VIRY.CZ

Sem tam mi to ukáže, chyba graf. ovladače a aktualizuje se stránka. .jinak vše ok. Nevíte čím to může být ?

Logfile of random's system information tool 1.09 (written by random/random)
Run by Klára at 2012-11-24 13:53:29
Microsoft Windows 7 Home Premium
System drive C: has 35 GB (68%) free of 51 GB
Total RAM: 1977 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:53:35, on 24.11.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Klára.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9027 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 29647232
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe"
C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /welcome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="924.2.2083428094\1991833663" --disable-image-transport-surface --gpu-vendor-id=0x8086 --gpu-device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.1749 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="924.10.561814779\615913800" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/InstantChannel/Stable/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/6/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndMin10/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_64/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="924.14.2105120420\873123865" /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service --lang=cs
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi-broker --channel="924.17.587680613\1330424781" --lang=cs /prefetch:14
"C:\Users\Klára\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.5.3&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}

C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\
icq-search.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2032-11-08 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2032-11-08 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2012-03-20 1056320]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2009-07-02 500792]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-08-18 1157640]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"Guard.Mail.ru.gui"=C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2032-11-08 1564368]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2032-11-08 23:11:37 ----D---- C:\Users\Klára\AppData\Roaming\Macromedia
2032-11-08 23:11:37 ----D---- C:\Users\Klára\AppData\Roaming\Adobe
2032-11-08 09:05:52 ----D---- C:\Users\Klára\AppData\Roaming\vlc
2032-11-08 09:05:28 ----D---- C:\Program Files (x86)\VideoLAN
2032-11-08 08:55:38 ----D---- C:\ProgramData\ICQ
2032-11-08 08:55:38 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2032-11-08 08:55:37 ----D---- C:\Program Files (x86)\Guard-ICQ
2032-11-08 08:55:31 ----D---- C:\Users\Klára\AppData\Roaming\ICQ
2032-11-08 08:55:26 ----D---- C:\Program Files (x86)\ICQ7M
2032-11-08 08:48:18 ----D---- C:\Users\Klára\AppData\Roaming\Skype
2032-11-08 08:47:59 ----RD---- C:\Program Files (x86)\Skype
2032-11-08 08:47:40 ----D---- C:\ProgramData\Skype
2032-11-08 08:46:34 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2032-11-08 08:43:50 ----A---- C:\Windows\system32\npDeployJava1.dll
2032-11-08 08:43:50 ----A---- C:\Windows\system32\javaws.exe
2032-11-08 08:43:50 ----A---- C:\Windows\system32\deployJava1.dll
2032-11-08 08:43:41 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2032-11-08 08:43:41 ----A---- C:\Windows\system32\javaw.exe
2032-11-08 08:43:41 ----A---- C:\Windows\system32\java.exe
2032-11-08 08:43:33 ----D---- C:\Program Files\Java
2032-11-08 08:42:57 ----D---- C:\Windows\SYSWOW64\Macromed
2032-11-08 08:42:38 ----D---- C:\Users\Klára\AppData\Roaming\Facebook
2032-11-08 08:40:10 ----D---- C:\Users\Klára\AppData\Roaming\Mozilla
2032-11-08 08:40:06 ----D---- C:\ProgramData\Mozilla
2032-11-08 08:40:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2032-11-08 08:40:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2032-11-08 08:38:55 ----D---- C:\Program Files (x86)\Adobe
2032-11-08 08:37:24 ----D---- C:\ProgramData\Adobe
2032-11-08 08:36:51 ----D---- C:\Program Files (x86)\MSECache
2032-11-08 08:36:27 ----A---- C:\Windows\ODBC.INI
2032-11-08 08:35:18 ----D---- C:\Program Files (x86)\Microsoft Works
2032-11-08 08:35:15 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2032-11-08 08:35:09 ----D---- C:\Windows\PCHEALTH
2032-11-08 08:35:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2032-11-08 08:35:09 ----D---- C:\Program Files (x86)\Microsoft Office
2032-11-08 08:30:34 ----D---- C:\Program Files\WinRAR
2032-11-08 08:29:30 ----D---- C:\Program Files (x86)\PhotoFiltre
2032-11-08 08:28:19 ----D---- C:\Users\Klára\AppData\Roaming\Ahead
2032-11-08 08:27:50 ----D---- C:\Program Files (x86)\Nero
2032-11-08 08:26:59 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2032-11-08 08:26:59 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2032-11-08 08:23:11 ----D---- C:\Program Files (x86)\Elaborate Bytes
2032-11-07 10:59:13 ----D---- C:\Program Files (x86)\Google
2032-11-07 10:57:16 ----D---- C:\Program Files (x86)\Launch Manager
2032-11-07 10:56:32 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2032-11-07 10:55:15 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2032-11-07 10:54:50 ----A---- C:\Windows\FixUVC.exe
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwrchid.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwl2cap.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwavdt.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwaudio.sys
2032-11-07 10:53:20 ----D---- C:\Program Files\WIDCOMM
2032-11-07 10:50:45 ----D---- C:\Program Files\CONEXANT
2032-11-07 10:49:42 ----D---- C:\Intel
2032-11-07 10:49:42 ----A---- C:\Windows\system32\drivers\iaStor.sys
2032-11-07 10:49:39 ----D---- C:\Program Files (x86)\Intel
2032-11-07 10:49:38 ----D---- C:\Users\Klára\AppData\Roaming\InstallShield
2032-11-07 01:15:35 ----A---- C:\Windows\system32\drivers\athrx.sys
2032-11-07 01:15:34 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2032-11-07 01:15:34 ----D---- C:\Windows\system32\nn-NO
2032-11-07 01:15:34 ----D---- C:\Program Files (x86)\Acer
2032-11-07 01:15:34 ----A---- C:\Windows\system32\athihvui.dll
2032-11-07 01:15:34 ----A---- C:\Windows\system32\athihvs.dll
2032-11-07 01:15:07 ----SHD---- C:\Windows\Installer
2032-11-07 01:14:14 ----D---- C:\ProgramData\Atheros
2032-11-07 01:12:12 ----D---- C:\Users\Klára\AppData\Roaming\Identities
2032-11-07 01:11:46 ----SD---- C:\Users\Klára\AppData\Roaming\Microsoft
2032-11-07 01:11:46 ----D---- C:\Users\Klára\AppData\Roaming\Media Center Programs
2032-11-07 01:11:32 ----SHD---- C:\Recovery
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Šablony
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Plocha
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Oblíbené položky
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Nabídka Start
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Dokumenty
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Data aplikací
2032-11-07 01:07:37 ----D---- C:\Windows\SoftwareDistribution
2032-11-07 01:04:45 ----D---- C:\Windows\Prefetch
2032-11-07 01:04:30 ----ASH---- C:\pagefile.sys
2032-11-07 01:04:27 ----SHD---- C:\System Volume Information
2032-11-07 01:04:27 ----ASH---- C:\hiberfil.sys
2032-11-07 01:04:01 ----D---- C:\Windows\Panther
2012-11-24 13:53:30 ----D---- C:\Program Files\trend micro
2012-11-24 13:53:29 ----D---- C:\rsit
2012-11-24 13:19:44 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-11-24 13:19:43 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-11-24 13:19:41 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-11-24 13:19:40 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-11-24 13:19:38 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-11-24 13:19:37 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-11-24 13:19:37 ----A---- C:\Windows\system32\aswBoot.exe
2012-11-24 13:19:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-11-24 13:19:14 ----A---- C:\Windows\avastSS.scr
2012-11-24 13:19:01 ----D---- C:\ProgramData\AVAST Software
2012-11-24 13:19:01 ----D---- C:\Program Files\AVAST Software

