.png
[2012.05.28 15:08:47 | 000,002,094 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_mouse_over.mp3
[2012.05.28 15:08:47 | 000,025,082 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_2.mp3
[2012.05.28 15:08:47 | 000,122,884 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_bomb.mp3
[2012.05.28 15:08:47 | 000,109,927 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_pending_eff.mp3
[2012.08.22 16:11:35 | 000,001,197 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\c\crackerjack1.a8040f4e64fd6b965ca1deaf58776a8c.inf
[2012.08.22 16:33:10 | 000,046,937 | ---- | M] () -- \Microgaming\Casino\MummysGoldCasino\global\clarion_images\btn_crackerjack1.png
[2012.08.22 16:21:13 | 000,040,351 | ---- | M] () -- \Microgaming\Casino\MummysGoldCasino\local\en\clariondescriptions\txt_desc_crackerjack1.dat
[2012.07.23 22:47:16 | 000,213,474 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf
[2012.07.23 22:47:55 | 000,028,809 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\bonus\win_msg\bonus_crackpink_txt.png
[2012.07.23 22:48:09 | 000,002,094 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_mouse_over.mp3
[2012.07.23 22:48:10 | 000,025,082 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_2.mp3
[2012.07.23 22:48:10 | 000,122,884 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_bomb.mp3
[2012.07.23 22:48:10 | 000,109,927 | ---- | M] () -- \Poker\Paddy Power Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_pending_eff.mp3
[2011.12.20 11:21:29 | 000,213,474 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf
[2011.12.20 11:21:56 | 000,028,809 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\bonus\win_msg\bonus_crackpink_txt.png
[2011.12.20 11:22:05 | 000,002,094 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_mouse_over.mp3
[2011.12.20 11:22:05 | 000,025,082 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_2.mp3
[2011.12.20 11:22:05 | 000,122,884 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_bomb.mp3
[2011.12.20 11:22:05 | 000,109,927 | ---- | M] () -- \Poker\Poker 770\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_pending_eff.mp3
[2012.08.13 11:25:13 | 000,213,474 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf
[2012.08.13 11:26:06 | 000,028,809 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\bonus\win_msg\bonus_crackpink_txt.png
[2012.08.13 11:26:19 | 000,002,094 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_mouse_over.mp3
[2012.08.13 11:26:19 | 000,025,082 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_2.mp3
[2012.08.13 11:26:20 | 000,122,884 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_bomb.mp3
[2012.08.13 11:26:20 | 000,109,927 | ---- | M] () -- \Poker\Titan Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_pending_eff.mp3
[2011.12.21 12:29:37 | 000,213,474 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf
[2011.12.21 12:30:00 | 000,028,809 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\bonus\win_msg\bonus_crackpink_txt.png
[2011.12.21 12:30:08 | 000,002,094 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_mouse_over.mp3
[2011.12.21 12:30:08 | 000,025,082 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_2.mp3
[2011.12.21 12:30:08 | 000,122,884 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_open_door_bomb.mp3
[2011.12.21 12:30:08 | 000,109,927 | ---- | M] () -- \Poker\William Hill Poker\data\slots_pinkpanther40line\sounds\bonus\crack_the_pink_bonus\crack_pending_eff.mp3
[2003.04.23 17:09:10 | 000,459,150 | ---- | M] () -- \Program Files\Bethesda Softworks\Morrowind\Data Files\Sound\Fx\icecracking.wav
[2005.03.06 12:25:20 | 000,240,744 | ---- | M] () -- \Program Files\Hollywood Pictures II\Media\Soundeffekte\fire and explosion\FireCrackle.mp3
[2012.08.31 02:38:20 | 000,002,967 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\language\en_US\images\flashlobby\lobby\safecrackerkeno.swf
[2012.08.31 02:38:26 | 000,012,201 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\language\en_US\images\flashlobby\lobby\safecrackerkeno_popup.swf
[2012.02.21 21:10:32 | 000,001,247 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\blackjack\bjbar_safecrackerkeno_icon.jpg
[2003.12.05 13:52:40 | 000,000,796 | ---- | M] () -- \Program Files\Rockstar Games\GTA San Andreas\data\Decision\Craig\crack1.ped
[2003.12.05 15:52:40 | 000,000,796 | ---- | M] () -- \Program Files\Rockstar Games\GTA San Andreas\GTA Extreme (PC) [ENG] (2oo8)\data\Decision\Craig\crack1.ped
[2000.04.16 15:47:26 | 000,026,624 | ---- | M] () -- \Program Files\Sierra\Homeworld2\CRACK.EXE
[2010.10.01 09:54:57 | 000,002,967 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyCasino\language\en_US\images\flashlobby\lobby\safecrackerkeno.swf
[2010.10.01 09:54:58 | 000,012,201 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyCasino\language\en_US\images\flashlobby\lobby\safecrackerkeno_popup.swf
[2010.10.01 09:54:41 | 000,001,247 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\blackjack\bjbar_safecrackerkeno_icon.jpg
[2010.10.05 17:57:03 | 000,003,431 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyPoker\Images\pp_Braincrack_12c1fe3e92d2271e35e2092ea4b13dbb.jpg
[2010.05.28 21:21:02 | 030,389,099 | ---- | M] () -- \zachrana\Users\David\Downloads\Football_Manager_2010_10.3.0_Crack.rar

< *keygen* /s >
[2010.07.16 01:31:30 | 000,747,008 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\pcm10\TRiViUM\PCM_KeyGen.exe
[2012.04.27 19:07:44 | 000,009,728 | ---- | M] () -- \Program Files\Holdem Manager 2\KeyGenerateClassLibrary.dll

