Prosím o radu zpomalování FPS a celého počítače

[strangereu]

Takže to na ty paměti jsem nechal běžet 4 hodiny a stále 0 errors.
Až přijdu ze školy fixnu to co si mi napsal a projedu to tím OTL

[Reklama]

[Orcus]

Ok, paměti jsou v pořádku. Projdi si prosím celé téma a co jsi nefixnul fixni a hoď sem pak i ten OTL log.

[strangereu]

Tady je extras:

OTL Extras logfile created on: 8.10.2012 18:24:28 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Honza\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,47 Gb Available Physical Memory | 61,82% Memory free
8,00 Gb Paging File | 6,33 Gb Available in Paging File | 79,19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 244,04 Gb Total Space | 88,32 Gb Free Space | 36,19% Space Free | Partition Type: NTFS
Drive D: | 221,62 Gb Total Space | 197,47 Gb Free Space | 89,11% Space Free | Partition Type: NTFS
Drive F: | 7,47 Gb Total Space | 5,47 Gb Free Space | 73,15% Space Free | Partition Type: FAT32

Computer Name: HONZA-PC | User Name: Honza | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found
.cmd [@ = cmdfile] -- Reg Error: Key error. File not found
.com [@ = comfile] -- Reg Error: Key error. File not found
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
.pif [@ = piffile] -- Reg Error: Key error. File not found
.vbs [@ = VBSFile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{153E7552-3B99-451E-8C91-D0CFB85A58DB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{183B9ABE-6C17-413D-9C05-B15E6992DFAA}" = lport=10243 | protocol=6 | dir=in | app=system |
"{1BDA4DF9-00DD-4A20-8364-182733FB8E85}" = rport=10243 | protocol=6 | dir=out | app=system |
"{3F73E065-F880-47CA-808A-CCB4E734672E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{93D0009F-88BD-43C3-990A-56C96055C5E9}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B2E05F9B-890D-40C4-A9CD-89EF2C9FC632}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B329E72E-BABE-49AE-9FF5-2482C586550F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DD2E70D0-081D-4BF6-85BE-69E7B39292E9}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{FDEF8B04-5140-4A29-BC23-17E002161293}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D21BD62-B6F6-44B8-A333-FAF6C7E96388}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"{13AE7E85-EA0B-4BFB-B691-06F222F683E8}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{16550B08-1C8F-4106-85F6-DE7EE72F0C11}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{165CFCC0-ED83-45BF-BDE6-1A36E9FF07B4}" = dir=in | app=c:\program files (x86)\war inc battlezone\warinc.exe |
"{17C7C332-184D-4C2A-A2B8-4642B5FF3597}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{1E9FD877-EA23-449E-BD08-5FFC2E99B817}" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1EBFEACC-7BA0-400B-A2DB-2725450984DA}" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"{1F7A84D6-2F34-40F6-8845-55E8D6305F61}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{21872F28-A952-41F9-B336-7D4217B08E9F}" = protocol=17 | dir=in | app=c:\program files (x86)\mta san andreas 1.2\server\mta server.exe |
"{23C685F7-B0FA-4F21-9CD8-9BD9F7C6C544}" = protocol=17 | dir=in | app=k:\metin2united\metin2client.bin |
"{25591D4A-C4F0-47BF-A690-4836AD78C1AB}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{26FBBF96-6827-4A6F-8D71-ABFED1A5E20C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{27556331-BAE4-42B5-9A75-DC83830484A2}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{28481533-66A2-4B82-8F72-43E67E685A16}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{285F6374-7C94-4635-8545-A4876FCA08C4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe |
"{2880A510-148F-42F0-AC94-4B308F4FF546}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{28BA9A27-7D20-48C6-A693-3F336C3DA5CA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{29EFB546-726F-4A0B-A59C-E9DA5F322991}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{2C2669E5-5912-4731-9720-C06FC55A72AD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2C3226A5-5191-4567-8C57-01437B66D4C3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe |
"{2CE2D07C-B824-4E6D-949F-3EC9BD123FA0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{2FDDD12F-05C5-4B1C-A8EC-E9D5DCDC0DDE}" = protocol=6 | dir=in | app=c:\program files (x86)\mta san andreas 1.2\server\mta server.exe |
"{3008F126-FF4D-44FC-ADC2-90535DC365C1}" = protocol=17 | dir=in | app=c:\program files (x86)\oovoo\oovoo.exe |
"{3B22B96E-EEA5-4137-8726-054C4C33BB9B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3B81D7D5-2516-4622-B36A-574D17D398A9}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3E0C0305-0238-4327-9F6F-5D239C9A847F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{4A719CA2-BD94-4D03-8137-F12AE45637DE}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{4B15C8FD-EAA2-4C11-BF36-0406281DF898}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{4F06215D-5AB2-4B04-8D70-8B7BBAB213F3}" = protocol=6 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"{54BD4628-8B1F-4136-8F34-4D4EE3147477}" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"{59331A24-30FA-4444-B667-FF0758EEC288}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{5C43C482-0559-4E97-9413-88EEA5BF890A}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5F471025-836C-4118-AAA1-B33660287904}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\rockstar games social club\rgsclauncher.exe |
"{6229F406-5961-46B7-A559-21DEA31BC259}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{62EB321C-E901-4712-809F-F8150FDF03CB}" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"{663ABB8F-24F6-4B21-8C2E-8CDC27E20EB3}" = protocol=17 | dir=in | app=c:\program files (x86)\metin2united 2012\metin2client.bin |
"{66BA5BFA-0447-4F82-8236-53FE677363E2}" = protocol=6 | dir=in | app=c:\program files (x86)\metin2united 2012\metin2client.bin |
"{737D3A6E-16CD-42C6-9FD8-6ABBEC7183F1}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{73D84599-3C17-42F6-B826-DF6B1E5F5101}" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"{77A7C471-8809-4319-BC77-9BBB85ED034E}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{78D4181B-A8FF-46EE-8FAE-66FEF521FD40}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{79254CB8-DEF7-45D2-AE53-7E4BE0285173}" = protocol=17 | dir=in | app=c:\program files (x86)\mta san andreas 1.3\server\mta server.exe |
"{8AE2FCA0-485B-4E31-808F-F86EA13EFC35}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{8B7B05A7-7F6C-4E26-9738-AAF05C60808E}" = protocol=6 | dir=in | app=c:\program files (x86)\gamersfirst\apb reloaded\binaries\vivoxvoiceservice.exe |
"{8CE90F3E-E24A-4C9C-9C5A-2B2CA169FC50}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{8D52D703-40E1-468E-AEAD-740AC2DE0373}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{8F2B683B-44D2-497B-947B-B01FAAF0BB93}" = protocol=17 | dir=in | app=c:\program files (x86)\fw\freeworld\metin2client.bin |
"{92B73965-241A-4CFC-BFAA-E20A2D3FC2CE}" = protocol=6 | dir=in | app=c:\program files (x86)\gamersfirst\apb reloaded\binaries\apb.exe |
"{92E8C1A8-9157-4F87-BC48-E06AD380E3E0}" = protocol=6 | dir=in | app=c:\program files (x86)\mta san andreas 1.3\server\mta server.exe |
"{9451358D-0A53-413A-8514-2C22B5FBEA95}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{94531DA4-9BD0-4B8A-A0B1-9CB9E7248849}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{9C06F7BE-BA37-4361-808F-667B720FB634}" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"{9D8944F7-C50F-4449-A93B-433E0FA2B759}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"{A21B0F2F-CE13-4E3C-966C-2FE187351496}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{A2D35AF9-FFAE-4F22-BA79-B029C3284824}" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe |
"{A60E3AA9-2F43-4573-B4BB-91F2CCE55BF8}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{AAD7ABE9-F35A-40B7-9E47-50BFF1228C05}" = protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{AADA6969-6634-4399-BC31-30FDA9804B86}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{ABB6A01F-241A-40EE-91D9-94D18D1E2FFA}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\launchgtaiv.exe |
"{AE122BDE-6166-4D77-BC09-E6ED5C182355}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B86B3712-0E9A-4BD6-B93F-F2F0BB50AC36}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BD0B24C2-898C-4E43-AB07-798D98B57FD0}" = protocol=17 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"{BFA495E7-CBFA-4B7F-A6F5-29B0F1ED56AB}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{BFBA907F-E385-4DBE-BECE-9A81B76D7104}" = protocol=6 | dir=out | app=system |
"{C1F68CCB-C02B-4547-B9C5-7C25E1A14FA5}" = protocol=17 | dir=in | app=c:\program files (x86)\gamersfirst\apb reloaded\binaries\apb.exe |
