VIRY.CZ

Ahoj, prosím o kontrolu logu. Pokud přehrávám nějaké video s větším rozlišením, tak se video seká, nebo jde zpomaleně, ale zvuk jde normálně - záleží na přehrávači. Dřív mi videa šlapaly normálně.
Díky

Logfile of random's system information tool 1.06 (written by random/random)
Run by Vlastick at 2013-04-05 17:42:31
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 168 GB (36%) free of 467 GB
Total RAM: 3002 MB (43% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\ROC_REG_JAN_DELETE.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}]
AVG Do Not Track - C:\Program Files\AVG\AVG2012\avgdtiex.dll [2012-10-15 938104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-05 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-05 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - PandoraTV Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]
"ODDPwr"=C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [2009-09-04 186912]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-29 1537320]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-08-05 7703072]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2009-10-02 494112]
""= []
"PLFSetI"=C:\Windows\PLFSetI.exe [2011-04-15 200704]
"IJNetworkScannerSelectorEX"=C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2013-01-14 2777736]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2013-01-14 3674248]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"Sony PC Companion"=C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [2013-01-07 446648]
"Infium"=C:\Program Files\QIP 2012\qip.exe [2011-12-09 7270864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnUpdater]
C:\Program Files\Ask.com\Updater\Updater.exe [2011-05-17 395144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MurGee.com Auto Clicker]
C:\Program Files\Auto Clicker\AutoClicker.exe [2011-05-04 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe /WinStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [1999-11-04 113664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SolutoService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=3

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0b4749a3-540f-11e2-a623-001f16a56be9}]
shell\AutoRun\command - E:\Startme.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c5cc61c9-2004-11e2-83b3-001f16a56be9}]
shell\AutoRun\command - E:\Startme.exe

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-04-05 17:42:32 ----D---- C:\Program Files\trend micro
2013-04-05 17:42:31 ----D---- C:\rsit
2013-04-05 14:57:19 ----D---- C:\Program Files\Common Files\Java
2013-04-05 14:56:59 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-04-05 14:56:59 ----A---- C:\Windows\system32\javaws.exe
2013-04-05 14:56:47 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-04-05 14:56:47 ----A---- C:\Windows\system32\javaw.exe
2013-04-05 14:56:47 ----A---- C:\Windows\system32\java.exe
2013-04-03 17:13:25 ----A---- C:\Users\Vlastick\AppData\Roaming\VLASTICK-PC.MTBF.txt
2013-04-03 17:10:14 ----D---- C:\Program Files\Common Files\Pinnacle
2013-04-03 17:06:21 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2013-04-03 16:51:17 ----D---- C:\ProgramData\Avid
2013-04-03 16:45:27 ----D---- C:\ProgramData\PCTV Systems
2013-03-21 15:53:37 ----A---- C:\Windows\system32\taskhost.exe
2013-03-20 21:29:32 ----D---- C:\Windows\system32\SPReview
2013-03-20 21:27:42 ----D---- C:\Windows\system32\EventProviders
2013-03-15 12:32:50 ----A---- C:\Windows\system32\vbscript.dll
2013-03-15 12:32:50 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-15 12:32:49 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-15 12:32:48 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-15 12:32:48 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-15 12:32:48 ----A---- C:\Windows\system32\ieui.dll
2013-03-15 12:32:47 ----A---- C:\Windows\system32\wininet.dll
2013-03-15 12:32:47 ----A---- C:\Windows\system32\jscript.dll
2013-03-15 12:32:46 ----A---- C:\Windows\system32\url.dll
2013-03-15 12:32:46 ----A---- C:\Windows\system32\jscript9.dll
2013-03-15 12:32:46 ----A---- C:\Windows\system32\iertutil.dll
2013-03-15 12:32:45 ----A---- C:\Windows\system32\urlmon.dll
2013-03-15 12:32:44 ----A---- C:\Windows\system32\mshtml.dll
2013-03-15 12:32:43 ----A---- C:\Windows\system32\ieframe.dll

======List of files/folders modified in the last 1 months======

2013-04-05 17:42:32 ----RD---- C:\Program Files
2013-04-05 16:30:46 ----D---- C:\Windows\system32\config
2013-04-05 16:16:11 ----D---- C:\Windows\Temp
2013-04-05 15:15:41 ----D---- C:\Program Files\Mozilla Firefox
2013-04-05 14:57:24 ----SHD---- C:\Windows\Installer
2013-04-05 14:57:20 ----SHD---- C:\Config.Msi
2013-04-05 14:57:19 ----D---- C:\Program Files\Common Files
2013-04-05 14:56:59 ----D---- C:\Windows\System32
2013-04-05 14:56:35 ----A---- C:\Windows\system32\deployJava1.dll
2013-04-05 14:56:32 ----D---- C:\Program Files\Java
2013-04-05 14:56:22 ----SHD---- C:\System Volume Information
2013-04-05 11:27:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-04-05 11:27:57 ----D---- C:\Windows\inf
2013-04-05 11:26:52 ----D---- C:\Windows\Prefetch
2013-04-05 11:13:45 ----D---- C:\ProgramData\Spyware Terminator
2013-04-04 20:58:38 ----D---- C:\Program Files\Common Files\Adobe
2013-04-03 17:11:30 ----D---- C:\Windows\system32\catroot
2013-04-03 17:11:29 ----D---- C:\Windows\system32\DriverStore
2013-04-03 17:10:52 ----D---- C:\Windows\system32\drivers
2013-04-03 17:10:36 ----D---- C:\Windows\system32\catroot2
2013-04-03 17:08:58 ----D---- C:\Windows\winsxs
2013-04-03 17:07:45 ----RSD---- C:\Windows\Fonts
2013-04-03 17:03:59 ----D---- C:\ProgramData\Pinnacle
2013-04-03 17:03:58 ----D---- C:\Program Files\Pinnacle
2013-04-03 16:55:33 ----D---- C:\Windows\system32\Tasks
2013-04-03 16:52:25 ----RSD---- C:\Windows\assembly
2013-04-03 16:51:29 ----D---- C:\Windows\Logs
2013-04-03 16:51:17 ----HD---- C:\ProgramData
2013-04-02 16:09:10 ----D---- C:\ProgramData\CanonIJPLM
2013-03-30 21:06:06 ----D---- C:\Windows\Minidump
2013-03-30 21:05:59 ----D---- C:\Windows
2013-03-24 15:21:24 ----D---- C:\ProgramData\Sony Ericsson
2013-03-24 15:21:09 ----D---- C:\Program Files\Sony Ericsson
2013-03-22 16:59:27 ----D---- C:\Windows\Microsoft.NET
2013-03-21 17:49:15 ----D---- C:\Windows\rescache
2013-03-21 12:32:43 ----SHD---- C:\Boot
2013-03-21 12:24:57 ----D---- C:\Program Files\Windows Sidebar
2013-03-21 12:24:57 ----D---- C:\Program Files\Windows Mail
2013-03-21 12:24:56 ----D---- C:\Program Files\DVD Maker
2013-03-21 12:24:55 ----D---- C:\Program Files\Windows Portable Devices
2013-03-21 12:24:55 ----D---- C:\Program Files\Windows Media Player
2013-03-21 12:24:55 ----D---- C:\Program Files\Internet Explorer
2013-03-21 12:24:54 ----D---- C:\Program Files\Windows Photo Viewer
2013-03-21 12:24:53 ----D---- C:\Program Files\Windows Journal
2013-03-21 12:24:49 ----D---- C:\Program Files\Common Files\System
2013-03-21 12:24:31 ----D---- C:\Windows\servicing
2013-03-21 12:24:31 ----D---- C:\Program Files\Windows Defender
2013-03-21 12:24:30 ----D---- C:\Windows\ehome
2013-03-21 12:23:49 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-03-21 12:23:47 ----D---- C:\Windows\system32\en-US
2013-03-21 12:23:47 ----D---- C:\Windows\system32\da-DK
2013-03-21 12:23:47 ----D---- C:\Windows\PolicyDefinitions
2013-03-21 12:23:46 ----D---- C:\Windows\system32\oobe
2013-03-21 12:23:45 ----D---- C:\Windows\system32\sysprep
2013-03-21 12:23:45 ----D---- C:\Windows\system32\migration
2013-03-21 12:23:43 ----D---- C:\Windows\system32\Setup
2013-03-21 12:23:43 ----D---- C:\Windows\system32\AdvancedInstallers
2013-03-21 12:23:42 ----D---- C:\Windows\system32\cs-CZ
2013-03-21 12:23:42 ----D---- C:\Windows\system32\cs
2013-03-21 12:23:40 ----D---- C:\Windows\system32\sppui
2013-03-21 12:23:40 ----D---- C:\Windows\system32\manifeststore
2013-03-21 12:23:40 ----D---- C:\Windows\system32\es-ES
2013-03-21 12:23:35 ----D---- C:\Windows\system32\wbem
2013-03-21 12:23:32 ----D---- C:\Windows\system32\migwiz
2013-03-21 12:23:31 ----D---- C:\Windows\system32\Dism
2013-03-21 12:22:02 ----D---- C:\Windows\AppPatch
2013-03-21 12:21:40 ----D---- C:\Windows\system32\Boot
2013-03-20 21:39:52 ----A---- C:\Windows\system32\msclmd.dll
2013-03-16 20:07:54 ----D---- C:\Program Files\rajce
2013-03-15 16:43:21 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-15 12:35:29 ----D---- C:\ProgramData\Microsoft Help
2013-03-12 21:51:49 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-03-06 16:19:36 ----D---- C:\ProgramData\MFAData

Zdravim

Log neni cely, ale zatim to nevadi.

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Vše udělám dle návodu, a na konci to napíše - "cannot create file cmd.bat"

Obcas se to stane, ze OTL tuhle chybku vyhodi

Spustte ho podle stejneho navodu jeste jednou, ale s timto upravenym skriptem

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

*crack* /s
*keygen* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Supr už to jde. Zde přikládám OTL.