3.část
< *loader* /s >
[2012.07.16 22:40:38 | 000,000,847 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\chrome\CT3072253\content\tb\al\ac\img\ajax-loader.gif
[2012.07.16 22:40:38 | 000,001,135 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\chrome\CT3072253\content\tb\al\ac\img\loader-icon.png
[2012.07.16 22:40:38 | 000,003,208 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\chrome\CT3072253\content\tb\al\ui\gf\img\loader.gif
[2012.07.16 22:40:38 | 000,001,849 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\chrome\CT3072253\content\tb\al\wa\TWITTER\resources\ajax-loader.gif
[2012.10.01 23:31:07 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\007FG\rlngcoolbananas\PreLoader.swf
[2012.10.01 23:30:46 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\012FG\rlngdrlove\PreLoader.swf
[2012.10.01 23:31:25 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\013FG\rlngfirehawk\PreLoader.swf
[2012.10.01 23:31:18 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\015FG\rlngeasterndragon\PreLoader.swf
[2012.10.01 23:30:30 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\016FG\rlclfantasticfour\PreLoader.swf
[2012.10.01 23:31:36 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\017FG\rlclspiderman\Preloader.swf
[2012.10.01 23:32:48 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\068FG\rlngdolphinreef\PreLoader.swf
[2012.10.01 23:32:38 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\069FG\rlngdragonmaster\PreLoader.swf
[2012.10.01 23:31:46 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\070FG\rlngspeeddemon\PreLoader.swf
[2012.10.01 23:30:57 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\071FG\rlngirisheyes\PreLoader.swf
[2012.10.01 23:31:44 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\072FG\rlngbeatthebank\PreLoader.swf
[2012.10.01 23:32:29 | 000,008,933 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\073FG\rlngcityofgold\PreLoader.swf
[2012.10.01 23:30:41 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\087FG\rlclhulkrevenge\Preloader.swf
[2012.10.01 23:32:14 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\090FG\rlfgblanketyblank\Preloader.swf
[2012.10.01 23:32:23 | 000,129,520 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\091FG\rlclcallofduty4\PreLoader.swf
[2012.10.01 23:31:01 | 000,129,520 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\092FG\rlclkingkong\PreLoader.swf
[2012.10.01 23:32:41 | 000,127,998 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\095FG\rlfgsaleofthecentury\PreLoader.swf
[2012.10.01 23:32:07 | 000,129,520 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\casinopoker\FlashGames\096FG\rlclthor\PreLoader.swf
[2010.11.02 16:32:00 | 000,000,770 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PacificPoker\media\loader.swf
[2011.03.15 16:51:46 | 000,267,408 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\axpowerloader.dll
[2011.03.15 16:51:48 | 000,656,528 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\loader.dll
[2012.08.23 23:17:27 | 000,651,264 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\loader9.dll
[2012.08.23 23:17:28 | 000,001,024 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\loader9.dll.signature
[2012.08.23 23:17:28 | 000,000,029 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\loader9.dll.timestamp
[2011.03.15 16:51:46 | 000,218,256 | ---- | M] () -- \Documents and Settings\Administrator\Data aplikací\PowerChallenge\nppowerloader.dll
[2012.05.07 13:31:57 | 003,930,504 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\football_manager_2011_11.3_crack.rar_downloader_224a.exe
[2012.10.01 18:28:18 | 004,405,912 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\poker_edge_5_downloader_98819.exe
[2012.07.26 18:15:30 | 004,110,768 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro.cycling.manager.2010_Cd_Key_downloader_133a.exe
[2012.07.29 13:37:48 | 004,110,768 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro_Cycling_Manager_-_Season_2010_serial_number.rar_downloader_224a (1).exe
[2012.07.29 13:37:56 | 004,110,768 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro_Cycling_Manager_-_Season_2010_serial_number.rar_downloader_224a (2).exe
[2012.07.29 13:38:10 | 004,110,768 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro_Cycling_Manager_-_Season_2010_serial_number.rar_downloader_224a (3).exe
[2012.07.29 13:37:31 | 004,110,768 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\Pro_Cycling_Manager_-_Season_2010_serial_number.rar_downloader_224a.exe
[2011.01.14 22:57:43 | 000,974,336 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\SRDownloader.exe
[2011.04.19 11:17:19 | 005,482,225 | ---- | M] () -- \Documents and Settings\Administrator\Dokumenty\Downloads\vdownloader.zip
[2011.01.18 12:09:37 | 000,073,408 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\SRDownloader.err
[2011.01.18 13:15:20 | 000,000,960 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\SRDownloader.nast
[2012.07.26 18:51:52 | 000,000,673 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\Media\ajax-loader.gif
[2012.07.29 13:38:11 | 000,003,072 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_abc.yourfiledownloader.com_0.localstorage
[2012.07.29 13:38:11 | 000,003,608 | ---- | M] () -- \Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Local Storage\http_abc.yourfiledownloader.com_0.localstorage-journal
[2012.05.07 13:32:31 | 000,001,638 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\exe\YourFile Downloader.lnk
[2010.02.17 17:26:12 | 000,061,720 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\PhysXLocal\PhysXLoader.dll
[2012.05.02 14:08:58 | 001,583,760 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\loader.dll
[2012.05.02 13:50:58 | 000,007,184 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\loader.gam
[2012.05.25 16:00:10 | 000,101,851 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\[en]\elements\generic_custom_loaders\arcade_loader.swf
[2012.05.25 16:00:10 | 000,100,913 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\[en]\elements\generic_custom_loaders\scratch_loader.swf
[2012.05.25 16:01:17 | 000,453,751 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\[en]\modules\mcb\mcb_loader.swf
[2012.05.24 16:46:53 | 000,001,589 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\elements\iframebgloader.swf
[2012.05.25 16:01:44 | 000,111,220 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\amvp\amvp_loader.swf
[2012.05.25 16:01:45 | 000,105,594 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\bbn\bbn_loader.swf
[2012.05.25 16:01:45 | 000,032,785 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\bj\bjsd_mh5_loader.swf
[2012.05.25 16:01:45 | 000,024,204 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\bj\bj_mh5_loader.swf
[2012.05.24 16:47:02 | 000,036,364 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\bjs\bjs_loader.swf
[2012.05.25 16:01:46 | 000,161,818 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\dt2\dt2_loader.swf
[2012.05.25 16:01:47 | 000,146,557 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\eas\eas_loader.swf
[2012.05.25 16:01:48 | 000,099,632 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\essc\essc_loader.swf
[2012.05.25 16:01:48 | 000,051,248 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\fsc\fsc_loader.swf
[2012.05.25 16:01:49 | 000,262,708 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\hlf\hlf_loader.swf
[2012.05.25 16:01:49 | 000,056,230 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\irm3sc\irm3sc_loader.swf
[2012.05.25 16:01:50 | 000,065,083 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\kkgsc\kkgsc_loader.swf
[2012.05.25 16:01:51 | 000,088,776 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\lom\lom_loader.swf
[2012.05.24 16:46:46 | 000,046,018 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\pbj\pbj_loader.swf