"{C7D4EFB3-58C8-49D7-8785-768CF5F1A346}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{C9188EE2-D955-4C45-8C5F-6CF9EB07753A}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{CD75D929-69CB-47C3-9D4C-2464EBDA9016}" = protocol=6 | dir=in | app=c:\program files (x86)\fw\freeworld\metin2client.bin |
"{D53E2D5A-BA78-4952-BE25-880951C98931}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D7A547C3-5669-47F9-A17A-27B1960FAF31}" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{DAC0E191-867F-472C-A52E-9DAE34B925EC}" = protocol=6 | dir=in | app=k:\metin2united\metin2client.bin |
"{DBCE9C7C-7BE3-441B-A79F-399978E237CC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DC73E379-FFAE-4EE9-B808-4BDD447F3622}" = protocol=6 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{DF388878-6A3A-4AC1-93D9-EA8AB4BD2C37}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E8422C70-F04C-4193-8EF3-38CFFFD2D1BB}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{EA561940-5DB4-40D4-8AA4-57627EE386EF}" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"{EBB4953A-BD60-46EC-B8E0-4CC2AC3F6B00}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{F27EFF03-D680-4E39-935B-FAE71D8FC534}" = protocol=6 | dir=in | app=c:\program files (x86)\oovoo\oovoo.exe |
"{F697135B-EF2B-46F6-9659-5D91C56F7C7C}" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"{F7F7B1B6-8D5E-44FE-B22E-AF2948708634}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{F8A23B16-0531-497C-9718-E446BC51DF8E}" = protocol=17 | dir=in | app=c:\program files (x86)\gamersfirst\apb reloaded\binaries\vivoxvoiceservice.exe |
"{F944569C-BF90-4C69-A929-27A8662E9CCA}" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe |
"{FB280D39-C296-45ED-AB5E-D4CA73F05A83}" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\rockstar games social club\rgsclauncher.exe |
"TCP Query User{0006F02D-3552-4A63-9566-807302157551}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"TCP Query User{07725C49-D9CE-4156-9C3C-4C70F3B15A4B}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe |
"TCP Query User{191B549C-6BEA-47A9-AF56-73FA3CD3031F}C:\program files (x86)\counter-strike 1.6\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe |
"TCP Query User{1F4B5B13-0D59-4612-BCE8-919B33EB36A3}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"TCP Query User{2432D238-0A1C-4F06-A8A6-AE9262E513B3}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{27639110-5933-49F5-B23D-C5F413349A60}C:\program files (x86)\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"TCP Query User{34573CA4-D70E-443A-8558-B4514E2FD5D5}C:\program files (x86)\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"TCP Query User{37A498E4-C340-4D02-9731-B429DD2DE91D}C:\program files (x86)\fw\freeworld\metin2client.bin" = protocol=6 | dir=in | app=c:\program files (x86)\fw\freeworld\metin2client.bin |
"TCP Query User{4E17B71A-21CC-414C-A215-8F5081EF5CDD}K:\metin2united\metin2client.bin" = protocol=6 | dir=in | app=k:\metin2united\metin2client.bin |
"TCP Query User{5101E6E6-3D96-4146-8177-EB7D01C63390}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{67C5A5B6-7C67-453B-A670-0FB1D90A3B9B}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{6EC2B351-445A-437E-A72C-0FF3BF89EF09}C:\program files (x86)\metin2united 2012\metin2client.bin" = protocol=6 | dir=in | app=c:\program files (x86)\metin2united 2012\metin2client.bin |
"TCP Query User{88336A30-34CF-4D39-9119-1254DE7EFB97}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"TCP Query User{8E1B0B9F-9184-49B2-A7C6-7A2B3B2D61CE}C:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"TCP Query User{95D1DFD8-908D-4C57-9B43-B19E9B1794FF}C:\program files (x86)\mta san andreas 1.2\server\mta server.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mta san andreas 1.2\server\mta server.exe |
"TCP Query User{980BAD47-D039-4496-903F-BD8CC2656058}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"TCP Query User{9CE774B4-E0E1-4CCA-8E67-A5F9A777B1DC}C:\program files (x86)\oovoo\oovoo.exe" = protocol=6 | dir=in | app=c:\program files (x86)\oovoo\oovoo.exe |
"TCP Query User{A98E494D-D2FF-46E2-A3EE-81827AF80326}C:\program files (x86)\xfire\xfire.exe" = protocol=6 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"TCP Query User{B46E1165-3C83-4152-91BB-01EAB2D15D75}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{B9C1C59E-DAB9-4060-92C6-EA0EDF52C3F0}C:\program files (x86)\mta san andreas 1.3\server\mta server.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mta san andreas 1.3\server\mta server.exe |
"TCP Query User{D1AD9F4F-124B-4E57-B057-8F6F948C6328}C:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe |
"UDP Query User{166D1C0E-FBD0-44A5-8AE1-39D08CA26941}C:\program files (x86)\mta san andreas 1.2\server\mta server.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mta san andreas 1.2\server\mta server.exe |
"UDP Query User{41DFC41E-C40E-4BC0-B147-EA71CF950B67}C:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\papam77\team fortress 2\hl2.exe |
"UDP Query User{4A85072D-C5A9-4622-BD5C-9B3D6C86FA9A}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{4DD0DB3C-C932-4FF0-AB16-3F8AA0771439}K:\metin2united\metin2client.bin" = protocol=17 | dir=in | app=k:\metin2united\metin2client.bin |
"UDP Query User{58929FF9-07AD-4477-A360-8383DC155FEE}C:\program files (x86)\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"UDP Query User{6AEDD934-B197-4C5B-AE58-DCA177396E2E}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"UDP Query User{735206A0-5F81-491D-9CDB-23067BB50883}C:\program files (x86)\fw\freeworld\metin2client.bin" = protocol=17 | dir=in | app=c:\program files (x86)\fw\freeworld\metin2client.bin |
"UDP Query User{73B1C1AF-EBAB-4E27-89A0-E3591B54CB31}C:\program files (x86)\metin2united 2012\metin2client.bin" = protocol=17 | dir=in | app=c:\program files (x86)\metin2united 2012\metin2client.bin |
"UDP Query User{7A5514E0-00D1-4A50-A8C1-F950AA582633}C:\program files (x86)\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"UDP Query User{7D0DD660-097B-43CF-97F4-BAE80CCBF5E3}C:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"UDP Query User{8FD26021-CBD5-4505-A173-CB11C3BEA8F3}C:\program files (x86)\xfire\xfire.exe" = protocol=17 | dir=in | app=c:\program files (x86)\xfire\xfire.exe |
"UDP Query User{9BC6E2EB-08C6-4501-BC54-136E7BC4B250}C:\program files (x86)\oovoo\oovoo.exe" = protocol=17 | dir=in | app=c:\program files (x86)\oovoo\oovoo.exe |
"UDP Query User{ABCE3BC8-7493-4CF2-BE59-246FB1A5D89B}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"UDP Query User{AC7F908E-AA90-4CF7-82C0-B34F747AB07B}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{BADD4B89-56FB-47D0-9FBB-E542BF11F617}C:\program files (x86)\counter-strike 1.6\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike 1.6\hl.exe |
"UDP Query User{C039C50C-5019-4AFB-885C-4BFF2A5BCD44}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{C1E3432F-0937-49F6-889F-615DC41758C7}C:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\grand theft auto iv\gtaiv.exe |
"UDP Query User{CF05F88D-7827-4994-822B-E812DD9CCE62}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe |
"UDP Query User{D877F367-8FD9-4A17-827B-EE7C102948C0}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe |
"UDP Query User{EF37EDF5-4D28-459A-95A5-97BE66654A79}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{F2313862-90AF-4617-8F27-D7DD7F45D568}C:\program files (x86)\mta san andreas 1.3\server\mta server.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mta san andreas 1.3\server\mta server.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{14EC807A-F88E-4FCF-8013-CB909F930E88}_is1" = PDF-Tools 4
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{3C481CDB-34E8-4CEF-B487-4C9C60530CFC}" = MySQL Connector C++ 1.1.0
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{5B6A2A7C-658E-4661-A254-3C36F5B63943}" = MySQL Connector C 6.0.2
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{70AC9B8B-5DC4-4E5E-964B-2A695D157FCB}" = Sun VirtualBox
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{B9ED0ABA-7E2B-4C1B-8466-40E8BCE3DCA3}" = MySQL Server 5.5
"{BB2211D1-A5B5-4AEF-B0E6-DD7874ABF8EE}" = MySQL Connector/ODBC 5.1
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{CC4878C0-4A6A-49CD-AAA7-DD3FCB06CC84}" = Microsoft Web Platform Installer 3.0
"{D4761C4F-5ED9-11E1-9202-F04DA23A5C58}" = MSVCRT Redists
"{D600D357-5CB9-4DE9-8FD4-14E208BD1970}" = Nero Backup Drivers
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB" = Balíček ovladače systému Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0)
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.61.2
"Creative VF0220" = Creative Live! Cam Video IM Driver (1.01.01.00)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Windows Movie Maker" = Windows Movie Maker