======List of files/folders modified in the last 1 month======

2032-11-11 18:12:13 ----D---- C:\Windows\LiveKernelReports
2032-11-10 09:35:59 ----D---- C:\Windows\system32\LogFiles
2032-11-08 23:09:15 ----SD---- C:\ProgramData\Microsoft
2032-11-08 09:05:28 ----RD---- C:\Program Files (x86)
2032-11-08 08:48:00 ----D---- C:\Program Files (x86)\Common Files
2032-11-08 08:36:12 ----RSD---- C:\Windows\assembly
2032-11-08 08:36:06 ----A---- C:\Windows\win.ini
2032-11-08 08:35:36 ----RSD---- C:\Windows\Fonts
2032-11-08 08:35:34 ----D---- C:\Windows\IME
2032-11-08 08:35:33 ----D---- C:\Windows\ShellNew
2032-11-08 08:35:10 ----D---- C:\Windows\Help
2032-11-08 08:33:40 ----D---- C:\Windows\system
2032-11-08 08:28:10 ----D---- C:\Windows\ehome
2032-11-08 08:23:35 ----D---- C:\Windows\system32\DriverStore
2032-11-08 08:23:35 ----D---- C:\Windows\system32\catroot
2032-11-08 08:23:31 ----D---- C:\Windows\system32\catroot2
2032-11-07 23:45:00 ----D---- C:\Windows\Logs
2032-11-07 11:28:55 ----D---- C:\Windows\debug
2032-11-07 11:12:24 ----D---- C:\Windows\system32\drivers\UMDF
2032-11-07 10:59:16 ----D---- C:\Windows\Tasks
2032-11-07 10:57:20 ----D---- C:\Windows\SYSWOW64\drivers
2032-11-07 10:57:00 ----D---- C:\Windows\system32\CodeIntegrity
2032-11-07 10:53:32 ----SD---- C:\Windows\system32\Microsoft
2032-11-07 10:53:02 ----D---- C:\Windows\system32\restore
2032-11-07 01:15:34 ----D---- C:\Windows\system32\zh-TW
2032-11-07 01:15:34 ----D---- C:\Windows\system32\zh-CN
2032-11-07 01:15:34 ----D---- C:\Windows\system32\tr-TR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\sv-SE
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ru-RU
2032-11-07 01:15:34 ----D---- C:\Windows\system32\pt-PT
2032-11-07 01:15:34 ----D---- C:\Windows\system32\pl-PL
2032-11-07 01:15:34 ----D---- C:\Windows\system32\nl-NL
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ko-KR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ja-JP
2032-11-07 01:15:34 ----D---- C:\Windows\system32\it-IT
2032-11-07 01:15:34 ----D---- C:\Windows\system32\hu-HU
2032-11-07 01:15:34 ----D---- C:\Windows\system32\fr-FR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\fi-FI
2032-11-07 01:15:34 ----D---- C:\Windows\system32\es-ES
2032-11-07 01:15:34 ----D---- C:\Windows\system32\en-US
2032-11-07 01:15:34 ----D---- C:\Windows\system32\el-GR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\de-DE
2032-11-07 01:15:34 ----D---- C:\Windows\system32\da-DK
2032-11-07 01:15:34 ----D---- C:\Windows\system32\cs-CZ
2032-11-07 01:13:54 ----D---- C:\Windows\Microsoft.NET
2032-11-07 01:12:14 ----D---- C:\Windows\rescache
2032-11-07 01:12:05 ----SHD---- C:\$Recycle.Bin
2032-11-07 01:11:46 ----RD---- C:\Users
2032-11-07 01:11:32 ----D---- C:\Program Files\Windows NT
2032-11-07 01:07:54 ----D---- C:\Windows\system32\sysprep
2012-11-24 13:53:33 ----D---- C:\Windows\Temp
2012-11-24 13:53:30 ----RD---- C:\Program Files
2012-11-24 13:19:44 ----D---- C:\Windows\system32\drivers
2012-11-24 13:19:37 ----D---- C:\Windows\SysWOW64
2012-11-24 13:19:37 ----D---- C:\Windows\system32\Tasks
2012-11-24 13:19:37 ----D---- C:\Windows\System32
2012-11-24 13:19:35 ----D---- C:\Windows\winsxs
2012-11-24 13:19:29 ----D---- C:\Windows\system32\config
2012-11-24 13:19:14 ----D---- C:\Windows
2012-11-24 13:19:01 ----HD---- C:\ProgramData
2012-11-24 13:06:35 ----D---- C:\Windows\inf
2012-11-24 13:06:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-18 21:01:06 ----D---- C:\Windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 34472]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-03-09 3580928]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-06-23 684544]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-07-27 58880]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-07-02 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-02 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-02 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-02 21160]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-17 864032]
R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2032-11-08 1564368]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 ICQ Service;ICQ Service; C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE [2012-03-20 247872]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2032-11-07 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2032-11-07 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

Zdravim

Mate aktualni ovladace GK

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Search
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Zkuste pouzit na drivery SlimDriver http://www.stahuj.centrum.cz/utility_a_ ... imdrivers/ navod zde http://magazin.stahuj.centrum.cz/slimdr ... s-hardware

# AdwCleaner v2.009 - Logfile created 11/25/2012 at 03:03:30
# Updated 24/11/2012 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : Klára - KLÁRA-ACER
# Boot Mode : Normal
# Running from : C:\Users\Klára\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : ICQ Service

***** [Files / Folders] *****

File Found : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.xml
Folder Found : C:\Program Files (x86)\ICQ6Toolbar
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}

***** [Registry] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Found : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7600.16385

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (cs)

Profile name : default
File : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\prefs.js

Found : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=");

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1551 octets] - [25/11/2012 03:03:30]

########## EOF - C:\AdwCleaner[R1].txt - [1611 octets] ##########

Nainstaloval jsem SlimDriver a stáhl nové ovladače. Zatim nemůžu posoudit jestli probém zmizel, ukáže se to třeba jednou za hodinu.

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Delete
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

AdwCleaner v2.009 - Logfile created 11/25/2012 at 10:44:55
# Updated 24/11/2012 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : Klára - KLÁRA-ACER
# Boot Mode : Normal
# Running from : C:\Users\Klára\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : ICQ Service

***** [Files / Folders] *****

Deleted on reboot : C:\Program Files (x86)\ICQ6Toolbar
Deleted on reboot : C:\ProgramData\ICQ\ICQToolbar
Deleted on reboot : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
File Deleted : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.xml

***** [Registry] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Key Deleted : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7600.16385

[OK] Registry is clean.

-\\ Mozilla Firefox v15.0.1 (cs)

Profile name : default
File : C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\prefs.js

C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\user.js ... Deleted !

Deleted : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=");

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1680 octets] - [25/11/2012 03:03:30]
AdwCleaner[R2].txt - [1740 octets] - [25/11/2012 10:40:58]
AdwCleaner[S1].txt - [1808 octets] - [25/11/2012 10:44:55]

########## EOF - C:\AdwCleaner[S1].txt - [1868 octets] ##########

Nechtěně jsem udělal R2, doufám že to nevadí . .

Nevadi, probehlo to OK

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

OTL logfile created on: 25.11.2012 12:15:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Klára\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,93 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 60,92% Memory free
3,86 Gb Paging File | 2,81 Gb Available in Paging File | 72,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 50,00 Gb Total Space | 33,77 Gb Free Space | 67,54% Space Free | Partition Type: NTFS
Drive D: | 234,99 Gb Total Space | 217,92 Gb Free Space | 92,74% Space Free | Partition Type: NTFS

Computer Name: KLÁRA-ACER | User Name: Klára | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2032.11.08 08:55:37 | 001,564,368 | ---- | M] () -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
PRC - [2012.11.25 12:13:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Klára\Desktop\OTL.exe
PRC - [2012.10.31 23:15:08 | 001,242,136 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.10.14 15:29:46 | 029,378,432 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2009.08.18 17:42:34 | 001,157,640 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe


========== Modules (No Company Name) ==========

MOD - [2032.11.08 08:55:37 | 001,564,368 | ---- | M] () -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
MOD - [2012.10.31 23:15:05 | 000,460,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppgooglenaclpluginchrome.dll
MOD - [2012.10.31 23:15:02 | 004,007,448 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll
MOD - [2012.10.31 23:13:47 | 000,587,288 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\libglesv2.dll
MOD - [2012.10.31 23:13:46 | 000,123,928 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\libegl.dll
MOD - [2012.10.31 23:13:35 | 000,156,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\avutil-51.dll
MOD - [2012.10.31 23:13:34 | 000,274,984 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\avformat-54.dll
MOD - [2012.10.31 23:13:32 | 002,168,360 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\avcodec-54.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2009.07.17 17:20:34 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2032.11.08 08:55:37 | 001,564,368 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe -- (Guard.Mail.ru)
SRV - [2012.09.06 02:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.11.25 10:46:16 | 000,015,712 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.03.09 04:30:58 | 003,580,928 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.12.17 23:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009.08.09 22:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009.07.27 15:04:36 | 000,058,880 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.02 03:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt)
DRV:64bit: - [2009.07.02 03:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2009.07.02 03:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2009.07.02 03:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2009.06.23 16:28:22 | 000,684,544 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.06.04 18:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009.04.08 06:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2000.01.01 01:00:00 | 010,629,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\InprocServer32 File not found
IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: {800b5000-a755-47e1-992b-48a1c1357f07}:1.5.3
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Klára\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.11.24 13:19:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2032.11.08 08:40:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2032.11.08 08:40:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Klára\AppData\Roaming\Mozilla\Extensions
[2012.11.24 13:10:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions
[2012.11.24 13:10:06 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2032.11.08 23:11:38 | 000,002,342 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icq-search.xml
[2012.07.24 13:48:30 | 000,000,168 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.gif
[2012.07.24 13:48:30 | 000,000,618 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.src
[2032.11.08 08:48:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2032.11.08 08:48:05 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
File not found (No name found) -- C:\USERS\KLáRA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\8OYA3YV7.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
[2012.09.06 02:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.09.06 05:25:45 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2012.09.06 05:25:45 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.09.06 05:25:45 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2012.09.06 05:25:45 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.09.06 05:25:45 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll
CHR - Extension: Disk Google = C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: Gmail = C:\Users\Klára\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll File not found
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Guard.Mail.ru.gui] C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe ()
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.252
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A671AF85-7338-48F1-8B28-5994DE164152}: DhcpNameServer = 192.168.100.252
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\Shell - "" = AutoRun
O33 - MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\Shell\AutoRun\command - "" = F:\SETUP.EXE /AUTORUN
O33 - MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\Shell\configure\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\Shell\install\command - "" = F:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2032.11.08 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Macromedia
[2032.11.08 23:11:37 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Adobe
[2032.11.08 09:05:52 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\vlc
[2032.11.08 09:05:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2032.11.08 09:05:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2032.11.08 08:55:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7M
[2032.11.08 08:55:38 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2032.11.08 08:55:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guard-ICQ
[2032.11.08 08:55:31 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\ICQ
[2032.11.08 08:55:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ7M
[2032.11.08 08:48:18 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Skype
[2032.11.08 08:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2032.11.08 08:48:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2032.11.08 08:47:59 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2032.11.08 08:47:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2032.11.08 08:46:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2032.11.08 08:46:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2032.11.08 08:43:50 | 001,034,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
[2032.11.08 08:43:50 | 000,916,456 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
[2032.11.08 08:43:50 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2032.11.08 08:43:41 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2032.11.08 08:43:41 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2032.11.08 08:43:41 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2032.11.08 08:43:33 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2032.11.08 08:42:57 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2032.11.08 08:42:38 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Facebook
[2032.11.08 08:40:10 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Mozilla
[2032.11.08 08:40:10 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Mozilla
[2032.11.08 08:40:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2032.11.08 08:40:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2032.11.08 08:40:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2032.11.08 08:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2032.11.08 08:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2032.11.08 08:37:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2032.11.08 08:36:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
[2032.11.08 08:35:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2032.11.08 08:35:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2032.11.08 08:35:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2032.11.08 08:35:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2032.11.08 08:35:09 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2032.11.08 08:35:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2032.11.08 08:35:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2032.11.08 08:30:59 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2032.11.08 08:30:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2032.11.08 08:30:34 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2032.11.08 08:29:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
[2032.11.08 08:29:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoFiltre
[2032.11.08 08:29:07 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Ahead
[2032.11.08 08:29:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Ultra Edition
[2032.11.08 08:28:19 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Ahead
[2032.11.08 08:27:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2032.11.08 08:27:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Ahead
[2032.11.08 08:26:59 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2032.11.08 08:26:59 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2032.11.08 08:23:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
[2032.11.08 08:23:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elaborate Bytes
[2032.11.07 10:59:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2032.11.07 10:59:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2032.11.07 10:59:11 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Google
[2032.11.07 10:58:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
[2032.11.07 10:57:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launch Manager
[2032.11.07 10:57:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager
[2032.11.07 10:56:32 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Atheros_L1e
[2032.11.07 10:55:15 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2032.11.07 10:54:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye webcam
[2032.11.07 10:54:07 | 000,000,000 | ---D | C] -- C:\Users\Klára\Documents\Složka Bluetooth Exchange
[2032.11.07 10:54:07 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Broadcom
[2032.11.07 10:53:39 | 000,132,648 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwavdt.sys
[2032.11.07 10:53:39 | 000,098,344 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwaudio.sys
[2032.11.07 10:53:39 | 000,035,104 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwl2cap.sys
[2032.11.07 10:53:39 | 000,021,160 | ---- | C] (Broadcom Corporation.) -- C:\Windows\SysNative\drivers\btwrchid.sys
[2032.11.07 10:53:20 | 000,000,000 | ---D | C] -- C:\Program Files\WIDCOMM
[2032.11.07 10:50:45 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2032.11.07 10:49:42 | 000,408,600 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys
[2032.11.07 10:49:42 | 000,000,000 | ---D | C] -- C:\Intel
[2032.11.07 10:49:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2032.11.07 10:49:38 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\InstallShield
[2032.11.07 01:15:35 | 003,580,928 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2032.11.07 01:15:34 | 000,442,528 | ---- | C] (Atheros) -- C:\Windows\SysNative\athihvs.dll
[2032.11.07 01:15:34 | 000,063,648 | ---- | C] (Atheros) -- C:\Windows\SysNative\athihvui.dll
[2032.11.07 01:15:34 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2032.11.07 01:15:34 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nn-NO
[2032.11.07 01:15:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acer
[2032.11.07 01:15:07 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2032.11.07 01:14:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2032.11.07 01:12:21 | 000,000,000 | R--D | C] -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2032.11.07 01:12:21 | 000,000,000 | R--D | C] -- C:\Users\Klára\Searches
[2032.11.07 01:12:21 | 000,000,000 | R--D | C] -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2032.11.07 01:12:12 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Identities
[2032.11.07 01:12:07 | 000,000,000 | R--D | C] -- C:\Users\Klára\Contacts
[2032.11.07 01:12:03 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\VirtualStore
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\AppData\Local\Temporary Internet Files
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Šablony
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Soubory cookie
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\SendTo
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Poslední
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Okolní tiskárny
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Okolní síť
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Documents\Obrázky
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Nabídka Start
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Local Settings
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Documents\Hudba
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\AppData\Local\History
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Documents\Filmy
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Dokumenty
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\Data aplikací
[2032.11.07 01:11:47 | 000,000,000 | -HSD | C] -- C:\Users\Klára\AppData\Local\Data aplikací
[2032.11.07 01:11:46 | 000,000,000 | --SD | C] -- C:\Users\Klára\AppData\Roaming\Microsoft
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Videos
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Saved Games
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Pictures
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Music
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Links
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Favorites
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Downloads
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Documents
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\Desktop
[2032.11.07 01:11:46 | 000,000,000 | R--D | C] -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2032.11.07 01:11:46 | 000,000,000 | -H-D | C] -- C:\Users\Klára\AppData
[2032.11.07 01:11:46 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Temp
[2032.11.07 01:11:46 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\Microsoft
[2032.11.07 01:11:46 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Roaming\Media Center Programs
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\Recovery
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Obrázky
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Hudba
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Filmy
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2032.11.07 01:11:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2032.11.07 01:07:37 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2032.11.07 01:04:45 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2032.11.07 01:04:27 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2032.11.07 01:04:01 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012.11.25 12:13:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Klára\Desktop\OTL.exe
[2012.11.25 03:17:07 | 010,629,184 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys
[2012.11.25 03:17:04 | 000,830,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxress.dll
[2012.11.25 03:17:04 | 000,380,416 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxTMM.dll
[2012.11.25 03:17:04 | 000,244,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpph.dll
[2012.11.25 03:17:04 | 000,228,864 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxdv32.dll
[2012.11.25 03:17:04 | 000,208,896 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhsip32.dll
[2012.11.25 03:17:04 | 000,206,336 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhsip64.dll
[2012.11.25 03:17:04 | 000,188,416 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhcp64.dll
[2012.11.25 03:17:04 | 000,147,456 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhcp32.dll
[2012.11.25 03:17:04 | 000,142,336 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdo.dll
[2012.11.25 03:17:04 | 000,090,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v2555.dll
[2012.11.25 03:17:04 | 000,061,952 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.dll
[2012.11.25 03:17:04 | 000,027,648 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxexps.dll
[2012.11.25 03:17:04 | 000,023,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxexps32.dll
[2012.11.25 03:17:03 | 006,549,504 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdumd64.dll
[2012.11.25 03:17:03 | 000,571,904 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumdx32.dll
[2012.11.25 03:17:03 | 000,272,896 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdev.dll
[2012.11.25 03:17:02 | 015,546,880 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\ig4icd64.dll
[2012.11.25 03:17:02 | 004,411,392 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10umd32.dll
[2012.11.25 03:17:01 | 011,405,312 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\ig4icd32.dll
[2012.11.25 03:17:01 | 000,119,808 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\gfxSrvc.dll
[2012.11.25 03:17:01 | 000,108,544 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hccutils.dll
[2012.11.25 03:17:00 | 003,157,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\GfxUI.exe
[2012.11.25 03:17:00 | 000,510,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.exe
[2012.11.25 03:17:00 | 000,417,560 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpers.exe
[2012.11.25 03:17:00 | 000,386,840 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hkcmd.exe
[2012.11.25 03:17:00 | 000,224,024 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxext.exe
[2012.11.25 03:17:00 | 000,162,584 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxtray.exe
[2012.11.25 03:16:57 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsky.lrc
[2012.11.25 03:16:57 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrrus.lrc
[2012.11.25 03:16:57 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptg.lrc
[2012.11.25 03:16:57 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrplk.lrc
[2012.11.25 03:16:57 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnld.lrc
[2012.11.25 03:16:57 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtrk.lrc
[2012.11.25 03:16:57 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsve.lrc
[2012.11.25 03:16:57 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrslv.lrc
[2012.11.25 03:16:57 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptb.lrc
[2012.11.25 03:16:57 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnor.lrc
[2012.11.25 03:16:57 | 000,087,040 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtha.lrc
[2012.11.25 03:16:56 | 000,122,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcpl.cpl
[2012.11.25 03:16:56 | 000,088,576 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfra.lrc
[2012.11.25 03:16:56 | 000,088,576 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxresn.lrc
[2012.11.25 03:16:56 | 000,088,576 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrell.lrc
[2012.11.25 03:16:56 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrita.lrc
[2012.11.25 03:16:56 | 000,088,064 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdeu.lrc
[2012.11.25 03:16:56 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrhun.lrc
[2012.11.25 03:16:56 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfin.lrc
[2012.11.25 03:16:56 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrenu.lrc
[2012.11.25 03:16:56 | 000,087,552 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcsy.lrc
[2012.11.25 03:16:56 | 000,087,040 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdan.lrc
[2012.11.25 03:16:56 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrheb.lrc
[2012.11.25 03:16:56 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrara.lrc
[2012.11.25 03:16:56 | 000,084,992 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrkor.lrc
[2012.11.25 03:16:56 | 000,084,992 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrjpn.lrc
[2012.11.25 03:16:56 | 000,083,968 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcht.lrc
[2012.11.25 03:16:56 | 000,083,968 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrchs.lrc
[2012.11.25 03:09:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
[2012.11.25 03:09:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers
[2012.11.25 03:09:53 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloaded Installers
[2012.11.25 03:08:42 | 000,000,000 | ---D | C] -- C:\Users\Klára\AppData\Local\SlimWare Utilities Inc
[2012.11.24 13:53:30 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.11.24 13:53:29 | 000,000,000 | ---D | C] -- C:\rsit
[2012.11.24 13:19:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012.11.24 13:19:44 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.11.24 13:19:43 | 000,370,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.11.24 13:19:41 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.11.24 13:19:40 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.11.24 13:19:38 | 000,984,144 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.11.24 13:19:37 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.11.24 13:19:37 | 000,071,600 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.11.24 13:19:14 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.11.24 13:19:14 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.11.24 13:19:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012.11.24 13:19:01 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software