[2012.05.25 16:01:54 | 000,050,539 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\pfbj\pfbj_mh5_loader.swf
[2012.05.25 16:01:54 | 000,071,420 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\pks\pks_loader.swf
[2012.05.24 16:47:58 | 000,026,430 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\pon\pon_mh5_loader.swf
[2012.05.25 16:01:54 | 000,075,011 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\qbd\qbd_loader.swf
[2012.05.25 16:01:55 | 000,053,318 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\ro3d\ro3d_loader.swf
[2012.05.25 16:01:55 | 000,049,089 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\sbj\sbj_loader.swf
[2012.05.25 16:01:56 | 000,151,334 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\scs\scs_loader.swf
[2012.05.25 16:02:00 | 000,302,265 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\spm\spm_loader.swf
[2012.05.25 16:02:01 | 000,070,241 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\ssa\ssa_loader.swf
[2012.05.25 16:02:01 | 000,097,805 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\mgames\data\modules\wc\wc_loader.swf
[2012.04.12 15:14:44 | 000,000,384 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\shared\interface\dialog3\loader.png
[2012.04.12 15:14:44 | 000,001,343 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Casino Riva\data\shared\interface\dialog3\loader_anim.png
[2011.06.15 15:26:23 | 006,291,972 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\g\Pro Cycling Manager Tour de France 2011 CloneDVD-ali213 by Sonuy (by LOADER) .rar
[2011.09.03 22:24:02 | 000,001,771 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Programy\MP3 Downloader.lnk
[2011.04.19 11:17:46 | 000,000,660 | ---- | M] () -- \Documents and Settings\Administrator\Plocha\XXXX\Programy\VDownloader.lnk
[2012.08.22 16:55:30 | 000,024,610 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\a\aupreloader.12b4c77f15053633e8070474855c45b2.swf
[2012.08.22 16:55:38 | 000,072,080 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\a\auroraloader.1830fcdde2caf1363a6be924248f657c.swf
[2012.08.22 16:16:44 | 000,021,364 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\i\icon_reloader.f2cfe662226abfd8c32674e726165f47.png
[2012.08.22 16:16:32 | 000,003,916 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\i\icon_reloader_sml.0d2837f460a0b8a35cf50dda6fae7d7e.png
[2012.08.22 16:15:36 | 000,000,472 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\l\lobby_loader.341ea969d2b05abb786cf22787d7b35d.inf
[2012.08.22 16:15:37 | 000,003,512 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\MGS\cache\l\lobby_loader.dedbfe5bd17f51637cc0ac53b54d0151.inf
[2012.02.29 08:49:32 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2012.02.29 08:49:32 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2011.04.19 11:17:46 | 000,000,672 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\Programy\VDOWNLOADER\VDownloader.lnk
[2012.07.26 18:16:10 | 000,001,644 | ---- | M] () -- \Documents and Settings\All Users\Nabídka Start\YourFileDownloader\YourFile Downloader.lnk
[2012.07.26 18:16:10 | 000,001,638 | ---- | M] () -- \Documents and Settings\All Users\Plocha\YourFile Downloader.lnk
[2012.08.23 13:13:00 | 000,609,424 | ---- | M] () -- \Poker\Paddy Power Poker\data\loader.dll
[2012.08.23 13:12:38 | 000,002,751 | ---- | M] () -- \Poker\Paddy Power Poker\data\loader.gam
[2012.07.23 22:39:58 | 000,005,265 | ---- | M] () -- \Poker\Paddy Power Poker\data\mgames\[en]\as2\movies\shared\loader.swf
[2012.08.23 13:12:39 | 000,002,608 | ---- | M] () -- \Poker\Paddy Power Poker\widgetbar\widgets\themecloud\resources\html\img\ajax-loader.gif
[2012.08.28 18:38:28 | 000,609,424 | ---- | M] () -- \Poker\Poker 770\data\loader.dll
[2012.08.16 13:39:45 | 000,002,707 | ---- | M] () -- \Poker\Poker 770\data\loader.gam
[2011.12.20 11:14:04 | 000,005,265 | ---- | M] () -- \Poker\Poker 770\data\mgames\[en]\as2\movies\shared\loader.swf
[2012.08.16 13:39:46 | 000,002,608 | ---- | M] () -- \Poker\Poker 770\widgetbar\widgets\themecloud\resources\html\img\ajax-loader.gif
[2012.09.04 12:54:00 | 000,609,424 | ---- | M] () -- \Poker\Titan Poker\data\loader.dll
[2012.08.13 10:52:21 | 000,002,709 | ---- | M] () -- \Poker\Titan Poker\data\loader.gam
[2012.08.13 10:54:40 | 000,005,265 | ---- | M] () -- \Poker\Titan Poker\data\mgames\[en]\as2\movies\shared\loader.swf
[2012.08.13 10:52:22 | 000,002,608 | ---- | M] () -- \Poker\Titan Poker\widgetbar\widgets\themecloud\resources\html\img\ajax-loader.gif
[2012.09.01 21:50:17 | 000,609,424 | ---- | M] () -- \Poker\William Hill Poker\data\loader.dll
[2012.06.30 22:41:54 | 000,002,716 | ---- | M] () -- \Poker\William Hill Poker\data\loader.gam
[2012.06.30 22:41:55 | 000,002,608 | ---- | M] () -- \Poker\William Hill Poker\widgetbar\widgets\themecloud\resources\html\img\ajax-loader.gif
[2011.01.28 06:45:02 | 000,015,473 | ---- | M] () -- \postgreSQL\doc\pljava\pljava\org\postgresql\pljava\sqlj\Loader.html
[2011.01.28 04:13:46 | 000,000,708 | ---- | M] () -- \postgreSQL\include\server\utils\dynamic_loader.h
[2010.08.24 09:53:04 | 000,071,008 | ---- | M] () -- \Program Files\2K Games\Mafia II\pc\PhysXLoader.dll
[2012.10.18 12:39:08 | 000,000,483 | ---- | M] () -- \Program Files\8484575754FMFMFMFM13.part1\8484575754FMFMFMFM13\Football Manager 2013\fm.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2001.01.16 06:55:36 | 000,053,248 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\COLOADER.DLL
[2001.01.16 04:22:34 | 000,002,560 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\COLOADER.TLB
[2009.07.21 21:57:15 | 000,016,428 | ---- | M] () -- \Program Files\Cyanide\Pro Cycling Manager - Season 2010\Gui\cyclist_photo\lloader.tga
[2012.07.20 22:36:18 | 000,016,428 | ---- | M] () -- \Program Files\Cyanide\Pro Cycling Manager - Season 2012\Gui\cyclist_photo\lloader.tga
[2006.05.04 17:16:50 | 000,333,840 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\hideout\Loader_Sequence.WAV
[2006.05.04 17:16:50 | 000,005,952 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\hideout\Loader_Sequence.WHD
[2006.05.04 17:16:50 | 000,351,949 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\hideout\Loader_Sequence.ZIP
[2006.05.04 17:17:20 | 000,313,360 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M00\Loader_Sequence.WAV
[2006.05.04 17:17:20 | 000,005,392 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M00\Loader_Sequence.WHD
[2006.05.04 17:17:20 | 000,570,691 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M00\Loader_Sequence.ZIP
[2006.05.04 17:18:02 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M01\Loader_Sequence.WAV
[2006.05.04 17:18:02 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M01\Loader_Sequence.WHD
[2006.05.04 17:18:02 | 000,711,223 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M01\Loader_Sequence.ZIP
[2006.05.04 17:18:52 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M02\Loader_Sequence.WAV
[2006.05.04 17:18:52 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M02\Loader_Sequence.WHD
[2006.05.04 17:18:52 | 000,634,201 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M02\Loader_Sequence.ZIP
[2006.05.04 17:19:46 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M03\Loader_Sequence.WAV
[2006.05.04 17:19:46 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M03\Loader_Sequence.WHD
[2006.05.04 17:19:46 | 000,707,294 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M03\Loader_Sequence.ZIP
[2006.05.04 17:20:20 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M04\Loader_Sequence.WAV
[2006.05.04 17:20:20 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M04\Loader_Sequence.WHD
[2006.05.04 17:20:20 | 000,531,761 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M04\Loader_Sequence.ZIP
[2006.05.04 17:21:00 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M05\Loader_Sequence.WAV
[2006.05.04 17:21:00 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M05\Loader_Sequence.WHD