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{034DCAF9-96E7-4936-9A07-712F80B5181E}" = Nero RescueAgent 11
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0505C47B-6CBC-4DF5-9628-769566240F88}" = MySQL Connector J
"{0713D1F9-DD77-42C1-8C7D-54D479E2E743}" = Nero SoundTrax 11
"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D7A4289-99CF-4B8D-B812-86BE50A54552}" = Nero Video 11
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11D3EF85-63E1-4AE4-A7C1-9241BDB16B51}" = Nero ControlCenter 11
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{1D88C904-C7CC-A8F2-CF85-78D603233F15}" = Tinychat
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F64A2AA-7C92-44F5-BFA4-BFCCA1D01F87}" = MySQL Examples and Samples 5.5
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Nástroj pro odesílání služby Windows Live
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83217002FF}" = Java(TM) 7 Update 2
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{2CA7225D-CB12-462A-9DD1-50319E158BA5}" = Nero 11 PiP Effects Basic
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{390757AA-8830-43DC-AEE0-4E5B6F8439EB}" = Nero SoundTrax 11 Help (CHM)
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{53F7746A-96AA-49A5-86B8-59989680DAC5}" = Nero Burning ROM 11 Help (CHM)
"{55C2143E-FBA5-442F-9AFA-726FF068F39D}" = Nero CoverDesigner 11 Help (CHM)
"{5681C7AB-E29D-4EE9-B0F0-809A28ECECFC}" = MySQL Notifier 1.0.3
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{57F80ECF-E27C-4EEE-AB58-E971BACE2639}" = Nero Recode 11 Help (CHM)
"{5A212B2D-140D-46F4-B625-2D1CA5A00594}" = Nero 11 Kwik Themes Basic
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}" = NCsoft Launcher
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AB2427E-A18F-4809-9A12-29F5EBABBB3A}" = Nero BackItUp 11 Help (CHM)
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}" = OLYMPUS Viewer 2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7429088E-8008-4A3E-8377-7F1016DCBB22}" = Tinychat Installer
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786070CE-2B3B-4087-840D-89540C3EDF9F}" = Messenger Plus! Community Smartbar
"{7C9AD221-994C-45B2-B46D-26F5735158CF}" = Sony Vegas Pro 8.0
"{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}" = Nero WaveEditor 11
"{827B97A9-B347-4110-9F89-37AF2B758F94}" = NHL™ 09
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}" = Nero BurnLite 10
"{89217401-A2E5-4BFA-8973-803076698A3D}" = Game Fire
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{9193490D-5229-4FC4-9BB9-A6D63C09574A}" = High-Definition Video Playback
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92E19B5A-1985-49BF-9022-9CF4AD652C72}" = MySQL Connector Net 6.5.4
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E4F0E65-209E-4713-8BE2-7F8802BB3987}_is1" = War Inc Battlezone version 1.0.0
"{A32B9924-8A22-4559-86A1-97EB6ABC9B37}" = MySQL Workbench 5.2 CE
"{A68C62E8-B243-4777-89BB-12173DFA1D45}" = OLYMPUS Digital Camera Updater
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}" = SweetIM Toolbar for Internet Explorer 4.2
"{A81A974F-8A22-43E6-9243-5198FF758DA1}" = SweetIM for Messenger 3.6
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}" = Nero BackItUp 11
"{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}" = Nero BurnLite 10
"{B1846721-A8E6-46C7-83B6-0DCF7ADB4267}" = Nero Burning ROM 11
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype
"{B7E01095-8BAA-456E-8AED-504C3CCADBA0}" = Nero 11
"{B8ABD8C7-991E-4A70-B5A3-20C6FC680680}" = LogMeIn Hamachi
"{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}" = Nero Kwik Media Help (CHM)
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BC0FE0D8-2526-4EDC-92B7-20D31FE0097A}" = MySQL Installer
"{BE814218-3919-4EA3-868A-2F60BC135CB4}" = Nero Kwik Media
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11
"{C047B274-0F54-4B41-9D95-5993D58B49F7}" = GTA IV - Crack 1.0.7.0
"{CCE210DF-7EEF-4A76-A63C-3EB091FDB992}" = welcome
"{D01CE99A-8802-483C-A79F-298B691EB432}" = Nero RescueAgent 11 Help (CHM)
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D2CBEFA4-F2D3-4E97-A171-8BFD6A31A5EC}" = Nero Express 11 Help (CHM)
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D4D66270-9147-4BDF-9946-FCA2B303AA8F}" = Nero ControlCenter 11 Help (CHM)
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DEAD48E5-E36C-431E-B83C-E61CE71AA13F}" = Livestream Procaster
"{DF5B650A-3F45-4DEF-90B7-5AC4893CED28}" = QuadCoreM2
"{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}" = LightScribe System Software
"{E10AAE4A-98B8-420A-BD93-E0520C23D624}" = Nero Express 11
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{E400A932-FADF-46C0-BCA3-861D956F8EF4}" = MySQL Documents 5.5
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E51BC4B0-EA5E-49CC-AF3B-93B5C627EC22}" = Nero 11 Effects Basic
"{EB8DED20-A887-4A9C-BB5A-F3E7523DFB44}" = Nero WaveEditor 11 Help (CHM)
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3743A2C-5D5F-4456-8F98-5DF36A954C50}" = Nero 11 Image Samples
"{F49EF443-B2BD-4F10-8A46-87AFCDB90EDD}" = Nero 11 Disc Menus Basic
"{F4D69A8D-BB5C-4C3D-A1AD-64C24233EDD6}" = Windows Live Essentials
"{F69FB940-5031-4FE8-AFAD-085802D0BF63}" = Nero Recode 11
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FAC3C37E-EDAB-4F3A-A173-A7C70CC88F09}" = Nero Video 11 Help (CHM)
"{FF44BCE5-5A18-4051-85F0-BC172D7B4695}" = Nero CoverDesigner 11
"1ClickDownload" = 1ClickDownloader
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Angry Birds Space HD v1.0.0.2 Full" = Angry Birds Space HD v1.0.0.2 Full
"APB Reloaded" = APB Reloaded
"ASIO4ALL" = ASIO4ALL
"aTube Catcher" = aTube Catcher
"avast" = avast! Free Antivirus
"AVI ReComp" = AVI ReComp 1.5.3
"Avisynth" = AviSynth 2.5
"BFlix" = BFlix
"Bytescout XLS Viewer_is1" = $APPNAME> 2.31
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Counter-Strike 1.6" = Counter-Strike 1.6
"CrystalDiskInfo_is1" = CrystalDiskInfo 5.0.5 Shizuku Edition
"DAEMON Tools Lite" = DAEMON Tools Lite
"Drakensang Online" = Drakensang Online
"FileZilla Client" = FileZilla Client 3.5.3
"FormatFactory" = FormatFactory 2.90
"Fraps" = Fraps (remove only)
"Freemake Video Converter_is1" = Freemake Video Converter verze 3.1.0
"GamersFirst LIVE!" = GamersFirst LIVE!
"GamersInternetTunnel_is1" = GIT v0.99 BETA 4
"Google Chrome" = Google Chrome
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"InstallShield_{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager
"Internet Download Accelerator_is1" = Internet Download Accelerator version 5.12.2
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.65.0.1400
"MTA:SA 1.1" = MTA:SA v1.1.1
"MTA:SA 1.2" = MTA:SA v1.2.0-full-03585-0-000
"MTA:SA 1.3" = MTA:SA v1.3
"Notepad++" = Notepad++
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"Picasa 3" = Picasa 3
"PremiumSoft Navicat 8.0 for MySQL_is1" = PremiumSoft Navicat 8.0 for MySQL
"PremiumSoft Navicat Premium_is1" = PremiumSoft Navicat Premium 10.0
"Program Booster_is1" = Program Booster v. 1.1.0 (RC3)
"PunkBusterSvc" = PunkBuster Services
"SHOUTcast" = SHOUTcast DNAS Server v2
"SpeedFan" = SpeedFan (remove only)
"Steam App 440" = Team Fortress 2
"Super Ovladač_is1" = Super Ovladač
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"Tinychat" = Tinychat
"Tinychat Installer 1.0.2" = Tinychat Installer
"TopStyle4_is1" = TopStyle 4
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"VobSub" = VobSub 2.23
"Warrock EU" = WarRock
"WebcamMax" = WebcamMax
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-bit)
"Worms Reloaded: Game of the Year Edition (c) Tea~DA4FE166_is1" = Worms Reloaded: Game of the Year Edition (c) Team17 Software Ltd. version 1
"xampp" = XAMPP 1.7.4
"Xfire" = Xfire (remove only)
"XPort 360_is1" = XPort 360
"Xvid_is1" = Xvid 1.3.0
"yowindow" = YoWindow

