Zpomaleni pocitace po nejake dobe uzivani

Zpráva

Albrecht · #1 Příspěvek od **Albrecht** » 22 bře 2013 00:15

Zdravim, po dlouhe dobe prichazim opet s probleme. V posledni dobe se mi stava ze kdyz zapnu PC vse jede krasne jak ma, nicmene po nejake dobe se zacne vse nehorazne zpomalovat. Napriklad hra jede na zacatku plynule s FPS 50 a po cca 20 minutach s FPS snizi na 5 a celkove je pocitac i po vypnuti hry pomaly. Taktez sem koukal v programu process explorer ze v sekci services.exe mi bezi treba 6x kernel. Nevim cim to je ale prijde mi jako by se nejakym zpusobem po zminene dobe zblaznil procesor.
Predem dekuji za pomoc.

---------------------------------------------------

Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr at 2013-03-22 00:37:04
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (6%) free of 100 GB
Total RAM: 3326 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:37:08, on 22.3.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\UMonit.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Cyberlink\Shared files\brs.exe
C:\WINDOWS\V0700Mon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WandouLabs\wandoujia_helper.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\TeamViewer\Version8\TeamViewer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TeamViewer\Version8\tv_w32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\WandouLabs\wandoujia_adb.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Petr\Dokumenty\Downloads\ProcessExplorer\procexp.exe
C:\Documents and Settings\Petr\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Petr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=14672
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Live! Central 3] "C:\Program Files\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe" /mode2
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [V0700Mon.exe] C:\WINDOWS\V0700Mon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-682003330-1383384898-725345543-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: wandoujia_helper.lnk = C:\Program Files\WandouLabs\wandoujia_helper.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: wandoujia_helper.lnk = C:\Program Files\WandouLabs\wandoujia_helper.exe (User 'Default user')
O4 - Startup: wandoujia_helper.lnk = C:\Program Files\WandouLabs\wandoujia_helper.exe
O4 - Global Startup: Edimax 11n USB Wireless LAN Utility.lnk = C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} (Creative Software AutoUpdate 2) - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\intelxpv_v103\wdm\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 11597 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIBitCometAgent.xpt

C:\Program Files\Mozilla Firefox\plugins\
npBitCometAgent.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\
toolbar@ask.com

C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-08 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-06-06 1519304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-08 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2012-06-06 1519304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
"UMonit"=C:\WINDOWS\system32\UMonit.exe [2000-01-01 200704]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-03-12 483422]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-12-05 98304]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"Live! Central 3"=C:\Program Files\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe [2010-12-07 503969]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2012-06-06 1564872]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"BDRegion"=C:\Program Files\Cyberlink\Shared files\brs.exe [2010-03-13 75048]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"V0700Mon.exe"=C:\WINDOWS\V0700Mon.exe [2010-08-18 28672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"RemoteControl10"=C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-12-10 2254768]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2012-08-31 3524536]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ICQ"=C:\Program Files\ICQ7.7\ICQ.exe [2012-01-23 127040]
"GoogleDriveSync"=C:\Program Files\Google\Drive\googledrivesync.exe [2012-12-17 16328976]
"Google Update"=C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-06-10 116648]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\Wcescomm.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CorelDRAW Graphics Suite 11b]
C:\Program Files\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe [2004-06-22 729088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2011-06-15 307200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Petr^Nabídka Start^Programy^Po spuštění^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Edimax 11n USB Wireless LAN Utility.lnk - C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění
wandoujia_helper.lnk - C:\Program Files\WandouLabs\wandoujia_helper.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2012-02-20 192512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\StrongDC++\StrongDC.exe"="C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\Mobil\MyMobiler\MyMobiler.exe"="D:\Mobil\MyMobiler\MyMobiler.exe:*:Enabled:My Mobile - My Mobiler"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"D:\Games\Star Wars-The Old Republic\betatest\retailclient\swtor.exe"="D:\Games\Star Wars-The Old Republic\betatest\retailclient\swtor.exe:*:Enabled:Star Wars: The Old Republic"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze"
"C:\Program Files\Raptr\raptr.exe"="C:\Program Files\Raptr\raptr.exe:*:Enabled:Raptr Client"
"C:\Program Files\Raptr\raptr_im.exe"="C:\Program Files\Raptr\raptr_im.exe:*:Enabled:Raptr IM"
"D:\Games\RIFT Game\RIFT Game\riftpatchlive.exe"="D:\Games\RIFT Game\RIFT Game\riftpatchlive.exe:*:Enabled:Play RIFT"
"D:\Games\Sword of the Stars\Sword of the Stars.exe"="D:\Games\Sword of the Stars\Sword of the Stars.exe:*:Enabled:Sword of the Stars"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Steam\Steam.exe"="D:\Steam\Steam.exe:*:Enabled:Steam"
"D:\Steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe"="D:\Steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe:*:Enabled:AMD Driver Updater, XP, 32 bit"
"D:\Steam\steamapps\common\alien swarm\srcds.exe"="D:\Steam\steamapps\common\alien swarm\srcds.exe:*:Enabled:Alien Swarm Dedicated Server"
"D:\Steam\steamapps\common\magic the gathering tactics\LaunchPad.exe"="D:\Steam\steamapps\common\magic the gathering tactics\LaunchPad.exe:*:Enabled:Magic: The Gathering â€“ Tactics"
"D:\Steam\steamapps\common\magic the gathering tactics\MtGTactics.exe"="D:\Steam\steamapps\common\magic the gathering tactics\MtGTactics.exe:*:Enabled:MtGTactics"
"D:\Steam\steamapps\common\apb reloaded\Binaries\APB.exe"="D:\Steam\steamapps\common\apb reloaded\Binaries\APB.exe:*:Enabled:APB: APB.exe"
"D:\Steam\steamapps\common\apb reloaded\Binaries\VivoxVoiceService.exe"="D:\Steam\steamapps\common\apb reloaded\Binaries\VivoxVoiceService.exe:*:Enabled:APB: VivoxVoiceService.exe"
"D:\Games\Hearts of Iron III\hoi3game.exe"="D:\Games\Hearts of Iron III\hoi3game.exe:*:Enabled:hoi3game"
"C:\Documents and Settings\Petr\Plocha\Gw2.exe"="C:\Documents and Settings\Petr\Plocha\Gw2.exe:*:Enabled:Guild Wars 2 Game Client"
"C:\Program Files\TVUPlayer\TVUPlayer.exe"="C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component"
"D:\Games\World_of_Tanks\WOTLauncher.exe"="D:\Games\World_of_Tanks\WOTLauncher.exe:*:Enabled:World of Tanks Launcher"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe"="C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe:*:Enabled:RtWlan"
"D:\Games\Blood Bowl\Autorun\Exe\Autorun.exe"="D:\Games\Blood Bowl\Autorun\Exe\Autorun.exe:*:Enabled:Blood Bowl - AutoRun"
"D:\Games\Blood Bowl\BB.exe"="D:\Games\Blood Bowl\BB.exe:*:Enabled:Blood Bowl"
"D:\Games\EVE\bin\ExeFile.exe"="D:\Games\EVE\bin\ExeFile.exe:*:Enabled:CCP ExeFile"
"C:\Program Files\Java\jre7\bin\java.exe"="C:\Program Files\Java\jre7\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe"="C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe:*:Enabled:aTube Catcher to download and convert videos."
"D:\Games\Dungeon Keeper II\DKII.exe"="D:\Games\Dungeon Keeper II\DKII.exe:*:Enabled:DKII"
"C:\Documents and Settings\Petr\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\Petr\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\Program Files\WandouLabs\wandoujia2.exe"="C:\Program Files\WandouLabs\wandoujia2.exe:*:Enabled:SnapPea"
"C:\Documents and Settings\Petr\Plocha\Informatika\eclipse\eclipse.exe"="C:\Documents and Settings\Petr\Plocha\Informatika\eclipse\eclipse.exe:*:Enabled:eclipse"
"C:\Program Files\xchat\xchat.exe"="C:\Program Files\xchat\xchat.exe:*:Enabled:XChat IRC Client"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup"
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe"="C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"D:\Games\Mortal Online\Mortal Online Launcher.exe"="D:\Games\Mortal Online\Mortal Online Launcher.exe:*:Enabled:Mortal Online Launcher"
"D:\Games\Mortal\Mortal Online Launcher.exe"="D:\Games\Mortal\Mortal Online Launcher.exe:*:Enabled:Mortal Online Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"D:\Games\Borderlands 2\Binaries\Win32\Borderlands2.exe"="D:\Games\Borderlands 2\Binaries\Win32\Borderlands2.exe:*:Enabled:Borderlands 2"
"D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe"="D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe:*:Enabled:Borderlands Launcher"
"D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe"="D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe:*:Enabled:Borderlands Game"
"C:\Program Files\Edimax\11n USB Wireless LAN Utility\RTLDHCP.exe"="C:\Program Files\Edimax\11n USB Wireless LAN Utility\RTLDHCP.exe:*:Enabled:RTLDHCP"
"D:\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe"="D:\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe:*:Enabled:Euro Truck Simulator 2 Demo"
"D:\Steam\steamapps\common\Total War Shogun 2 Demo\Shogun2.exe"="D:\Steam\steamapps\common\Total War Shogun 2 Demo\Shogun2.exe:*:Enabled:Total War: SHOGUN 2 Demo"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.XFR1"=xfcodec.dll
"VIDC.FMVC"=fmcodec.dll
"VIDC.FPS1"=frapsvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvidvfw.dll
"vidc.DIVX"=DivX.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.YV12"=xvidvfw.dll

======List of files/folders created in the last 1 month======

2013-03-19 14:28:29 ----D---- C:\Documents and Settings\Petr\Data aplikací\Wandoujia2
2013-03-19 14:28:18 ----D---- C:\Program Files\WandouLabs
2013-03-17 08:32:44 ----D---- C:\Program Files\LogMeIn Hamachi
2013-03-16 22:40:03 ----D---- C:\Zaloha plocha
2013-03-16 00:36:38 ----D---- C:\Program Files\Microsoft.NET
2013-03-15 20:26:23 ----D---- C:\Program Files\Mozilla Firefox
2013-03-14 13:11:11 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2013-03-14 13:11:10 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2013-03-14 13:11:10 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2013-03-14 10:36:05 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-03-10 21:45:00 ----D---- C:\Program Files\Common Files\Skype
2013-03-10 21:44:59 ----RD---- C:\Program Files\Skype
2013-03-09 21:31:02 ----D---- C:\Documents and Settings\Petr\Data aplikací\com.adobe.downloadassistant.AdobeDownloadAssistant
2013-03-09 21:30:56 ----D---- C:\Program Files\Adobe Download Assistant
2013-03-08 00:30:40 ----A---- C:\WINDOWS\system32\javaws.exe
2013-03-08 00:30:29 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-08 00:30:29 ----A---- C:\WINDOWS\system32\javaw.exe
2013-03-08 00:30:29 ----A---- C:\WINDOWS\system32\java.exe
2013-03-08 00:30:08 ----D---- C:\Program Files\Java
2013-02-28 06:14:44 ----D---- C:\Program Files\Sweet Home 3D
2013-02-26 11:52:48 ----A---- C:\WINDOWS\system32\drivers\RKNANOCoInstaller.dll
2013-02-26 11:52:48 ----A---- C:\WINDOWS\system32\drivers\RKNANO.sys