[2006.05.04 17:21:00 | 000,591,946 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M05\Loader_Sequence.ZIP
[2006.05.04 17:21:50 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M06\Loader_Sequence.WAV
[2006.05.04 17:21:50 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M06\Loader_Sequence.WHD
[2006.05.04 17:21:50 | 000,617,459 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M06\Loader_Sequence.ZIP
[2006.05.04 17:22:26 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M08\Loader_Sequence.WAV
[2006.05.04 17:22:26 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M08\Loader_Sequence.WHD
[2006.05.04 17:22:28 | 000,440,664 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M08\Loader_Sequence.ZIP
[2006.05.04 17:23:14 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M09\Loader_Sequence.WAV
[2006.05.04 17:23:14 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M09\Loader_Sequence.WHD
[2006.05.04 17:23:14 | 000,550,700 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M09\Loader_Sequence.ZIP
[2006.05.04 17:24:14 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M10\Loader_Sequence.WAV
[2006.05.04 17:24:14 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M10\Loader_Sequence.WHD
[2006.05.04 17:24:14 | 000,650,200 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M10\Loader_Sequence.ZIP
[2006.05.04 17:24:58 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M11\Loader_Sequence.WAV
[2006.05.04 17:24:58 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M11\Loader_Sequence.WHD
[2006.05.04 17:24:58 | 000,596,635 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M11\Loader_Sequence.ZIP
[2006.05.04 17:25:40 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M12\Loader_Sequence.WAV
[2006.05.04 17:25:40 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M12\Loader_Sequence.WHD
[2006.05.04 17:25:40 | 000,668,734 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M12\Loader_Sequence.ZIP
[2006.05.04 17:26:20 | 000,320,528 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M13\Loader_Sequence.WAV
[2006.05.04 17:26:20 | 000,005,616 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M13\Loader_Sequence.WHD
[2006.05.04 17:26:20 | 000,632,940 | ---- | M] () -- \Program Files\Eidos\Hitman Blood Money CZ\Scenes\M13\Loader_Sequence.ZIP
[2012.05.10 11:45:34 | 000,204,800 | ---- | M] () -- \Program Files\Holdem Manager 2\TableScannerDllLoader.exe
[2011.01.19 14:14:02 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.01.19 14:14:02 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2011.01.19 14:14:03 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.01.19 14:14:02 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.2\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.03.13 23:15:10 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\icq_profile\preloader.html
[2011.01.30 13:04:15 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_forms\preloader.html
[2011.01.30 13:04:15 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.2\Xtraz\icq\content\profile_lightboxs\preloader.html
[2007.09.23 21:01:24 | 000,029,413 | ---- | M] () -- \Program Files\IVCsoft\Internet Video Converter 1.52 en (unicode)\ivc_video_downloader.jpg
[2012.07.13 18:14:46 | 000,007,717 | ---- | M] () -- \Program Files\minecraft\.minecraft\ForgeModLoader-0.log
[2012.08.06 23:13:22 | 000,000,331 | ---- | M] () -- \Program Files\minecraft\.minecraft\ModLoader.txt
[2012.08.06 23:13:20 | 000,000,103 | ---- | M] () -- \Program Files\minecraft\.minecraft\config\ModLoader.cfg
[2009.05.31 02:21:00 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2010.06.07 21:11:08 | 000,006,262 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2011.01.15 12:03:31 | 000,021,504 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.06.07 21:19:10 | 000,000,171 | ---- | M] () -- \Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2011.01.15 12:04:02 | 000,029,184 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.06.09 16:21:40 | 000,003,874 | ---- | M] () -- \Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2012.09.28 08:01:28 | 000,002,713 | ---- | M] () -- \Program Files\PartyGaming\components\uriloader.xpt
[2012.02.21 21:11:15 | 000,002,688 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\language\en_US\images\fcgames\cardgames\blackjack\multihandbj\Loader.swf
[2012.02.21 21:11:28 | 000,002,688 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\language\en_US\images\fcgames\roulette\Loader.swf
[2012.06.08 16:04:19 | 000,035,024 | ---- | M] () -- \Program Files\PartyGaming\PartyCasino\Uninstall\Preloader.jpg
[2012.07.26 19:39:32 | 000,000,857 | ---- | M] () -- \Program Files\PartyGaming\PartyGammon\preloader.html
[2012.06.08 16:04:21 | 000,015,238 | ---- | M] () -- \Program Files\PartyGaming\PartyGammon\Uninstall\Preloader.jpg
[2012.09.26 13:42:18 | 000,000,857 | ---- | M] () -- \Program Files\PartyGaming\PartyPoker\preloader.html
[2012.09.26 13:42:58 | 000,003,948 | ---- | M] () -- \Program Files\PartyGaming\PartyPoker\Images\loader.gif
[2012.09.26 13:42:58 | 000,002,086 | ---- | M] () -- \Program Files\PartyGaming\PartyPoker\Images\rounded_loader.gif
[2011.11.12 07:26:54 | 000,000,804 | ---- | M] () -- \Program Files\PartyGaming\PartyPoker\Images\tableloadertint_bg.png
[2012.06.08 16:04:18 | 000,025,096 | ---- | M] () -- \Program Files\PartyGaming\PartyPoker\Uninstall\Preloader.jpg
[2012.10.23 17:15:15 | 000,013,664 | ---- | M] () -- \Program Files\PartyGaming\SmartUpgrader\Preloader.jpg
[2011.10.31 13:57:08 | 000,000,483 | ---- | M] () -- \Program Files\Sega\Football Manager 2012\Editor\Editor.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2011.10.31 13:57:08 | 000,000,483 | ---- | M] () -- \Program Files\Sega\Football Manager 2012\Resource Archiver\Resource Archiver.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2006.08.18 17:50:06 | 000,110,592 | ---- | M] () -- \Program Files\SmarThru 4\WebUploaderLib.dll
[2006.08.18 17:41:14 | 000,000,200 | ---- | M] () -- \Program Files\SmarThru 4\English\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:16 | 000,000,190 | ---- | M] () -- \Program Files\SmarThru 4\French\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:18 | 000,000,196 | ---- | M] () -- \Program Files\SmarThru 4\German\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:38 | 000,000,189 | ---- | M] () -- \Program Files\SmarThru 4\Hungarian\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:34 | 000,000,184 | ---- | M] () -- \Program Files\SmarThru 4\Chinese (Traditional)\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:12 | 000,000,178 | ---- | M] () -- \Program Files\SmarThru 4\Chinese\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:20 | 000,000,194 | ---- | M] () -- \Program Files\SmarThru 4\Italian\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:22 | 000,000,191 | ---- | M] () -- \Program Files\SmarThru 4\Korean\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:40 | 000,000,194 | ---- | M] () -- \Program Files\SmarThru 4\Polish\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:28 | 000,000,190 | ---- | M] () -- \Program Files\SmarThru 4\Portuguese (Brazilian)\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:30 | 000,000,192 | ---- | M] () -- \Program Files\SmarThru 4\Portuguese\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:24 | 000,000,200 | ---- | M] () -- \Program Files\SmarThru 4\Russian\SmarThruRes-WebUploaderLib.xml
[2006.08.18 17:41:26 | 000,000,193 | ---- | M] () -- \Program Files\SmarThru 4\Spanish\SmarThruRes-WebUploaderLib.xml