========== Files - Modified Within 7 Days ==========

[2032.11.11 21:25:18 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2032.11.08 09:08:08 | 000,415,552 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2032.11.08 09:05:37 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2032.11.08 08:55:53 | 000,001,813 | ---- | M] () -- C:\Users\Public\Desktop\ICQ7M.lnk
[2032.11.08 08:48:00 | 000,002,533 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2032.11.08 08:43:35 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
[2032.11.08 08:43:35 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
[2032.11.08 08:43:35 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2032.11.08 08:43:35 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2032.11.08 08:43:35 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2032.11.08 08:43:35 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2032.11.08 08:40:07 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2032.11.08 08:36:27 | 000,000,384 | ---- | M] () -- C:\Windows\ODBC.INI
[2032.11.08 08:35:37 | 000,002,739 | ---- | M] () -- C:\Users\Klára\Desktop\Microsoft Office Word 2003.lnk
[2032.11.08 08:29:31 | 000,001,043 | ---- | M] () -- C:\Users\Klára\Desktop\PhotoFiltre.lnk
[2032.11.08 08:29:05 | 000,002,750 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2032.11.07 11:12:25 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2032.11.07 10:59:59 | 000,002,289 | ---- | M] () -- C:\Users\Klára\Desktop\Google Chrome.lnk
[2032.11.07 10:57:17 | 000,000,089 | ---- | M] () -- C:\Windows\LManager.UNI
[2032.11.07 10:53:49 | 000,000,834 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2032.11.07 01:08:40 | 000,060,295 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2032.11.07 01:08:40 | 000,060,295 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.11.25 12:17:12 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.11.25 12:14:31 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 12:14:31 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 12:13:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Klára\Desktop\OTL.exe
[2012.11.25 12:11:57 | 001,445,734 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.25 12:11:57 | 000,622,660 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.11.25 12:11:57 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.25 12:11:57 | 000,118,810 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.11.25 12:11:57 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.25 12:11:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.25 10:46:33 | 000,000,410 | ---- | M] () -- C:\Windows\tasks\SlimDrivers Startup.job
[2012.11.25 10:46:16 | 000,015,712 | ---- | M] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
[2012.11.25 10:46:09 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.25 10:45:40 | 1554,714,624 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.25 03:09:56 | 000,002,467 | ---- | M] () -- C:\Users\Public\Desktop\SlimDrivers.lnk
[2012.11.25 03:02:32 | 000,480,125 | ---- | M] () -- C:\Users\Klára\Desktop\adwcleaner.exe
[2012.11.24 13:19:45 | 000,001,964 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.24 13:19:37 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.11.23 10:22:20 | 000,017,388 | ---- | M] () -- C:\Users\Klára\Desktop\480075_10151311640627628_773556643_n.jpg
[2012.11.22 19:06:55 | 000,065,948 | ---- | M] () -- C:\Users\Klára\Desktop\251560_222725864521641_438690069_n.jpg

========== Files Created - No Company Name ==========

[2032.11.08 09:05:37 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2032.11.08 08:55:53 | 000,001,813 | ---- | C] () -- C:\Users\Public\Desktop\ICQ7M.lnk
[2032.11.08 08:48:00 | 000,002,533 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2032.11.08 08:40:07 | 000,001,142 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2032.11.08 08:40:07 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2032.11.08 08:38:57 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2032.11.08 08:36:27 | 000,000,384 | ---- | C] () -- C:\Windows\ODBC.INI
[2032.11.08 08:35:37 | 000,002,739 | ---- | C] () -- C:\Users\Klára\Desktop\Microsoft Office Word 2003.lnk
[2032.11.08 08:29:31 | 000,001,043 | ---- | C] () -- C:\Users\Klára\Desktop\PhotoFiltre.lnk
[2032.11.08 08:29:05 | 000,002,750 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2032.11.07 11:12:25 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2032.11.07 10:59:59 | 000,002,289 | ---- | C] () -- C:\Users\Klára\Desktop\Google Chrome.lnk
[2032.11.07 10:59:16 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2032.11.07 10:59:15 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2032.11.07 10:57:17 | 000,000,089 | ---- | C] () -- C:\Windows\LManager.UNI
[2032.11.07 10:54:50 | 000,106,496 | ---- | C] () -- C:\Windows\FixUVC.exe
[2032.11.07 10:53:24 | 000,000,834 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2032.11.07 01:12:30 | 000,001,409 | ---- | C] () -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2032.11.07 01:12:23 | 000,001,443 | ---- | C] () -- C:\Users\Klára\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2032.11.07 01:08:20 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2032.11.07 01:08:17 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2032.11.07 01:04:27 | 1554,714,624 | -HS- | C] () -- C:\hiberfil.sys
[2012.11.25 12:17:12 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.11.25 03:17:04 | 000,004,096 | ---- | C] ( ) -- C:\Windows\SysNative\IGFXDEVLib.dll
[2012.11.25 03:17:00 | 000,152,856 | ---- | C] () -- C:\Windows\SysNative\difx64.exe
[2012.11.25 03:16:58 | 000,189,552 | ---- | C] () -- C:\Windows\SysNative\Gfxres.th-TH.resources
[2012.11.25 03:16:58 | 000,178,407 | ---- | C] () -- C:\Windows\SysNative\Gfxres.el-GR.resources
[2012.11.25 03:16:58 | 000,165,395 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ru-RU.resources
[2012.11.25 03:16:58 | 000,139,909 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ar-SA.resources
[2012.11.25 03:16:58 | 000,136,401 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ja-JP.resources
[2012.11.25 03:16:58 | 000,133,746 | ---- | C] () -- C:\Windows\SysNative\Gfxres.he-IL.resources
[2012.11.25 03:16:58 | 000,125,558 | ---- | C] () -- C:\Windows\SysNative\Gfxres.it-IT.resources
[2012.11.25 03:16:58 | 000,123,230 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ko-KR.resources
[2012.11.25 03:16:58 | 000,122,927 | ---- | C] () -- C:\Windows\SysNative\Gfxres.es-ES.resources
[2012.11.25 03:16:58 | 000,122,709 | ---- | C] () -- C:\Windows\SysNative\Gfxres.de-DE.resources
[2012.11.25 03:16:58 | 000,121,173 | ---- | C] () -- C:\Windows\SysNative\Gfxres.tr-TR.resources
[2012.11.25 03:16:58 | 000,120,800 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fr-FR.resources
[2012.11.25 03:16:58 | 000,120,366 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-BR.resources
[2012.11.25 03:16:58 | 000,119,616 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hu-HU.resources
[2012.11.25 03:16:58 | 000,119,586 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nl-NL.resources
[2012.11.25 03:16:58 | 000,119,360 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sv-SE.resources
[2012.11.25 03:16:58 | 000,119,067 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-PT.resources
[2012.11.25 03:16:58 | 000,118,745 | ---- | C] () -- C:\Windows\SysNative\Gfxres.cs-CZ.resources
[2012.11.25 03:16:58 | 000,118,697 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fi-FI.resources
[2012.11.25 03:16:58 | 000,118,409 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pl-PL.resources
[2012.11.25 03:16:58 | 000,118,058 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sk-SK.resources
[2012.11.25 03:16:58 | 000,114,852 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nb-NO.resources
[2012.11.25 03:16:58 | 000,114,372 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sl-SI.resources
[2012.11.25 03:16:58 | 000,114,261 | ---- | C] () -- C:\Windows\SysNative\Gfxres.da-DK.resources
[2012.11.25 03:16:58 | 000,110,214 | ---- | C] () -- C:\Windows\SysNative\Gfxres.en-US.resources
[2012.11.25 03:16:58 | 000,104,044 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-TW.resources
[2012.11.25 03:16:58 | 000,102,883 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-CN.resources
[2012.11.25 03:16:58 | 000,060,254 | ---- | C] () -- C:\Windows\SysNative\iglhxg64.vp
[2012.11.25 03:16:58 | 000,060,226 | ---- | C] () -- C:\Windows\SysNative\iglhxc64.vp
[2012.11.25 03:16:58 | 000,060,015 | ---- | C] () -- C:\Windows\SysNative\iglhxo64.vp
[2012.11.25 03:16:58 | 000,005,436 | ---- | C] () -- C:\Windows\SysNative\iglhxs64.vp
[2012.11.25 03:16:58 | 000,001,090 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.vp
[2012.11.25 03:16:56 | 001,991,936 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.cpa
[2012.11.25 03:16:56 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
[2012.11.25 03:16:56 | 000,982,240 | ---- | C] () -- C:\Windows\SysNative\igkrng500.bin
[2012.11.25 03:16:56 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
[2012.11.25 03:16:56 | 000,439,308 | ---- | C] () -- C:\Windows\SysNative\igcompkrng500.bin
[2012.11.25 03:16:56 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
[2012.11.25 03:16:56 | 000,092,356 | ---- | C] () -- C:\Windows\SysNative\igfcg500m.bin
[2012.11.25 03:16:56 | 000,000,268 | ---- | C] () -- C:\Windows\SysNative\GfxUI.exe.config
[2012.11.25 03:08:46 | 000,000,410 | ---- | C] () -- C:\Windows\tasks\SlimDrivers Startup.job
[2012.11.25 03:08:43 | 000,015,712 | ---- | C] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
[2012.11.25 03:08:34 | 000,002,467 | ---- | C] () -- C:\Users\Public\Desktop\SlimDrivers.lnk
[2012.11.25 03:02:20 | 000,480,125 | ---- | C] () -- C:\Users\Klára\Desktop\adwcleaner.exe
[2012.11.24 13:19:45 | 000,001,964 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.24 13:19:37 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012.11.23 10:22:17 | 000,017,388 | ---- | C] () -- C:\Users\Klára\Desktop\480075_10151311640627628_773556643_n.jpg
[2012.11.22 19:06:55 | 000,065,948 | ---- | C] () -- C:\Users\Klára\Desktop\251560_222725864521641_438690069_n.jpg