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"NCsoft-AionEU" = Aion
"QuadCoreM2" = QuadCoreM2

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 7.10.2012 6:47:28 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 6:47:28 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error - 7.10.2012 6:52:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 6:52:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 6:52:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error - 7.10.2012 7:04:35 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:04:35 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:04:35 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error - 7.10.2012 7:07:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:07:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:07:45 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error - 7.10.2012 7:16:31 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:16:31 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 7.10.2012 7:16:31 | Computer Name = Honza-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

[ System Events ]
Error - 7.10.2012 2:29:00 | Computer Name = Honza-PC | Source = DCOM | ID = 10005
Description =

Error - 7.10.2012 2:29:00 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7000
Description = Služba Služba Google Update (gupdate) neuspěla při spuštění v důsledku
následující chyby: %%3

Error - 7.10.2012 2:30:00 | Computer Name = Honza-PC | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 7.10.2012 2:30:00 | Computer Name = Honza-PC | Source = Application Popup | ID = 1060
Description = Načtení \??\C:\ComboFix\catchme.sys bylo zablokováno kvůli nekompatibilitě
s tímto systémem. Požádejte dodavatele softwaru o kompatibilní verzi ovladače.

Error - 7.10.2012 2:31:06 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 7.10.2012 2:31:12 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 7.10.2012 2:33:06 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Freemake Improver bylo dosaženo časového
limitu (30000 ms).

Error - 7.10.2012 2:33:06 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7000
Description = Služba Freemake Improver neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 7.10.2012 23:28:56 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby MBAMScheduler bylo dosaženo časového
limitu (30000 ms).

Error - 7.10.2012 23:28:56 | Computer Name = Honza-PC | Source = Service Control Manager | ID = 7000
Description = Služba MBAMScheduler neuspěla při spuštění v důsledku následující
chyby: %%1053


< End of report >

[strangereu]

OTL : part 1 log:


OTL logfile created on: 8.10.2012 18:24:28 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Honza\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,47 Gb Available Physical Memory | 61,82% Memory free
8,00 Gb Paging File | 6,33 Gb Available in Paging File | 79,19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 244,04 Gb Total Space | 88,32 Gb Free Space | 36,19% Space Free | Partition Type: NTFS
Drive D: | 221,62 Gb Total Space | 197,47 Gb Free Space | 89,11% Space Free | Partition Type: NTFS
Drive F: | 7,47 Gb Total Space | 5,47 Gb Free Space | 73,15% Space Free | Partition Type: FAT32

Computer Name: HONZA-PC | User Name: Honza | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Honza\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Adobe Systems Incorporated)


========== Modules (No Company Name) ==========


========== Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (MySQL55) -- C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe ()
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (Freemake Improver) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Freemake)
SRV - (TeamViewer7) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (WCMVCAM) -- C:\Windows\SysNative\drivers\wcmvcam64.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (vmm) -- C:\Windows\SysNative\drivers\VMM.sys (Microsoft Corporation)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (NBVol) -- C:\Windows\SysNative\drivers\NBVol.sys (Nero AG)
DRV:64bit: - (NBVolUp) -- C:\Windows\SysNative\drivers\NBVolUp.sys (Nero AG)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (HPub4DE3) -- C:\Windows\SysNative\drivers\HPub4DE3.sys (TPMX Electronics Ltd.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HPMo4DE3) -- C:\Windows\SysNative\drivers\HPMo4DE3.sys (TPMX Electronics Ltd.)
DRV:64bit: - (VBoxNetAdp) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Sun Microsystems, Inc.)
DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcp) -- C:\Windows\SysNative\drivers\BthAvrcp.sys (CSR, plc)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (V0220Dev) -- C:\Windows\SysNative\drivers\V0220Dev.sys (Creative Technology Ltd.)
DRV:64bit: - (V0220Vfx) -- C:\Windows\SysNative\drivers\V0220Vfx.sys (EyePower Games Pte. Ltd.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StCzzyDtN1L2XzutBtFtCtFtDtFtBzyzy&cr=962556660
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SYSTEM32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://www.plusnetwork.com/?q={searchTerms}&sp=chv
IE - HKLM\..\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StCzzyDtN1L2XzutBtFtCtFtDtFtBzyzy&cr=962556660