======List of files/folders modified in the last 1 month======

2013-03-22 00:37:05 ----D---- C:\Program Files\trend micro
2013-03-22 00:15:50 ----D---- C:\WINDOWS\system32\drivers
2013-03-21 23:13:27 ----D---- C:\WINDOWS\Temp
2013-03-21 23:05:41 ----D---- C:\Documents and Settings\Petr\Data aplikací\ICQ
2013-03-21 23:04:06 ----D---- C:\WINDOWS
2013-03-21 23:04:06 ----A---- C:\WINDOWS\RTacDbg.txt
2013-03-21 22:12:24 ----D---- C:\WINDOWS\Prefetch
2013-03-21 20:56:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-03-21 01:28:31 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-19 20:33:44 ----D---- C:\WINDOWS\system32
2013-03-19 19:26:09 ----D---- C:\WINDOWS\system32\config
2013-03-19 14:28:18 ----RD---- C:\Program Files
2013-03-19 09:54:28 ----D---- C:\WINDOWS\pss
2013-03-19 09:51:08 ----A---- C:\WINDOWS\avp.ini
2013-03-18 18:10:17 ----D---- C:\Documents and Settings\Petr\Data aplikací\TS3Client
2013-03-18 11:44:56 ----ASH---- C:\boot.ini
2013-03-18 11:44:56 ----A---- C:\WINDOWS\win.ini
2013-03-18 11:44:56 ----A---- C:\WINDOWS\system.ini
2013-03-17 21:49:34 ----D---- C:\Documents and Settings\Petr\Data aplikací\Image Zone Express
2013-03-17 21:31:59 ----D---- C:\Documents and Settings\Petr\Data aplikací\Skype
2013-03-17 14:55:14 ----D---- C:\Documents and Settings\Petr\Data aplikací\The Creative Assembly
2013-03-17 14:55:09 ----SHD---- C:\WINDOWS\Installer
2013-03-17 14:55:09 ----SHD---- C:\Config.Msi
2013-03-17 14:55:07 ----D---- C:\WINDOWS\WinSxS
2013-03-17 14:49:21 ----D---- C:\WINDOWS\system32\DirectX
2013-03-17 14:49:19 ----HD---- C:\WINDOWS\inf
2013-03-17 14:48:39 ----RSD---- C:\WINDOWS\assembly
2013-03-17 09:11:02 ----D---- C:\WINDOWS\system32\drivers\etc
2013-03-17 09:07:29 ----SD---- C:\Documents and Settings\Petr\Data aplikací\Microsoft
2013-03-16 18:59:04 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-03-16 10:01:14 ----D---- C:\Program Files\TeamSpeak 3 Client
2013-03-16 09:14:47 ----D---- C:\Program Files\Common Files\Adobe AIR
2013-03-16 09:07:56 ----D---- C:\Documents and Settings\Petr\Data aplikací\Xfire
2013-03-16 01:10:23 ----D---- C:\WINDOWS\Microsoft.NET
2013-03-16 00:40:23 ----D---- C:\WINDOWS\system32\cs-cz
2013-03-16 00:37:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-03-16 00:37:17 ----D---- C:\WINDOWS\system32\en-US
2013-03-16 00:16:30 ----D---- C:\Documents and Settings\Petr\Data aplikací\Azureus
2013-03-15 22:51:43 ----D---- C:\Program Files\Garmin
2013-03-15 22:51:15 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-03-15 22:47:58 ----D---- C:\Program Files\Common Files
2013-03-15 22:47:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Desura
2013-03-14 13:11:10 ----SD---- C:\WINDOWS\Tasks
2013-03-14 10:36:09 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-03-14 09:06:29 ----D---- C:\Program Files\Xfire
2013-03-10 21:45:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-03-10 00:05:06 ----D---- C:\Program Files\Vuze
2013-03-09 21:30:52 ----D---- C:\Program Files\Adobe
2013-03-08 00:30:12 ----A---- C:\WINDOWS\system32\npdeployJava1.dll
2013-03-08 00:30:12 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-03-07 00:32:42 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-02-25 23:48:22 ----D---- C:\Documents and Settings\Petr\Data aplikací\BSplayer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-03-07 49248]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2013-03-07 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-03-07 765736]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-03-07 368176]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-03-07 62376]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2011-06-15 60156]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/12/13 22:37:39]; \??\C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl []
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2012-06-11 21361]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-03-07 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-02-20 7490560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-02-20 100368]
R3 AVerA706;AVerMedia A706 BDA Service; C:\WINDOWS\system32\DRIVERS\AVerA706.sys [2009-08-24 1170304]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys [2010-08-31 147040]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2010-03-26 243928]
R3 FIXUSTOR;FIXUSTOR; C:\WINDOWS\system32\DRIVERS\fixustor.sys [2000-01-01 12416]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2004-08-12 137728]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;SB Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2007-06-15 1127936]
R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\WINDOWS\system32\DRIVERS\RTL8192cu.sys [2010-08-06 907496]
R3 STHDA;IDT High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2009-03-12 1550613]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 V0700Vid;Creative Live! Cam Chat HD Driver; C:\WINDOWS\system32\DRIVERS\V0700Vid.sys [2010-10-18 322304]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-03-07 164736]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cpuz134;cpuz134; \??\C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys []
S3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2011-09-16 20032]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 sfng32;Sonic Focus Plugin for Sigmatel HDA; C:\WINDOWS\system32\drivers\sfng32.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2012-06-27 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2012-06-27 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2012-06-27 136808]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2012-02-20 643072]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 1435568]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-03-08 170912]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2012-02-22 76888]
R2 STacSV;Audio Service; c:\program files\idt\intelxpv_v103\wdm\STacSV.exe [2009-03-12 254036]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2013-03-06 3560288]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-11 116648]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-01-08 161536]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-14 253656]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-10-05 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-11 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-15 115608]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-02-23 489256]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 22 bře 2013 02:17

Zdravim

Uvolnete nejake volne misto na disku, tak na cca 10-15GB, jinak se system dusi

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Prohledat
Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

Nasledujici soubory otestujte na VirusTotalu https://www.virustotal.com/cs/

C:\Program Files\WandouLabs\wandoujia_helper.exe
Kliknete na Choose file
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Scan It
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

Albrecht · #3 Příspěvek od **Albrecht** » 22 bře 2013 09:53

# AdwCleaner v2.115 - Log vytvooen 22/03/2013 v 09:53:46
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Petr - AMBRIEL
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
# Volba [Prohledat]

***** [Služby] *****

***** [Soubory / Složky] *****

Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\Premium
Složka Nalezeno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\toolbar@ask.com
Složka Nalezeno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\jetpack
Složka Nalezeno : C:\Documents and Settings\Petr\Local Settings\Data aplikací\AskToolbar
Složka Nalezeno : C:\Documents and Settings\Petr\Local Settings\Data aplikací\PackageAware
Složka Nalezeno : C:\Program Files\1ClickDownload
Složka Nalezeno : C:\Program Files\Ask.com
Složka Nalezeno : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Soubor Nalezeno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Klíe Nalezeno : HKCU\Software\1ClickDownload
Klíe Nalezeno : HKCU\Software\APN
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\AskToolbarInfo
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\Ask.com
Klíe Nalezeno : HKCU\Software\AskToolbar
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíe Nalezeno : HKLM\Software\APN
Klíe Nalezeno : HKLM\Software\AskToolbar
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\Iminent
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKU\S-1-5-21-682003330-1383384898-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v6.0.2900.5512

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://eu.ask.com/?l=dis&o=14672

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\prefs.js

Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("icqtoolbar.showPc", false);

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [8782 octets] - [22/03/2013 09:53:46]

########## EOF - C:\AdwCleaner[R1].txt - [8842 octets] ##########

Albrecht · #4 Příspěvek od **Albrecht** » 22 bře 2013 09:55

https://www.virustotal.com/cs/file/36a3 ... 363942428/

#5 Příspěvek od **vyosek** » 22 bře 2013 19:29

Spustte znovu AdwCleaner

Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
Kliknete na Smazat
PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

Albrecht · #6 Příspěvek od **Albrecht** » 23 bře 2013 23:01

# AdwCleaner v2.115 - Log vytvooen 23/03/2013 v 22:55:41
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Petr - AMBRIEL
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
# Volba [Vymazat]

***** [Služby] *****

***** [Soubory / Složky] *****

Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Premium
Složka Vymazáno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\toolbar@ask.com
Složka Vymazáno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\jetpack
Složka Vymazáno : C:\Documents and Settings\Petr\Local Settings\Data aplikací\AskToolbar
Složka Vymazáno : C:\Documents and Settings\Petr\Local Settings\Data aplikací\PackageAware
Složka Vymazáno : C:\Program Files\1ClickDownload
Složka Vymazáno : C:\Program Files\Ask.com
Složka Vymazáno : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Soubor Vymazáno : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\searchplugins\Askcom.xml
Soubor Vymazáno : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Klíe Vymazáno : HKCU\Software\1ClickDownload
Klíe Vymazáno : HKCU\Software\APN
Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\AskToolbarInfo
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Vymazáno : HKCU\Software\Ask.com
Klíe Vymazáno : HKCU\Software\AskToolbar
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíe Vymazáno : HKLM\Software\APN
Klíe Vymazáno : HKLM\Software\AskToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíe Vymazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\Iminent
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Klíe Vymazáno : HKLM\Software\PIP

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v6.0.2900.5512

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://eu.ask.com/?l=dis&o=14672 --> hxxp://www.google.com

-\\ Mozilla Firefox v19.0.2 (cs)

Soubor : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\prefs.js

Vymazáno : user_pref("browser.search.order.1", "Ask.com");
Vymazáno : user_pref("icqtoolbar.showPc", false);

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [8911 octets] - [22/03/2013 09:53:46]
AdwCleaner[S1].txt - [8722 octets] - [23/03/2013 22:55:41]

########## EOF - C:\AdwCleaner[S1].txt - [8782 octets] ##########

#7 Příspěvek od **vyosek** » 24 bře 2013 09:34

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
Zaskrtnete okenko Pro vsechny uzivatele
Zaskrtnete okenko Kontrola na havet "LOP"
Zaskrtnete okenko Kontrola na havet "Purity"
Stari souboru zmente z 30 dnu na 7 dnu
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s

Kliknete na tlacitko Prohledat
Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Albrecht · #8 Příspěvek od **Albrecht** » 24 bře 2013 10:53

OTL logfile created on: 24.3.2013 10:15:10 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 70,29% Memory free
5,09 Gb Paging File | 4,10 Gb Available in Paging File | 80,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 20,47 Gb Free Space | 20,96% Space Free | Partition Type: NTFS
Drive D: | 135,22 Gb Total Space | 29,65 Gb Free Space | 21,93% Space Free | Partition Type: NTFS
Drive E: | 112,21 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: AMBRIEL | User Name: Petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2013.03.24 10:13:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Petr\Plocha\OTL.exe
PRC - [2013.03.19 07:43:40 | 004,960,128 | ---- | M] () -- C:\Program Files\WandouLabs\wandoujia_helper.exe
PRC - [2013.03.19 07:43:24 | 000,044,416 | ---- | M] () -- C:\Program Files\WandouLabs\wandoujia_adb.exe
PRC - [2013.03.11 01:22:07 | 001,274,320 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2013.03.08 00:30:14 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013.03.07 16:31:48 | 019,357,112 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013.03.07 00:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.03.07 00:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.03.06 16:30:43 | 010,220,896 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer.exe
PRC - [2013.03.06 16:30:43 | 003,560,288 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2013.03.06 16:22:26 | 000,185,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\tv_w32.exe
PRC - [2012.12.10 17:29:46 | 002,254,768 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.12.10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012.08.31 01:52:14 | 003,524,536 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
PRC - [2012.01.23 13:15:54 | 000,127,040 | ---- | M] (ICQ, LLC.) -- C:\Program Files\ICQ7.7\ICQ.exe
PRC - [2010.08.18 00:00:00 | 000,028,672 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\V0700Mon.exe
PRC - [2010.07.27 18:11:18 | 000,991,232 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe
PRC - [2010.03.13 12:58:58 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files\CyberLink\Shared files\brs.exe
PRC - [2010.02.03 00:08:56 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
PRC - [2009.03.12 12:53:46 | 000,483,422 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2009.03.12 12:53:46 | 000,254,036 | ---- | M] (IDT, Inc.) -- c:\Program Files\IDT\IntelXPV_v103\WDM\stacsv.exe
PRC - [2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004.06.16 05:02:54 | 000,471,040 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
PRC - [2000.01.01 01:00:00 | 000,200,704 | ---- | M] () -- C:\WINDOWS\system32\UMonit.exe