========== ZeroAccess Check ==========

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2009.07.14 02:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009.07.14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2032.11.08 08:42:39 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Facebook
[2032.11.08 08:55:55 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\ICQ

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 06:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 06:08:49 | 000,007,766 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.11.25 03:08:46 | 000,000,410 | ---- | C] () -- C:\Windows\Tasks\SlimDrivers Startup.job
[2032.11.07 10:59:15 | 000,000,946 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2032.11.07 10:59:16 | 000,000,950 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\SysWOW64\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\SysNative\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Users\Klára\AppData\Local\SlimWare Utilities Inc\SlimDrivers\Backups\20121125T021539093276\gencdrom\cdrom.sys
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\drivers\cdrom.sys
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\SysWOW64\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\SysNative\hal.dll
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\SysNative\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 02:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\SysNative\drivers\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys

< MD5 for: USERINIT.EXE >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\SysNative\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[9 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2032.11.08 23:11:37 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Adobe
[2032.11.08 08:32:12 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Ahead
[2032.11.08 08:42:39 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Facebook
[2032.11.08 08:55:55 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\ICQ
[2032.11.07 01:12:12 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Identities
[2032.11.07 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\InstallShield
[2032.11.08 23:11:37 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Macromedia
[2009.07.14 16:36:31 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Media Center Programs
[2012.11.24 13:16:06 | 000,000,000 | --SD | M] -- C:\Users\Klára\AppData\Roaming\Microsoft
[2032.11.08 08:40:18 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Mozilla
[2032.11.08 08:49:02 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\Skype
[2032.11.08 09:13:12 | 000,000,000 | ---D | M] -- C:\Users\Klára\AppData\Roaming\vlc

< %APPDATA%\*.exe /s >
[2032.11.08 08:42:39 | 000,050,354 | ---- | M] (Facebook, Inc.) -- C:\Users\Klára\AppData\Roaming\Facebook\uninstall.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2012.11.25 10:46:09 | 000,000,946 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2032.11.11 21:25:18 | 000,000,950 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2012.11.25 10:46:33 | 000,000,410 | ---- | M] () -- C:\Windows\Tasks\SlimDrivers Startup.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2012.11.24 13:19:37 | 000,000,000 | ---- | M] () -- C:\Windows\system32\config.nt
[2032.11.07 01:08:40 | 000,060,295 | ---- | M] () -- C:\Windows\system32\license.rtf

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2012.09.06 02:24:58 | 000,917,984 | ---- | M] (Mozilla Corporation) MD5=9C376F42BDE37F18D0A39AF7415D9BE6 -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2009.07.14 02:17:29 | 000,673,048 | ---- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2012.10.31 23:15:08 | 001,242,136 | ---- | M] (Google Inc.) MD5=D8510C2D48496B6C336E816FD67AA0F7 -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.11.25 12:17:12 | 000,000,512 | ---- | M] () MD5=F4390348305DB0AC9A228613B82F5C70 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >
[2032.11.08 08:26:10 | 000,018,328 | ---- | M] () -- \Windows\Prefetch\KEYGEN.EXE-A8613273.pf

< *loader* /s >
[2006.07.14 10:39:46 | 000,106,496 | ---- | M] () -- \Program Files (x86)\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2001.01.16 06:55:36 | 000,053,248 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\COLOADER.DLL
[2001.01.16 04:22:34 | 000,002,560 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\COLOADER.TLB
[2032.11.08 08:55:26 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7M\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2032.11.08 08:55:27 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7M\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2032.11.08 08:55:26 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7M\imApp\theme\MUICoreLib\xtraLoader.swf
[2032.11.08 08:56:57 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7M\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.03.15 11:27:20 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2032.11.08 08:55:34 | 000,000,402 | ---- | M] () -- \Users\Klára\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2U5WB5P1\preloader[1].htm
[2032.11.08 08:56:57 | 000,000,402 | ---- | M] () -- \Users\Klára\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F93OZ7A4\preloader[1].htm
[2032.11.08 23:12:47 | 000,003,208 | ---- | M] () -- \Users\Klára\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OCLI5K1K\ajax-loader[1].gif
[2010.02.26 07:41:34 | 000,847,040 | ---- | M] () -- \Users\Klára\AppData\Roaming\Facebook\axfbootloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 16:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 16:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 16:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 16:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 16:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2009.07.14 03:58:45 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2009.07.14 03:58:45 | 000,641,088 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef_winload.efi_75834aa0
[2009.07.14 03:58:45 | 000,604,192 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef_winload.exe_75835076
[2009.07.14 03:58:45 | 000,557,136 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef_winresume.efi_85cd069f
[2009.07.14 03:58:45 | 000,518,352 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 16:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

OTL Extras logfile created on: 25.11.2012 12:15:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Klára\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,93 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 60,92% Memory free
3,86 Gb Paging File | 2,81 Gb Available in Paging File | 72,80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 50,00 Gb Total Space | 33,77 Gb Free Space | 67,54% Space Free | Partition Type: NTFS
Drive D: | 234,99 Gb Total Space | 217,92 Gb Free Space | 92,74% Space Free | Partition Type: NTFS