[2011.10.31 14:57:08 | 000,000,483 | ---- | M] () -- \Program Files\Sports Interactive\fm12\football manager 2012\Editor\Editor.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2011.10.31 14:57:08 | 000,000,483 | ---- | M] () -- \Program Files\Sports Interactive\fm12\football manager 2012\Resource Archiver\Resource Archiver.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2011.10.13 18:06:59 | 000,000,483 | ---- | M] () -- \Program Files\Steam\steamapps\common\football manager 2012 demo\fm.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2012.10.27 15:24:12 | 000,000,483 | ---- | M] () -- \Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.app\Contents\lib\Chromium Framework.framework\Resources\nacl_loader.sb
[2012.05.24 16:09:08 | 000,221,184 | ---- | M] () -- \Program Files\SuperiorCasino\downloader.dll
[2012.05.24 16:10:02 | 000,064,736 | ---- | M] () -- \Program Files\SuperiorCasino\Loader.exe
[2012.05.24 16:25:17 | 000,187,107 | ---- | M] () -- \Program Files\SuperiorCasino\games\ASwitchInTimeCasingLoader.swf
[2007.04.24 17:51:34 | 000,053,248 | ---- | M] () -- \Program Files\Timeline Interactive\Cellfactor Revolution\System\PhysXLoader.dll
[2009.11.16 09:59:24 | 002,654,216 | ---- | M] () -- \Program Files\VDOWNLOADER\VDownloader.exe
[2010.03.15 11:28:24 | 000,045,056 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2012.07.26 18:16:07 | 001,354,120 | ---- | M] () -- \Program Files\YourFileDownloader\Downloader.exe
[2004.08.17 15:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.03 22:59:38 | 000,230,400 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.exe
[2004.08.03 22:59:38 | 000,278,016 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.ntd
[2012.05.02 11:04:16 | 000,204,800 | ---- | M] () -- \WINDOWS\assembly\GAC_32\TableScannerDllLoader\1.0.0.16__29926ebfc40981e9\TableScannerDllLoader.exe
[2012.11.05 23:22:06 | 000,204,800 | ---- | M] () -- \WINDOWS\assembly\GAC_32\TableScannerDllLoader\1.0.0.18__29926ebfc40981e9\TableScannerDllLoader.exe
[2012.11.05 23:22:05 | 000,078,178 | ---- | M] () -- \WINDOWS\Prefetch\TABLESCANNERDLLLOADER.EXE-03E4E70F.pf
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.14 00:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 00:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 08:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2011.06.10 14:42:32 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 11\shockwave_Projector_Loader.dcr
[2011.06.10 14:47:22 | 000,009,622 | ---- | M] () -- \WINDOWS\system32\Macromed\Shockwave 10\shockwave_Projector_Loader.dcr
[2012.05.02 11:04:17 | 000,002,279 | ---- | M] () -- \WINDOWS\WinSxS\Manifests\x86_TableScannerDllLoader_29926ebfc40981e9_1.0.0.16_x-ww_284b88c4.manifest
[2012.11.05 23:22:06 | 000,002,279 | ---- | M] () -- \WINDOWS\WinSxS\Manifests\x86_TableScannerDllLoader_29926ebfc40981e9_1.0.0.18_x-ww_284b88c6.manifest
[2012.05.02 11:04:16 | 000,204,800 | ---- | M] () -- \WINDOWS\WinSxS\x86_TableScannerDllLoader_29926ebfc40981e9_1.0.0.16_x-ww_284b88c4\TableScannerDllLoader.exe
[2012.11.05 23:22:06 | 000,204,800 | ---- | M] () -- \WINDOWS\WinSxS\x86_TableScannerDllLoader_29926ebfc40981e9_1.0.0.18_x-ww_284b88c6\TableScannerDllLoader.exe
[2010.04.08 21:27:11 | 000,238,864 | ---- | M] () -- \zachrana\Program Files\EA Sports\FIFA Online\HttpDownloader.dll
[2009.06.16 08:23:49 | 000,000,744 | ---- | M] () -- \zachrana\Program Files\EA Sports\FIFA Online\frontendasset\tpl\25__FlashLoader.tpl
[2010.02.17 04:44:10 | 000,006,308 | ---- | M] () -- \zachrana\Program Files\OpenOffice.org 3\Basis\program\pythonloader.py
[2010.05.31 16:38:53 | 000,021,504 | ---- | M] () -- \zachrana\Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2010.02.17 11:37:14 | 000,000,171 | ---- | M] () -- \zachrana\Program Files\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2010.05.31 16:39:35 | 000,029,696 | ---- | M] () -- \zachrana\Program Files\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.02.18 01:06:56 | 000,003,872 | ---- | M] () -- \zachrana\Program Files\OpenOffice.org 3\URE\java\unoloader.jar
[2007.02.05 14:54:52 | 000,045,056 | ---- | M] () -- \zachrana\Program Files\Ulead Systems\DVD MovieFactory for TOSHIBA\Ulead DVD MovieFactory 5\accLoader.exe
[2006.03.20 10:43:36 | 000,000,273 | ---- | M] () -- \zachrana\Program Files\Ulead Systems\DVD MovieFactory for TOSHIBA\Ulead DVD MovieFactory 5\accLoader.ini
[2010.09.08 13:08:56 | 000,002,910 | ---- | M] () -- \zachrana\Programs\PartyGaming\components\uriloader.xpt
[2010.10.01 09:55:11 | 000,002,688 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyCasino\language\en_US\images\fcgames\cardgames\blackjack\multihandbj\Loader.swf
[2010.10.01 09:55:24 | 000,002,688 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyCasino\language\en_US\images\fcgames\roulette\Loader.swf
[2010.09.08 14:44:10 | 000,000,857 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyPoker\preloader.html
[2010.09.08 14:45:06 | 000,003,948 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyPoker\Images\loader.gif
[2010.09.08 14:45:06 | 000,000,923 | ---- | M] () -- \zachrana\Programs\PartyGaming\PartyPoker\Images\tableloadertint_bg.png
[2010.09.08 13:07:24 | 000,013,664 | ---- | M] () -- \zachrana\Programs\PartyGaming\SmartUpgrader\Preloader.jpg
[2010.06.07 16:48:18 | 000,005,795 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2010.06.07 16:48:18 | 000,005,520 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2010.06.07 16:48:18 | 000,004,180 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2010.06.07 16:48:18 | 000,005,520 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\imApp\theme\MUICoreLib\xtraLoader.swf
[2010.10.14 18:27:00 | 000,000,402 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\Xtraz\icq\content\icq_profile\preloader.html
[2010.08.08 16:59:51 | 000,000,402 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\Xtraz\icq\content\profile_forms\preloader.html
[2010.10.14 18:27:02 | 000,000,402 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.06.07 16:48:55 | 000,552,798 | ---- | M] () -- \zachrana\Programy\ICQ7\ICQ7.2\Xtraz\icq\theme\game_center\loaderBkg.png
[2010.02.10 17:10:14 | 000,045,056 | ---- | M] () -- \zachrana\Programy\Winrar\RarExtLoader.exe
[2010.10.16 12:15:53 | 000,002,931 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HSRWK13J\preloader[1].swf
[2010.10.19 19:14:25 | 000,002,931 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYZ0ENVC\preloader[1].swf
[2010.09.25 16:32:06 | 000,001,891 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VFYZJS4H\preloader[1].js
[2010.10.20 21:24:59 | 000,000,759 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1XTR819A\loader[1].gif
[2010.10.20 23:19:36 | 000,000,002 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1XTR819A\Special_BannerListLoader[1]
[2010.10.17 20:03:10 | 000,000,673 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7SVUOT7M\loader[1].gif
[2010.07.12 15:36:25 | 000,000,673 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8VIYP0C6\loader[1].gif
[2010.07.12 10:03:27 | 000,002,001 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8VIYP0C6\orange-loader[1].gif
[2010.10.20 21:53:12 | 000,000,673 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CAMQGJLY\loader[1].gif
[2010.07.12 13:29:01 | 000,001,128 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DFR4Y7D1\tabs_slides_def_loader[1].js
[2010.10.18 20:54:37 | 000,000,124 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LDFDHOUB\iframes_api_loader[1].html
[2010.10.20 21:25:53 | 000,002,608 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LDFDHOUB\loader[1].gif
[2008.09.19 13:54:26 | 000,339,968 | ---- | M] () -- \zachrana\Users\David\AppData\Local\Temp\IDC2.tmp\DWPDownloader.exe
[2010.06.21 10:35:49 | 000,000,054 | ---- | M] () -- \zachrana\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\C2JUG529\media.mtvnservices.com\player\loader\loaderLogging.sol
[2010.08.30 13:33:56 | 000,043,008 | ---- | M] () -- \zachrana\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vq5lnz81.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 214 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8927A071
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:83E63F62