========== Modules (No Company Name) ==========

MOD - [2013.03.24 10:09:43 | 000,128,512 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_elementtree.pyd
MOD - [2013.03.24 10:09:43 | 000,044,032 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_socket.pyd
MOD - [2013.03.24 10:09:42 | 000,098,816 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32api.pyd
MOD - [2013.03.24 10:09:42 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32ts.pyd
MOD - [2013.03.24 10:09:41 | 000,557,056 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\pysqlite2._sqlite.pyd
MOD - [2013.03.24 10:09:40 | 000,320,512 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32com.shell.shell.pyd
MOD - [2013.03.24 10:09:40 | 000,070,656 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._html2.pyd
MOD - [2013.03.24 10:09:39 | 000,805,888 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._gdi_.pyd
MOD - [2013.03.24 10:09:39 | 000,011,264 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32crypt.pyd
MOD - [2013.03.24 10:09:38 | 001,022,416 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\windows._cacheinvalidation.pyd
MOD - [2013.03.24 10:09:37 | 000,017,408 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32profile.pyd
MOD - [2013.03.24 10:09:36 | 000,364,544 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\pythoncom27.dll
MOD - [2013.03.24 10:09:36 | 000,087,040 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_ctypes.pyd
MOD - [2013.03.24 10:09:35 | 000,735,232 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._misc_.pyd
MOD - [2013.03.24 10:09:34 | 000,110,080 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\PyWinTypes27.dll
MOD - [2013.03.24 10:09:33 | 001,175,040 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._core_.pyd
MOD - [2013.03.24 10:09:33 | 000,108,544 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32security.pyd
MOD - [2013.03.24 10:09:32 | 001,153,024 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_ssl.pyd
MOD - [2013.03.24 10:09:29 | 000,035,840 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32process.pyd
MOD - [2013.03.24 10:09:29 | 000,025,600 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32pdh.pyd
MOD - [2013.03.24 10:09:28 | 000,711,680 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_hashlib.pyd
MOD - [2013.03.24 10:09:27 | 000,811,008 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._windows_.pyd
MOD - [2013.03.24 10:09:25 | 000,122,368 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._wizard.pyd
MOD - [2013.03.24 10:09:25 | 000,119,808 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32file.pyd
MOD - [2013.03.24 10:09:25 | 000,038,912 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32inet.pyd
MOD - [2013.03.24 10:09:19 | 001,062,400 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\wx._controls_.pyd
MOD - [2013.03.24 10:09:18 | 000,018,432 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\win32event.pyd
MOD - [2013.03.24 10:09:17 | 000,127,488 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\pyexpat.pyd
MOD - [2013.03.24 10:09:16 | 000,686,080 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\unicodedata.pyd
MOD - [2013.03.24 10:09:16 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Temp\_MEI22242\select.pyd
MOD - [2013.03.24 08:59:12 | 002,083,328 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13032400\algo.dll
MOD - [2013.03.19 07:45:04 | 000,084,352 | ---- | M] () -- C:\Program Files\WandouLabs\zlib1.dll
MOD - [2013.03.19 07:45:02 | 008,722,304 | ---- | M] () -- C:\Program Files\WandouLabs\WebKit.dll
MOD - [2013.03.19 07:44:48 | 001,241,472 | ---- | M] () -- C:\Program Files\WandouLabs\libxml2.dll
MOD - [2013.03.19 07:44:30 | 001,275,776 | ---- | M] () -- C:\Program Files\WandouLabs\JavaScriptCore.dll
MOD - [2013.03.19 07:44:10 | 000,631,680 | ---- | M] () -- C:\Program Files\WandouLabs\CFLite.dll
MOD - [2013.03.19 07:43:40 | 004,960,128 | ---- | M] () -- C:\Program Files\WandouLabs\wandoujia_helper.exe
MOD - [2013.03.19 07:43:24 | 000,044,416 | ---- | M] () -- C:\Program Files\WandouLabs\wandoujia_adb.exe
MOD - [2013.03.19 07:17:46 | 001,462,272 | ---- | M] () -- C:\Program Files\WandouLabs\chrome_base.dll
MOD - [2013.03.11 01:22:06 | 000,459,728 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\25.0.1364.172\ppgooglenaclpluginchrome.dll
MOD - [2013.03.11 01:22:05 | 012,662,224 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\25.0.1364.172\PepperFlash\pepflashplayer.dll
MOD - [2013.03.11 01:22:04 | 004,050,896 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\25.0.1364.172\pdf.dll
MOD - [2013.03.11 01:21:16 | 001,552,848 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\25.0.1364.172\ffmpegsumo.dll
MOD - [2013.02.18 06:23:52 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2013.02.18 06:23:47 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2013.02.14 11:08:43 | 011,817,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\e143370f0583abe015d8e3d2d536185e\System.Web.ni.dll
MOD - [2013.02.14 11:02:35 | 012,433,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ba12e418b906593b7c9c18f971f36bf9\System.Windows.Forms.ni.dll
MOD - [2013.02.14 11:00:55 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2013.01.29 12:58:44 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\96b7a0136e9e72e8f4eb0230c20766d2\System.Configuration.ni.dll
MOD - [2013.01.29 12:57:20 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\cbee94ec6a0fe649e3b4643cea6e1259\Accessibility.ni.dll
MOD - [2013.01.29 06:54:30 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\fe025743210c22bea2f009e1612c38bf\System.Xml.ni.dll
MOD - [2013.01.29 06:53:59 | 001,593,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7782f356a838c403b4a8e9c80df5a577\System.Drawing.ni.dll
MOD - [2013.01.29 06:51:43 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aeac298c43c77d8860db8e7634d9f2eb\System.ni.dll
MOD - [2013.01.29 06:51:33 | 011,492,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll
MOD - [2011.12.05 21:45:14 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2010.03.16 12:22:12 | 000,014,848 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2009.12.09 20:20:06 | 000,126,976 | ---- | M] () -- C:\Program Files\Edimax\11n USB Wireless LAN Utility\EnumDevLib.dll
MOD - [2008.04.14 04:21:47 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007.07.12 10:11:54 | 001,163,264 | ---- | M] () -- C:\Program Files\Edimax\11n USB Wireless LAN Utility\acAuth.dll
MOD - [2005.05.03 19:38:42 | 000,064,512 | ---- | M] () -- C:\WINDOWS\system32\P17.DLL
MOD - [2000.01.01 01:00:00 | 000,200,704 | ---- | M] () -- C:\WINDOWS\system32\UMonit.exe
MOD - [2000.01.01 01:00:00 | 000,176,128 | ---- | M] () -- C:\WINDOWS\system32\ustor.dll

========== Services (SafeList) ==========

SRV - [2013.03.15 20:26:34 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.03.14 10:36:09 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.03.08 00:30:14 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013.03.07 00:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.03.06 16:30:43 | 003,560,288 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2013.01.08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.12.10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.02.23 01:32:13 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011.10.05 12:20:39 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009.03.12 12:53:46 | 000,254,036 | ---- | M] (IDT, Inc.) [Auto | Running] -- c:\Program Files\IDT\IntelXPV_v103\WDM\stacsv.exe -- (STacSV)
SRV - [2004.09.29 11:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\sfng32.sys -- (sfng32)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2013.03.07 00:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.03.07 00:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.03.07 00:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.03.07 00:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.03.07 00:33:24 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2013.03.07 00:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.03.07 00:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.03.07 00:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.06.27 09:37:56 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2012.06.27 09:37:56 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2012.06.27 09:37:56 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2012.02.20 01:31:57 | 007,490,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2012.02.20 01:31:45 | 000,100,368 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2011.09.16 10:54:40 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2011.06.15 09:23:56 | 000,060,156 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2010.10.18 00:00:00 | 000,322,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0700Vid.sys -- (V0700Vid)
DRV - [2010.08.31 10:28:56 | 000,147,040 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2010.08.06 07:45:28 | 000,907,496 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8192cu.sys -- (RTL8192cu)
DRV - [2010.07.09 11:18:56 | 000,020,328 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys -- (cpuz134)
DRV - [2010.03.13 12:58:52 | 000,087,536 | ---- | M] (CyberLink Corp.) [2011/12/13 22:37:39] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})
DRV - [2009.08.24 16:53:38 | 001,170,304 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVerA706.sys -- (AVerA706)
DRV - [2009.03.18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.03.12 12:53:46 | 001,550,613 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2008.04.13 20:46:22 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2007.06.15 10:47:26 | 001,127,936 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17)
DRV - [2005.01.10 18:15:30 | 000,106,496 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2005.01.10 18:15:24 | 000,138,752 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2000.01.01 01:00:00 | 000,012,416 | ---- | M] (Genesys Logic) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fixustor.sys -- (FIXUSTOR)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.seznam.cz"
FF - prefs.js..extensions.enabledAddons: rssicon%40jasnapaka.com:1.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.03.14 13:11:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.03.15 20:26:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.03.15 20:26:26 | 000,000,000 | ---D | M]