OTL logfile created on: 7.4.2013 18:24:44 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Vlastick\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,93 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 53,34% Memory free
5,86 Gb Paging File | 4,22 Gb Available in Paging File | 72,02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,99 Gb Total Space | 162,94 Gb Free Space | 35,73% Space Free | Partition Type: NTFS
Drive E: | 15,03 Gb Total Space | 14,68 Gb Free Space | 97,65% Space Free | Partition Type: FAT32

Computer Name: VLASTICK-PC | User Name: Vlastick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.04.06 19:36:33 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2013.04.05 20:57:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Vlastick\Desktop\OTL.exe
PRC - [2013.02.27 17:38:44 | 001,259,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2013.01.14 07:03:52 | 000,587,912 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\st_rsser.exe
PRC - [2013.01.14 07:03:46 | 003,674,248 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2013.01.07 13:03:32 | 000,446,648 | ---- | M] (Sony) -- C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
PRC - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.11.23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.11.19 18:25:32 | 002,598,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012.11.08 04:51:06 | 000,768,632 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012.11.02 04:51:18 | 005,174,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012.04.30 11:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
PRC - [2012.03.19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012.02.14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012.02.14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2012.02.13 10:06:56 | 003,481,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2011.12.09 16:55:38 | 007,270,864 | ---- | M] (QIP) -- C:\Program Files\QIP 2012\qip.exe
PRC - [2011.04.15 16:50:56 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2011.01.15 17:48:44 | 000,452,016 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
PRC - [2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.10.02 15:29:38 | 000,694,816 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
PRC - [2009.10.02 15:29:16 | 000,690,720 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
PRC - [2009.10.02 15:28:30 | 000,469,536 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
PRC - [2009.09.04 15:42:12 | 000,125,472 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe
PRC - [2009.09.04 15:42:10 | 000,186,912 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe
PRC - [2007.02.21 11:26:08 | 000,561,152 | ---- | M] (Snaptune Inc) -- C:\Program Files\Snaptune Inc\Snaptune One\SnapRec.exe
PRC - [2007.02.20 11:07:40 | 000,199,752 | ---- | M] (Pinnacle Systems GmbH) -- C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe

========== Modules (No Company Name) ==========

MOD - [2013.04.06 19:36:36 | 000,835,584 | ---- | M] () -- C:\Program Files\Opera\gstreamer\gstreamer.dll
MOD - [2013.04.06 19:36:36 | 000,312,832 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll
MOD - [2013.04.06 19:36:36 | 000,158,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll
MOD - [2013.04.06 19:36:36 | 000,101,888 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll
MOD - [2013.04.06 19:36:36 | 000,096,256 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll
MOD - [2013.04.06 19:36:36 | 000,094,208 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll
MOD - [2013.04.06 19:36:36 | 000,093,696 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll
MOD - [2013.04.06 19:36:36 | 000,073,728 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll
MOD - [2013.04.06 19:36:36 | 000,067,072 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll
MOD - [2013.04.06 19:36:36 | 000,062,976 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll
MOD - [2013.04.06 19:36:36 | 000,057,344 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll
MOD - [2013.04.06 19:36:36 | 000,038,912 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll
MOD - [2013.03.12 21:51:49 | 014,717,144 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2013.01.09 14:11:40 | 000,599,040 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PhoneUpdate.dll
MOD - [2012.11.07 17:25:36 | 000,204,288 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\MExplorer.dll
MOD - [2012.04.30 11:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
MOD - [2012.04.30 11:57:42 | 000,039,936 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll
MOD - [2011.12.09 16:55:58 | 000,954,832 | ---- | M] () -- C:\Program Files\QIP 2012\Protos\Social\Social.dll
MOD - [2011.12.09 16:55:56 | 001,638,352 | ---- | M] () -- C:\Program Files\QIP 2012\Protos\MRA\mra.dll
MOD - [2011.12.09 16:55:56 | 000,049,104 | ---- | M] () -- C:\Program Files\QIP 2012\Protos\MRA\pics.dll
MOD - [2011.12.09 16:55:50 | 002,520,528 | ---- | M] () -- C:\Program Files\QIP 2012\Protos\InfICQ\inficq.dll
MOD - [2011.12.09 16:55:48 | 000,058,832 | ---- | M] () -- C:\Program Files\QIP 2012\Plugins\Win7Helper\Win7Helper.dll
MOD - [2011.12.09 16:55:46 | 000,058,320 | ---- | M] () -- C:\Program Files\QIP 2012\Plugins\cards\cards.dll
MOD - [2011.12.09 16:55:40 | 004,659,664 | ---- | M] () -- C:\Program Files\QIP 2012\Core\voip.dll
MOD - [2011.07.07 15:54:36 | 000,233,984 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\Report.dll
MOD - [2011.04.15 16:50:56 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
MOD - [2011.03.02 12:40:51 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll

========== Services (SafeList) ==========

SRV - [2013.04.05 15:15:49 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.03.12 21:51:52 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.01.14 07:03:52 | 000,587,912 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\st_rsser.exe -- (ST2012_Svc)
SRV - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.11.02 04:51:18 | 005,174,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012.02.14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2012.01.18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011.04.17 15:18:36 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009.10.02 15:29:16 | 000,690,720 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe -- (ePowerSvc)
SRV - [2009.09.04 15:42:12 | 000,125,472 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe -- (ODDPwrSvc)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.02.21 11:26:08 | 000,561,152 | ---- | M] (Snaptune Inc) [Auto | Running] -- C:\Program Files\Snaptune Inc\Snaptune One\SnapRec.exe -- (Snaptune Recording Service)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\RtsUCcid.sys -- (USBCCID)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (RtsUIR)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\TEMP\cpuz135\cpuz135_x32.sys -- (cpuz135)
DRV - [2012.12.10 04:28:36 | 000,142,176 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2012.11.08 04:49:26 | 000,250,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012.10.27 13:37:43 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2012.10.27 13:37:43 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggflt.sys -- (ggflt)
DRV - [2012.08.24 15:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012.04.19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012.02.28 17:23:43 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012.01.31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011.12.23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011.12.23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011.12.23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011.07.13 20:47:01 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.07.13 20:47:00 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.06.21 12:24:06 | 000,032,768 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009.07.14 00:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32)
DRV - [2009.07.14 00:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2009.06.04 16:45:48 | 000,166,912 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2005.09.23 22:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MarvinBus.sys -- (MarvinBus)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2465387742-403944966-3739353813-1002\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2465387742-403944966-3739353813-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-2465387742-403944966-3739353813-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7B195A3098-0BD5-4e90-AE22-BA1C540AFD1E%7D:4.0.4
FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.8
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012.07.04 20:17:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2013.03.06 16:19:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.04.05 15:15:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.04.05 15:15:51 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2011.04.20 21:19:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vlastick\AppData\Roaming\Mozilla\Extensions
[2013.04.05 14:53:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vlastick\AppData\Roaming\Mozilla\Firefox\Profiles\wfajkpt8.default\extensions
[2012.11.30 12:52:27 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Vlastick\AppData\Roaming\Mozilla\Firefox\Profiles\wfajkpt8.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2013.04.05 14:53:51 | 000,269,007 | ---- | M] () (No name found) -- C:\Users\Vlastick\AppData\Roaming\Mozilla\Firefox\Profiles\wfajkpt8.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
[2013.04.05 15:15:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.04.05 15:15:50 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.04.05 15:15:48 | 000,002,421 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2013.04.05 15:15:48 | 000,000,851 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2013.04.05 15:15:48 | 000,001,580 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2013.04.05 15:15:48 | 000,000,867 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2013.04.05 15:15:48 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.43\pdf.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\Vlastick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2191_0\plugins/avgnpss.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll
CHR - plugin: Nitro PDF Plug-In (Enabled) = C:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: AVG Safe Search = C:\Users\Vlastick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\
CHR - Extension: AVG Do Not Track = C:\Users\Vlastick\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.0.0.2166_0\

O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (PandoraTV Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (PandoraTV Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2465387742-403944966-3739353813-1002\..\Toolbar\WebBrowser: (PandoraTV Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe (Acer Incorporated)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [IJNetworkScannerSelectorEX] C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)
O4 - HKLM..\Run: [ODDPwr] C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe (Acer Incorporated)
O4 - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4 - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKLM..\Run: [USBToolTip] C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe (Pinnacle Systems GmbH)
O4 - HKU\S-1-5-21-2465387742-403944966-3739353813-1002..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2465387742-403944966-3739353813-1002..\Run: [Infium] C:\Program Files\QIP 2012\qip.exe (QIP)
O4 - HKU\S-1-5-21-2465387742-403944966-3739353813-1002..\Run: [Sony PC Companion] C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 3
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.17.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D796B3B-D9D9-4BDF-B510-82831D73B59C}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9ADA97D4-CB6D-479B-8E02-4D0EF6671FD1}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0b4749a3-540f-11e2-a623-001f16a56be9}\Shell - "" = AutoRun
O33 - MountPoints2\{0b4749a3-540f-11e2-a623-001f16a56be9}\Shell\AutoRun\command - "" = E:\Startme.exe
O33 - MountPoints2\{c5cc61c9-2004-11e2-83b3-001f16a56be9}\Shell - "" = AutoRun
O33 - MountPoints2\{c5cc61c9-2004-11e2-83b3-001f16a56be9}\Shell\AutoRun\command - "" = E:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.mjpg - C:\Windows\System32\pvmjpg30.dll (Pegasus Imaging Corporation)
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013.04.05 20:57:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Vlastick\Desktop\OTL.exe
[2013.04.05 18:09:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
[2013.04.05 18:09:07 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack
[2013.04.05 18:08:23 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\AppData\Local\Programs
[2013.04.05 17:59:37 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\AppData\Roaming\Media Player Classic
[2013.04.05 17:42:32 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013.04.05 17:42:31 | 000,000,000 | ---D | C] -- C:\rsit
[2013.04.05 15:15:41 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.04.05 14:57:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2013.04.05 14:56:59 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013.04.05 14:56:59 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013.04.05 14:56:47 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013.04.05 14:56:47 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013.04.05 14:56:47 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013.04.03 18:02:39 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\Documents\Pinnacle
[2013.04.03 17:36:27 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\temp
[2013.04.03 17:14:00 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\Documents\InstantCDDVD
[2013.04.03 17:11:55 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\AppData\Local\Avid
[2013.04.03 17:10:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Pinnacle
[2013.04.03 17:06:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Pegasus Imaging
[2013.04.03 16:51:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Avid
[2013.04.03 16:50:35 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\AppData\Local\Pinnacle
[2013.04.03 16:45:27 | 000,000,000 | ---D | C] -- C:\ProgramData\PCTV Systems
[2013.04.03 16:44:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 16
[2013.04.03 16:24:13 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\Desktop\Pinnacle Studio 16 Ultimate 16.0.0.75 ........HANZY
[2013.04.02 16:13:24 | 000,000,000 | ---D | C] -- C:\Users\Vlastick\Desktop\2013_04_02
[2013.03.21 15:53:37 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2013.03.20 21:29:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2013.03.20 21:27:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2013.03.17 11:03:38 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013.03.15 12:32:50 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013.03.15 12:32:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013.03.15 12:32:48 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013.03.15 12:32:48 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013.03.15 12:32:48 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013.03.15 12:32:46 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013.03.15 12:32:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013.03.15 12:32:45 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