Computer Name: KLÁRA-ACER | User Name: Klára | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02656F9C-2B9C-4953-91E1-A595E202AF62}" = rport=139 | protocol=6 | dir=out | app=system |
"{07CD2B98-646F-43C9-AE1A-AC223CFA5B47}" = lport=137 | protocol=17 | dir=in | app=system |
"{0E0B13E4-6021-4E97-AD87-0626E279C1E6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{10B054CA-1E2B-4A4D-959A-E43997DAE368}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{18CE3D4E-10CA-4F99-AAC8-F3BDF0F7C292}" = lport=10243 | protocol=6 | dir=in | app=system |
"{22E9336F-687C-4537-A830-36D6FACF1C90}" = lport=2869 | protocol=6 | dir=in | app=system |
"{241F321E-098B-4784-A14A-A7C10AB85855}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{374A8937-5E38-4EE4-B10E-7A5097387A76}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{5A70B443-302F-4E4C-93C7-79BF33255DCC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{61455D1C-583F-4F11-B7FC-7BB9BAF02B61}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{652F4A33-EE81-4EEB-9E20-34518C95E972}" = rport=138 | protocol=17 | dir=out | app=system |
"{6C740829-50DB-4515-B071-1C7208CAF44E}" = lport=138 | protocol=17 | dir=in | app=system |
"{7708B7A5-7909-458E-B0E3-5736D668C65C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{7D33F0FF-FB4A-4FC1-92CB-1DBB1A071A4C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7EEC2C64-82D6-454E-B929-5D0D81293A86}" = rport=445 | protocol=6 | dir=out | app=system |
"{8AD05A8C-BEA7-4935-9A21-7F2F8D92921C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9A25F2CD-A6EF-42C7-B81B-D08BEFD66D91}" = rport=10243 | protocol=6 | dir=out | app=system |
"{BC4A6C65-1E66-4BA4-BD37-C1B5FA87AB3E}" = lport=445 | protocol=6 | dir=in | app=system |
"{CC492E71-CDD4-44E7-8CAC-92891EE3F2AB}" = lport=139 | protocol=6 | dir=in | app=system |
"{DA5B20EC-6E49-4C5F-A7E2-89E011BFE67A}" = rport=137 | protocol=17 | dir=out | app=system |
"{EC3FF517-9FD1-45DE-91AC-7253A0040709}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{059D2326-DCD6-42F7-B873-E0BDE416EC79}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1AAD9695-ABA6-43B5-B0D9-DF2F722B0D5B}" = protocol=6 | dir=out | app=system |
"{1AC20BF6-7AEC-4AB1-A63E-A01932266D69}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1AD57887-E8E0-44A9-B56D-7B94AF17A619}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1F71941D-A7EF-424A-AE91-BAFB53F39B0F}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{26D61FAE-660C-44A8-8E9D-DD187BDC39E0}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7m\icq.exe |
"{3ACBEACA-F149-4ABC-A7AD-15E4C2AA7687}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5364C2A3-AB68-45FC-AF55-F4F92F7B7EFB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{59E3EE44-452B-4F70-9879-87109FD4300C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{667E8DCD-FD62-4103-AECD-1E07D243FC91}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{6EA5B4F8-1B8C-4ED6-A5A2-5FFE57B22DEE}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7m\icq.exe |
"{76F8F4DA-30BE-4095-89ED-7A77A7F681B5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{88C85B4B-5E6E-4EF3-87B1-92EDB6B6896F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{8A7BB016-6802-4D46-A3F2-1CFBD22B3696}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{9E0268FE-E132-433B-A107-0BACFFB5B974}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7m\icq.exe |
"{9E8C70E0-D5BA-48C8-9A4F-1C16D3DC3822}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A7039EF6-DC2F-4B49-82BC-7953372DE796}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A742DCD6-4EC4-4568-A7CF-3CDEF2A440FA}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7m\icq.exe |
"{BBD8B322-D3BD-47AB-93F6-88BA6660EF0D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BE00D32F-61A4-48A9-9D81-F1A32C4AC9E6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C4B9D979-B850-4D42-A4EE-9A8C61B8C373}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CD356042-C362-4EA5-A2AD-9C0C83049A76}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F413D78D-5C41-4CEC-9190-479C60D47A29}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F8C160DA-C79E-4607-A338-179C38011840}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26A24AE4-039D-4CA4-87B4-2F86417007FF}" = Java 7 Update 7 (64-bit)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Software Bluetooth WIDCOMM
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"CNXT_AUDIO_HDA" = Conexant HD Audio
"WinRAR archiver" = WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.2
"{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}" = ICQ7M
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{A29549FD-65F3-440C-A552-6B8114CF319D}" = Skype Toolbars
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Czech
"{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}" = Acer Crystal Eye webcam Ver:1.1.104.803
"{DD350F3A-3620-4185-A5E2-88A6437C8415}" = SlimDrivers
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F14B8ECC-BDA0-4987-9201-D7B7DBE11029}" = Nero 7 Ultra Edition
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast" = avast! Free Antivirus
"Google Chrome" = Google Chrome
"Guard.Mail.ru" = Guard.ICQ
"LManager" = Launch Manager
"Mozilla Firefox 15.0.1 (x86 cs)" = Mozilla Firefox 15.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PhotoFiltre" = PhotoFiltre
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player 2.0.1

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 11.11.2032 16:27:40 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:27:40 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:31:55 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:31:55 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:31:55 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:31:55 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:39:35 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:39:35 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:39:35 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

Error - 11.11.2032 16:39:35 | Computer Name = Klára-ACER | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Selhala extrakce kořenového seznamu jiného výrobce ze souboru CAB
pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab>.
Došlo k chybě: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného
souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti. .

[ System Events ]
Error - 6.11.2032 20:16:37 | Computer Name = Klára-ACER | Source = Microsoft-Windows-Time-Service | ID = 34
Description = Služba Systémový čas zjistila, že je nutné změnit systémový čas o
-631151989 s. Služba Systémový čas nemění systémový čas o více než 54000 s. Ověřte
správnost času a časového pásma a zda zdroj času time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.21.13:123)
pracuje správně.

Error - 7.11.2032 5:50:41 | Computer Name = Klára-ACER | Source = Microsoft-Windows-Time-Service | ID = 34
Description = Služba Systémový čas zjistila, že je nutné změnit systémový čas o
-631151991 s. Služba Systémový čas nemění systémový čas o více než 54000 s. Ověřte
správnost času a časového pásma a zda zdroj času time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.21.23:123)
pracuje správně.

Error - 7.11.2032 6:18:51 | Computer Name = Klára-ACER | Source = Microsoft-Windows-Time-Service | ID = 34
Description = Služba Systémový čas zjistila, že je nutné změnit systémový čas o
-631151990 s. Služba Systémový čas nemění systémový čas o více než 54000 s. Ověřte
správnost času a časového pásma a zda zdroj času time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.21.13:123)
pracuje správně.

Error - 8.11.2032 3:28:19 | Computer Name = Klára-ACER | Source = Service Control Manager | ID = 7030
Description = Služba NBService je označena jako interaktivní služba. Avšak systém
je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude
fungovat správně.

Error - 8.11.2032 3:36:27 | Computer Name = Klára-ACER | Source = Service Control Manager | ID = 7030
Description = Služba Machine Debug Manager je označena jako interaktivní služba.
Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby.
Tato služba nebude fungovat správně.

Error - 8.11.2032 3:55:39 | Computer Name = Klára-ACER | Source = Service Control Manager | ID = 7030
Description = Služba ICQ Service je označena jako interaktivní služba. Avšak systém
je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude
fungovat správně.

Error - 8.11.2032 4:12:29 | Computer Name = Klára-ACER | Source = Microsoft-Windows-Time-Service | ID = 34
Description = Služba Systémový čas zjistila, že je nutné změnit systémový čas o
-631151991 s. Služba Systémový čas nemění systémový čas o více než 54000 s. Ověřte
správnost času a časového pásma a zda zdroj času time.windows.com,0x9 (ntp.m|0x9|0.0.0.0:123->65.55.21.24:123)
pracuje správně.

Error - 10.11.2032 4:37:47 | Computer Name = Klára-ACER | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (9:35:54, ?10.?11.?2032) bylo neočekávané.

Error - 15.11.2012 13:23:11 | Computer Name = Klára-ACER | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (16:57:24, ?15.?11.?2012) bylo neočekávané.


< End of report >

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  IE - HKLM\..\SearchScopes,DefaultScope =
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\URLSearchHook: - No CLSID value found
  IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\InprocServer32 File not found
  IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\SearchScopes,DefaultScope =
  IE - HKU\S-1-5-21-3151642000-1480186331-934742725-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
  FF - prefs.js..browser.search.useDBForOrder: true
  [2032.11.08 23:11:38 | 000,002,342 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icq-search.xml
  [2012.07.24 13:48:30 | 000,000,168 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.gif
  [2012.07.24 13:48:30 | 000,000,618 | ---- | M] () -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.src
  [2012.11.24 13:10:06 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
  O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
  O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
  O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
  O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
  O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
  O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
  O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
  O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O33 - MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\Shell - "" = AutoRun
  [1 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [2 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [9 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [2012.11.25 10:46:09 | 000,000,946 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2032.11.11 21:25:18 | 000,000,950 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  [2012.11.25 10:46:33 | 000,000,410 | ---- | M] () -- C:\Windows\Tasks\SlimDrivers Startup.job
  
  :services
  Guard.Mail.ru
  gupdate
  gupdatem
  
  :reg
  [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
  "VirtualCloneDrive"=-
  "Adobe ARM"=-
  "Guard.Mail.ru.gui"=-
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [EMPTYJAVA]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Vše proběhlo ok, ale log se nezobrazil.