[2011.09.15 22:48:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Petr\Data aplikací\Mozilla\Extensions
[2013.03.23 22:56:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions
[2013.02.06 14:10:42 | 000,224,945 | ---- | M] () (No name found) -- C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\gophoto@gophoto.it.xpi
[2012.11.25 11:47:45 | 000,215,985 | ---- | M] () (No name found) -- C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\onlinehdtv@onlinehd.tv.xpi
[2012.06.05 20:36:29 | 000,015,618 | ---- | M] () (No name found) -- C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\snoee49e.default\extensions\rssicon@jasnapaka.com.xpi
[2013.03.15 20:26:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\SNOEE49E.DEFAULT\EXTENSIONS\RSSICON@JASNAPAKA.COM.XPI
[2013.03.15 20:26:34 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.09.09 05:49:04 | 001,037,112 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2013.02.19 21:14:55 | 000,002,421 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2013.02.19 21:14:55 | 000,000,851 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2013.02.19 21:14:55 | 000,001,580 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2013.02.19 21:14:55 | 000,000,867 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2013.02.19 21:14:55 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\25.0.1364.172\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\25.0.1364.172\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\25.0.1364.172\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: BitCometAgent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Unity Player (Enabled) = C:\Documents and Settings\Petr\Local Settings\Data aplikac\u00ED\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Java(TM) Platform SE 7 U3 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Sv\u00E1tky - Jmeniny = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\acanokghadamaghkbbiclbleblhndfig\1.1_0\
CHR - Extension: Angry Birds = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: YouTube = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Kalend\u00E1\u0159 Google = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0\
CHR - Extension: Full Screen Weather = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg\1.3_0\
CHR - Extension: 365Scores = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gocaejggjgdmkhmbinicknpbhagkblop\0.65_0\
CHR - Extension: Checker Plus for Google Calendar\u2122 = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\hkhggnncdpfibdhinjiegagmopldibha\12.7_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0\
CHR - Extension: Kontrola e-mailu Google = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Fiery Horse chrome Theme = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\
CHR - Extension: Lagoonia = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\mnjcaihkcddgdgaghmnmfpkkfilombbm\1.38_0\
CHR - Extension: Onlive Clock = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\moddbcckaikhdnigidfcmaeelcobchpm\1.1_0\
CHR - Extension: Google Chrome to Phone Extension = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.1_0\
CHR - Extension: GoPhoto.it = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0\
CHR - Extension: Gmail = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2001.10.25 15:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BDRegion] C:\Program Files\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Live! Central 3] C:\Program Files\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.DLL ()
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe ()
O4 - HKLM..\Run: [V0700Mon.exe] C:\WINDOWS\V0700Mon.exe (Creative Technology Ltd.)
O4 - HKU\S-1-5-21-682003330-1383384898-725345543-1003..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKU\S-1-5-21-682003330-1383384898-725345543-1003..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" File not found
O4 - HKU\S-1-5-21-682003330-1383384898-725345543-1003..\Run: [ICQ] C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Edimax 11n USB Wireless LAN Utility.lnk = C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\wandoujia_helper.lnk = C:\Program Files\WandouLabs\wandoujia_helper.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe (ICQ, LLC.)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: clonewarsadventures.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: freerealms.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: soe.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: sony.com ([]* in Důvěryhodné servery)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6183192140 (WUWebControl Class)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwar ... TSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5D5A0730-0EE1-436C-82F1-92F083FADC32}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.09.15 22:29:15 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2013.03.17 09:07:34 | 000,000,095 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O32 - AutoRun File - [2010.03.12 18:48:04 | 000,385,024 | R--- | M] (TP-LINK TECHNOLOGIES CO., LTD.) - E:\Autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2009.02.07 01:10:22 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FMVC - C:\WINDOWS\System32\fmcodec.DLL (Fox Magic Software)
Drivers32: VIDC.FPS1 - C:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\WINDOWS\System32\xfcodec.dll ()
Drivers32: vidc.xvid - xvidvfw.dll File not found
OTL 1/2

Drivers32: VIDC.YV12 - xvidvfw.dll File not found
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2013.03.24 10:13:40 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Petr\Plocha\OTL.exe
[2013.03.19 14:28:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Petr\Data aplikací\Wandoujia2
[2013.03.19 14:28:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Petr\Nabídka Start\Programy\SnapPea
[2013.03.19 14:28:18 | 000,000,000 | ---D | C] -- C:\Program Files\WandouLabs
[2013.03.17 10:31:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Petr\Dokumenty\Euro Truck Simulator 2
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Petr\Plocha\*.tmp files -> C:\Documents and Settings\Petr\Plocha\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

Albrecht · #9 Příspěvek od **Albrecht** » 24 bře 2013 10:55

[2013.03.24 10:21:47 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.03.24 10:13:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Petr\Plocha\OTL.exe
[2013.03.24 10:12:11 | 000,001,022 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2013.03.24 10:08:56 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.03.24 10:08:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.03.24 10:07:38 | 000,000,932 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.03.24 10:07:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.03.24 10:07:19 | 3487,358,976 | -HS- | M] () -- C:\hiberfil.sys
[2013.03.23 23:56:00 | 000,000,936 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.03.23 23:36:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.03.23 22:07:02 | 000,001,042 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2013.03.23 22:07:00 | 000,001,020 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.23 12:12:00 | 000,000,970 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.22 16:18:13 | 000,000,609 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\Zástupce - Financenove.lnk
[2013.03.22 13:40:30 | 000,099,840 | ---- | M] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.03.22 09:50:55 | 000,609,993 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
[2013.03.22 02:03:20 | 000,000,030 | ---- | M] () -- C:\WINDOWS\avp.ini
[2013.03.19 14:29:10 | 000,001,798 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\SnapPea - Samsung i9000 (Galaxy S).lnk
[2013.03.19 14:29:10 | 000,000,601 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\Samsung i9000 (Galaxy S) Backup.lnk
[2013.03.19 14:28:32 | 000,001,634 | ---- | M] () -- C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\wandoujia_helper.lnk
[2013.03.19 08:52:43 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\Zástupce - procexp.lnk
[2013.03.19 00:53:54 | 718,482,870 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\Rec-2-2009-CZ-{-Dr.Wixie-}.avi
[2013.03.18 11:44:56 | 000,000,215 | -HS- | M] () -- C:\boot.ini
[2013.03.17 21:02:31 | 008,007,393 | ---- | M] () -- C:\Documents and Settings\Petr\Plocha\Belle Sébastien L'oiseau.mp3
[2013.03.17 20:17:55 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Petr\Plocha\*.tmp files -> C:\Documents and Settings\Petr\Plocha\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.03.24 10:21:47 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.03.22 09:50:54 | 000,609,993 | ---- | C] () -- C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
[2013.03.19 14:29:10 | 000,001,798 | ---- | C] () -- C:\Documents and Settings\Petr\Plocha\SnapPea - Samsung i9000 (Galaxy S).lnk
[2013.03.19 14:28:32 | 000,001,634 | ---- | C] () -- C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\wandoujia_helper.lnk
[2013.03.19 08:52:43 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\Petr\Plocha\Zástupce - procexp.lnk
[2013.03.18 23:38:12 | 718,482,870 | ---- | C] () -- C:\Documents and Settings\Petr\Plocha\Rec-2-2009-CZ-{-Dr.Wixie-}.avi
[2013.03.17 21:02:05 | 008,007,393 | ---- | C] () -- C:\Documents and Settings\Petr\Plocha\Belle Sébastien L'oiseau.mp3
[2013.03.14 13:11:11 | 000,164,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.03.14 13:11:10 | 000,049,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.02.26 11:52:48 | 000,017,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\RKNANOCoInstaller.dll
[2013.02.13 01:26:34 | 000,042,880 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2013.01.28 23:15:49 | 001,265,968 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.12.20 18:43:54 | 000,000,551 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\AutoGK.ini
[2012.08.19 09:20:05 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2012.06.11 16:27:39 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2012.06.11 16:26:23 | 000,451,072 | ---- | C] () -- C:\WINDOWS\System32\ISSRemoveSP.exe
[2012.06.07 15:38:28 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2012.06.07 15:36:16 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini
[2012.06.05 21:56:50 | 000,113,361 | ---- | C] () -- C:\WINDOWS\hpoins07.dat
[2012.06.05 21:56:50 | 000,021,124 | ---- | C] () -- C:\WINDOWS\hpomdl07.dat
[2012.02.16 10:37:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.03 12:11:50 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.01.03 12:11:44 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2011.12.13 19:52:27 | 000,000,029 | ---- | C] () -- C:\WINDOWS\sfbm.INI
[2011.12.12 22:34:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\AVSMediaPlayer.m3u
[2011.12.11 22:01:48 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\SysInfo.dll
[2011.12.05 22:04:00 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\OpenVideo.dll
[2011.12.05 22:03:52 | 000,054,784 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll
[2011.11.27 11:23:36 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\UMonit.exe
[2011.11.27 11:23:36 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\ustor.dll
[2011.11.27 11:23:36 | 000,001,354 | ---- | C] () -- C:\WINDOWS\System32\IconCfg0.ini
[2011.11.27 09:43:15 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2011.11.27 09:43:08 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2011.11.25 16:24:11 | 000,000,027 | ---- | C] () -- C:\WINDOWS\MixBKS.INI
[2011.11.17 22:57:47 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\SI.bin
[2011.11.09 17:50:41 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2011.11.09 17:50:40 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2011.11.08 21:28:16 | 000,140,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011.11.08 21:28:16 | 000,138,904 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\PnkBstrK.sys
[2011.11.08 21:28:01 | 000,283,416 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2011.11.08 21:27:58 | 002,337,865 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2011.11.08 21:27:58 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011.10.25 21:21:34 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\OVDecoder.dll
[2011.10.02 23:39:42 | 002,311,252 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-682003330-1383384898-725345543-1003-0.dat
[2011.10.02 23:39:40 | 000,362,738 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2011.09.29 22:05:37 | 000,012,992 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\Hodnoty oddělené čárkami (Windows).CAL
[2011.09.29 22:02:24 | 000,038,460 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\Hodnoty oddělené čárkami (Windows).ADR
[2011.09.21 15:27:34 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\fusioncache.dat
[2011.09.19 20:48:11 | 000,000,030 | ---- | C] () -- C:\WINDOWS\avp.ini
[2011.09.17 09:45:41 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Petr\Data aplikací\$_hpcst$.hpc
[2011.09.16 17:29:11 | 000,099,840 | ---- | C] () -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.09.16 15:48:32 | 000,005,663 | ---- | C] () -- C:\WINDOWS\System32\Ludap17.ini
[2011.09.16 15:48:32 | 000,000,075 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2011.09.16 15:36:33 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011.09.16 15:36:22 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011.09.16 15:36:21 | 000,608,507 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.09.16 15:36:21 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011.09.16 10:54:48 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011.09.16 10:54:44 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011.09.16 10:54:44 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011.09.16 10:54:44 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011.09.16 10:54:44 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2011.09.16 00:19:24 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.09.16 00:18:08 | 002,166,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.09.15 22:31:17 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.09.15 22:26:11 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== ZeroAccess Check ==========

[2011.09.20 13:33:14 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2012.12.27 11:31:50 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:05 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.10.26 13:31:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Age of Empires 3
[2011.09.16 15:19:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2012.03.08 17:04:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CPA_VA
[2013.03.15 22:47:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Desura
[2011.10.27 23:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\install_clap
[2011.10.27 23:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PDVD
[2011.09.29 21:40:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2011.11.10 17:21:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sony
[2011.12.13 22:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2011.11.08 21:28:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
[2012.05.22 23:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WebcamMax
[2013.01.29 12:09:21 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{3155EF3F-3778-4C4C-B0F3-3E48423B8965}
[2012.11.28 20:58:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Ancestry
[2013.03.16 00:16:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Azureus
[2012.01.25 20:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BitComet
[2013.02.25 23:48:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BSplayer
[2011.09.17 11:54:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BSplayer Pro
[2013.03.09 21:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.10.22 19:49:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\COWON
[2012.08.21 20:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Garmin
[2011.09.24 19:28:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\GHISLER
[2013.03.24 10:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\ICQ
[2013.03.17 21:49:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Image Zone Express
[2013.01.16 01:07:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Miranda
[2012.07.05 07:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Oracle
[2011.11.10 17:29:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Publish Providers
[2012.06.15 16:37:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\RIFT
[2011.09.29 21:39:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Samsung
[2011.11.10 17:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony
[2011.11.10 17:37:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony Creative Software
[2012.02.22 01:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony Online Entertainment
[2013.02.06 13:10:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\TeamViewer
[2012.04.27 09:04:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Temp
[2013.03.17 14:55:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\The Creative Assembly
[2013.03.18 18:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\TS3Client
[2012.05.17 15:19:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Unity
[2013.03.23 22:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Wandoujia2
[2012.06.05 20:54:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\wargaming.net
[2012.05.22 21:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\WebcamMax
[2013.01.17 00:38:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\X-Chat 2