< End of report >

Extras.txt soubor zde:


OTL Extras logfile created on: 6.11.2012 17:47:32 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,25 Gb Available Physical Memory | 69,40% Memory free
5,04 Gb Paging File | 3,77 Gb Available in Paging File | 74,72% Paging File free
Paging file location(s): C:\pagefile.sys 2000 4000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 931,50 Gb Total Space | 607,79 Gb Free Space | 65,25% Space Free | Partition Type: NTFS
Drive E: | 1,95 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 1,88 Gb Total Space | 0,06 Gb Free Space | 3,41% Space Free | Partition Type: FAT

Computer Name: XYZ-8PB4Y2KQ47T | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"5432:TCP" = 5432:TCP:*:Enabled:postgres

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011 -- (Sports Interactive)
"C:\Program Files\FlightGear\bin\Win32\fgfs.exe" = C:\Program Files\FlightGear\bin\Win32\fgfs.exe:*:Enabled:fgfs -- ()
"C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe" = C:\Program Files\Supermassive Games\Big Match Striker\BigMatchLauncher.exe:*:Enabled:Big Match Striker -- (Supermassive Games Ltd.)
"C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe" = C:\Documents and Settings\All Users\Dokumenty\Big Match Striker\BigMatchStriker.exe:*:Enabled:BigMatchStriker -- ()
"C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe" = C:\Documents and Settings\Administrator\Plocha\hry\Binaries\Win32\UDK.exe:*:Enabled:UDK -- (Epic Games, Inc.)
"C:\Program Files\Clonk Rage\Clonk.exe" = C:\Program Files\Clonk Rage\Clonk.exe:*:Enabled:Clonk Rage -- (RedWolf Design GmbH)
"C:\Program Files\Sega\Virtua Tennis 4\VT4.exe" = C:\Program Files\Sega\Virtua Tennis 4\VT4.exe:*:Enabled:Virtua Tennis 4™ -- (SEGA)
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth -- (Google)
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2011
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2011\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2011 - Autorun
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Program Files\Cossacks\dmcr.exe" = C:\Program Files\Cossacks\dmcr.exe:*:Enabled:dmcr -- (-GSC-)
"C:\Program Files\Warzone 2100\warzone2100.exe" = C:\Program Files\Warzone 2100\warzone2100.exe:*:Enabled:Warzone 2100 -- (Warzone 2100 Project)
"C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe" = C:\Documents and Settings\Administrator\Plocha\hry\PORSCHE\Porsche.exe:*:Enabled:Porsche -- ()
"C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe" = C:\Program Files\Steam\steamapps\common\football manager 2012 demo\fm.exe:*:Enabled:Football Manager 2012 Demo -- (Sports Interactive)
"C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE" = C:\Program Files\Atari\RollerCoaster Tycoon 3 Platinum\RCT.EXE:*:Enabled:RCT -- ()
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe" = C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe" = C:\Program Files\Electronic Arts\BattleForge\Bootstrapper.exe:*:Enabled:BattleForge™ Launcher -- (EA Phenomic)
"C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe" = C:\Program Files\Electronic Arts\BattleForge\BattleForge.exe:*:Enabled:BattleForge™ -- (EA Phenomic)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\YourFileDownloader\Downloader.exe" = C:\Program Files\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader -- (http://yourfiledownloader.com)
"C:\Program Files\YourFileDownloader\YourFile.exe" = C:\Program Files\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader -- (http://yourfiledownloader.com)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Tunngle\TnglCtrl.exe" = C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service -- (Tunngle.net GmbH)
"C:\Program Files\Tunngle\Tunngle.exe" = C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client -- (Tunngle.net GmbH)
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2012 -- (Cyanide)
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2012\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2012 - Autorun -- ()
"C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe" = C:\Documents and Settings\Administrator\Data aplikací\PowerChallenge\PowerSoccer\PowerSoccer.exe:*:Enabled:PowerSoccer -- ()
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe" = C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter -- (Cyanide)
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\PCM.exe:*:Enabled:Pro Cycling Manager - Season 2010 -- (Cyanide)
"C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe" = C:\Program Files\Cyanide\Pro Cycling Manager - Season 2010\Autorun\Exe\Autorun.exe:*:Enabled:Pro Cycling Manager - Season 2010 - Autorun -- ()
"C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe" = C:\Program Files\Origin Games\FIFA 13 Demo\Game\fifa13_demo.exe:*:Enabled:FIFA 13 Demo -- (Electronic Arts)
"C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe" = C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe:*:Enabled:DTX broker
"C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe" = C:\Program Files\Steam\steamapps\common\Football Manager 2013 Demo\fm.exe:*:Enabled:Football Manager 2013 Demo -- (Sports Interactive)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01339AE5-04D4-43F8-008E-13AD788DC4F7}" = SimCity 4
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B82D6C6-9ECC-4710-97AB-5CE482E72852}_is1" = TableScan Turbo RC4 build 8
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{14D08502-FEE4-40E5-90D3-8A967A1D8BA2}" = Readiris Pro 10
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{2612935F-8A59-4473-B9C2-06045FC17C90}" = Nosferatu
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 29
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2806ECD7-D23E-45D7-A918-D6E5EA1C4D8E}" = S.W.I.N.E.
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{38979A0F-DF38-4CDA-89DA-35E49C8A452C}" = AMD Catalyst Install Manager
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3C630BB8-692D-4495-A0BD-40336CD51F99}" = ICM Trainer Light
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B10.0427.1
"{3F499657-766A-4A5F-AEE9-A1F8D295A4CE}" = FIFA 13 Demo
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = DEMO FIFA 12
"{42DE940E-8037-4266-9FBF-5A3AEDA39E96}" = Holdem Manager
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0728.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B35F00C-E63D-40DC-9839-DF15A33EAC46}" = Grand Theft Auto Vice City
"{4C454033-8240-425E-A170-1C648FCB74FD}" = PokerStrategy.com Equilab