Poprosim o novy log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Klára at 2012-11-25 22:43:04
Microsoft Windows 7 Home Premium
System drive C: has 35 GB (67%) free of 51 GB
Total RAM: 1977 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:43:08, on 25.11.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Klára.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8665 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 35022432
\??\C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k secsvcs
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
"taskhost.exe"
taskeng.exe {5B11C0BB-232D-432D-871A-3D9627DA5B66}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe" -boot
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2812.1.1579797397\2126367163" --gpu-vendor-id=0x8086 --gpu-device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2555 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/InstantChannel/Stable/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxSearchSuggest/6/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V2/SpdyCwnd/cwndDynamic/SpeculativePrefetchingLearning/SpeculativePrefetchingDisabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_64/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_15/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --disable-accelerated-2d-canvas --channel="2812.4.1688409131\428341928" /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Klára\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\SlimDrivers Startup.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2032-11-08 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2032-11-08 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30 1502288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2009-07-02 500792]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2000-01-01 162584]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2000-01-01 386840]
"Persistence"=C:\Windows\system32\igfxpers.exe [2000-01-01 417560]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-08-18 1157640]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"Guard.Mail.ru.gui"=C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2032-11-08 1564368]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-10-30 4297136]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2000-01-01 272896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2032-11-08 23:11:37 ----D---- C:\Users\Klára\AppData\Roaming\Macromedia
2032-11-08 23:11:37 ----D---- C:\Users\Klára\AppData\Roaming\Adobe
2032-11-08 09:05:52 ----D---- C:\Users\Klára\AppData\Roaming\vlc
2032-11-08 09:05:28 ----D---- C:\Program Files (x86)\VideoLAN
2032-11-08 08:55:38 ----D---- C:\ProgramData\ICQ
2032-11-08 08:55:37 ----D---- C:\Program Files (x86)\Guard-ICQ
2032-11-08 08:55:31 ----D---- C:\Users\Klára\AppData\Roaming\ICQ
2032-11-08 08:55:26 ----D---- C:\Program Files (x86)\ICQ7M
2032-11-08 08:48:18 ----D---- C:\Users\Klára\AppData\Roaming\Skype
2032-11-08 08:47:59 ----RD---- C:\Program Files (x86)\Skype
2032-11-08 08:47:40 ----D---- C:\ProgramData\Skype
2032-11-08 08:46:34 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2032-11-08 08:43:50 ----A---- C:\Windows\system32\npDeployJava1.dll
2032-11-08 08:43:50 ----A---- C:\Windows\system32\javaws.exe
2032-11-08 08:43:50 ----A---- C:\Windows\system32\deployJava1.dll
2032-11-08 08:43:41 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2032-11-08 08:43:41 ----A---- C:\Windows\system32\javaw.exe
2032-11-08 08:43:41 ----A---- C:\Windows\system32\java.exe
2032-11-08 08:43:33 ----D---- C:\Program Files\Java
2032-11-08 08:42:57 ----D---- C:\Windows\SYSWOW64\Macromed
2032-11-08 08:42:38 ----D---- C:\Users\Klára\AppData\Roaming\Facebook
2032-11-08 08:40:10 ----D---- C:\Users\Klára\AppData\Roaming\Mozilla
2032-11-08 08:40:06 ----D---- C:\ProgramData\Mozilla
2032-11-08 08:40:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2032-11-08 08:40:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2032-11-08 08:38:55 ----D---- C:\Program Files (x86)\Adobe
2032-11-08 08:37:24 ----D---- C:\ProgramData\Adobe
2032-11-08 08:36:51 ----D---- C:\Program Files (x86)\MSECache
2032-11-08 08:36:27 ----A---- C:\Windows\ODBC.INI
2032-11-08 08:35:18 ----D---- C:\Program Files (x86)\Microsoft Works
2032-11-08 08:35:15 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2032-11-08 08:35:09 ----D---- C:\Windows\PCHEALTH
2032-11-08 08:35:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2032-11-08 08:35:09 ----D---- C:\Program Files (x86)\Microsoft Office
2032-11-08 08:30:34 ----D---- C:\Program Files\WinRAR
2032-11-08 08:29:30 ----D---- C:\Program Files (x86)\PhotoFiltre
2032-11-08 08:28:19 ----D---- C:\Users\Klára\AppData\Roaming\Ahead
2032-11-08 08:27:50 ----D---- C:\Program Files (x86)\Nero
2032-11-08 08:26:59 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2032-11-08 08:26:59 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2032-11-08 08:23:11 ----D---- C:\Program Files (x86)\Elaborate Bytes
2032-11-07 10:59:13 ----D---- C:\Program Files (x86)\Google
2032-11-07 10:57:16 ----D---- C:\Program Files (x86)\Launch Manager
2032-11-07 10:56:32 ----D---- C:\Windows\SYSWOW64\Atheros_L1e
2032-11-07 10:55:15 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2032-11-07 10:54:50 ----A---- C:\Windows\FixUVC.exe
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwrchid.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwl2cap.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwavdt.sys
2032-11-07 10:53:39 ----A---- C:\Windows\system32\drivers\btwaudio.sys
2032-11-07 10:53:20 ----D---- C:\Program Files\WIDCOMM
2032-11-07 10:50:45 ----D---- C:\Program Files\CONEXANT
2032-11-07 10:49:42 ----D---- C:\Intel
2032-11-07 10:49:42 ----A---- C:\Windows\system32\drivers\iaStor.sys
2032-11-07 10:49:39 ----D---- C:\Program Files (x86)\Intel
2032-11-07 10:49:38 ----D---- C:\Users\Klára\AppData\Roaming\InstallShield
2032-11-07 01:15:35 ----A---- C:\Windows\system32\drivers\athrx.sys
2032-11-07 01:15:34 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2032-11-07 01:15:34 ----D---- C:\Windows\system32\nn-NO
2032-11-07 01:15:34 ----D---- C:\Program Files (x86)\Acer
2032-11-07 01:15:34 ----A---- C:\Windows\system32\athihvui.dll
2032-11-07 01:15:34 ----A---- C:\Windows\system32\athihvs.dll
2032-11-07 01:15:07 ----SHD---- C:\Windows\Installer
2032-11-07 01:14:14 ----D---- C:\ProgramData\Atheros
2032-11-07 01:12:12 ----D---- C:\Users\Klára\AppData\Roaming\Identities
2032-11-07 01:11:46 ----SD---- C:\Users\Klára\AppData\Roaming\Microsoft
2032-11-07 01:11:46 ----D---- C:\Users\Klára\AppData\Roaming\Media Center Programs
2032-11-07 01:11:32 ----SHD---- C:\Recovery
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Šablony
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Plocha
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Oblíbené položky
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Nabídka Start
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Dokumenty
2032-11-07 01:11:32 ----SHD---- C:\ProgramData\Data aplikací
2032-11-07 01:07:37 ----D---- C:\Windows\SoftwareDistribution
2032-11-07 01:04:45 ----D---- C:\Windows\Prefetch
2032-11-07 01:04:30 ----ASH---- C:\pagefile.sys
2032-11-07 01:04:27 ----SHD---- C:\System Volume Information
2032-11-07 01:04:27 ----ASH---- C:\hiberfil.sys
2032-11-07 01:04:01 ----D---- C:\Windows\Panther
2012-11-25 22:33:00 ----D---- C:\_OTL
2012-11-25 10:44:55 ----A---- C:\AdwCleaner[S1].txt
2012-11-25 10:40:58 ----A---- C:\AdwCleaner[R2].txt
2012-11-25 03:17:07 ----A---- C:\Windows\system32\drivers\igdkmd64.sys
2012-11-25 03:17:04 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll
2012-11-25 03:17:04 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll
2012-11-25 03:17:04 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll
2012-11-25 03:17:04 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\iglhsip64.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\iglhcp64.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxTMM.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxsrvc.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxress.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxpph.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxexps.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxdo.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\IGFXDEVLib.dll
2012-11-25 03:17:04 ----A---- C:\Windows\system32\igfxCoIn_v2555.dll
2012-11-25 03:17:03 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll
2012-11-25 03:17:03 ----A---- C:\Windows\system32\igfxdev.dll
2012-11-25 03:17:03 ----A---- C:\Windows\system32\igdumd64.dll
2012-11-25 03:17:02 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll
2012-11-25 03:17:02 ----A---- C:\Windows\system32\ig4icd64.dll
2012-11-25 03:17:01 ----A---- C:\Windows\SYSWOW64\ig4icd32.dll
2012-11-25 03:17:01 ----A---- C:\Windows\system32\hccutils.dll
2012-11-25 03:17:01 ----A---- C:\Windows\system32\gfxSrvc.dll
2012-11-25 03:17:00 ----A---- C:\Windows\system32\igfxtray.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\igfxsrvc.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\igfxpers.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\igfxext.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\hkcmd.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\GfxUI.exe
2012-11-25 03:17:00 ----A---- C:\Windows\system32\difx64.exe
2012-11-25 03:09:55 ----D---- C:\Program Files (x86)\SlimDrivers
2012-11-25 03:08:43 ----A---- C:\Windows\system32\drivers\SWDUMon.sys
2012-11-25 03:03:30 ----A---- C:\AdwCleaner[R1].txt
2012-11-24 13:53:30 ----D---- C:\Program Files\trend micro
2012-11-24 13:53:29 ----D---- C:\rsit
2012-11-24 13:19:44 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-11-24 13:19:43 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-11-24 13:19:41 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-11-24 13:19:40 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-11-24 13:19:38 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-11-24 13:19:37 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-11-24 13:19:37 ----A---- C:\Windows\system32\aswBoot.exe
2012-11-24 13:19:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-11-24 13:19:14 ----A---- C:\Windows\avastSS.scr
2012-11-24 13:19:01 ----D---- C:\ProgramData\AVAST Software
2012-11-24 13:19:01 ----D---- C:\Program Files\AVAST Software