========== Purity Check ==========

========== Custom Scans ==========

< >
[2011.09.15 22:27:14 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2011.09.15 22:32:48 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2012.04.04 14:19:19 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2012.06.10 23:51:43 | 000,000,970 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2012.06.10 23:51:43 | 000,001,022 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2012.06.14 20:57:51 | 000,001,020 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2012.06.14 20:57:52 | 000,001,042 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2012.07.07 15:33:50 | 000,000,316 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2012.10.19 10:46:16 | 000,000,932 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2012.10.19 10:46:16 | 000,000,936 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: ATAPI.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111127T083028843750\gencdrom\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111127T100650156250\gencdrom\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2007.04.25 04:20:30 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2011.09.16 16:00:42 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111127T083028843750\acpiapic_mp\hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111127T100650156250\acpiapic_mp\hal.dll
[2008.04.13 19:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.03 21:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2004.08.17 14:49:28 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=6E401E61F952FBBF708AFBECEFAFAE81 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 04:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 04:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[63 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.11.20 15:23:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Adobe
[2012.11.28 20:58:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Ancestry
[2012.11.03 09:47:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Apple Computer
[2011.09.20 14:26:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\ATI
[2013.03.16 00:16:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Azureus
[2012.01.25 20:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BitComet
[2013.02.25 23:48:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BSplayer
[2011.09.17 11:54:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\BSplayer Pro
[2013.03.09 21:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.10.05 12:56:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Corel
[2012.10.22 19:49:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\COWON
[2011.09.16 16:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Creative
[2011.10.27 23:32:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\CyberLink
[2012.08.21 20:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Garmin
[2011.09.24 19:28:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\GHISLER
[2012.06.05 22:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\HP
[2013.03.24 10:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\ICQ
[2011.09.15 22:33:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Identities
[2013.03.17 21:49:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Image Zone Express
[2011.09.16 15:19:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Macromedia
[2012.02.19 14:54:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Malwarebytes
[2013.03.17 09:07:29 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Petr\Data aplikací\Microsoft
[2013.01.16 01:07:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Miranda
[2012.11.25 11:38:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Mozilla
[2012.07.05 07:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Oracle
[2011.11.10 17:29:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Publish Providers
[2012.06.15 16:37:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\RIFT
[2011.09.29 21:39:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Samsung
[2012.06.11 19:46:11 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Petr\Data aplikací\SecuROM
[2013.03.17 21:31:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Skype
[2011.11.10 17:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony
[2011.11.10 17:37:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony Creative Software
[2012.02.22 01:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sony Online Entertainment
[2012.03.09 20:24:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Sun
[2013.02.06 13:10:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\TeamViewer
[2012.04.27 09:04:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Temp
[2013.03.17 14:55:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\The Creative Assembly
[2013.03.18 18:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\TS3Client
[2012.06.04 21:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\TVU Networks
[2012.05.17 15:19:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Unity
[2012.02.06 14:05:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\vlc
[2013.03.23 22:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Wandoujia2
[2012.06.05 20:54:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\wargaming.net
[2012.05.22 21:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\WebcamMax
[2011.09.16 18:36:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\WinRAR
[2013.01.17 00:38:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\X-Chat 2
[2013.03.16 09:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Petr\Data aplikací\Xfire

< %APPDATA%\*.exe /s >
[2012.01.25 20:05:32 | 000,310,208 | ---- | M] (Georgia Institute of Technology) -- C:\Documents and Settings\Petr\Data aplikací\Azureus\plugins\mlab\ShaperProbeC.exe
[2013.03.15 22:30:15 | 007,605,792 | ---- | M] (Azureus Software, Inc.) -- C:\Documents and Settings\Petr\Data aplikací\Azureus\tmp\AZU4785167738834127306.tmp\Vuze_4.9.0.0a_win32.exe
[2009.08.11 20:21:26 | 000,087,552 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\AC3 Filter\ac3config.exe
[2009.08.11 20:21:30 | 000,090,112 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\AC3 Filter\spdif_test.exe
[2010.03.22 13:52:04 | 000,697,690 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\AC3 Filter\unins000.exe
[2012.10.11 09:01:20 | 001,175,371 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\FFDShow\unins000.exe
[2010.08.14 09:42:54 | 000,113,152 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\Haali media splitter\dsmux.exe
[2010.08.14 09:45:10 | 000,358,400 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\Haali media splitter\gdsmux.exe
[2010.08.14 09:42:06 | 000,137,728 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\Haali media splitter\mkv2vfr.exe
[2010.09.30 14:30:22 | 000,042,305 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\BSplayer\Haali media splitter\uninstall.exe
[2013.03.09 21:30:24 | 000,054,776 | ---- | M] (Adobe Systems Inc.) -- C:\Documents and Settings\Petr\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2012.01.23 17:57:51 | 000,000,766 | R--- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Microsoft\Installer\{8BB65964-56E7-4DC7-B65D-3EF5FEC9842A}\_2cd672ae.exe
[2012.01.23 17:57:51 | 000,000,766 | R--- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Microsoft\Installer\{8BB65964-56E7-4DC7-B65D-3EF5FEC9842A}\_4ae13d6c.exe
[2012.03.27 20:22:51 | 000,106,408 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentInstaller.exe
[2012.03.27 20:22:51 | 000,101,288 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\FirmwareUpdateTemp\AGENT\AgentUpdate.exe
[2012.03.27 20:22:51 | 000,021,416 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\FirmwareUpdateTemp\AGENT\KiesPDLR.exe
[2012.07.16 05:23:56 | 000,975,800 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\Kies.exe
[2012.07.16 05:23:58 | 000,278,968 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\KiesDriverInstaller.exe
[2012.06.26 08:04:30 | 000,320,000 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\KiesLogger.exe
[2012.07.16 05:23:56 | 003,524,536 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\KiesTrayAgent.exe
[2012.06.26 08:03:34 | 000,182,784 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\ConnectionManager.exe
[2012.06.26 08:03:34 | 000,321,536 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceDataService.exe
[2012.07.16 05:19:36 | 000,717,312 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\DeviceManager.exe
[2012.07.16 05:24:02 | 000,067,512 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\DeviceModules\Kies_Tutorial.exe
[2012.06.26 08:03:16 | 000,106,960 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentInstaller.exe
[2012.06.26 08:03:16 | 000,101,328 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\AgentUpdate.exe
[2012.07.16 05:24:04 | 000,183,736 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.07.16 05:24:06 | 000,021,432 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\KiesPDLR.exe
[2012.07.16 05:24:06 | 003,742,648 | ---- | M] (Freeware) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\MediaModules\MyFreeCodecPack.exe
[2012.05.04 06:37:12 | 000,371,088 | ---- | M] (ml) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\Updater\Kies.Update.exe
[2012.06.26 08:02:34 | 024,164,152 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2012.08.31 01:52:12 | 000,964,024 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\Kies.exe
[2012.08.28 02:06:22 | 000,291,840 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\KiesAgent.exe
[2012.08.31 01:52:14 | 000,278,968 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\KiesDriverInstaller.exe
[2012.08.28 02:06:22 | 000,320,512 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\KiesLogger.exe
[2012.08.31 01:52:14 | 003,524,536 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\KiesTrayAgent.exe
[2012.08.28 02:05:28 | 000,182,784 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\ConnectionManager.exe
[2012.08.28 02:05:28 | 000,322,048 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceDataService.exe
[2012.08.28 02:05:32 | 000,717,312 | ---- | M] (Mobileleader Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\DeviceManager.exe
[2012.08.31 01:52:18 | 000,067,512 | ---- | M] (Samsung) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\Kies_Tutorial.exe
[2012.08.28 02:05:28 | 000,057,344 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\DeviceModules\RegisterCOM.exe
[2012.08.28 02:05:14 | 000,106,960 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentInstaller.exe
[2012.08.28 02:05:14 | 000,101,328 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\AgentUpdate.exe
[2012.08.31 01:52:20 | 000,183,736 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.08.31 01:52:22 | 000,021,432 | ---- | M] () -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\KiesPDLR.exe
[2012.08.31 01:52:24 | 003,765,256 | ---- | M] (Freeware) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\MediaModules\MyFreeCodecPack.exe
[2012.08.31 01:52:26 | 000,593,848 | ---- | M] (ml) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\Updater\Kies.Update.exe
[2012.08.28 02:04:28 | 024,177,352 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\USB Driver\SAMSUNG_USB_Driver_for_Mobile_Phones.exe
[2012.05.04 06:37:12 | 000,371,088 | ---- | M] (ml) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Temp\Kies.Update.exe
[2012.08.31 01:52:26 | 000,593,848 | ---- | M] (ml) -- C:\Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Updater\Kies.Update.exe
[2012.06.04 21:04:38 | 005,642,000 | ---- | M] (TVU networks) -- C:\Documents and Settings\Petr\Data aplikací\TVU Networks\AutoUpgrade\TVUPlayer2.5.3.1.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job >
[2013.03.24 10:36:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.03.24 10:08:56 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2013.03.23 22:07:00 | 000,001,020 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.23 22:07:02 | 000,001,042 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2013.03.24 10:07:38 | 000,000,932 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.03.23 23:56:00 | 000,000,936 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.03.23 12:12:00 | 000,000,970 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.24 10:12:11 | 000,001,022 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2011.09.16 00:17:16 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2011.09.16 00:17:16 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2011.09.16 00:17:16 | 000,487,424 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2013.03.24 10:08:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 04:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"ICQ" = "C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4 -- [2012.01.23 13:15:54 | 000,127,040 | ---- | M] (ICQ, LLC.)
"GoogleDriveSync" = "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart -- [2013.03.07 16:31:48 | 019,357,112 | ---- | M] (Google)
"Google Update" = "C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c -- [2012.06.10 23:51:39 | 000,116,648 | ---- | M] (Google Inc.)
"H/PC Connection Agent" = "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2013.03.15 20:26:34 | 000,917,400 | ---- | M] (Mozilla Corporation) MD5=BF2F2717C13A4BD4FD73F2788534E86B -- C:\Program Files\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2008.04.14 04:22:26 | 000,093,184 | ---- | M] (Microsoft Corporation) MD5=414AFE6E8CCDE984E16D5ED08624CEC6 -- C:\Program Files\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.03.24 10:21:47 | 000,000,512 | ---- | M] () MD5=49D48D6DDCEC619FA9B628B524AE3DD6 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2012.01.26 01:02:58 | 000,011,282 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Species\Human\art\weapons\cracker.X
[2012.01.26 01:27:35 | 000,012,332 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\TechTree\COL_cracker.tga
[2012.01.26 01:51:08 | 000,001,531 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_am.weapon
[2012.01.26 01:51:06 | 000,001,535 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_fus.weapon
[2012.01.26 01:51:06 | 000,001,538 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_grav.weapon
[2012.01.26 01:51:06 | 000,001,539 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_implo.weapon
[2012.01.26 01:51:06 | 000,001,537 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_leap.weapon
[2012.01.26 01:51:06 | 000,001,538 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\MODS\ACM132\ACM\Weapons\col_cracker_nuke.weapon
[2002.12.18 16:10:46 | 000,092,827 | ---- | M] () -- \Program Files\Corel\Corel Graphics 12\Custom Data\Bumpmap\Cracks.cpt
[2002.12.16 17:44:50 | 000,016,068 | ---- | M] () -- \Program Files\Corel\Corel Graphics 12\Custom Data\Canvas\cracks2c.pcx
[2002.12.16 17:44:30 | 000,010,560 | ---- | M] () -- \Program Files\Corel\Corel Graphics 12\Custom Data\Tiles\CRACKS2M.CPT

< *keygen* /s >
[2012.01.26 00:36:14 | 000,093,696 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Vuze Downloads\Sword of the stars + addons + collection materials\Sword_of_the_Stars_Keygen\Sword.Of.The.Stars_KEYGEN-FFF.exe