Pokračování OTL

========== Files - Modified Within 30 Days ==========

[2013.04.07 18:31:40 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.04.07 18:26:21 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2013.04.07 18:17:07 | 116,333,662 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2013.04.07 18:17:05 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.04.07 18:06:31 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.07 18:06:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.07 14:19:07 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.07 14:19:07 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.07 08:45:52 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.04.07 08:44:58 | 2360,709,120 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.06 18:14:49 | 000,666,444 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2013.04.06 18:14:49 | 000,652,148 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.04.06 18:14:49 | 000,140,108 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2013.04.06 18:14:49 | 000,121,080 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.04.05 20:57:54 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Vlastick\Desktop\OTL.exe
[2013.04.05 17:47:52 | 000,300,398 | ---- | M] () -- C:\Users\Vlastick\Desktop\GOPR0021.JPG
[2013.04.05 14:56:36 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013.04.05 14:56:35 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013.04.05 14:56:35 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013.04.05 14:56:35 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013.04.05 14:56:35 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013.04.05 14:56:35 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013.04.04 21:04:49 | 000,007,168 | ---- | M] () -- C:\Users\Vlastick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.04.04 11:10:14 | 000,358,488 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.04.03 17:51:43 | 000,000,308 | ---- | M] () -- C:\Users\Vlastick\Desktop\atlas-mraku.cz.2012.avi.index
[2013.04.03 17:51:43 | 000,000,052 | ---- | M] () -- C:\Users\Vlastick\Desktop\atlas-mraku.cz.2012.avi.A.index
[2013.04.03 17:51:26 | 000,013,260 | ---- | M] () -- C:\Users\Vlastick\Desktop\untitled.cos2
[2013.04.03 17:07:58 | 000,002,208 | ---- | M] () -- C:\Users\Public\Desktop\Pinnacle Studio 16.lnk
[2013.03.30 21:05:59 | 302,456,825 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.03.25 18:31:30 | 000,285,195 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2013.03.24 15:11:18 | 050,215,575 | ---- | M] () -- C:\Users\Vlastick\Desktop\Vector-(Deluxe-)-v1.0.0.apk
[2013.03.20 21:39:52 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2013.03.15 21:51:44 | 116,255,244 | ---- | M] () -- C:\Users\Vlastick\Desktop\Atlas-mraku.CZ.2012.avi
[2013.03.12 21:51:49 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.03.12 21:51:49 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.04.05 21:05:20 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.04.05 17:29:49 | 000,300,398 | ---- | C] () -- C:\Users\Vlastick\Desktop\GOPR0021.JPG
[2013.04.03 17:51:43 | 000,000,308 | ---- | C] () -- C:\Users\Vlastick\Desktop\atlas-mraku.cz.2012.avi.index
[2013.04.03 17:51:43 | 000,000,052 | ---- | C] () -- C:\Users\Vlastick\Desktop\atlas-mraku.cz.2012.avi.A.index
[2013.04.03 17:51:26 | 000,013,260 | ---- | C] () -- C:\Users\Vlastick\Desktop\untitled.cos2
[2013.04.03 17:07:58 | 000,002,208 | ---- | C] () -- C:\Users\Public\Desktop\Pinnacle Studio 16.lnk
[2013.03.24 15:10:00 | 050,215,575 | ---- | C] () -- C:\Users\Vlastick\Desktop\Vector-(Deluxe-)-v1.0.0.apk
[2013.03.15 21:37:45 | 116,255,244 | ---- | C] () -- C:\Users\Vlastick\Desktop\Atlas-mraku.CZ.2012.avi
[2013.01.20 20:00:24 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2013.01.20 13:19:47 | 000,358,488 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.05.25 20:07:54 | 000,000,197 | ---- | C] () -- C:\Users\Vlastick\Waypoints.properties
[2012.05.16 18:08:46 | 000,000,145 | ---- | C] () -- C:\Windows\game.INI
[2012.03.31 18:44:59 | 000,000,297 | ---- | C] () -- C:\Windows\EReg072.dat
[2012.01.02 12:25:45 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2011.10.30 23:34:40 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011.07.13 20:47:01 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2011.07.13 20:47:00 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2011.06.07 07:14:56 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011.06.07 07:13:36 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011.05.13 21:38:53 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.05.13 21:38:53 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011.05.04 19:25:33 | 000,007,168 | ---- | C] () -- C:\Users\Vlastick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.04.15 17:24:49 | 000,189,796 | ---- | C] () -- C:\Windows\System32\drivers\RTConvEQ.dat
[2011.04.15 17:24:49 | 000,001,112 | ---- | C] () -- C:\Windows\System32\drivers\RtHdatEx.dat
[2011.04.15 17:24:49 | 000,000,712 | ---- | C] () -- C:\Windows\System32\drivers\SamSfPa.dat
[2011.04.15 17:24:49 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX2.dat
[2011.04.15 17:24:49 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX1.dat
[2011.04.15 17:24:49 | 000,000,520 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat
[2011.04.15 17:24:49 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers\rtkhdaud.dat
[2011.04.15 16:51:55 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe
[2011.04.15 16:51:55 | 000,000,074 | ---- | C] () -- C:\Windows\PidList.ini
[2011.04.15 16:51:54 | 000,106,496 | ---- | C] () -- C:\Windows\FixUVC.exe
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.01.31 12:32:34 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013.01.31 12:32:34 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2012.04.04 14:13:35 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\.minecraft
[2011.06.10 11:00:38 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\anpo.republika.pl
[2012.09.12 20:31:17 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Ashampoo
[2011.11.11 11:08:20 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\AVG2012
[2011.11.06 18:05:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\avidemux
[2012.01.02 12:25:58 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\CAD-KAS
[2012.12.24 22:15:19 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Canon
[2012.02.14 12:32:01 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Cool Record Edit Pro
[2011.11.08 10:37:52 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Crayon Physics Deluxe
[2012.07.22 15:48:17 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\DAEMON Tools Lite
[2012.06.22 20:19:45 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Downloaded Installations
[2011.07.28 13:25:59 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Felix_Deimel
[2011.06.10 11:00:56 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\fltk.org
[2013.02.10 11:58:07 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GARMIN
[2011.07.21 11:12:49 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GeoGet
[2011.10.28 21:12:10 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GetRightToGo
[2012.11.30 09:19:41 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GHISLER
[2011.10.22 18:39:16 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Hive Cluster
[2011.10.25 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Kyblsoft Makra
[2011.06.09 18:52:55 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Livestation
[2011.06.09 18:52:55 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Mchid
[2012.07.16 15:19:30 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Nitro PDF
[2011.04.15 17:12:24 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Opera
[2011.07.13 20:47:44 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Prison Break
[2012.01.16 16:17:03 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Publish Providers
[2011.12.09 21:52:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\QIP
[2011.10.08 17:25:16 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Red Alert 3
[2011.07.18 18:46:48 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Rovio
[2013.01.19 13:53:40 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Sony
[2013.01.20 20:00:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Spyware Terminator
[2013.01.19 12:30:54 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\TuneUp Software
[2011.09.05 17:47:39 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\XnView
[2011.11.10 21:32:28 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\YouTube HD Transfer
[2011.05.27 11:48:00 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Zoner