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?babsrc=HP_ss ... 002700800c
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {163FCC7C-7F12-4270-B54D-C6592284B086}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://www.plusnetwork.com/?q={searchTerms}&sp=chv
IE - HKCU\..\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112059&tt=3012_8&babsrc=SP_ss&mntrId=b08c281200000000000008002700800c
IE - HKCU\..\SearchScopes\{163FCC7C-7F12-4270-B54D-C6592284B086}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StCzzyDtN1L2XzutBtFtCtFtDtFtBzyzy&cr=962556660
IE - HKCU\..\SearchScopes\{559C68E2-2CFE-4FDE-A660-7A2B7DB0E88F}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3214568
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcphp?q={searchTerms}&ch_id=osd
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012.08.15 12:02:22 | 000,000,000 | ---D | M]

[2012.04.09 07:57:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Extensions
[2012.07.07 20:43:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2012.10.07 13:03:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
[2012.10.07 13:03:44 | 000,000,000 | ---D | M] (OneClickDownloader) -- C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com
[2012.10.04 17:57:36 | 000,214,514 | ---- | M] () (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\TorrentHandler@TorrentHandler.com.xpi
[2011.09.24 13:36:32 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml

========== Chrome ==========

CHR - homepage: http://search.conduit.com/?ctid=CT32145 ... hSource=48
CHR - default_search_provider: Conduit (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3214568
CHR - default_search_provider: suggest_url = http://search.conduit.com/
CHR - homepage: http://search.conduit.com/?ctid=CT32145 ... hSource=48
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Download Master integration plugin (Enabled) = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\heloeniedaijefpgpikdfhdjpojnndbn\1.2_0\npDownloadMasterPlugin.dll
CHR - plugin: Java(TM) Platform SE 7 U2 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll
CHR - plugin: Nero Kwik Media Helper (Enabled) = C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: WPI Detector 1.4 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - Extension: FB Refresh = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdlfdaajmclngiomogmleihllaejcnni\2.0.1_0\
CHR - Extension: YouTube = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Facebook Notification Love Icon = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbgmkabgbmoaomfegngmcccofigfbnjj\2.0_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Dislike on Facebook = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\dalglnklbdkfhihfcagbcdbnmlhcdpha\4.0.4_0\
CHR - Extension: Dark Vibe = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkckeanhmkjaechlhllmapjaaglgpcbj\1.1_0\
CHR - Extension: Fast Lorem ipsum dolor sit amet = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\hamlkfblffgjoclgkojjkbgpfoejcdjd\1.0.5_0\
CHR - Extension: Torrent Handler = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\hphibigbodkkohoglgfkddblldpfohjl\1.1_0\
CHR - Extension: Gmail = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: OneClickDownload = C:\Users\Honza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\

O1 HOSTS File: ([2012.10.07 08:32:33 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (Messenger Plus! Community Smartbar) - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableregistrytools = 0
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.2.0)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A539F86-2AA4-44F2-A2DB-93838034C42E}: DhcpNameServer = 10.100.0.1 10.0.125.1 10.0.0.1
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\SysNative\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:64bit: - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.03.05 17:23:09 | 000,862,498 | ---- | M] () - C:\Autopatcher.exe -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...com [@ = comfile] -- Reg Error: Key error. File not found
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.10.08 05:39:30 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\Party_Buffaindustries
[2012.10.08 05:38:56 | 003,944,960 | ---- | C] (Party Buffaindustries) -- C:\Users\Honza\Desktop\Party Buffalo.exe
[2012.10.07 15:58:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Honza\Desktop\OTL.exe
[2012.10.07 15:55:50 | 003,502,920 | ---- | C] (Crystal Dew World ) -- C:\Users\Honza\Desktop\CrystalDiskInfo5_0_5Shizuku-en.exe
[2012.10.07 15:46:17 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\XboxMB
[2012.10.07 15:46:11 | 000,000,000 | ---D | C] -- C:\Windows\XSxS
[2012.10.07 15:46:11 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\Xenocode
[2012.10.07 15:46:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xenocode
[2012.10.07 15:28:24 | 010,150,457 | ---- | C] (XboxMB) -- C:\Users\Honza\Desktop\Horizon.exe
[2012.10.07 13:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TorrentHandler
[2012.10.07 13:03:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\1ClickDownload
[2012.10.07 11:54:24 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.10.07 08:40:15 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012.10.06 18:09:07 | 000,000,000 | -H-D | C] -- C:\Users\Honza\Documents\Freemake_do_not_remove_this_folder634851437471364000
[2012.10.06 07:05:41 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Local\Adobe
[2012.10.05 15:24:21 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Malwarebytes
[2012.10.05 15:24:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.10.05 15:24:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.10.05 15:24:13 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.10.05 15:24:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.10.05 14:52:04 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
[2012.10.05 14:52:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Drakensang Online
[2012.10.04 21:46:15 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012.10.04 21:46:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2012.10.04 18:14:52 | 000,000,000 | ---D | C] -- C:\Users\Honza\Desktop\záznamy
[2012.09.30 18:22:28 | 000,359,464 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.09.30 18:22:28 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.09.30 18:22:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012.09.30 18:22:23 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.09.30 18:22:22 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.09.30 18:22:20 | 000,969,200 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.09.30 18:22:20 | 000,071,600 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.09.30 18:21:41 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.09.30 18:21:40 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.09.30 17:58:32 | 000,608,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx
[2012.09.30 17:58:32 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL
[2012.09.30 17:58:32 | 000,115,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinet.ocx

[strangereu]

part 2


[2012.09.30 17:58:32 | 000,090,112 | ---- | C] (AvroSoft) -- C:\Windows\SysWow64\asTrayIcon.dll
[2012.09.30 17:58:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Program Booster
[2012.09.30 17:58:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MOette
[2012.09.30 16:42:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Nexon
[2012.09.30 16:19:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
[2012.09.30 16:17:25 | 000,000,000 | ---D | C] -- C:\Nexon
[2012.09.30 16:16:53 | 000,000,000 | ---D | C] -- C:\ProgramData\NexonEU
[2012.09.28 16:14:33 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
[2012.09.28 16:14:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
[2012.09.28 16:06:39 | 000,000,000 | ---D | C] -- C:\Perfect World Entertainment
[2012.09.28 14:32:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Activision
[2012.09.28 14:30:36 | 000,000,000 | -HSD | C] -- C:\Windows\ftpcache
[2012.09.28 13:12:55 | 000,258,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unicows.dll
[2012.09.22 21:49:20 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.09.22 21:49:20 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.09.22 21:49:19 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.09.22 21:49:19 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.09.22 21:49:19 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.09.22 21:49:18 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.09.22 21:49:18 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.09.22 21:49:18 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.09.22 21:49:18 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.09.22 21:49:18 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.09.22 21:49:18 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.09.22 21:49:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.09.22 21:49:16 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.09.22 21:49:16 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.09.22 21:49:15 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.09.20 16:44:50 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2012.09.20 10:17:26 | 000,000,000 | -H-D | C] -- C:\Users\Honza\Documents\Freemake_do_not_remove_this_folder634837330460942000
[2012.09.14 17:27:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2012.09.14 17:27:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2012.09.13 16:53:14 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Rovio
[2012.09.13 16:52:58 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Angry Birds Space HD v1.0.0.2 Full
[2012.09.13 16:52:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Angry Birds Space HD v1.0.0.2 Full
[2012.09.12 13:47:08 | 000,000,000 | ---D | C] -- C:\Users\Honza\AppData\Roaming\wargaming.net
[2012.09.12 13:46:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2012.09.12 13:46:53 | 000,000,000 | ---D | C] -- C:\Games
[2012.09.12 05:55:12 | 000,574,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2012.04.13 21:32:30 | 000,519,159 | ---- | C] (bome.com) -- C:\Program Files (x86)\Patch_vegas90cze.exe
[2009.04.17 09:12:56 | 012,846,336 | ---- | C] (Sony Creative Software Inc.) -- C:\Program Files (x86)\vegas901.exe