======List of files/folders modified in the last 1 month======

2032-11-11 18:12:13 ----D---- C:\Windows\LiveKernelReports
2032-11-10 09:35:59 ----D---- C:\Windows\system32\LogFiles
2032-11-08 23:09:15 ----SD---- C:\ProgramData\Microsoft
2032-11-08 08:48:00 ----D---- C:\Program Files (x86)\Common Files
2032-11-08 08:36:12 ----RSD---- C:\Windows\assembly
2032-11-08 08:36:06 ----A---- C:\Windows\win.ini
2032-11-08 08:35:36 ----RSD---- C:\Windows\Fonts
2032-11-08 08:35:34 ----D---- C:\Windows\IME
2032-11-08 08:35:33 ----D---- C:\Windows\ShellNew
2032-11-08 08:35:10 ----D---- C:\Windows\Help
2032-11-08 08:33:40 ----D---- C:\Windows\system
2032-11-08 08:28:10 ----D---- C:\Windows\ehome
2032-11-07 23:45:00 ----D---- C:\Windows\Logs
2032-11-07 11:28:55 ----D---- C:\Windows\debug
2032-11-07 11:12:24 ----D---- C:\Windows\system32\drivers\UMDF
2032-11-07 10:57:20 ----D---- C:\Windows\SYSWOW64\drivers
2032-11-07 10:57:00 ----D---- C:\Windows\system32\CodeIntegrity
2032-11-07 10:53:32 ----SD---- C:\Windows\system32\Microsoft
2032-11-07 10:53:02 ----D---- C:\Windows\system32\restore
2032-11-07 01:15:34 ----D---- C:\Windows\system32\zh-TW
2032-11-07 01:15:34 ----D---- C:\Windows\system32\zh-CN
2032-11-07 01:15:34 ----D---- C:\Windows\system32\tr-TR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\sv-SE
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ru-RU
2032-11-07 01:15:34 ----D---- C:\Windows\system32\pt-PT
2032-11-07 01:15:34 ----D---- C:\Windows\system32\pl-PL
2032-11-07 01:15:34 ----D---- C:\Windows\system32\nl-NL
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ko-KR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\ja-JP
2032-11-07 01:15:34 ----D---- C:\Windows\system32\it-IT
2032-11-07 01:15:34 ----D---- C:\Windows\system32\hu-HU
2032-11-07 01:15:34 ----D---- C:\Windows\system32\fr-FR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\fi-FI
2032-11-07 01:15:34 ----D---- C:\Windows\system32\es-ES
2032-11-07 01:15:34 ----D---- C:\Windows\system32\en-US
2032-11-07 01:15:34 ----D---- C:\Windows\system32\el-GR
2032-11-07 01:15:34 ----D---- C:\Windows\system32\de-DE
2032-11-07 01:15:34 ----D---- C:\Windows\system32\da-DK
2032-11-07 01:15:34 ----D---- C:\Windows\system32\cs-CZ
2032-11-07 01:13:54 ----D---- C:\Windows\Microsoft.NET
2032-11-07 01:12:14 ----D---- C:\Windows\rescache
2032-11-07 01:12:05 ----SHD---- C:\$Recycle.Bin
2032-11-07 01:11:46 ----RD---- C:\Users
2032-11-07 01:11:32 ----D---- C:\Program Files\Windows NT
2032-11-07 01:07:54 ----D---- C:\Windows\system32\sysprep
2012-11-25 22:43:07 ----D---- C:\Windows\Temp
2012-11-25 22:34:55 ----D---- C:\Windows\system32\drivers
2012-11-25 22:34:28 ----D---- C:\Windows\System32
2012-11-25 22:34:28 ----D---- C:\Windows\inf
2012-11-25 22:34:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-11-25 10:46:22 ----RD---- C:\Program Files (x86)
2012-11-25 10:46:22 ----D---- C:\Windows
2012-11-25 03:20:08 ----D---- C:\Windows\SysWOW64
2012-11-25 03:19:32 ----D---- C:\Windows\system32\catroot
2012-11-25 03:17:52 ----D---- C:\Windows\system32\catroot2
2012-11-25 03:17:50 ----D---- C:\Windows\system32\DriverStore
2012-11-25 03:08:46 ----D---- C:\Windows\Tasks
2012-11-25 03:08:46 ----D---- C:\Windows\system32\Tasks
2012-11-24 13:53:30 ----RD---- C:\Program Files
2012-11-24 13:52:55 ----D---- C:\Windows\system32\config
2012-11-24 13:19:35 ----D---- C:\Windows\winsxs
2012-11-24 13:19:01 ----HD---- C:\ProgramData
2012-11-18 21:01:06 ----D---- C:\Windows\system32\wdi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 54072]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 984144]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 370288]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 59728]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 34472]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 25232]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]
R3 athr;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2012-03-09 3580928]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDRT64.sys [2009-06-23 684544]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2000-01-01 10629184]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-07-27 58880]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-07-02 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-02 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-02 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-02 21160]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-11-25 15712]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-10-30 44808]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-17 864032]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
S2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2032-11-08 1564368]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2032-11-07 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2032-11-07 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

Nespustil OTL Avast v SanBoxu?

Deaktivujte rezidentni stity Avastu (do restartu) a opakujte opravu s OTL

Mate pravdu

All processes killed
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry value HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3151642000-1480186331-934742725-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Prefs.js: "ICQ Search" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
File C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icq-search.xml not found.
File C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.gif not found.
File C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\searchplugins\icqplugin.src not found.
C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content folder moved successfully.
C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully.
C:\Users\Klára\AppData\Roaming\Mozilla\Firefox\Profiles\8oya3yv7.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.
File Protocol\Handler\msdaipp - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\0x00000001\ not found.
File Protocol\Handler\msdaipp\0x00000001 - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\oledb\ not found.
File Protocol\Handler\msdaipp\oledb - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ deleted successfully.
File Protocol\Handler\ms-itss - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\mso-offdap\ deleted successfully.
File Protocol\Handler\mso-offdap - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\mso-offdap11\ deleted successfully.
File Protocol\Handler\mso-offdap11 - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
File Protocol\Handler\skype-ie-addon-data - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e005b7ef-956c-11f8-951a-c80aa9c5d438}\ not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\Temp\DMI9156.tmp deleted successfully.
C:\Windows\Temp\TS_8A16.tmp deleted successfully.
C:\Windows\Temp\TS_8FD2.tmp deleted successfully.
C:\Windows\Temp\TS_9DB8.tmp deleted successfully.
C:\Windows\Temp\TS_A038.tmp deleted successfully.
C:\Windows\Temp\TS_AF94.tmp deleted successfully.
C:\Windows\Temp\TS_BC23.tmp deleted successfully.
C:\Windows\Temp\TS_C1BF.tmp deleted successfully.
C:\Windows\Temp\TS_DD7A.tmp deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\SlimDrivers Startup.job moved successfully.
========== SERVICES/DRIVERS ==========
Service Guard.Mail.ru stopped successfully!
Service Guard.Mail.ru deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\VirtualCloneDrive deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Guard.Mail.ru.gui deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Klára
->Temp folder emptied: 622799532 bytes
->Temporary Internet Files folder emptied: 7754449 bytes
->FireFox cache emptied: 59960125 bytes
->Google Chrome cache emptied: 359522031 bytes
->Flash cache emptied: 1101 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 17408887 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 99145393 bytes

Total Files Cleaned = 1 113,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Klára
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Klára

User: Public

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 11252012_225051

Files\Folders moved on Reboot...
C:\Users\Klára\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...