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 06:53:46 | 000,032,534 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2012.04.04 08:38:18 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.07.16 10:31:34 | 000,000,940 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012.07.16 10:31:36 | 000,000,944 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.01.21 12:27:05 | 000,000,298 | ---- | C] () -- C:\Windows\Tasks\ROC_REG_JAN_DELETE.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010.11.20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\System32\hal.dll
[2010.11.20 14:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) MD5=1BF0D4727FDB437D513CFF8A9359C050 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_ad305c8fb7ec5060\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.06.21 07:34:23 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=04E4A7D53A7ACE02E8C55B17A498F631 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_b513df73c4b4f466\tcpip.sys
[2011.09.29 18:02:44 | 001,301,872 | ---- | M] (Microsoft Corporation) MD5=22F7E7CBCA308DEE3428B097D4F8A61C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_b38e8546e0cbe4a1\tcpip.sys
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2013.01.03 07:01:49 | 001,303,912 | ---- | M] (Microsoft Corporation) MD5=34AE5CC0C7417AB701C2AA8A7BC75417 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_b3c99dece09ecc3b\tcpip.sys
[2010.11.20 14:30:12 | 001,290,112 | ---- | M] (Microsoft Corporation) MD5=37E8FA3779668837CA9E2C36D2415949 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_b5257c3dc4a85a01\tcpip.sys
[2011.09.29 18:17:18 | 001,303,920 | ---- | M] (Microsoft Corporation) MD5=3C1C41E317710F74CEC1E7F0D5325993 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_b5a84e10ddca7566\tcpip.sys
[2013.01.04 06:56:23 | 001,308,504 | ---- | M] (Microsoft Corporation) MD5=4A95845C5F33A4DDEB6AEF6367FB6520 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_b5becc06ddb98192\tcpip.sys
[2012.03.30 12:29:05 | 001,287,024 | ---- | M] (Microsoft Corporation) MD5=55E9965552741F3850CB22CBBA9671ED -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_b2f57423c7b8dea8\tcpip.sys
[2011.09.29 17:43:37 | 001,285,488 | ---- | M] (Microsoft Corporation) MD5=56C198AC82EFA622DD93E9E43575F79C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_b2f8731bc7b62d86\tcpip.sys
[2011.09.29 18:03:04 | 001,290,608 | ---- | M] (Microsoft Corporation) MD5=65D10B191C59C5501A1263FC33F6894B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_b4d1ffa1c4e682b5\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2013.01.03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\System32\drivers\tcpip.sys
[2013.01.03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_b502eb9fc4c2a304\tcpip.sys
[2012.03.30 12:23:11 | 001,291,632 | ---- | M] (Microsoft Corporation) MD5=7FA2E0F8B072BD04B77B421480B6CC22 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_b52e5147c4a202d7\tcpip.sys
[2011.04.25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2012.03.30 11:04:23 | 001,306,480 | ---- | M] (Microsoft Corporation) MD5=88FCDB9923EFECA207B3CEBD24407126 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_b583df0adde66104\tcpip.sys
[2011.06.21 07:30:45 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=93C444D118B184452132357C322124CD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_b3703df4e0e237e0\tcpip.sys
[2010.06.14 08:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2010.06.14 08:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
[2013.01.04 06:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_b34bcf71c7782cb0\tcpip.sys
[2011.06.21 07:39:53 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=C2DAAEB48F3A47C410B041A0D2382EE1 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_b32e82b7c78da1d1\tcpip.sys
[2011.06.21 08:54:00 | 001,303,424 | ---- | M] (Microsoft Corporation) MD5=DEC4940487050AE13C60C86F40E07E75 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_b583db3edde666b6\tcpip.sys
[2012.03.30 12:08:19 | 001,303,408 | ---- | M] (Microsoft Corporation) MD5=E47C2844A1605A44178F4281E4D58B3D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_b38bb990e0ccc871\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010.11.20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[12 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[4 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[2 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.04.04 14:13:35 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\.minecraft
[2011.09.02 18:54:23 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Adobe
[2011.06.10 11:00:38 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\anpo.republika.pl
[2011.08.11 14:12:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Apple Computer
[2012.09.12 20:31:17 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Ashampoo
[2011.11.11 11:08:20 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\AVG2012
[2011.11.06 18:05:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\avidemux
[2012.01.02 12:25:58 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\CAD-KAS
[2012.12.24 22:15:19 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Canon
[2012.02.14 12:32:01 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Cool Record Edit Pro
[2011.11.08 10:37:52 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Crayon Physics Deluxe
[2012.07.22 15:48:17 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\DAEMON Tools Lite
[2012.06.22 20:19:45 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Downloaded Installations
[2013.03.03 20:29:20 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\dvdcss
[2011.07.28 13:25:59 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Felix_Deimel
[2011.06.10 11:00:56 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\fltk.org
[2013.02.10 11:58:07 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GARMIN
[2011.07.21 11:12:49 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GeoGet
[2011.10.28 21:12:10 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GetRightToGo
[2012.11.30 09:19:41 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\GHISLER
[2011.10.22 18:39:16 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Hive Cluster
[2011.04.15 16:24:27 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Identities
[2011.04.15 16:50:59 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\InstallShield
[2012.02.28 17:30:54 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\InstallShield Installation Information
[2011.10.25 22:33:10 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Kyblsoft Makra
[2011.06.09 18:52:55 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Livestation
[2011.04.15 16:30:31 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Macromedia
[2011.06.09 18:52:55 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Mchid
[2009.07.14 11:20:06 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Media Center Programs
[2013.04.05 17:59:56 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Media Player Classic
[2011.12.04 23:54:38 | 000,000,000 | --SD | M] -- C:\Users\Vlastick\AppData\Roaming\Microsoft
[2011.04.20 21:19:36 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Mozilla
[2013.01.19 13:53:40 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Nero
[2012.07.16 15:19:30 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Nitro PDF
[2011.04.15 17:12:24 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Opera
[2011.07.13 20:47:44 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Prison Break
[2012.01.16 16:17:03 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Publish Providers
[2011.12.09 21:52:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\QIP
[2011.10.08 17:25:16 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Red Alert 3
[2011.07.18 18:46:48 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Rovio
[2013.02.03 09:18:57 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Skype
[2013.01.19 13:53:40 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Sony
[2013.01.20 20:00:21 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Spyware Terminator
[2012.06.10 11:37:39 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Sun
[2013.01.19 12:30:54 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\TuneUp Software
[2013.02.02 19:43:47 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\vlc
[2012.11.30 09:19:41 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Winamp
[2011.04.16 20:05:40 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\WinRAR
[2011.09.05 17:47:39 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\XnView
[2011.11.10 21:32:28 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\YouTube HD Transfer
[2011.05.27 11:48:00 | 000,000,000 | ---D | M] -- C:\Users\Vlastick\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2011.04.02 18:26:51 | 000,695,296 | ---- | M] (AnjoCaido) -- C:\Users\Vlastick\AppData\Roaming\.minecraft\Minecraft.exe
[2004.10.22 05:16:58 | 000,118,736 | ---- | M] (Macrovision Corporation) -- C:\Users\Vlastick\AppData\Roaming\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe
[2013.04.03 17:10:15 | 000,029,926 | R--- | M] () -- C:\Users\Vlastick\AppData\Roaming\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2013.04.07 18:36:40 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2013.04.07 08:45:52 | 000,000,940 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.04.07 18:17:05 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2013.01.21 15:39:31 | 000,000,298 | ---- | M] () -- C:\Windows\Tasks\ROC_REG_JAN_DELETE.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.04.07 14:19:07 | 000,014,224 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.07 14:19:07 | 000,014,224 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.05 14:56:35 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\deployJava1.dll
[2013.04.05 14:56:35 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\java.exe
[2013.04.05 14:56:35 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\javaw.exe
[2013.04.05 14:56:35 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\javaws.exe
[2013.04.05 14:56:35 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\npDeployJava1.dll
[2013.04.06 18:14:49 | 000,140,108 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2013.04.06 18:14:49 | 000,121,080 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2013.04.06 18:14:49 | 000,666,444 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2013.04.06 18:14:49 | 000,652,148 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2013.04.06 18:14:49 | 001,576,554 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2013.04.05 14:56:36 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\WindowsAccessBridge.dll

< %SYSTEMDRIVE%\*.exe >
[2007.11.07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe

< >

< *crack* /s >
[2007.03.23 18:11:06 | 000,048,994 | ---- | M] () -- \bestgames\ZNK7\sound\crack.wav
[2010.02.21 02:22:00 | 000,000,386 | ---- | M] () -- \Program Files\GeoGet\data-gasp\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif
[2010.02.21 00:22:00 | 000,000,386 | ---- | M] () -- \Program Files\GeoGet\data-gasp\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif.old
[2010.02.21 02:22:00 | 000,000,386 | ---- | M] () -- \Program Files\GeoGet\distdata\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif
[2010.06.14 13:49:08 | 000,004,690 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFx\HfxXML\65 - Patriotic-FireCracker.png
[2010.06.14 13:49:08 | 000,005,254 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFx\HfxXML\70 - Foods-Crackers.png
[2010.06.22 05:19:14 | 000,000,736 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFx\HfxXML\Crackers.xml
[2010.06.22 05:19:16 | 000,000,756 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFx\HfxXML\FireCracker.xml
[2012.02.02 15:16:26 | 000,009,987 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Cracked Slab - Animated Slab.png
[2012.02.02 15:16:26 | 000,014,913 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Cracked Slab - Cracked Slab.png
[2012.02.02 15:16:26 | 000,012,305 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Cracked Slab - Horizontal Slab.png
[2012.02.02 15:16:26 | 000,012,608 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Cracked Slab - Red Slab.png
[2012.02.02 15:16:26 | 000,011,676 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Cracked Slab.png
[2011.10.21 12:18:12 | 000,009,561 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\CrackedSlab3D.fxt
[2012.02.02 15:16:26 | 000,006,719 | ---- | M] () -- \Program Files\Pinnacle\Studio 16\plugins\RTFXV2\Base\RTFxFilters\Stained Glass - Big Crack.png
[2013.04.04 16:02:16 | 896,047,993 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\temporary_downloads\ADOBE-AFTER-EFFECTS+SERIAL+CRACK.zip
[2010.02.21 02:22:00 | 000,000,386 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\GeoGet\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif
[2013.04.04 16:02:18 | 000,001,214 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\ADOBE-AFTER-EFFECTS+SERIAL+CRACK.lnk
[2007.01.07 15:16:32 | 011,178,608 | ---- | M] () -- \Users\Vlastick\Desktop\Media\MP3\Faith No More - 1992 - Angel Dust\11. Crack Hitler.mp3
[2010.02.21 00:22:00 | 000,000,386 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Project KSOJ\GeoGet\data-gasp\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif
[2010.02.21 00:22:00 | 000,000,386 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Project KSOJ\GeoGet\distdata\offline\sysimg\WM\Cracker_Barrel_Restaurants.gif