< *loader* /s >
[2012.12.04 17:00:50 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2012.12.04 17:00:50 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2012.12.04 17:00:50 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2012.07.10 02:55:42 | 000,069,120 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.07.16 05:24:04 | 000,183,736 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.07.10 02:55:42 | 000,069,120 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Backup\Plugins\DeviceHost\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.08.31 01:48:34 | 000,069,120 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.08.31 01:52:20 | 000,183,736 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.08.31 01:48:34 | 000,069,120 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Samsung\Kies\UpdateTemp\Sub\Plugins\DeviceHost\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2013.03.19 14:29:35 | 000,004,097 | ---- | M] () -- \Documents and Settings\Petr\Data aplikací\Wandoujia2\Devices\fe57915994\Cache Data\icons\com.google.android.apps.uploader_1513.png
[2011.10.15 13:51:45 | 000,003,208 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\Obrázky\loader.gif
[2012.02.17 23:58:44 | 000,012,049 | ---- | M] () -- \Documents and Settings\Petr\Dokumenty\samsung\Kies\thumbnail\photo\loader.jpg
[2012.09.07 18:15:54 | 000,006,073 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gocaejggjgdmkhmbinicknpbhagkblop\0.65_0\UI\images\preloader.gif
[2012.09.07 18:15:54 | 000,035,105 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gocaejggjgdmkhmbinicknpbhagkblop\0.65_0\UI\images\WizardPreLoader.gif
[2013.01.30 20:24:36 | 000,000,522 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0\images\loader.gif
[2013.03.09 21:16:24 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI21842\_win32sysloader.pyd
[2013.03.24 10:09:38 | 000,008,192 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI22242\_win32sysloader.pyd
[2013.02.20 08:54:43 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI23722\_win32sysloader.pyd
[2013.03.06 06:04:25 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI24442\_win32sysloader.pyd
[2013.02.14 10:05:40 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI24522\_win32sysloader.pyd
[2013.02.14 10:31:20 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI24602\_win32sysloader.pyd
[2013.02.14 12:16:39 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI24842\_win32sysloader.pyd
[2013.01.29 12:12:17 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI25202\_win32sysloader.pyd
[2013.02.22 14:23:22 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI25602\_win32sysloader.pyd
[2013.02.18 06:06:00 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI25882\_win32sysloader.pyd
[2013.02.15 12:02:31 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI25962\_win32sysloader.pyd
[2013.03.03 09:43:39 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI26882\_win32sysloader.pyd
[2013.03.13 18:00:38 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI27322\_win32sysloader.pyd
[2013.02.21 19:47:26 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI27642\_win32sysloader.pyd
[2013.01.30 10:45:32 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI28242\_win32sysloader.pyd
[2013.02.05 11:32:21 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI28322\_win32sysloader.pyd
[2013.02.19 11:04:31 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI28962\_win32sysloader.pyd
[2013.02.26 09:30:19 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI29122\_win32sysloader.pyd
[2013.03.12 21:58:37 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI29642\_win32sysloader.pyd
[2013.03.04 18:13:35 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI30962\_win32sysloader.pyd
[2013.03.23 22:58:54 | 000,008,192 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI3322\_win32sysloader.pyd
[2013.01.29 06:49:48 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI36202\_win32sysloader.pyd
[2013.01.16 15:52:33 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI50042\_win32sysloader.pyd
[2013.03.22 19:57:32 | 000,008,192 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI52122\_win32sysloader.pyd
[2013.03.05 10:28:44 | 000,009,216 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\_MEI7082\_win32sysloader.pyd
[2012.08.19 22:27:27 | 000,105,903 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temp\Temporary Internet Files\Content.IE5\QFWTQBC7\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[2].js
[2013.03.08 20:05:46 | 000,105,903 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temporary Internet Files\Content.IE5\0S2LVN6G\AdLoader-427d9fd2a91e2f2c023aefe9f69a01d0.min[1].js
[2013.02.19 21:53:32 | 000,003,784 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temporary Internet Files\Content.IE5\8LARO9U3\bundleloader[1].js
[2013.02.19 21:53:43 | 000,000,723 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temporary Internet Files\Content.IE5\8LARO9U3\downloaderror[1].js
[2013.02.19 21:53:43 | 000,001,174 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temporary Internet Files\Content.IE5\8LARO9U3\downloader[1].js
[2013.03.17 20:18:29 | 000,000,753 | ---- | M] () -- \Documents and Settings\Petr\Local Settings\Temporary Internet Files\Content.IE5\W9QROL27\AdLoader[1].htm
[2011.11.27 09:15:29 | 000,792,704 | ---- | M] () -- \Documents and Settings\Petr\Plocha\amddriverdownloader.exe
[1 \Documents and Settings\Petr\Plocha\*.tmp files -> \Documents and Settings\Petr\Plocha\*.tmp -> ]
[2008.08.28 18:34:20 | 004,965,736 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\Photodownloader.exe
[2008.08.28 15:42:12 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\de_de\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\en_us\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\es_es\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\it_it\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\no_no\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2008.08.28 15:42:14 | 000,000,308 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2008.08.28 15:42:16 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2008.08.14 06:23:12 | 000,009,969 | ---- | M] () -- \Program Files\Common Files\Adobe\Startup Scripts CS4\Adobe Version Cue\VersionCueSDKLoader.jsx
[2006.10.26 12:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 12:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2010.05.20 12:01:04 | 000,135,168 | ---- | M] () -- \Program Files\Creative\Creative Live! Cam\Live! Central 3\UploaderWebInterface.dll
[2010.03.15 13:20:28 | 000,010,781 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cinema\mm\MediaCtrl\ImageLoader.kc
[2010.03.15 13:20:34 | 000,003,492 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cinema\widget\langloader.kc
[2010.03.15 13:20:34 | 000,013,453 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cinema\widget\layoutloader.kc
[2010.02.05 00:34:54 | 000,010,775 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cox\mm\MediaCtrl\ImageLoader.kc
[2010.02.05 00:34:54 | 000,003,486 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cox\widget\langloader.kc
[2010.02.05 00:34:54 | 000,013,369 | ---- | M] () -- \Program Files\CyberLink\PowerDVD10\PowerDVD Cox\widget\layoutloader.kc
[2011.12.01 16:23:01 | 000,005,795 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2011.12.01 16:23:02 | 000,004,180 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2011.12.01 16:23:00 | 000,005,520 | ---- | M] () -- \Program Files\ICQ7.7\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.12.02 19:26:51 | 000,002,886 | ---- | M] () -- \Program Files\ICQ7.7\Xtraz\icq\content\babylon_feed\preloader01_b.swf
[2011.12.01 16:24:50 | 000,000,402 | ---- | M] () -- \Program Files\ICQ7.7\Xtraz\icq\content\profile_lightboxs\preloader.html
[2010.01.29 06:43:52 | 000,071,008 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.08.31 01:48:34 | 000,069,120 | ---- | M] () -- \Program Files\Samsung\Kies\Common\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.08.31 01:52:20 | 000,183,736 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\BinaryLoaderMgr.exe
[2012.04.06 18:59:29 | 000,153,512 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\GT-I9000\BinaryLoaderMgr.exe
[2012.04.06 18:59:29 | 000,270,248 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\GT-I9000\FirmwareUpdate.Downloader.dll
[2012.03.13 00:28:55 | 000,153,512 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\GT-S5570\BinaryLoaderMgr.exe
[2012.03.13 00:28:55 | 000,270,248 | ---- | M] () -- \Program Files\Samsung\Kies\External\FirmwareUpdate\GT-S5570\FirmwareUpdate.Downloader.dll
[2012.08.31 01:48:34 | 000,069,120 | ---- | M] () -- \Program Files\Samsung\Kies\Plugins\DeviceHost\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.dll
[2012.10.24 09:49:06 | 000,008,321 | ---- | M] () -- \Program Files\Sweet Home 3D\THIRDPARTY-LICENSE-LOADER3DS.TXT
[2012.10.24 09:49:06 | 000,050,157 | ---- | M] () -- \Program Files\Sweet Home 3D\lib\Loader3DS1_2u.jar
[2010.04.17 10:31:42 | 002,152,448 | ---- | M] () -- \Program Files\WebcamMax\ShareUploader.exe
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2011.09.16 17:32:40 | 000,082,784 | ---- | M] () -- \WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2013.01.29 13:02:41 | 000,189,952 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\ce0c07379d684b13e16ff3f86859268a\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.ni.dll
[2002.12.11 23:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 19:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 19:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[2 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2002.12.11 23:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll

========== Files - Unicode (All) ==========
[2013.02.27 17:47:56 | 001,724,951 | ---- | M] ()(C:\Documents and Settings\Petr\Plocha\????? ? ??????? ?????????? ????????? ???? ??????.mp3) -- C:\Documents and Settings\Petr\Plocha\Икона и молитва Богородице Умягчение злых сердец.mp3
[2013.02.27 17:47:50 | 001,724,951 | ---- | C] ()(C:\Documents and Settings\Petr\Plocha\????? ? ??????? ?????????? ????????? ???? ??????.mp3) -- C:\Documents and Settings\Petr\Plocha\Икона и молитва Богородице Умягчение злых сердец.mp3