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{53450FA2-E900-456E-9715-501000008200}" = Virtua Tennis 4™
"{54430DDE-31E7-4153-9FEA-09AF73BA1138}" = Magnus 2011
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{683315B1-68E0-4A1B-9397-509C3EB911D2}" = MusicJet
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{6D0C6BE4-F674-43D2-96BC-3509345108C9}_is1" = PokerStove version 1.24
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{737478D1-D840-4166-8D75-858C92BF77AE}" = Big Match Striker
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110378170}" = Catan - The Computer Game
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = RollerCoaster Tycoon 3 Platinum
"{90F1943D-EA4A-4460-B59F-30023F3BA69A}" = SmarThru 4
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}" = Browser Configuration Utility
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Czech
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C325F588-D6B1-4A7F-B6A2-914C75DDA348}" = Morrowind
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{C580908C-B3BA-4C19-BD60-16F02F272201}" = BattleForge™
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0525.1
"{CA567AD5-33A4-403D-86D1-EE2D38251951}_is1" = VDownloader 1.12
"{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE863D7F-218F-40EE-B633-5DB1FF9419B5}_is1" = Cossacks - Napoleonic Wars
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{DF315348-721C-40B8-BAE2-58C6C7D935A2}" = Empire Earth II
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic VX
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F2F506E1-047B-457C-9611-0D60F930BF5E}" = PokerStrategy.com Elephant
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"{FB86EDAA-B17D-447E-972B-5580A4C6AE3C}_is1" = Legie
"{FD0C9330-E89A-4520-9A47-FE01366D5633}" = IBM ViaVoice TTS Runtime v6.405 - Deutsch
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"888poker" = 888poker
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AirXonix_is1" = AirXonix version 1.41
"ALUpdate_is1" = ALTools Update
"ALZip_is1" = ALZip
"ATI Display Driver" = ATI Display Driver
"aTube Catcher" = aTube Catcher
"AzSDK HardwareID DLL Demo Version_is1" = AzSDK HardwareID DLL 5.00
"Caesar 3" = Caesar 3
"Casino Riva" = Casino Riva
"CCleaner" = CCleaner
"Cellfactor Revolution" = Cellfactor Revolution
"Clonk Rage" = Clonk Rage
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.61.3
"CryptextNT4" = Cryptext (Remove Only)
"Czech Soccer Manager 2002 FE" = Czech Soccer Manager 2002 FE
"DAEMON Tools Lite" = DAEMON Tools Lite
"DivX Codec" = DivX Codec
"DivX Setup.divx.com" = DivX Setup
"Enable S3 for USB Device" = Enable S3 for USB Device
"ePub Maker_is1" = ePub Maker version 1.65
"EW : Cossacks" = EW : Cossacks
"FlightGear_is1" = FlightGear v0.9.9
"Football Manager 2011" = Football Manager 2011
"Football Manager 2012_is1" = Football Manager 2012
"Foxit Reader" = Foxit Reader
"Future Wars" = Future Wars
"GameCenter_is1" = GameCenter 1.3.0.5
"GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker
"GamesBar" = GamesBar 2.0.1.82
"GFWL_{53450FA2-E900-456E-9715-501000008200}" = Virtua Tennis 4™
"Gridspot" = Gridspot
"Guitar Pro 5_is1" = Guitar Pro 5.2
"Hide Your IP Address_is1" = Hide Your IP Address
"Holdem Bot_is1" = Holdem Bot 2.7
"HoldemManager2" = Holdem Manager 2
"Homeworld2" = Homeworld2
"HWiNFO32_is1" = HWiNFO32 Version 3.84
"ie8" = Windows Internet Explorer 8
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0728.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0525.1
"InstallShield_{CA67FB1D-A367-4883-9004-435BAB1ECAAB}" = Disciples 2
"IsoBuster_is1" = IsoBuster 2.8.5
"jetAudio 8.0.x Czech Language Pack" = jetAudio 8.0.x Czech Language Pack
"KajkoiKokosz1CZ_is1" = Kajko a Kokoš v. 1.027
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.5.0 (Full)
"lgomorrowindczechaio_is1" = lightning morrowind czech all-in-one beta (score)
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mafia II_is1" = Mafia II
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Mozilla Firefox (3.6.23)" = Mozilla Firefox (3.6.23)
"Mp3tag" = Mp3tag v2.48
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"mummysgold" = Mummys Gold Casino
"MusicJet" = MusicJet
"n2n Gui_is1" = n2n Gui 0.49
"NSS" = Norton Security Scan
"OpenAL" = OpenAL
"Origin" = Origin
"Paddy Power Poker" = Paddy Power Poker
"PartyCasino" = PartyCasino
"PartyGammon" = PartyGammon
"PartyPoker" = PartyPoker
"PK-PCSU_is1" = Zrychleni Pocitace
"Plus500" = Plus500
"PocketInsanity OpenJazz" = PocketInsanity OpenJazz (remove only)
"Poker 770" = Poker 770
"POKERobot_is1" = POKERobot v2.12
"PokerStars" = PokerStars
"PokerTracker3" = PokerTracker 3 (remove only)
"PostgreSQL 8.4" = PostgreSQL 8.4
"PowerISO" = PowerISO
"Pro Cycling Manager 2010_is1" = Pro Cycling Manager - Season 2010 version 1.0.4.2
"Pro Cycling Manager 2012_is1" = Pro Cycling Manager - Season 2012 version 1.2.0.0
"PunkBusterSvc" = PunkBuster Services
"RON 2010 ENGLISH DL" = Rulers Of Nations
"Samsung SCX-4200 Series" = Samsung SCX-4200 Series
"Sierra Utilities" = Sierra Utilities
"Steam App 216530" = Football Manager 2013 Demo
"Steam App 71280" = Football Manager 2012 Demo
"SuperiorCasino" = Superior Casino
"TeamViewer 5" = TeamViewer 5
"TeamViewer 7" = TeamViewer 7
"TechPowerUp GPU-Z" = TechPowerUp GPU-Z
"Tennis Elbow 2011" = Tennis Elbow 2011 1.0f
"Titan Poker" = Titan Poker
"Totalcmd" = Total Commander (Remove or Repair)
"TT-Dynamic-Range 1.1" = TT-Dynamic-Range 1.1
"Tunngle beta_is1" = Tunngle beta
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"TXTReader 1.0" = TXTReader 1.0
"UltraISO_is1" = UltraISO Premium V9.36
"unibetpoker (Poker)" = Unibet
"uTorrent" = µTorrent
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player 1.1.8
"Warzone 2100" = Warzone 2100
"WIC" = Windows Imaging Component
"William Hill Poker" = William Hill Poker
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xvid_is1" = Xvid 1.2.2 final uninstall

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-790525478-113007714-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"ConcordGaming" = Concord Gaming
"d1821d843d27af9f" = PokerStrategy.com SideKick
"Google Chrome" = Google Chrome
"JoinMe" = join.me
"MediaGet" = MediaGet
"New LEGO Digital Designer" = LEGO Digital Designer
"Play89" = Play89
"Power Loader" = Power Challenge Game Plugin
"SpeechGrid" = SpeechGrid
"UnityWebPlayer" = Unity Web Player
"YourFileDownloader" = YourFileDownloader