< *keygen* /s >
[2008.10.26 07:27:12 | 000,016,515 | ---- | M] () -- \$Recycle.Bin\S-1-5-21-2465387742-403944966-3739353813-1002\$R2EKSN0\ACS4MC- Keygen\Screenshot_Keygen.jpg
[2008.10.19 02:48:34 | 000,469,268 | ---- | M] () -- \$Recycle.Bin\S-1-5-21-2465387742-403944966-3739353813-1002\$R2EKSN0\ACS4MC- Keygen\Extra keygen\ACS4MC-Keygen.EXE
[2008.10.26 07:26:46 | 000,059,091 | ---- | M] () -- \$Recycle.Bin\S-1-5-21-2465387742-403944966-3739353813-1002\$R2EKSN0\ACS4MC- Keygen\Extra keygen\Screenshot_Keygen.jpg
[2013.04.04 21:00:14 | 000,000,771 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\ACS4MC- Keygen.lnk
[2013.04.04 21:00:42 | 000,000,904 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\Extra keygen.lnk
[2013.04.04 21:00:42 | 000,001,256 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\Screenshot_Keygen.lnk
[2013.01.27 10:14:38 | 000,001,194 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\TuneUp-Utilities-2013-keygen.lnk

< *loader* /s >
[1999.11.04 15:06:48 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2009.03.19 07:23:56 | 000,070,944 | ---- | M] () -- \Program Files\Deep silver\Prison Break\PhysXLoader.dll
[2010.12.14 11:54:22 | 000,166,400 | ---- | M] () -- \Program Files\Fotolab\Fotolab Fotosvet 4\CWImageLoader0.dll
[2009.11.12 13:50:16 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2011.09.07 21:39:42 | 000,064,280 | ---- | M] () -- \Program Files\Rock of Ages\Binaries\Win32\PhysXLoader.dll
[2013.03.05 14:21:54 | 000,001,702 | ---- | M] () -- \Program Files\Sony Ericsson\Update Engine\licenses\loaderbinarylegal.txt
[2008.02.25 08:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2011.03.08 17:10:08 | 000,670,208 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Facebook\ZPSPluginLoader.exe
[2011.03.08 17:13:18 | 000,683,520 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Flickr\ZPSPluginLoader.exe
[2011.03.08 17:09:04 | 000,194,048 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Plugins\Picasa\ZPSPluginLoader.exe
[2011.03.22 14:06:26 | 000,102,792 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Program32\8bfLoader.exe
[2011.03.22 14:06:38 | 000,019,336 | ---- | M] () -- \Program Files\Zoner\Photo Studio 13\Program32\WICLoader.exe
[2013.02.16 09:10:12 | 000,003,784 | ---- | M] () -- \Users\Vlastick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E80WE9BJ\bundleloader[1].js
[2013.02.16 09:10:22 | 000,000,723 | ---- | M] () -- \Users\Vlastick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYGG6N14\downloaderror[1].js
[2013.02.16 09:10:22 | 000,001,174 | ---- | M] () -- \Users\Vlastick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYGG6N14\downloader[1].js
[2011.07.13 18:29:14 | 000,000,144 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fuploader.imghost.sk%2Fcss%2Fimages%2Ffavicon.png
[2011.11.20 15:52:23 | 000,884,224 | ---- | M] () -- \Users\Vlastick\AppData\Local\Share Rapid Poker\Loader.exe
[2011.11.22 16:58:06 | 000,016,491 | ---- | M] () -- \Users\Vlastick\AppData\Local\Share Rapid Poker\Loader.ini
[2011.04.05 07:32:12 | 000,032,281 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\.minecraft\bin\minecraft.jar\ModLoader.class
[2011.10.28 21:12:01 | 000,001,094 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\GetRightToGo\Brothersoftdownloader_for_Keyboard.data
[2011.10.28 21:11:57 | 000,000,808 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\GetRightToGo\Brothersoftdownloader_for_Keyboard.data0
[2013.03.31 21:52:54 | 000,000,121 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\ZEKJHWHL\uk-extreme.cdn.videoplaza.tv\com.videoplaza.bootloader.sol
[2011.07.15 09:54:27 | 183,359,488 | ---- | M] () -- \Users\Vlastick\Desktop\Media\Serialy\How i met your mother\6x20\himym-en-s06e20-by-deddy1000-of-poweruploaders.avi
[2011.07.15 12:15:41 | 183,226,368 | ---- | M] () -- \Users\Vlastick\Desktop\Media\Serialy\How i met your mother\6x21\himym-en-s06e21-by-deddy1000-of-poweruploaders.avi
[2011.07.15 12:14:35 | 183,318,149 | ---- | M] () -- \Users\Vlastick\Desktop\Media\Serialy\How i met your mother\6x22\himym-en-s06e22-by-deddy1000-of-poweruploaders.avi
[2011.07.15 12:14:00 | 183,379,969 | ---- | M] () -- \Users\Vlastick\Desktop\Media\Serialy\How i met your mother\6x23\himym-en-s06e23-by-deddy1000-of-poweruploaders.avi
[1999.01.08 19:10:00 | 000,022,800 | ---- | M] () -- \Users\Vlastick\Desktop\n\NFS3\redist\DirectX6\DMLOADER.DLL
[2011.09.30 22:07:26 | 000,000,264 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\facebook-like-button\inc\css\prettyLoader.css
[2011.09.30 22:07:26 | 000,001,849 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\facebook-like-button\inc\css\images\prettyLoader\ajax-loader.gif
[2011.09.30 22:07:26 | 000,000,107 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\facebook-like-button\inc\css\images\prettyLoader\prettyLoader.gif
[2011.09.30 22:07:26 | 000,000,707 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\facebook-like-button\inc\css\images\prettyLoader\prettyLoader.png
[2011.09.30 22:07:26 | 000,002,629 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\facebook-like-button\inc\js\prettyLoader.js
[2011.10.12 10:07:16 | 000,001,914 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\gd-star-rating\js\rating\rating-loaders.js
[2011.11.25 14:37:50 | 000,000,967 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lazyest-gallery\js\lazyest-loader.dev.js
[2011.11.25 14:37:50 | 000,000,697 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lazyest-gallery\js\lazyest-loader.js
[2011.11.25 14:37:50 | 000,024,554 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lazyest-gallery\themes\images\ajax_loader_bk-we.gif
[2011.11.25 14:37:50 | 000,024,796 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lazyest-gallery\themes\images\ajax_loader_we-bu.gif
[2011.03.24 18:07:40 | 000,000,668 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lightbox-gallery\graphics\loader.gif
[2011.03.24 18:07:40 | 000,000,673 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lightbox-gallery\graphics\loader.white.gif
[2011.03.24 18:07:40 | 000,001,849 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lightbox-gallery\images\ajax-loader.gif
[2011.03.24 18:07:40 | 000,001,849 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\lightbox-gallery\images\pt_BR\ajax-loader.gif
[2011.10.26 06:37:20 | 000,000,673 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\nextgen-gallery\images\ajax-loader.gif
[2011.10.26 06:37:20 | 000,006,820 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-content\plugins\nextgen-gallery\images\loader.gif
[2009.08.13 14:45:58 | 000,030,745 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-includes\script-loader.php
[2009.08.13 14:45:56 | 000,002,184 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\films\wp-includes\template-loader.php
[2011.11.26 21:40:29 | 000,032,349 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\fun\wp-includes\script-loader.php
[2011.11.26 21:40:30 | 000,001,893 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\fun\wp-includes\template-loader.php
[2007.09.28 12:09:34 | 000,001,749 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\touch\soubory\downloader.php
[2010.08.04 21:42:20 | 000,032,349 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\wordpress\wp-includes\script-loader.php
[2010.08.04 21:42:22 | 000,001,893 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\wordpress\wp-includes\template-loader.php
[2011.07.21 22:43:12 | 000,035,727 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\wordpressnew\wp-includes\script-loader.php
[2011.07.21 22:43:14 | 000,001,893 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\wordpressnew\wp-includes\template-loader.php
[2012.04.20 04:15:18 | 000,000,673 | ---- | M] () -- \Users\Vlastick\Desktop\Other\photo\wordpress\wp-content\plugins\nextgen-gallery\images\ajax-loader.gif
[2012.04.20 04:15:18 | 000,006,820 | ---- | M] () -- \Users\Vlastick\Desktop\Other\photo\wordpress\wp-content\plugins\nextgen-gallery\images\loader.gif
[2012.04.29 11:45:30 | 000,035,936 | ---- | M] () -- \Users\Vlastick\Desktop\Other\photo\wordpress\wp-includes\script-loader.php
[2012.04.29 11:45:30 | 000,001,893 | ---- | M] () -- \Users\Vlastick\Desktop\Other\photo\wordpress\wp-includes\template-loader.php
[2008.12.06 20:25:57 | 000,070,936 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Project KSOJ\Angry Birds 2011 Tomba120\fluid\PhysXLoader.dll
[2011.04.16 20:10:15 | 000,001,323 | ---- | M] () -- \Windows\pss\Adobe Gamma Loader.lnk.CommonStartup
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009.07.14 10:43:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 10:43:57 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2009.07.14 10:43:57 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2013.03.20 21:39:58 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2013.03.20 21:39:58 | 000,508,904 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winload.exe_75835076
[2013.03.20 21:39:58 | 000,442,720 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953_winresume.exe_85cd1215
[2009.07.14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.14 10:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 03:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.08.19 09:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009.08.19 09:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2010.11.20 05:02:40 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_5d2e241dcae8f953.manifest
[2009.07.14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.02 07:45:50 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_0ac72e8bdcf4a01c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:50:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:47:28 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_0caf8c25da193eb6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:15:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 08:56:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_0d3159e2f33c4676\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2013.01.24 21:09:36 | 000,434,264 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20125.0\System.Runtime.Serialization.dll
[2013.03.15 12:34:39 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20125.0\System.Runtime.Serialization.ni.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2013.03.05 14:20:18 | 000,049,209 | ---- | M] () -- \Program Files\Sony Ericsson\Update Engine\plugins\com.serialio_2.13.3.43.jar
[2013.03.05 14:20:24 | 000,005,990 | ---- | M] () -- \Program Files\Sony Ericsson\Update Engine\plugins\com.sonymobile.cs.serialcommunication_2.13.3.43.jar
[2011.01.15 02:20:52 | 000,073,040 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\HfxSerial.exe
[2011.01.15 02:21:02 | 000,009,552 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-CHS.dll
[2011.01.15 02:21:04 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-DEU.dll
[2011.01.15 02:21:04 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ESP.dll
[2011.01.15 02:21:04 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-FRA.dll
[2011.01.15 02:21:06 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-ITA.dll
[2011.01.15 02:21:06 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-JPN.dll
[2011.01.15 02:21:06 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-KOR.dll
[2011.01.15 02:21:08 | 000,010,064 | ---- | M] () -- \Users\Public\Documents\Pinnacle\Content\HollywoodFX\Languages\HfxSerial-NLD.dll
[2011.11.17 09:54:41 | 000,000,530 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ffilmy-serialy.iplace.cz%2F_%2Ffavicon.png
[2012.03.14 21:58:56 | 000,000,367 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fnejlepsi-serialy.cz%2Ffavicon.png
[2011.11.16 21:05:37 | 000,000,483 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fserialy.6in.eu%2Ffavicon.png
[2012.01.14 11:19:07 | 000,000,363 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fserialy.kinotip.cz%2Ffavicon.png
[2012.03.19 08:44:27 | 000,000,742 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Ffavicon.png
[2012.03.15 15:05:17 | 000,000,502 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fcz.png
[2012.03.15 10:55:56 | 000,000,335 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fminiatury%2Fexclamation.png
[2012.03.15 10:55:58 | 000,000,507 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fminiatury%2Fgo.png
[2012.03.15 10:56:03 | 000,000,170 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fminiatury%2Forig.png
[2012.03.15 10:56:06 | 000,000,474 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fminiatury%2Fquote.png
[2012.03.15 10:56:08 | 000,000,522 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftouch-serial.ic.cz%2Fobr%2Fminiatury%2Fstop.png
[2011.07.11 10:33:24 | 000,000,503 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Ftrickazeserialu.cz%2Ffiles%2Fctrl.png
[2011.12.06 12:43:19 | 000,000,930 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.dexter-serial.cz%2Ffavicon.png
[2011.07.14 12:42:08 | 000,000,711 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.serial-scrubs.cz%2Ffavicon.png
[2012.03.21 11:41:41 | 000,000,421 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.serialovalista.cz%2Ffavicon.png
[2012.02.05 17:34:16 | 000,000,878 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.serialovysvet.cz%2Fimages%2Ffavicon.png
[2012.03.14 18:17:10 | 000,000,581 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.serialzone.cz%2Ffavicon.png
[2012.03.19 17:14:14 | 000,000,742 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\icons\http%3A%2F%2Fwww.touch-serial.ic.cz%2Ffavicon.png
[2013.04.04 16:02:16 | 896,047,993 | ---- | M] () -- \Users\Vlastick\AppData\Local\Opera\Opera\temporary_downloads\ADOBE-AFTER-EFFECTS+SERIAL+CRACK.zip
[2013.04.04 16:02:18 | 000,001,214 | ---- | M] () -- \Users\Vlastick\AppData\Roaming\Microsoft\Windows\Recent\ADOBE-AFTER-EFFECTS+SERIAL+CRACK.lnk
[1998.09.14 19:11:32 | 000,041,472 | ---- | M] () -- \Users\Vlastick\Desktop\n\NFS3\redist\directx5\directx\dpserial.dll
[1997.07.14 18:00:00 | 000,041,472 | ---- | M] () -- \Users\Vlastick\Desktop\n\NFS3\redist\DirectX6\DPSERIAL.DLL
[2011.01.21 00:09:38 | 000,000,783 | ---- | M] () -- \Users\Vlastick\Desktop\Other\Nazhavmobil\wordpressnew\wp-includes\js\jquery\jquery.serialize-object.js
[2011.01.20 23:09:38 | 000,000,783 | ---- | M] () -- \Users\Vlastick\Desktop\Other\photo\wordpress\wp-includes\js\jquery\jquery.serialize-object.js
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 03:55:26 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.03.22 12:25:53 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\eb4fa29ea9ab56d453b36696edbe6423\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.03.22 12:29:43 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fde22ad3592f537464b769ae693152aa\System.Runtime.Serialization.ni.dll
[2013.01.11 16:00:31 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\f9df64b31138b2e6dd29444118a1f76c\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.01.11 16:01:03 | 002,637,312 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\fe0d8dda05b9d38bbb664432300b4f42\System.Runtime.Serialization.ni.dll
[2011.10.23 23:16:34 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.02.15 22:04:32 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2011.10.23 23:16:32 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.02.15 22:04:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 04:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 04:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2009.07.14 10:43:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2009.07.14 10:42:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012.10.06 21:19:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023.manifest
[2012.10.06 21:26:57 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b.manifest
[2012.10.05 21:04:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012.10.05 21:02:24 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2009.07.14 03:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b\System.RunTime.Serialization.Resources.dll
[2010.11.13 03:55:26 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:50 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2009.07.14 10:43:15 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c002c1170ca9a88f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_c233d4df09982c29\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 6144 bytes -> C:\Windows\Cursors\arrow_n.cur:NEDTA.DAT
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:5F64C164