< End of report >

Albrecht · #10 Příspěvek od **Albrecht** » 24 bře 2013 10:55

OTL Extras logfile created on: 24.3.2013 10:15:10 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,25 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 70,29% Memory free
5,09 Gb Paging File | 4,10 Gb Available in Paging File | 80,43% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 20,47 Gb Free Space | 20,96% Space Free | Partition Type: NTFS
Drive D: | 135,22 Gb Total Space | 29,65 Gb Free Space | 21,93% Space Free | Partition Type: NTFS
Drive E: | 112,21 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: AMBRIEL | User Name: Petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Documents and Settings\Petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5900:TCP" = 5900:TCP:*:Enabled:VNC
"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4
"27150:TCP" = 27150:TCP:*:Enabled:BitComet 27150 TCP
"27150:UDP" = 27150:UDP:*:Enabled:BitComet 27150 UDP
"1542:TCP" = 1542:TCP:*:Enabled:Realtek WPS TCP Prot
"1542:UDP" = 1542:UDP:*:Enabled:Realtek WPS UDP Prot
"53:UDP" = 53:UDP:*:Enabled:Realtek AP UDP Prot
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\ICQ7.7\ICQ.exe" = C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7 -- (ICQ, LLC.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\StrongDC++\StrongDC.exe" = C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"D:\Mobil\MyMobiler\MyMobiler.exe" = D:\Mobil\MyMobiler\MyMobiler.exe:*:Enabled:My Mobile - My Mobiler -- ()
"C:\Program Files\Xfire\Xfire.exe" = C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire -- (Xfire Inc.)
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)
"C:\Program Files\BitComet\BitComet.exe" = C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\WINDOWS\system32\rundll32.exe" = C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App -- (Microsoft Corporation)
"D:\Games\Star Wars-The Old Republic\betatest\retailclient\swtor.exe" = D:\Games\Star Wars-The Old Republic\betatest\retailclient\swtor.exe:*:Enabled:Star Wars: The Old Republic
"C:\Program Files\ICQ7.7\ICQ.exe" = C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7 -- (ICQ, LLC.)
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze -- (Vuze Inc.)
"C:\Program Files\Raptr\raptr.exe" = C:\Program Files\Raptr\raptr.exe:*:Enabled:Raptr Client
"C:\Program Files\Raptr\raptr_im.exe" = C:\Program Files\Raptr\raptr_im.exe:*:Enabled:Raptr IM
"D:\Games\RIFT Game\RIFT Game\riftpatchlive.exe" = D:\Games\RIFT Game\RIFT Game\riftpatchlive.exe:*:Enabled:Play RIFT
"D:\Games\Sword of the Stars\Sword of the Stars.exe" = D:\Games\Sword of the Stars\Sword of the Stars.exe:*:Enabled:Sword of the Stars -- ()
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam
"D:\Steam\Steam.exe" = D:\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"D:\Steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe" = D:\Steam\steamapps\common\amd driver updater, xp, 32 bit\Setup.exe:*:Enabled:AMD Driver Updater, XP, 32 bit -- (Advanced Micro Devices, Inc.)
"D:\Steam\steamapps\common\alien swarm\srcds.exe" = D:\Steam\steamapps\common\alien swarm\srcds.exe:*:Enabled:Alien Swarm Dedicated Server
"D:\Steam\steamapps\common\magic the gathering tactics\LaunchPad.exe" = D:\Steam\steamapps\common\magic the gathering tactics\LaunchPad.exe:*:Enabled:Magic: The Gathering â€“ Tactics -- ()
"D:\Steam\steamapps\common\magic the gathering tactics\MtGTactics.exe" = D:\Steam\steamapps\common\magic the gathering tactics\MtGTactics.exe:*:Enabled:MtGTactics -- ()
"D:\Steam\steamapps\common\apb reloaded\Binaries\APB.exe" = D:\Steam\steamapps\common\apb reloaded\Binaries\APB.exe:*:Enabled:APB: APB.exe
"D:\Steam\steamapps\common\apb reloaded\Binaries\VivoxVoiceService.exe" = D:\Steam\steamapps\common\apb reloaded\Binaries\VivoxVoiceService.exe:*:Enabled:APB: VivoxVoiceService.exe
"D:\Games\Hearts of Iron III\hoi3game.exe" = D:\Games\Hearts of Iron III\hoi3game.exe:*:Enabled:hoi3game -- ()
"C:\Documents and Settings\Petr\Plocha\Gw2.exe" = C:\Documents and Settings\Petr\Plocha\Gw2.exe:*:Enabled:Guild Wars 2 Game Client -- (ArenaNet)
"C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"D:\Games\World_of_Tanks\WOTLauncher.exe" = D:\Games\World_of_Tanks\WOTLauncher.exe:*:Enabled:World of Tanks Launcher -- (Wargaming.net)
"D:\Games\World_of_Tanks\WorldOfTanks.exe" = D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks -- (Wargaming.net)
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe" = C:\Program Files\Edimax\11n USB Wireless LAN Utility\RtWLan.exe:*:Enabled:RtWlan -- (Realtek Semiconductor Corp.)
"D:\Games\Blood Bowl\Autorun\Exe\Autorun.exe" = D:\Games\Blood Bowl\Autorun\Exe\Autorun.exe:*:Enabled:Blood Bowl - AutoRun
"D:\Games\Blood Bowl\BB.exe" = D:\Games\Blood Bowl\BB.exe:*:Enabled:Blood Bowl
"D:\Games\EVE\bin\ExeFile.exe" = D:\Games\EVE\bin\ExeFile.exe:*:Enabled:CCP ExeFile
"C:\Program Files\Java\jre7\bin\java.exe" = C:\Program Files\Java\jre7\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)
"C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe" = C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe:*:Enabled:aTube Catcher to download and convert videos. -- (DsNET)
"D:\Games\Dungeon Keeper II\DKII.exe" = D:\Games\Dungeon Keeper II\DKII.exe:*:Enabled:DKII
"C:\Documents and Settings\Petr\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe" = C:\Documents and Settings\Petr\Local Settings\Data aplikací\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin -- (Skype Limited)
"C:\Program Files\WandouLabs\wandoujia2.exe" = C:\Program Files\WandouLabs\wandoujia2.exe:*:Enabled:SnapPea -- ()
"C:\Documents and Settings\Petr\Plocha\Informatika\eclipse\eclipse.exe" = C:\Documents and Settings\Petr\Plocha\Informatika\eclipse\eclipse.exe:*:Enabled:eclipse
"C:\Program Files\xchat\xchat.exe" = C:\Program Files\xchat\xchat.exe:*:Enabled:XChat IRC Client -- ()
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)
"C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe" = C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe:*:Enabled:SweetPacksUpdateManager
"C:\Program Files\Miranda IM\miranda32.exe" = C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM -- ( )
"D:\Games\Mortal Online\Mortal Online Launcher.exe" = D:\Games\Mortal Online\Mortal Online Launcher.exe:*:Enabled:Mortal Online Launcher
"D:\Games\Mortal\Mortal Online Launcher.exe" = D:\Games\Mortal\Mortal Online Launcher.exe:*:Enabled:Mortal Online Launcher
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\TeamViewer\Version8\TeamViewer.exe" = C:\Program Files\TeamViewer\Version8\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
"D:\Games\Borderlands 2\Binaries\Win32\Borderlands2.exe" = D:\Games\Borderlands 2\Binaries\Win32\Borderlands2.exe:*:Enabled:Borderlands 2
"D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe" = D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe:*:Enabled:Borderlands Launcher -- (Gearbox Software)
"D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe" = D:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe:*:Enabled:Borderlands Game -- (Take-Two Interactive Software, Inc.)
"C:\Program Files\Edimax\11n USB Wireless LAN Utility\RTLDHCP.exe" = C:\Program Files\Edimax\11n USB Wireless LAN Utility\RTLDHCP.exe:*:Enabled:RTLDHCP -- (Realtek)
"D:\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe" = D:\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe:*:Enabled:Euro Truck Simulator 2 Demo -- (SCS Software)
"D:\Steam\steamapps\common\Total War Shogun 2 Demo\Shogun2.exe" = D:\Steam\steamapps\common\Total War Shogun 2 Demo\Shogun2.exe:*:Enabled:Total War: SHOGUN 2 Demo -- (The Creative Assembly Ltd)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0ABBF310-94E4-4AE8-A6BD-10345A3F6439}" = Google Drive
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{106B4413-ACBB-4CDE-8707-587DB9BD77EC}" = LogMeIn Hamachi
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{129DDEC1-A6A3-3D60-AABE-76E6E5334922}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{193DB24F-9A66-4896-8404-22D53EA89075}" = 1400_Help
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{266959FA-0AEE-41D0-A88E-F1EAC10A7C14}" = 1400
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{2AAA1310-1A77-472d-A7D2-A5E55B00EF8E}" = Intel(R) Network Connections 15.5.74.0
"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A742CBE-078E-03FF-C7D5-B3E1B676BDF2}" = CCC Help Czech
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{505AFDC0-5E72-4928-8368-5DEA385E3647}" = CorelDRAW Graphics Suite 12
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{5AF4B3C4-C393-48D7-AC7E-8E7615579548}" = Adobe AIR
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{5CDA3B5A-0737-40A1-AF93-4F35BD38A1B6}" = SlimDrivers
"{5DF7AA5E-A1CB-11E0-A7D6-0013D3D69929}" = MSVCRT Redists
"{5E21B617-F52E-BB10-92F9-C8AB2C799A8A}" = Adobe Download Assistant
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{631141AD-79AA-447F-B403-21C704D39B8C}" = UPC Fiber Power Optimizer
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{6FE8B722-4D7E-3CD7-BB3A-3AD1684B1295}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74DCC43B-33C9-3389-BD0D-33EB37973657}" = Microsoft .NET Framework 3.5 Language Pack - csy
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}" = ICQ7.7
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{792A669E-71A6-9210-2C06-3FCF0DDFC4C5}" = Catalyst Control Center Localization All
"{7C9B95B7-B598-4398-B30F-7F6827192E6C}" = ProductContext
"{80612765-75C0-274D-A7E7-D24F3C928A9B}" = Catalyst Control Center InstallProxy
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8BB65964-56E7-4DC7-B65D-3EF5FEC9842A}" = Testy Autoškola
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C049499-055C-4a0c-A916-1D12314F45EB}" = Edimax Wireless LAN Driver and Utility
"{9C2B41C5-919A-7037-F5E8-42A5E90873B8}" = Catalyst Control Center Graphics Previews Common
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A6991E11-AF13-652B-5736-C8800EF5527B}" = Catalyst Control Center
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.6) - Czech
"{ADD24D05-DDEA-39CB-0E92-AA371AEE2894}" = Catalyst Control Center InstallProxy
"{B2420CAA-ADC1-8581-938A-2B25C22EF17A}" = ccc-utility
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4186C0D-FB9F-5D83-21FB-A737A13EFAE6}" = AMD Catalyst Install Manager
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C510CA36-98D6-4F07-8AFF-81E7399A075B}" = 1400Trb
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C70C90D2-D197-40E9-B712-6828BDA5F74A}" = PdfMerge
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0106CC2-E34B-4FA3-B6B6-91F0ACEA2CC3}" = Hearts of Iron III
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{DC785DB7-D389-48C3-B146-96FE99BF4E2B}" = Vegas Pro 9.0
"{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}" = jetAudio Basic VX
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{EB131CD5-CF2B-BB5D-6ED9-287630BB792D}" = Catalyst Control Center InstallProxy
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE64AE29-0883-4C70-8388-DC026019C900}" = HP Image Zone Express
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"8461-7759-5462-8226" = Vuze
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"aTube Catcher" = aTube Catcher
"Automatické vypnutí počítače (AVP)_is1" = Automatické vypnutí počítače 1.0
"avast" = avast! Free Antivirus
"AVerMedia DVD EZMaker Gold" = AVerMedia DVD EZMaker Gold 3.6.0.8
"AviSynth" = AviSynth 2.5
"BSPlayerf" = BS.Player FREE
"CamStudio" = CamStudio
"CCleaner" = CCleaner
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"Creative Live! Central 2" = Creative Live! Central 3
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative VF0700" = Creative Live! Cam Chat HD (VF0700) (1.00.05.00)
"Device Control" = Device Control
"EAXSet" = Creative EAX Settings
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"For the Motherland_is1" = For the Motherland version 3.05
"Fraps" = Fraps
"Gordian Knot" = Gordian Knot Rip Pack 0.33.1
"HP Imaging Device Functions" = HP Imaging Device Functions 5.3
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"LogMeIn Hamachi" = LogMeIn Hamachi
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack - csy" = Microsoft .NET Framework 3.5 Language Pack - CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Miranda IM" = Miranda IM 0.10.9
"Mozilla Firefox 19.0.2 (x86 cs)" = Mozilla Firefox 19.0.2 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP3 Splitter & Joiner_is1" = MP3 Splitter & Joiner 3.27
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NCLauncher_GameForge" = NC Launcher (GameForge)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PC Wizard 2010_is1" = PC Wizard 2010.1.96
"PowerISO" = PowerISO
"PunkBusterSvc" = PunkBuster Services
"rajče.net_is1" = rajče průvodce verze 1.59.30.245
"Semper Fi_is1" = Semper Fi 2.03
"SPEAKER" = Creative Speaker Settings
"Steam App 201190" = Magic: The Gathering – Tactics
"Steam App 231120" = Euro Truck Simulator 2 Demo
"Steam App 34350" = Total War: SHOGUN 2 Demo
"Steam App 49520" = Borderlands 2
"StrongDC++" = StrongDC++ 2.41
"Sweet Home 3D_is1" = Sweet Home 3D version 3.7
"Sword of the Stars" = Sword of the Stars ANY
"SysInfo" = Creative System Information
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 8" = TeamViewer 8
"Totalcmd" = Total Commander (Remove or Repair)
"TVUPlayer" = TVUPlayer 2.5.2.2
"UnLock Root" = UnLock Root 2.31
"UPC Fiber Power Optimizer" = UPC Fiber Power Optimizer
"VLC media player" = VLC media player 1.1.11
"VobSub" = VobSub v2.23 (Remove Only)
"Wandoujia2" = SnapPea
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WebcamMax" = WebcamMax
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.01 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xfire" = Xfire (remove only)
"xchat" = XChat 2 (remove only)
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"JoinMe" = join.me
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22.2.2013 9:25:58 | Computer Name = AMBRIEL | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 5.3.2013 5:28:47 | Computer Name = AMBRIEL | Source = WmiAdapter | ID = 4099
Description = Otevření služby se nezdařil

Error - 12.3.2013 17:07:28 | Computer Name = AMBRIEL | Source = Google Update | ID = 20
Description =

Error - 15.3.2013 3:49:19 | Computer Name = AMBRIEL | Source = Application Error | ID = 1000
Description = Chybující aplikace googledrivesync.exe, verze 1.7.4018.3496, chybující
modul unknown, verze 0.0.0.0, adresa chyby 0x820b0001.