========== Files - Modified Within 30 Days ==========

[2012.10.08 15:19:58 | 003,187,951 | ---- | M] () -- C:\Users\Honza\Desktop\PA080054.JPG
[2012.10.08 05:36:30 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.10.08 05:36:30 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.10.08 05:28:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.10.08 05:28:04 | 004,836,568 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.10.08 05:27:48 | 3220,086,784 | -HS- | M] () -- C:\hiberfil.sys
[2012.10.07 19:39:33 | 000,923,618 | ---- | M] () -- C:\Users\Honza\Desktop\paypal_donation_1.0.2.zip
[2012.10.07 19:03:39 | 000,246,837 | ---- | M] () -- C:\Users\Honza\Desktop\czech_1_5_2.zip
[2012.10.07 18:01:30 | 000,000,012 | ---- | M] () -- C:\Users\Honza\Desktop\index.html
[2012.10.07 18:00:05 | 000,005,457 | ---- | M] () -- C:\Users\Honza\Desktop\index.php
[2012.10.07 17:36:17 | 002,476,102 | ---- | M] () -- C:\Users\Honza\Desktop\phpBB-3.0.11.zip
[2012.10.07 17:35:12 | 000,178,655 | ---- | M] () -- C:\Users\Honza\Desktop\se_square_1.0.7.zip
[2012.10.07 16:00:06 | 000,013,507 | ---- | M] () -- C:\Users\Honza\Desktop\MemTest.zip
[2012.10.07 15:58:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Honza\Desktop\OTL.exe
[2012.10.07 15:56:27 | 000,001,991 | ---- | M] () -- C:\Users\Honza\Desktop\CrystalDiskInfo.lnk
[2012.10.07 15:55:56 | 003,502,920 | ---- | M] (Crystal Dew World ) -- C:\Users\Honza\Desktop\CrystalDiskInfo5_0_5Shizuku-en.exe
[2012.10.07 15:28:40 | 010,150,457 | ---- | M] (XboxMB) -- C:\Users\Honza\Desktop\Horizon.exe
[2012.10.07 13:16:35 | 003,992,760 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.10.07 13:16:35 | 001,823,442 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.10.07 13:16:35 | 001,303,352 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.10.07 13:16:35 | 001,246,580 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.10.07 13:16:35 | 000,006,486 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.10.07 13:12:15 | 000,056,315 | ---- | M] () -- C:\Users\Honza\Desktop\Xplorer360.beta6.rar
[2012.10.07 08:32:33 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012.10.05 15:31:10 | 000,103,736 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.09.30 18:22:20 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.09.29 21:57:31 | 000,005,757 | ---- | M] () -- C:\Users\Honza\Documents\vetor3x-projectX.rar
[2012.09.28 14:52:17 | 000,066,872 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.09.28 14:43:49 | 000,000,331 | ---- | M] () -- C:\Windows\game.ini
[2012.09.28 12:19:46 | 000,258,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\unicows.dll
[2012.09.15 18:45:48 | 004,471,891 | ---- | M] () -- C:\Users\Honza\[DM]Moonlight-v4-Crystalize.zip
[2012.09.15 09:28:01 | 002,715,035 | ---- | M] () -- C:\Users\Honza\mta-screen_2012-09-14_23-08-33.png
[2012.09.15 09:27:45 | 001,740,783 | ---- | M] () -- C:\Users\Honza\mta-screen_2012-09-14_23-09-06.png
[2012.09.15 07:32:43 | 000,000,600 | ---- | M] () -- C:\Users\Honza\AppData\Local\PUTTY.RND
[2012.09.13 15:02:07 | 002,663,508 | ---- | M] () -- C:\Users\Honza\1.png
[2012.09.13 15:01:58 | 002,740,558 | ---- | M] () -- C:\Users\Honza\2.png
[2012.09.12 14:47:06 | 002,403,501 | ---- | M] () -- C:\Users\Honza\Bez názvu.png
[2012.09.12 14:45:40 | 001,287,253 | ---- | M] () -- C:\Users\Honza\Bez 1.png