< End of report >

Extras

OTL Extras logfile created on: 7.4.2013 18:24:44 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Vlastick\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,93 Gb Total Physical Memory | 1,56 Gb Available Physical Memory | 53,34% Memory free
5,86 Gb Paging File | 4,22 Gb Available in Paging File | 72,02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,99 Gb Total Space | 162,94 Gb Free Space | 35,73% Space Free | Partition Type: NTFS
Drive E: | 15,03 Gb Total Space | 14,68 Gb Free Space | 97,65% Space Free | Partition Type: FAT32

Computer Name: VLASTICK-PC | User Name: Vlastick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [CEWE prezentace fotografií] -- "C:\Program Files\Fotolab\Fotolab Fotosvet 4\CEWE prezentace fotografií.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotolab Fotosvet 4] -- "C:\Program Files\Fotolab\Fotolab Fotosvet 4\Fotolab Fotosvet 4.exe" "%1" ()
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{040C7DA8-6925-48FE-B469-DC27809ACDA6}" = lport=137 | protocol=17 | dir=in | app=system |
"{08E0C463-2664-4631-AC51-E68F01228A1D}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{0B2F8B2A-FF68-46D0-843D-55A15AD5144C}" = lport=139 | protocol=6 | dir=in | app=system |
"{11CDDC2D-8CF7-4C86-A273-162A1AB32B0C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{1E319946-D70E-4AB6-ADC1-AA620591D968}" = rport=139 | protocol=6 | dir=out | app=system |
"{3C886AC5-89B0-415C-9C69-65EA1B3E6D1A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{44828B9F-AEFB-439D-8382-CBC53CAEE6C6}" = lport=138 | protocol=17 | dir=in | app=system |
"{46BAADCD-3C9F-44AB-9819-4F702FD90C08}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{53FC0CAC-0B01-4BAD-B837-6CEFBD1FF483}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{59EAF59E-7880-4985-A0AA-B3B04D097101}" = rport=137 | protocol=17 | dir=out | app=system |
"{5B58B039-056E-4458-9361-62AB24C1E05E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{65B3D89C-048F-4E48-9F79-B901281D7F39}" = rport=138 | protocol=17 | dir=out | app=system |
"{73DF6EFE-524D-4C05-95F3-3B99E6EAC6E9}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8314CC7E-7C35-4BE5-9E1A-122998A78261}" = lport=5910 | protocol=6 | dir=in | name=vnc5910 |
"{85A61501-931C-4C47-A2FA-BF50914B88DB}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{860AE251-F2B9-4DE3-B78B-D2F05A1CA236}" = rport=10243 | protocol=6 | dir=out | app=system |
"{8C626D8A-E27C-494C-B988-0D69677F2936}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9142EFFE-C0F0-421D-BE13-2700BF44FC37}" = lport=10243 | protocol=6 | dir=in | app=system |
"{916C5D13-427E-43CC-A7FC-0C791C82D239}" = lport=445 | protocol=6 | dir=in | app=system |
"{A45E7F7C-1ECC-4118-B465-309A6C937562}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A473F4D5-EFF4-438A-90BB-15544A8919B8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B8E5D56E-E86E-4ECA-8188-DE8B7FCFE842}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C118C2A0-7358-4B01-9C2A-95A3966948B3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C614F045-B228-48CC-B3DC-6C8117C7822C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EA90D37E-C44D-4E89-9739-1C9B6F0A7BBA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{EAAFA920-8571-45C0-A301-79231EB967E6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F659659E-8EEE-45AB-9915-DB3BF8B61A90}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FE85E426-AF7C-4518-BC44-587A6BE08930}" = rport=445 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0323A4FC-946A-4528-8436-17C37BFD99AE}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{05995E0D-DB1E-46D7-8115-0A4D6BD54FAB}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{0665D242-C8CE-4D6B-8093-85640450DA14}" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe |
"{06D8EECC-7D0B-442D-87AF-B2C00B07BABE}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{108A8475-B8BD-413A-AD4B-4057208FD4D7}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{1CE76093-E4DE-4258-B8A3-B41CC4A2ED41}" = protocol=17 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe |
"{2AD4A520-7FA6-4738-AF9D-81D089D9E061}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2EC137C4-F09F-4CD8-968D-0AD48DB0085A}" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminator.exe |
"{2F9F4776-471D-4AF9-A29B-CBC1EA7EDCCD}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{36CD38E9-2DDE-42BD-91A1-8F3C57B3822D}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{3B790234-28F7-499B-88D6-FA9D552BA22F}" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"{3F1097DE-7946-40D0-A908-7747D22A68A7}" = protocol=6 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"{45B2B9ED-709F-4693-8049-E897FBF25639}" = protocol=6 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe |
"{45CD54DA-8F4C-46B2-AC24-794540B04696}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\videospin.exe |
"{4A034031-1855-4C14-BC53-0EA446D279DB}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\umi.exe |
"{4B2DA771-34DE-4C6E-9436-10064F64DDCB}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe |
"{4BD3DC8C-9246-4C9E-8F89-81E7D46D5A8B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4F4B6430-DBB6-4E2E-B1F4-F14D6FB2F84B}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{5084E3EA-9249-463F-A7F4-42BF9DC4267E}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\rm.exe |
"{511474C3-30E2-49BB-ACD8-2870767C7195}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{5201503C-9409-4DE2-BAD2-5FC07B0D1608}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{57678DD2-9C72-4170-A366-05D15D1EAF23}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{5849E1CA-9749-481F-95C3-070BB0C99AFE}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{58AAF1F8-9F06-44DD-A2FF-CD0844998674}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{59785E72-8B34-48C2-BCF6-69C276ED40EF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5EF0655D-2217-494E-B3CB-F905BEF5FE9D}" = protocol=6 | dir=in | app=c:\program files\pinnacle\videospin\programs\umi.exe |
"{6784C9F6-CBAB-4DFA-B646-736C9BD3A6F6}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{6A97EB90-F4FC-4D89-8C14-156CFFB50642}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\ngstudio.exe |
"{6F68DFDE-A2DE-4583-B835-7A07C814B7CC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{719925E4-318F-43EB-9BEA-C92C031F38F4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{79F26FC5-FC44-4396-9206-CD8A51591965}" = protocol=17 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"{83045E9E-D4AF-4211-B4B0-4A0ED34679AA}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{86F587C5-745B-4CEF-B841-79A88A124A04}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\umi.exe |
"{89DE9464-AACA-4D3E-BEAF-95BD4A197468}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{96A7579E-8634-4920-BC09-7DED6DC2E5C8}" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield 2\bf2.exe |
"{9C276AB4-5B5A-4FF5-9947-E3C29E32C5E3}" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"{9FC136B9-4D38-4A94-AC0D-35D0F3206AAD}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{A1DEA9B0-4B88-4EB5-89F3-A1D18A4132BE}" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminator.exe |
"{A7CD0AB8-B6F9-4EE7-8CBA-5DF189E67B2F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{A8F5C3C6-EFDC-45EF-95C0-95527EC519BA}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{AADAB290-9A97-459C-BC31-F449AD64E8DB}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\videospin.exe |
"{ABF4D404-11BE-4E61-8E1E-19EA02E6F766}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{AD403654-A352-4EBB-A29B-A2D85ABA36D7}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{B59EB108-07CF-46FF-BAA3-9D606FFE5A96}" = protocol=6 | dir=out | app=system |
"{BE71E0C8-667D-45C7-B80E-99F1A8977D49}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{BFE1CDC1-7678-4ADD-BD8F-4449BE3B77C0}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{C4511A3A-408C-45C8-9100-4E9D9877A450}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{CE976E29-165D-4972-9F84-0016467FC9A2}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{D3861EBC-82E1-47AD-9185-B36DE3095A42}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D9795EBD-6D05-4DF0-BE23-E6AB9CA066F0}" = protocol=17 | dir=in | app=c:\program files\pinnacle\videospin\programs\rm.exe |
"{DA69D0E0-97DD-4C53-9B75-24A9D44F732C}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 16\programs\rm.exe |
"{E777448B-EB3E-4443-861F-423AB9CA041B}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{E9C165CC-D288-4284-8083-C2A0FA7F9F23}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EB8D16A3-B7F1-4C73-886F-C2590EC621F3}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{F01BC688-E8D5-4C20-AC6B-675942A78869}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F093308E-C915-431D-ADFB-C3785D92FC96}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{F72E9851-7D08-4EE7-ABE3-C253EB8F76AB}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{2D67DF36-62B8-4F74-8B25-8873147BA5E0}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe |
"TCP Query User{3C30B39F-6AA1-455F-8DAE-8A0FB14ACC2C}C:\program files\saints row 2\sr2_pc.exe" = protocol=6 | dir=in | app=c:\program files\saints row 2\sr2_pc.exe |
"TCP Query User{6191A438-C88B-47AB-A11B-B9D92B477DE3}C:\program files\spyware terminator\spywareterminatorupdate.exe" = protocol=6 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"TCP Query User{66BEF229-741A-420F-B5A2-BBAC2EBCE913}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{77982710-34D0-469F-BF2C-E339C24ED71D}C:\program files\valve\portal 2\portal2.exe" = protocol=6 | dir=in | app=c:\program files\valve\portal 2\portal2.exe |
"TCP Query User{8A5E1FA8-2B1B-44E3-A0C0-EAD7BFB4F54F}C:\program files\qip 2012\qip.exe" = protocol=6 | dir=in | app=c:\program files\qip 2012\qip.exe |
"TCP Query User{8C465B38-F075-4898-B457-E0926DB99DC1}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{BED66A55-0791-49D2-A3B3-6AD141F0496E}C:\program files\rock of ages\binaries\win32\roa.exe" = protocol=6 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"TCP Query User{CF198453-BA48-46E7-A6E9-030493AEC397}C:\program files\qip 2012\qip.exe" = protocol=6 | dir=in | app=c:\program files\qip 2012\qip.exe |
"TCP Query User{E6541D9E-7051-4D15-8983-F74990552B4F}C:\program files\valve\portal 2\portal2.exe" = protocol=6 | dir=in | app=c:\program files\valve\portal 2\portal2.exe |
"TCP Query User{F22BD413-1538-49DC-810A-85A5409EFF6E}C:\totalcmd\totalcmd.exe" = protocol=6 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{186994A1-D594-4228-8D33-8CDBB34A7C69}C:\program files\saints row 2\sr2_pc.exe" = protocol=17 | dir=in | app=c:\program files\saints row 2\sr2_pc.exe |
"UDP Query User{21334268-480C-4302-8537-2199C9E2EB6D}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{2515ED64-D6C0-4FE9-AA4C-DBA0BC428B07}C:\program files\valve\portal 2\portal2.exe" = protocol=17 | dir=in | app=c:\program files\valve\portal 2\portal2.exe |
"UDP Query User{3DEF27B0-AC4E-4E5F-A9DB-38BCA753D33D}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{467A4569-A22B-469B-9B3F-C91A56326042}C:\totalcmd\totalcmd.exe" = protocol=17 | dir=in | app=c:\totalcmd\totalcmd.exe |
"UDP Query User{4A0F854E-DB8F-42FA-91B5-AD47E2074DBC}C:\program files\rock of ages\binaries\win32\roa.exe" = protocol=17 | dir=in | app=c:\program files\rock of ages\binaries\win32\roa.exe |
"UDP Query User{620257B5-D50E-40B7-8DBE-3FD60980DEC1}C:\program files\valve\portal 2\portal2.exe" = protocol=17 | dir=in | app=c:\program files\valve\portal 2\portal2.exe |
"UDP Query User{789C7F54-0830-4330-8AD7-0FAFDE366405}C:\program files\spyware terminator\spywareterminatorupdate.exe" = protocol=17 | dir=in | app=c:\program files\spyware terminator\spywareterminatorupdate.exe |
"UDP Query User{B798D95E-6EC0-4177-A7CE-58CCDC6926A1}C:\program files\qip 2012\qip.exe" = protocol=17 | dir=in | app=c:\program files\qip 2012\qip.exe |
"UDP Query User{CFA0F9DC-9079-4FB8-BCB5-7F76C24F6388}C:\program files\qip 2012\qip.exe" = protocol=17 | dir=in | app=c:\program files\qip 2012\qip.exe |
"UDP Query User{DF2C5BF2-EAB2-40C9-B065-6CDFE05D6026}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4100_series" = Canon MG4100 series MP Drivers
"{1873789F-59D5-4002-8A2F-60A827B78F98}_is1" = GmapTool 0.5.5
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{284BFDBC-DAC6-43EC-85A8-E1CEC0D3A114}" = Pinnacle Studio 16
"{286C5BE9-7E61-4AC1-B674-BED333C35F73}" = AVG 2012
"{296D8550-CB06-48E4-9A8B-E5034FB64715}" = Command & Conquer™ Red Alert™ 3
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2E0A8315-9A0B-4310-BD0A-14471A7CB69F}_is1" = MyFound_5.9.4.1
"{2F3A3B57-8AB4-4136-8FD2-96A77D5183C1}" = AVG 2012
"{328B1011-42CE-4D10-A4DF-78CC7A883657}" = Claw
"{34B32B70-8081-11E2-89AF-B8AC6F98CCE3}" = Google Earth Plug-in
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer PowerSmart Manager
"{40719211-D09A-11DF-BA30-0013D3D69929}" = MSVCRT Redists
"{48AD3E2E-5AEE-4FF8-8BF6-02D5846F3D25}" = TOPO Czech 2011
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{56736259-613E-4A3B-B428-6235F2E76F44}_is1" = Spyware Terminator 2012
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{647BB978-2876-487B-9B0E-FDB73F0EA4A2}" = Garmin Communicator Plugin
"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Ovladače videa společnosti Pinnacle
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77812021-EECC-419F-A906-F44B78A4C5F5}" = TOPO Czech v 1.20
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8795CBED-55E2-4693-9F14-84EC446935BE}" = SpeechRedist
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0015-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_ENTERPRISE_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_ENTERPRISE_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-0044-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_ENTERPRISE_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}_ENTERPRISE_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) - Czech
"{AE09C972-EEB2-4DA5-8090-0FCF54576854}" = Optical Drive Power Management
"{B08D3D14-098C-4A95-A2BE-A114E36C3A88}" = TuneUp Utilities Language Pack (en-GB)
"{B69C390B-826F-473C-86EB-7AD4950818C3}" = AVG 2012
"{BBED8D8F-60D9-4ACC-9DF5-15E5974017C2}" = SnaptuneOne
"{BBFDD98A-16DB-4A78-82A3-12ECCA29F1B0}" = AVG 2012
"{C0A7E4F3-82CC-416B-82C6-BA06AACFD635}_is1" = Auto Clicker v1.1
"{C88386DE-0D91-4738-9ABD-A991D118A191}" = HiNetRecorder
"{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}" = Acer Crystal Eye webcam Ver:1.1.92.624
"{D7B3493D-766C-40AA-9AA9-053B896D76DE}" = Angry Birds Rio
"{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}" = NVIDIA PhysX
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.136
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1886CD7-9F73-417A-92E9-7E0AB0F0E099}" = Pinnacle Studio 16 - Install Manager
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F3B76517-C1BC-40A7-814C-4C0A87E7D9DF}" = Garmin MapSource
"{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}" = Pinnacle VideoSpin
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Acer 3G Connection Manager" = Acer 3G Connection Manager
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.81
"AVG" = AVG 2012
"Canon_IJ_Network_Scanner_Selector_EX" = Canon IJ Network Scanner Selector EX
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CCleaner" = CCleaner
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2013-03-25
"Crayon Physics Deluxe_is1" = Crayon Physics Deluxe - release 51
"DAEMON Tools Lite" = DAEMON Tools Lite
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Fotolab Fotosvet 4" = Fotolab Fotosvet 4
"Foxit PDF Editor" = Foxit PDF Editor
"Free Sound Recorder_is1" = Free Sound Recorder v6.7
"GeoGet_is1" = GeoGet 2.6.3.669
"Google Chrome" = Google Chrome
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"Mozilla Firefox 19.0.2 (x86 cs)" = Mozilla Firefox 19.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 5.0" = Canon MP Navigator EX 5.0
"OpenAL" = OpenAL
"Opera 12.15.1748" = Opera 12.15
"PDF Editor 3" = PDF Editor 3
"Phun_is1" = Algodoo Phun edition v5.28
"Postal 2_is1" = Portal 2
"PSPad editor_is1" = PSPad editor
"rajče.net_is1" = rajče průvodce verze 1.59.35.250
"Registrace uživatele zařízení Canon MG4100 series" = Registrace uživatele zařízení Canon MG4100 series
"Share Rapid Poker_is1" = Share Rapid Poker 1.8
"STDU Viewer_is1" = STDU Viewer version 1.6.62.0
"SubtitleWorkshop" = Subtitle Workshop 2.51
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"The KMPlayer" = The KMPlayer (remove only)
"The Longest Journey" = The Longest Journey
"Totalcmd" = Total Commander (Remove or Repair)
"Update Engine" = Sony Ericsson Update Engine
"VLC media player" = VLC media player 1.1.11
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 4.00 (32-bit)
"Xvid_is1" = Xvid 1.2.2 final uninstall
"YouTube HD Transfer Release_is1" = YouTube HD Transfer 1.2.1
"ZonerPhotoStudio13_CZ_is1" = Zoner Photo Studio 13