Error - 15.3.2013 6:10:38 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace bsplayer.exe, verze 2.6.4.1073, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 15.3.2013 15:29:08 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace Azureus.exe, verze 4.0.0.0, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 19.3.2013 17:52:04 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace bsplayer.exe, verze 2.6.4.1073, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 20.3.2013 4:55:52 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace OUTLOOK.EXE, verze 12.0.4518.1014, zablokovaný
modul hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 20.3.2013 4:56:15 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1001
Description = Chybný blok 341938951

Error - 21.3.2013 6:29:39 | Computer Name = AMBRIEL | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace bsplayer.exe, verze 2.6.4.1073, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

[ System Events ]
Error - 20.3.2013 4:46:34 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7000
Description = Služba Pml Driver HPZ12 neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 20.3.2013 4:46:34 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Ati HotKey Poller.

Error - 20.3.2013 4:46:34 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby Dnscache.

Error - 20.3.2013 5:20:51 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby TeamViewer8.

Error - 21.3.2013 4:22:08 | Computer Name = AMBRIEL | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 15 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 21.3.2013 4:22:08 | Computer Name = AMBRIEL | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 14 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 21.3.2013 4:22:08 | Computer Name = AMBRIEL | Source = W32Time | ID = 39452689
Description = Klient NTP zprostředkovatele časových údajů: Při vyhledávání DNS ručně
nakonfigurovaného partnera time.windows.com,0x1 došlo k chybě. Klient NTP se pokusí
o vyhledání pomocí služby DNS znovu za 15 minut. Chyba: Došlo k pokusu o operaci
se soketem v okamžiku nedosažitelnosti hostitele. (0x80072751)

Error - 21.3.2013 4:22:08 | Computer Name = AMBRIEL | Source = W32Time | ID = 39452701
Description = Klient NTP zprostředkovatele časových údajů je konfigurován pro získávání
časových údajů z jednoho nebo více zdrojů času. Žádný z těchto zdrojů však není
aktuálně k dispozici. Po dobu 14 minut nebude proveden žádný pokus o kontaktování
zdroje. Klient NTP nemá k dispozici žádný zdroj času.

Error - 21.3.2013 4:22:57 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby TeamViewer8.

Error - 22.3.2013 4:45:54 | Computer Name = AMBRIEL | Source = Service Control Manager | ID = 7011
Description = Vypršel časový limit (30000 milisekund) čekání na odezvu transakce
služby TeamViewer8.

< End of report >

#11 Příspěvek od **vyosek** » 25 bře 2013 22:37

Spustte znovu OTL

Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

Kód: Vybrat vše

:otl
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\sfng32.sys -- (sfng32)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\SNOEE49E.DEFAULT\EXTENSIONS\RSSICON@JASNAPAKA.COM.XPI
[2011.09.09 05:49:04 | 001,037,112 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
O4 - Startup: C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\wandoujia_helper.lnk = C:\Program Files\WandouLabs\wandoujia_helper.exe ()
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: clonewarsadventures.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: freerealms.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: soe.com ([]* in Důvěryhodné servery)
O15 - HKU\S-1-5-21-682003330-1383384898-725345543-1003\..Trusted Domains: sony.com ([]* in Důvěryhodné servery)
[2013.01.29 12:09:21 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\{3155EF3F-3778-4C4C-B0F3-3E48423B8965}
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]
[2013.03.24 10:36:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.03.24 10:08:56 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job
[2013.03.23 22:07:00 | 000,001,020 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.23 22:07:02 | 000,001,042 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job
[2013.03.24 10:07:38 | 000,000,932 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.03.23 23:56:00 | 000,000,936 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.03.23 12:12:00 | 000,000,970 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job
[2013.03.24 10:12:11 | 000,001,022 | ---- | M] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=-
"Adobe ARM"=-
"ApnUpdater"=-
"HP Software Update"=-
"ISUSScheduler"=-
"BDRegion"=-
"AdobeCS4ServiceManager"=-
"SunJavaUpdateSched"=-
"RemoteControl10"=-
"KernelFaultCheck"=-
"GrooveMonitor"=-
"LogMeIn Hamachi Ui"=-
"P17Helper"=-
"KiesTrayAgent"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=-
"GoogleDriveSync"=-
"Google Update"=-
"H/PC Connection Agent"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CorelDRAW Graphics Suite 11b]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]

:files
C:\Program Files\WandouLabs
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]

Nasledne kliknete na Opravit
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Albrecht · #12 Příspěvek od **Albrecht** » 25 bře 2013 23:12

All processes killed
========== OTL ==========
Service WDICA stopped successfully!
Service WDICA deleted successfully!
Service sfng32 stopped successfully!
Service sfng32 deleted successfully!
File system32\drivers\sfng32.sys not found.
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
Service Changer stopped successfully!
Service Changer deleted successfully!
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Prefs.js: "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q=" removed from keyword.URL
C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll moved successfully.
C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění\wandoujia_helper.lnk moved successfully.
C:\Program Files\WandouLabs\wandoujia_helper.exe moved successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-682003330-1383384898-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
C:\Documents and Settings\All Users\Data aplikací\{3155EF3F-3778-4C4C-B0F3-3E48423B8965} folder moved successfully.
C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP\WiseCustomCalla.dll deleted successfully.
C:\WINDOWS\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP13.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP18A.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21F.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP261.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2E.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2FC.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP342.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A1.tmp\mscorlib.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3A1.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3CF.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3EB.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP430.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP450.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP455.tmp\WindowsBase.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP455.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP478.tmp\System.Web.Extensions.dll deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP478.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP588.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5A0.tmp folder deleted successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA75.tmp folder deleted successfully.
C:\WINDOWS\CSC\csc1.tmp deleted successfully.
C:\WINDOWS\system32\CONFIG.TMP deleted successfully.
C:\WINDOWS\system32\SET16C.tmp deleted successfully.
C:\WINDOWS\twain_32\hpqgnds2.tmp deleted successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\WINDOWS\Tasks\avast! Emergency Update.job moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job moved successfully.
C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003Core.job moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-682003330-1383384898-725345543-1003UA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSPM Startup deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BDRegion deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS4ServiceManager deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\P17Helper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveSync deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\H/PC Connection Agent deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CorelDRAW Graphics Suite 11b\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE\ deleted successfully.
========== FILES ==========
C:\Program Files\WandouLabs\WebKit.resources\inspector\UglifyJS folder moved successfully.
C:\Program Files\WandouLabs\WebKit.resources\inspector\Images folder moved successfully.
C:\Program Files\WandouLabs\WebKit.resources\inspector folder moved successfully.
C:\Program Files\WandouLabs\WebKit.resources\en.lproj folder moved successfully.
C:\Program Files\WandouLabs\WebKit.resources folder moved successfully.
C:\Program Files\WandouLabs\themes\style\White folder moved successfully.
C:\Program Files\WandouLabs\themes\style\Black folder moved successfully.
C:\Program Files\WandouLabs\themes\style folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\08pi\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\08pi folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\07changweiwei\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\07changweiwei folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\05bian\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\05bian folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\04liuguotai\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\04liuguotai folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\03dark\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\03dark folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\02green\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\02green folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\01blue\templates folder moved successfully.
C:\Program Files\WandouLabs\themes\skin\01blue folder moved successfully.
C:\Program Files\WandouLabs\themes\skin folder moved successfully.
C:\Program Files\WandouLabs\themes folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\stylesheets\skins\white folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\stylesheets\skins\dark folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\stylesheets\skins folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\stylesheets folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\workers folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\utilities folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\ui\behavior folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\ui folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\nls\root folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\nls\en folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\nls folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\welcome\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\welcome folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\video\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\video\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\video\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\video folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\taskmanager\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\taskmanager\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\taskmanager\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\taskmanager folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\sync\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\sync folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\social\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\social folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\photo\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\photo\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\photo\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\photo folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\optimize\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\optimize folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music\iTunes\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music\iTunes folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\music folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\message\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\message\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\message\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\message folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\main\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\main\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\main folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\doraemon\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\doraemon\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\doraemon\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\doraemon folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\contact\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\contact\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\contact\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\contact folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\browser\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\browser folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\backuprestore\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\backuprestore\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\backuprestore folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\wash\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\wash\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\wash folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\views folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\models folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app\collections folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules\app folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\modules folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts\libraries folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\javascripts folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\images\tx folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\images\navicon2 folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\images\navicon folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release\images folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build\release folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded\build folder moved successfully.
C:\Program Files\WandouLabs\templates\web-reloaded folder moved successfully.
C:\Program Files\WandouLabs\templates\web\images\video folder moved successfully.
C:\Program Files\WandouLabs\templates\web\images\photo folder moved successfully.
C:\Program Files\WandouLabs\templates\web\images folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\ui folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\welcome folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\video folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\sync folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\sms_calllog folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\photo folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\contact folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module\application folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates\module folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build\templates folder moved successfully.
C:\Program Files\WandouLabs\templates\web\build folder moved successfully.
C:\Program Files\WandouLabs\templates\web folder moved successfully.
C:\Program Files\WandouLabs\templates folder moved successfully.
C:\Program Files\WandouLabs\JavaScriptCore.resources folder moved successfully.
C:\Program Files\WandouLabs\4.2.2 folder moved successfully.
C:\Program Files\WandouLabs folder moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 1026 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 57616 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Petr
->Temp folder emptied: 1080706247 bytes
->Temporary Internet Files folder emptied: 28940779 bytes
->FireFox cache emptied: 446413075 bytes
->Google Chrome cache emptied: 260535196 bytes
->Flash cache emptied: 64008 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 26712965 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 159600792 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 188727 bytes
RecycleBin emptied: 8325303566 bytes

Total Files Cleaned = 9 850,00 mb

[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Petr
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

[EMPTYJAVA]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Petr

Total Java Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 03252013_225832

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

#13 Příspěvek od **vyosek** » 26 bře 2013 11:29

Fajn, OTL nam udelalo co melo, jak se chova PC

Albrecht · #14 Příspěvek od **Albrecht** » 26 bře 2013 12:03

Pride mi ze o neco rychlejsi nicmene stale mi dle process exploreru bezi 5x kernel.

#15 Příspěvek od **vyosek** » 26 bře 2013 16:36

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

VIRY.CZ

Zpomaleni pocitace po nejake dobe uzivani

Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani

Re: Zpomaleni pocitace po nejake dobe uzivani