========== Files Created - No Company Name ==========

[2012.10.08 15:17:14 | 003,187,951 | ---- | C] () -- C:\Users\Honza\Desktop\PA080054.JPG
[2012.10.08 05:27:51 | 004,836,568 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.10.07 19:39:31 | 000,923,618 | ---- | C] () -- C:\Users\Honza\Desktop\paypal_donation_1.0.2.zip
[2012.10.07 19:03:38 | 000,246,837 | ---- | C] () -- C:\Users\Honza\Desktop\czech_1_5_2.zip
[2012.10.07 18:00:39 | 000,000,012 | ---- | C] () -- C:\Users\Honza\Desktop\index.html
[2012.10.07 18:00:05 | 000,005,457 | ---- | C] () -- C:\Users\Honza\Desktop\index.php
[2012.10.07 17:36:00 | 002,476,102 | ---- | C] () -- C:\Users\Honza\Desktop\phpBB-3.0.11.zip
[2012.10.07 17:35:03 | 000,178,655 | ---- | C] () -- C:\Users\Honza\Desktop\se_square_1.0.7.zip
[2012.10.07 16:00:13 | 000,024,576 | ---- | C] () -- C:\Users\Honza\Desktop\memtest.exe
[2012.10.07 16:00:05 | 000,013,507 | ---- | C] () -- C:\Users\Honza\Desktop\MemTest.zip
[2012.10.07 15:56:27 | 000,001,991 | ---- | C] () -- C:\Users\Honza\Desktop\CrystalDiskInfo.lnk
[2012.10.07 13:12:20 | 000,114,688 | ---- | C] () -- C:\Users\Honza\Desktop\Xplorer360.exe
[2012.10.07 13:12:15 | 000,056,315 | ---- | C] () -- C:\Users\Honza\Desktop\Xplorer360.beta6.rar
[2012.09.30 15:41:19 | 008,135,680 | ---- | C] () -- C:\WRUpdater.exe
[2012.09.30 15:41:19 | 001,397,760 | ---- | C] () -- C:\WRLauncher.exe
[2012.09.29 21:57:29 | 000,005,757 | ---- | C] () -- C:\Users\Honza\Documents\vetor3x-projectX.rar
[2012.09.28 14:43:49 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
[2012.09.15 09:27:15 | 002,715,035 | ---- | C] () -- C:\Users\Honza\mta-screen_2012-09-14_23-08-33.png
[2012.09.15 09:27:15 | 001,740,783 | ---- | C] () -- C:\Users\Honza\mta-screen_2012-09-14_23-09-06.png
[2012.09.13 16:52:58 | 000,002,287 | ---- | C] () -- C:\Users\Honza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Download All Angry Birds New Version.lnk
[2012.09.13 14:55:44 | 002,740,558 | ---- | C] () -- C:\Users\Honza\2.png
[2012.09.13 14:55:44 | 002,663,508 | ---- | C] () -- C:\Users\Honza\1.png
[2012.09.12 14:42:36 | 002,403,501 | ---- | C] () -- C:\Users\Honza\Bez názvu.png
[2012.09.12 14:42:36 | 001,287,253 | ---- | C] () -- C:\Users\Honza\Bez 1.png
[2012.08.13 12:16:13 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.08.13 12:16:09 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.08.03 19:36:58 | 000,000,238 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2012.07.30 13:08:11 | 000,000,758 | -H-- | C] () -- C:\Users\Honza\.picasa.ini
[2012.07.26 00:49:30 | 000,042,440 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2012.07.15 18:53:17 | 000,007,597 | ---- | C] () -- C:\Users\Honza\AppData\Local\Resmon.ResmonCfg
[2012.07.10 10:15:05 | 001,023,150 | ---- | C] () -- C:\Users\Honza\SebaS v15-Craving.png
[2012.07.10 10:15:05 | 000,609,358 | ---- | C] () -- C:\Users\Honza\Vortex-Vol6-Until Its Perfect.png
[2012.07.10 10:15:05 | 000,192,238 | ---- | C] () -- C:\Users\Honza\SeBaS-V5-SupeR SpeeD.png
[2012.07.04 10:54:39 | 000,384,835 | ---- | C] () -- C:\Users\Honza\AppData\Local\speeddial.crx
[2012.06.19 13:36:04 | 000,253,581 | ---- | C] () -- C:\Users\Honza\tapeta.JPEG
[2012.06.19 13:36:04 | 000,230,159 | ---- | C] () -- C:\Users\Honza\Homer-Simpson.jpg
[2012.06.19 13:36:04 | 000,024,228 | ---- | C] () -- C:\Users\Honza\JB3b02f6_homer.jpg
[2012.06.16 18:37:05 | 000,056,990 | ---- | C] () -- C:\Users\Honza\4.JPG
[2012.06.16 18:37:05 | 000,055,942 | ---- | C] () -- C:\Users\Honza\3.JPG
[2012.06.16 18:37:05 | 000,050,185 | ---- | C] () -- C:\Users\Honza\2.JPG
[2012.06.16 18:37:05 | 000,047,467 | ---- | C] () -- C:\Users\Honza\1.JPG
[2012.06.16 16:23:09 | 004,471,891 | ---- | C] () -- C:\Users\Honza\[DM]Moonlight-v4-Crystalize.zip
[2012.06.16 16:23:09 | 004,406,817 | ---- | C] () -- C:\Users\Honza\[DM]Cosa_ft_skotinka_x-games.zip
[2012.06.16 16:23:09 | 004,250,140 | ---- | C] () -- C:\Users\Honza\[DM]IntreLeXv9-Amazing_Darkness.zip
[2012.06.16 16:23:09 | 003,971,345 | ---- | C] () -- C:\Users\Honza\[DM]Moonlight-Ft-Quantum-Ft-Cosa_Nostra-Ft-CooL-Judgement_Day.zip
[2012.06.16 16:23:09 | 002,477,458 | ---- | C] () -- C:\Users\Honza\[DM]Micra-Ft-TNT-Ft-SebaS-Ft-CooL-Sea_Style-III.zip
[2012.06.16 16:23:08 | 004,098,803 | ---- | C] () -- C:\Users\Honza\[DM]Quantum-Showdown.zip
[2012.06.16 16:23:08 | 003,596,639 | ---- | C] () -- C:\Users\Honza\[DM]Rafinha-Ft-LemoN-NavaL-We_Just_Wanna_run.zip
[2012.06.15 15:14:48 | 000,577,001 | ---- | C] () -- C:\Users\Honza\terminator.jpg
[2012.06.15 15:14:48 | 000,083,610 | ---- | C] () -- C:\Users\Honza\Jak-zemřel-Terminátor!.jpg
[2012.06.01 19:56:38 | 000,554,993 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.54.28.png
[2012.06.01 19:56:38 | 000,443,256 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.54.17.png
[2012.06.01 19:56:38 | 000,426,794 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.54.19.png
[2012.06.01 19:56:38 | 000,345,605 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.55.27.png
[2012.06.01 19:56:38 | 000,341,706 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.55.21.png
[2012.06.01 19:56:38 | 000,322,873 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.55.30.png
[2012.06.01 19:56:38 | 000,253,188 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.54.39.png
[2012.06.01 19:56:38 | 000,246,208 | ---- | C] () -- C:\Users\Honza\2012-06-01_19.54.33.png
[2012.04.20 17:52:37 | 002,049,211 | ---- | C] () -- C:\Users\Honza\sa-mp-040.png
[2012.04.20 17:52:37 | 001,815,056 | ---- | C] () -- C:\Users\Honza\sa-mp-039.png
[2012.03.05 07:03:41 | 013,114,007 | ---- | C] () -- C:\Users\Honza\Resident Evil Afterlife Theme The Outsider A Perfect circle.mp3
[2012.03.05 07:03:41 | 009,268,833 | ---- | C] () -- C:\Users\Honza\Marilyn Manson Resident Evil movie soundtrack 2008.mp3
[2012.02.28 15:37:56 | 000,338,498 | ---- | C] () -- C:\Users\Honza\0228_143700.jpg
[2012.02.28 15:37:56 | 000,337,630 | ---- | C] () -- C:\Users\Honza\0228_143705.jpg
[2012.02.11 14:37:51 | 000,022,009 | ---- | C] () -- C:\Users\Honza\toolbox.rar
[2012.02.11 14:37:51 | 000,018,173 | ---- | C] () -- C:\Users\Honza\movementrecorder.rar
[2012.01.20 21:21:17 | 000,000,132 | ---- | C] () -- C:\Users\Honza\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
[2012.01.04 19:26:03 | 001,073,152 | ---- | C] () -- C:\Windows\SysWow64\libmysql_c.dll
[2011.12.05 21:57:47 | 000,006,446 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.10.30 09:29:26 | 001,589,248 | ---- | C] () -- C:\Windows\SysWow64\libmysql_d.dll
[2011.10.28 13:14:26 | 000,000,600 | ---- | C] () -- C:\Users\Honza\AppData\Local\PUTTY.RND
[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.08.03 03:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.02.22 21:39:04 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011.02.22 21:37:30 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012.08.15 07:13:35 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\.minecraft
[2012.08.12 11:21:57 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\AVI ReComp
[2012.04.09 07:57:00 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Babylon
[2012.03.24 11:11:31 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Bradsoft.com
[2012.08.03 09:24:04 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\BrowserCompanion
[2012.03.19 14:21:03 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ColorCop
[2012.10.07 11:48:18 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\DAEMON Tools Lite
[2012.01.14 12:49:23 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Datel
[2011.09.19 14:24:08 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\eType
[2012.10.07 22:17:33 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\FileZilla
[2012.03.18 10:47:40 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\GHISLER
[2012.08.03 11:58:14 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\install
[2012.05.12 19:30:51 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Internet Download Accelerator
[2011.09.27 12:26:28 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Leadertech
[2012.07.07 20:43:12 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Media Finder
[2012.08.04 08:20:28 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\MySQL
[2012.06.25 13:40:25 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Notepad++
[2012.03.02 18:59:08 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Nová složka
[2012.08.22 20:21:15 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\ooVoo Details
[2012.10.05 14:13:20 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Paltalk
[2012.07.02 20:01:11 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Publish Providers
[2012.09.13 16:53:14 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Rovio
[2012.04.13 21:07:30 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Sony
[2012.04.08 17:53:53 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\TeamViewer
[2012.08.19 17:50:45 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\Tinychat Co
[2012.05.12 19:30:52 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\TS3Client
[2012.10.07 11:48:18 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\uTorrent
[2012.09.12 13:47:08 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\wargaming.net
[2012.07.30 12:49:57 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\WebcamMax
[2012.08.31 21:51:17 | 000,000,000 | ---D | M] -- C:\Users\Honza\AppData\Roaming\YoWindow

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 872 bytes -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Worms Reloaded: Game of the Year Edition.lnk
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

< End of report >

[jaro3]

Odinstaluj:
BFlix


Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StC
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://www.plusnetwork.com/?q={searchTerms}&sp=chv
IE - HKLM\..\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?babsrc=HP_ss ... 002700800c
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {163FCC7C-7F12-4270-B54D-C6592284B086}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://www.plusnetwork.com/?q={searchTerms}&sp=chv
IE - HKCU\..\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112059&tt=3012_8&babsrc=SP_ss&mntrId=b08c281200000000000008002700800c
IE - HKCU\..\SearchScopes\{163FCC7C-7F12-4270-B54D-C6592284B086}: "URL" = http://www.searchya.com/?q={searchTerms}&s=1&a=foxtab&chnl=tc-100&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyDyB0CtDtC0EyBtBzztCtBtN0D0Tzu0StCzzyDtN1L2XzutBtFtCtFtDtFtBzyzy&cr=962556660
IE - HKCU\..\SearchScopes\{559C68E2-2CFE-4FDE-A660-7A2B7DB0E88F}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3214568
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcphp?q={searchTerms}&ch_id=osd
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll File not found
[2012.04.09 07:57:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Extensions
[2012.07.07 20:43:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2012.10.07 13:03:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
CHR - homepage: http://search.conduit.com/?ctid=CT32145 ... hSource=48
CHR - default_search_provider: Conduit (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3214568
CHR - default_search_provider: suggest_url = http://search.conduit.com/
CHR - homepage: http://search.conduit.com/?ctid=CT32145 ... hSource=48
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2012.10.07 13:16:35 | 003,992,760 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.10.07 13:16:35 | 001,823,442 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.10.07 13:16:35 | 001,303,352 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.10.07 13:16:35 | 001,246,580 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\System32\dllcache\*.tmp
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\system32\DUMP*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\WINDOWS\System32\drivers\*.tmp
C:\Documents and Settings\All Users\Data aplikací\*.tmp
C:\Windows\SysNative\drivers\*.tmp
C:\Windows\SysWow64\drivers\*.tmp
C:\Program Files (x86)\*.tmp
C:\Windows\SysWow64\*.tmp
C:\Windows\SysNative\*.tmp
C:\Users\Honza\AppData\Roaming\Babylon

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
""=""%1" %*"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BFlix" =-

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.


chyby:
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

C:\Users\Honza\Documents\Freemake_do_not_remove_this_folder634851437471364000--znáš tu složku?

C:\Users\Honza\AppData\Roaming\install---co je v této složce?

C:\Program Files (x86)\Patch_vegas90cze.exe--ale no tak!!

[strangereu]

udělal jsem to a vyjel mi pak tenhle log:

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01376947-453C-E890-EBE2-1108B5155675}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Backup.Old.Start Page| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{01376947-453C-E890-EBE2-1108B5155675}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01376947-453C-E890-EBE2-1108B5155675}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{163FCC7C-7F12-4270-B54D-C6592284B086}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{163FCC7C-7F12-4270-B54D-C6592284B086}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{559C68E2-2CFE-4FDE-A660-7A2B7DB0E88F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{559C68E2-2CFE-4FDE-A660-7A2B7DB0E88F}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome\content folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Extensions folder moved successfully.
Folder C:\Users\Honza\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\ not found.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\tests folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\lib folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader\data folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\oneclickdownloader folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\windows folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\window folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\utils folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\traits folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\tabs folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\events folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\event folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\dom folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib\content folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\lib folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils\data folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\api-utils folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\lib folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit\data folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources\addon-kit folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\resources folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\locale folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\defaults\preferences folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com\defaults folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com folder moved successfully.
C:\Users\Honza\AppData\Roaming\Mozilla\Firefox\Profiles\extensions folder moved successfully.
Use Chrome's Settings page to change the HomePage.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to change the HomePage.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Windows\SysNative\perfh005.dat moved successfully.
C:\Windows\SysNative\perfh009.dat moved successfully.
C:\Windows\SysNative\perfc005.dat moved successfully.
C:\Windows\SysNative\perfc009.dat moved successfully.
ADS C:\ProgramData\TEMP:888AFB86 deleted successfully.
========== FILES ==========
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\System32\dllcache\*.tmp not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\system32\DUMP*.tmp not found.
File\Folder c:\windows\Tasks\*.job not found.
File\Folder C:\*.tmp not found.
File\Folder C:\WINDOWS\System32\drivers\*.tmp not found.
File\Folder C:\Documents and Settings\All Users\Data aplikací\*.tmp not found.
File\Folder C:\Windows\SysNative\drivers\*.tmp not found.
File\Folder C:\Windows\SysWow64\drivers\*.tmp not found.
File\Folder C:\Program Files (x86)\*.tmp not found.
File\Folder C:\Windows\SysWow64\*.tmp not found.
File\Folder C:\Windows\SysNative\*.tmp not found.
C:\Users\Honza\AppData\Roaming\Babylon folder moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\\""|""%1" %*"64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\\""|""%1" %*" /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\BFlix not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Honza
->Temp folder emptied: 2241210 bytes
->Temporary Internet Files folder emptied: 4287337 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 352634817 bytes
->Flash cache emptied: 863 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7496 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 100438723 bytes

Total Files Cleaned = 438,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 10092012_132321

Files\Folders moved on Reboot...
C:\Users\Honza\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[jaro3]

C:\Users\Honza\Documents\Freemake_do_not_remove_this_folder634851437471364000--znáš tu složku?

C:\Users\Honza\AppData\Roaming\install---co je v této složce?

C:\Program Files (x86)\Patch_vegas90cze.exe--ale no tak!!

[strangereu]

složku install jsem smazal . Ostatní smažu.
A proč no tak ? Něco šaptně ? xD

[jaro3]

patch Vegas..to bude něco nelegálního ne?

Spusť OTL a klikni na Vyčisti.

Jak to vypadá s PC?

[strangereu]

No jako pořád se to seká hele jestli máš Team Viewer můžeš se podívat jestli chceš. Ale jako žádnej zázrak furt se to seká

[jaro3]

Kontaktuj uživatele MiliNess , aby Ti s tím pomohl.

Start-Spustit->napiš "verifier"->OK->Vytvořit uživatelské nastavení->Vybrat individuální nastavení z úplného seznamu->mimo "Simulace nedostatku prostředků" zatrhni vše->vybrat ovladače ze seznamu->vyberte vše, co není od Microsoftu->Dokončit->restartuj PC
Pokud verifier narazí na nějaký problém, objeví se BSOD a dojde k restartu počítače. Ve složce Windows\Minidump by se měl vytvořit výpis paměti, který mi upni. (.dmp)
Pokud by k BSOD docházelo už při startu OS a nedařilo se i po několika restartech zavést systém,
spusť nouzový režim (mačkání F8 při startu PC)
Tam spusť Verifier a zvol "Odstranit existující nastavení->Dokončit->restart PC.

Hot CPU Tester Pro 4.41
http://www.instaluj.cz/hot-cpu-tester-pro

+
Stáhni si HeavyLoad
http://www.stahuj.centrum.cz/utility_a_ ... ownload/?g[hledano]=&g[oz]=2.4

Aplikace, která prověří stabilitu vašeho počítače. Po zapnutí programu zvolte rychlost obnovení grafu, zapněte vykreslování a povolte obsazování fyzické paměti. Popřípadě můžete zapnout i další funkce programu. Pak můžete test spustit.

Program postupně zabere veškerou dostupnou paměť a test pokračuje. Roste teplota procesoru a dalších zařízení. Pokud je váš počítač na toto všechno připraven, tak zvládne fungovat i jako databázový nebo souborový server. Pokud ne, mohlo by už během testu dojít k pádu systému a možná i poškození některých částí počítače - například přehřání procesoru.