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2465387742-403944966-3739353813-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"QIP 2012" = QIP 2012 4.0.6904

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 13.5.2012 4:05:05 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 5:05:06 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 6:05:05 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 8:05:04 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 9:05:03 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 11:05:10 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 12:05:05 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 13:05:05 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 14:05:11 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

Error - 13.5.2012 15:05:05 | Computer Name = Vlastick-PC | Source = MsiInstaller | ID = 10005
Description =

[ OSession Events ]
Error - 22.4.2011 14:31:12 | Computer Name = Vlastick-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 36
seconds with 0 seconds of active time. This session ended with a crash.

Error - 22.4.2011 14:33:48 | Computer Name = Vlastick-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 40
seconds with 0 seconds of active time. This session ended with a crash.

Error - 6.5.2011 9:43:25 | Computer Name = Vlastick-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1317
seconds with 420 seconds of active time. This session ended with a crash.

Error - 19.12.2011 5:07:59 | Computer Name = Vlastick-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 51
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 30.3.2013 3:59:59 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 30.3.2013 13:13:59 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 30.3.2013 15:06:07 | Computer Name = Vlastick-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (20:04:08, ?30.?3.?2013) bylo neočekávané.

Error - 30.3.2013 15:06:40 | Computer Name = Vlastick-PC | Source = BugCheck | ID = 1001
Description =

Error - 1.4.2013 10:55:47 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 2.4.2013 5:19:44 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 2.4.2013 9:38:10 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 3.4.2013 5:17:00 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 6.4.2013 12:10:48 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 7.4.2013 2:46:00 | Computer Name = Vlastick-PC | Source = WMPNetworkSvc | ID = 866300
Description =

< End of report >

Jen takova mala technicka. Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Prohledat a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

Log zde:
# AdwCleaner v2.200 - Log vytvooen 07/04/2013 v 19:57:33
# Aktualizováno 02/04/2013 Xplode
# Operaení systém : Windows 7 Ultimate Service Pack 1 (32 bits)
# Uživatel : Vlastick - VLASTICK-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Vlastick\AppData\Local\Opera\Opera\temporary_downloads\adwcleaner.exe
# Volba [Prohledat]

***** [Služby] *****

***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\Ask.com
Složka Nalezeno : C:\ProgramData\Trymedia
Složka Nalezeno : C:\Users\Vlastick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Složka Nalezeno : C:\Users\Vlastick\AppData\LocalLow\AskToolbar
Složka Nalezeno : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Klíe Nalezeno : HKCU\Software\APN
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíe Nalezeno : HKCU\Software\Ask.com
Klíe Nalezeno : HKCU\Software\Headlight
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKLM\Software\APN
Klíe Nalezeno : HKLM\Software\AskToolbar
Klíe Nalezeno : HKLM\Software\AVG Secure Search
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Users\Vlastick\AppData\Roaming\Mozilla\Firefox\Profiles\wfajkpt8.default\prefs.js

Nalezeno : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\");
Nalezeno : user_pref("extensions.asktb.abar-war-timeout", "4000");
Nalezeno : user_pref("extensions.asktb.cbid", "RY");
Nalezeno : user_pref("extensions.asktb.config-updated", true);
Nalezeno : user_pref("extensions.asktb.crumb", "2011.04.28+11.59.02-toolbar002iad-CZ-SGF2bGlja3V2IEJyb2QsQ3plY2[...]
Nalezeno : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}[...]
Nalezeno : user_pref("extensions.asktb.dtid", "YYYYYYYYCZ");
Nalezeno : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", true);
Nalezeno : user_pref("extensions.asktb.fresh-install", false);
Nalezeno : user_pref("extensions.asktb.guid", "673f80cb-0f0a-436e-bb6b-29d9ab65f40d");
Nalezeno : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com[...]
Nalezeno : user_pref("extensions.asktb.if", "first");
Nalezeno : user_pref("extensions.asktb.l", "dis");
Nalezeno : user_pref("extensions.asktb.last-config-req", "1345919005444");
Nalezeno : user_pref("extensions.asktb.last-search-timestamp", "1345893055289");
Nalezeno : user_pref("extensions.asktb.last-v", "3.12.2.100006");
Nalezeno : user_pref("extensions.asktb.locale", "en_US");
Nalezeno : user_pref("extensions.asktb.new-tab-opt-out", true);
Nalezeno : user_pref("extensions.asktb.o", "15184");
Nalezeno : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Nalezeno : user_pref("extensions.asktb.qsrc", "2871");
Nalezeno : user_pref("extensions.asktb.r", "12");
Nalezeno : user_pref("extensions.asktb.sa", "NO");
Nalezeno : user_pref("extensions.asktb.save-searches", false);
Nalezeno : user_pref("extensions.asktb.search-history-queries", "hxxp://www.geocaching.com/seek/cache_details.a[...]
Nalezeno : user_pref("extensions.asktb.search-suggestions-enabled", true);
Nalezeno : user_pref("extensions.asktb.show-labels", false);
Nalezeno : user_pref("extensions.asktb.silent-upgrade", true);
Nalezeno : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
Nalezeno : user_pref("extensions.asktb.socialmini-first", true);
Nalezeno : user_pref("extensions.asktb.socialmini-interval", "1200000");
Nalezeno : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
Nalezeno : user_pref("extensions.asktb.socialmini-max-items", "30");
Nalezeno : user_pref("extensions.asktb.socialmini-native-on", true);
Nalezeno : user_pref("extensions.asktb.socialmini-speed", "5000");
Nalezeno : user_pref("extensions.asktb.socialmini-transition-first-open", false);
Nalezeno : user_pref("extensions.asktb.themeid", "");
Nalezeno : user_pref("extensions.asktb.to", "");
Nalezeno : user_pref("extensions.asktb.v", "3.12.2.100013");

-\\ Google Chrome v26.0.1410.43

Soubor : C:\Users\Vlastick\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

-\\ Opera v12.15.1748.0

Soubor : C:\Users\Vlastick\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [10500 octets] - [07/04/2013 19:56:39]
AdwCleaner[R2].txt - [10468 octets] - [07/04/2013 19:57:33]

########## EOF - C:\AdwCleaner[R2].txt - [10529 octets] ##########

Márty84 píše: Jen takova mala technicka. Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

Pardon, na to jsem zapomněl odpovědět. Notebook jsem již kupoval s těmito Windowsy, takže by snad měly být ok

Znovu ukoncete vsechny programy a spustte AdwCleaner jako spravce.
Tentokrat kliknete na Smazat
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner [S1].txt ). Ten mi sem zase zkopirujte.

Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

28.4.2013 pro neaktivitu

http://forum.viry.cz/viewtopic.php?f=12&t=123975

VIRY.CZ

Prosím o kontrolu - zpomalené video

Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video

Re: Prosím o kontrolu - zpomalené video