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 4.11.2012 14:22:03 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 4.11.2012 14:23:13 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 4.11.2012 14:23:58 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 4.11.2012 14:24:33 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 4.11.2012 14:25:18 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 4.11.2012 14:25:58 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description =

Error - 5.11.2012 7:35:13 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description = 2012-11-05 12:35:13 CETFATAL: the database system is starting up

Error - 5.11.2012 7:35:15 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description = 2012-11-05 12:35:15 CETFATAL: the database system is starting up

Error - 5.11.2012 17:46:11 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace TennisElbow.exe, verze 1.0.0.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 6.11.2012 10:26:17 | Computer Name = XYZ-8PB4Y2KQ47T | Source = PostgreSQL | ID = 0
Description = 2012-11-06 15:26:17 CETFATAL: the database system is starting up

[ System Events ]
Error - 6.11.2012 10:26:21 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 6.11.2012 10:26:21 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 6.11.2012 10:41:51 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 6.11.2012 10:41:51 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 6.11.2012 10:47:07 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 6.11.2012 10:47:07 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 6.11.2012 12:01:19 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 6.11.2012 12:01:19 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 6.11.2012 12:10:06 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba DgiVecp neuspěla při spuštění v důsledku následující chyby:
%%20

Error - 6.11.2012 12:10:06 | Computer Name = XYZ-8PB4Y2KQ47T | Source = Service Control Manager | ID = 7000
Description = Služba SSPORT neuspěla při spuštění v důsledku následující chyby:
%%2


< End of report >

Nedivim se, ze to mate zaliskane kdyz to krmite crackama a podobnyma dobrotama, nehlede na porusovani autorkseho zakona Toto zde netolerujeme, pokud tam bude priste podobna sbirka, muze byt pomoc odmitnuta

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
  DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\Drivers\SSPORT.sys -- (SSPORT)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
  DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
  DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
  DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
  DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
  DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
  DRV - File not found [Kernel | Auto | Stopped] -- C:\Program Files\Gridspot\VMRuntime\VBoxDrv.sys -- (GridspotVMDriver)
  DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\CFcatchme.sys -- (CFcatchme)
  DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys -- (catchme)
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
  IE - HKU\.DEFAULT\..\URLSearchHook: - No CLSID value found
  IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
  IE - HKU\S-1-5-18\..\URLSearchHook: - No CLSID value found
  IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes,DefaultScope =
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{134A4E65-60BC-4f27-8996-BF9FEFAF87F6}: "URL" = http://search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=STDVM
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{36377DD7-B3EB-42f5-986F-680BAF59BA9D}: "URL" = http://start.msn.iplay.com/searchresult ... =chrome&q={searchTerms}
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{9EEBF001-1719-4426-83C1-8E08A0AD5299}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SPLBR2&pc=SPLH
  IE - HKU\S-1-5-21-790525478-113007714-725345543-500\..\SearchScopes\{D5545205-8F69-4b37-90BB-D9DF0CE64C27}: "URL" = http://www.google.com/cse?cx=partner-pu ... e=UTF-8&q={searchTerms}&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A4067623346
  FF - prefs.js..CT3072253.browser.search.defaultthis.engineName: true
  FF - prefs.js..browser.search.defaultenginename: "Search Results"
  FF - prefs.js..browser.search.selectedEngine: "Search Results"
  FF - prefs.js..browser.startup.homepage: "http://www.searchnu.com/406"
  FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=394&systemid=406&sr=0&q="
  FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "ICQ Search"
  FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
  FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
  FF - prefs.js..browser.startup.homepage: "http://start.icq.com/"
  FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=394&systemid=406&sr=0&q="
  FF - prefs.js..browser.search.order.1: "Search Results"
  [2011.01.12 16:37:35 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
  [2012.07.26 17:10:26 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
  [2011.01.19 14:14:50 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
  [2012.09.16 12:20:21 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
  [2012.01.18 19:21:15 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
  [2012.04.30 21:29:21 | 000,000,000 | ---D | M] (Oberon GamesBar) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\extensions\gamesbar@oberon-media.com
  [2012.08.09 13:58:43 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\conduit.xml
  [2012.04.25 09:10:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin-1.xml
  [2012.01.18 20:20:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin-2.xml
  [2011.11.07 01:26:39 | 000,001,056 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\icqplugin.xml
  [2012.09.16 12:19:38 | 000,002,519 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\Search_Results.xml
  [2012.01.18 19:20:49 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\rpt4mw6h.default\searchplugins\sweetim.xml
  CHR - homepage: http://www.searchnu.com/406
  CHR - default_search_provider: Search Results (Enabled)
  CHR - default_search_provider: search_url = http://dts.search-results.com/sr?src=cr ... 06&sr=0&q={searchTerms}
  CHR - default_search_provider: suggest_url =
  CHR - homepage: http://www.searchnu.com/406
  O2 - BHO: (GamesBarBHO Class) - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\2.0.1.82\oberontb.dll File not found
  O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
  O3 - HKU\S-1-5-21-790525478-113007714-725345543-500\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
  O3 - HKU\S-1-5-21-790525478-113007714-725345543-500\..\Toolbar\ShellBrowser: (no name) - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - No CLSID value found.
  O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
  O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
  [2012.11.02 13:09:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Football Manager 2013 MULTi13-FULL UNLOCKED
  [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
  [19 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [20 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
  [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
  [2012.11.06 18:05:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
  [2012.10.23 13:31:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
  [2012.10.31 16:19:27 | 000,000,418 | -H-- | M] () -- C:\WINDOWS\Tasks\Norton Security Scan for Administrator.job
  [2012.11.06 17:54:55 | 000,000,482 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{8C9EC464-D765-4ACB-8C79-8F27FCD39205}.job
  [2012.11.06 17:08:49 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
  [2012.11.06 17:08:40 | 000,000,316 | ---- | M] () -- C:\WINDOWS\Tasks\Your File Updater.job
  @Alternate Data Stream - 214 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:8927A071
  @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:83E63F62
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "BCU"=-
  "DivXUpdate"=-
  "DivX Download Manager"=-
  "Samsung PanelMgr"=-
  "QuickTime Task"=-
  "Adobe ARM"=-
  "SunJavaUpdateSched"=-
  "VirtualCloneDrive"=-
  "LogMeIn Hamachi Ui"=-
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Steam"=-
  "MediaGet2"=-
  "Skype"=-
  "ctfmon.exe"=-
  "SearchEngineProtection"=-
  "PokerStrategy.com SideKick"=-
  "uTorrent"=-
  "DAEMON Tools Lite"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGet2]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeechGrid]
  
  :files
  c:\Documents and Settings\Administrator\Dokumenty\Downloads\*crack*.*
  c:\Documents and Settings\Administrator\Mafia II\Mafia II Crack\Mafia2-Crack-SKIDROW-Pahyl.of.BonGo.rar
  c:\Program Files\Rockstar Games\GTA San Andreas\data\Decision\Craig\crack1.ped
  c:\Program Files\Rockstar Games\GTA San Andreas\GTA Extreme (PC) [ENG] (2oo8)\data\Decision\Craig\crack1.ped
  c:\Program Files\Sierra\Homeworld2\CRACK.EXE
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem