PC-HELP.CZ

Dobrý večer všem! Prosím o kontrolu logu! Děkuji!

Dále jsem se chtěl zeptat, zda je důležité pro možné zjištění problému připojit sem také část logu s Files/Folders - Created Within 30 Days, Files - Modified Within 30 Days, Files Created - No Company Name, Win32 Services (SafeList), nebo Driver Services (SafeList)?

Log z OTL

Používám Spybot, MBAM, Eset Smart Security + jeho vlastní firewall

O1 HOSTS File: ([2010.04.09 16:59:07 | 000,385,990 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 http://www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 http://www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 http://www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 http://www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 http://www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 http://www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 http://www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 http://www.10sek.com
O1 - Hosts: 127.0.0.1 http://www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 http://www.123fporn.info
O1 - Hosts: 13311 more lines...
O4:64bit: - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWOW64\CTASIO.DLL (Creative Technology Ltd)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\CTASIO.DLL (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTXFIREG] C:\Windows\SysWow64\Ctxfireg.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SBAudigy4\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
O4 - Startup: C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 192.168.1.254
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{244a98f5-f714-11de-8831-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{284a5b47-f729-11de-adf1-0015833210dd}\Shell - "" = AutoRun
O33 - MountPoints2\{284a5b47-f729-11de-adf1-0015833210dd}\Shell\AutoRun\command - "" = F:\Support\AutoRun\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

Příště pošli log celý , nevidím soubory , programy , složky nic!!!

Takže jen toto:

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

Ok, díky za reakci! Log posílám níže. Pokud mám udělat nový scan a poslat log se vším všudy...?


All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
127.0.0.1 007guard.com removed from HOSTS file successfully
127.0.0.1 008i.com removed from HOSTS file successfully
127.0.0.1 008k.com removed from HOSTS file successfully
127.0.0.1 00hq.com removed from HOSTS file successfully
127.0.0.1 010402.com removed from HOSTS file successfully
127.0.0.1 032439.com removed from HOSTS file successfully
127.0.0.1 0scan.com removed from HOSTS file successfully
127.0.0.1 1000gratisproben.com removed from HOSTS file successfully
127.0.0.1 1001namen.com removed from HOSTS file successfully
127.0.0.1 100888290cs.com removed from HOSTS file successfully
127.0.0.1 100sexlinks.com removed from HOSTS file successfully
127.0.0.1 10sek.com removed from HOSTS file successfully
127.0.0.1 1-2005-search.com removed from HOSTS file successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Starting removal of ActiveX control {1E54D648-B804-468d-BC78-4AFFED8E262F}
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F}\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E54D648-B804-468d-BC78-4AFFED8E262F}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553540000}
C:\Windows\Downloaded Program Files\swflash.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Starting removal of ActiveX control {F6ACF75C-C32C-447B-9BEF-46B766368D29}
C:\Windows\Downloaded Program Files\CTPID.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{F6ACF75C-C32C-447B-9BEF-46B766368D29}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F6ACF75C-C32C-447B-9BEF-46B766368D29}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{F6ACF75C-C32C-447B-9BEF-46B766368D29}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F6ACF75C-C32C-447B-9BEF-46B766368D29}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{244a98f5-f714-11de-8831-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{244a98f5-f714-11de-8831-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{284a5b47-f729-11de-adf1-0015833210dd}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284a5b47-f729-11de-adf1-0015833210dd}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{284a5b47-f729-11de-adf1-0015833210dd}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284a5b47-f729-11de-adf1-0015833210dd}\ not found.
File F:\Support\AutoRun\AutoRun.exe not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
File sethosts] not found.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.1.1 log created on 04092010_220353

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

nyní znovu nový log z OTL (celý).

Dobré dopoledne, děkuji za odpověď! co znamená whitelist v OTL, dále havěť LOP a Purity, tyto položky ke kontrole jsou defaultně odškrtnuté.


Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Pepik\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (ESET)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files (x86)\Bit Che\Bit_Che.exe (Convivea, Inc.)
PRC - C:\Windows\SysWOW64\CTHELPER.EXE (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Creative\SBAudigy4\Volume Panel\VolPanlu.exe (Creative Technology Ltd)


========== Modules (SafeList) ==========

MOD - C:\Users\Pepik\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (EhttpSrv) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe (ESET)
SRV:64bit: - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (ESET)
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (WwanSvc) -- C:\Windows\SysNative\wwansvc.dll (Microsoft Corporation)
SRV:64bit: - (WbioSrvc) -- C:\Windows\SysNative\wbiosrvc.dll (Microsoft Corporation)
SRV:64bit: - (Power) -- C:\Windows\SysNative\umpo.dll (Microsoft Corporation)
SRV:64bit: - (Themes) -- C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
SRV:64bit: - (sppuinotify) -- C:\Windows\SysNative\sppuinotify.dll (Microsoft Corporation)
SRV:64bit: - (SensrSvc) -- C:\Windows\SysNative\sensrsvc.dll (Microsoft Corporation)
SRV:64bit: - (PNRPsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:64bit: - (p2pimsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:64bit: - (HomeGroupProvider) -- C:\Windows\SysNative\provsvc.dll (Microsoft Corporation)
SRV:64bit: - (RpcEptMapper) -- C:\Windows\SysNative\RpcEpMap.dll (Microsoft Corporation)
SRV:64bit: - (PNRPAutoReg) -- C:\Windows\SysNative\pnrpauto.dll (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (HomeGroupListener) -- C:\Windows\SysNative\ListSvc.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) -- C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (Dhcp) -- C:\Windows\SysNative\dhcpcore.dll (Microsoft Corporation)
SRV:64bit: - (defragsvc) -- C:\Windows\SysNative\defragsvc.dll (Microsoft Corporation)
SRV:64bit: - (bthserv) -- C:\Windows\SysNative\bthserv.dll (Microsoft Corporation)
SRV:64bit: - (BDESVC) -- C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
SRV:64bit: - (AxInstSV) -- C:\Windows\SysNative\AxInstSv.dll (Microsoft Corporation)
SRV:64bit: - (AppIDSvc) -- C:\Windows\SysNative\appidsvc.dll (Microsoft Corporation)
SRV:64bit: - (wbengine) -- C:\Windows\SysNative\wbengine.exe (Microsoft Corporation)
SRV:64bit: - (sppsvc) -- C:\Windows\SysNative\sppsvc.exe (Microsoft Corporation)
SRV:64bit: - (Fax) -- C:\Windows\SysNative\FXSSVC.exe (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (DAUpdaterSvc) -- W:\Games\Dragon Age\bin_ship\daupdatersvc.service.exe (BioWare)
SRV - (VSS) -- C:\Windows\Vss [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (MSDTC) Služba DTC (Distributed Transaction Coordinator) -- C:\Windows\SysWOW64\Msdtc [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (HomeGroupProvider) -- C:\Windows\SysWOW64\provsvc.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\SysWOW64\dhcpcore.dll (Microsoft Corporation)
SRV - (vds) -- C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (clr_optimization_v2.0.50727_64) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (epfwwfp) -- C:\Windows\SysNative\drivers\epfwwfp.sys (ESET)
DRV:64bit: - (epfw) -- C:\Windows\SysNative\drivers\epfw.sys (ESET)
DRV:64bit: - (ehdrv) -- C:\Windows\SysNative\drivers\ehdrv.sys (ESET)
DRV:64bit: - (eamon) -- C:\Windows\SysNative\drivers\eamon.sys (ESET)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (KSecPkg) -- C:\Windows\SysNative\drivers\ksecpkg.sys (Microsoft Corporation)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (hwpolicy) -- C:\Windows\SysNative\drivers\hwpolicy.sys (Microsoft Corporation)
DRV:64bit: - (FsDepends) -- C:\Windows\SysNative\drivers\fsdepends.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (WIMMount) -- C:\Windows\SysNative\drivers\wimmount.sys (Microsoft Corporation)
DRV:64bit: - (vhdmp) -- C:\Windows\SysNative\drivers\vhdmp.sys (Microsoft Corporation)
DRV:64bit: - (vdrvroot) -- C:\Windows\SysNative\drivers\vdrvroot.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (rdyboost) -- C:\Windows\SysNative\drivers\rdyboost.sys (Microsoft Corporation)
DRV:64bit: - (pcw) -- C:\Windows\SysNative\drivers\pcw.sys (Microsoft Corporation)
DRV:64bit: - (CNG) -- C:\Windows\SysNative\drivers\cng.sys (Microsoft Corporation)
DRV:64bit: - (fvevol) -- C:\Windows\SysNative\drivers\fvevol.sys (Microsoft Corporation)
DRV:64bit: - (rdpbus) -- C:\Windows\SysNative\drivers\rdpbus.sys (Microsoft Corporation)
DRV:64bit: - (RDPREFMP) -- C:\Windows\SysNative\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV:64bit: - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\SysNative\drivers\agilevpn.sys (Microsoft Corporation)
DRV:64bit: - (WfpLwf) -- C:\Windows\SysNative\drivers\wfplwf.sys (Microsoft Corporation)
DRV:64bit: - (NdisCap) -- C:\Windows\SysNative\drivers\ndiscap.sys (Microsoft Corporation)
DRV:64bit: - (vwifibus) -- C:\Windows\SysNative\drivers\vwifibus.sys (Microsoft Corporation)
DRV:64bit: - (1394ohci) -- C:\Windows\SysNative\drivers\1394ohci.sys (Microsoft Corporation)
DRV:64bit: - (BthPan) Zařízení Bluetooth (síť PAN) -- C:\Windows\SysNative\drivers\bthpan.sys (Microsoft Corporation)
DRV:64bit: - (BTHPORT) -- C:\Windows\SysNative\drivers\bthport.sys (Microsoft Corporation)
DRV:64bit: - (RFCOMM) Zařízení Bluetooth (RFCOMM protokol TDI) -- C:\Windows\SysNative\drivers\rfcomm.sys (Microsoft Corporation)
DRV:64bit: - (BthEnum) -- C:\Windows\SysNative\drivers\bthenum.sys (Microsoft Corporation)
DRV:64bit: - (BTHUSB) -- C:\Windows\SysNative\drivers\BTHUSB.SYS (Microsoft Corporation)
DRV:64bit: - (UmPass) -- C:\Windows\SysNative\drivers\umpass.sys (Microsoft Corporation)
DRV:64bit: - (mshidkmdf) -- C:\Windows\SysNative\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV:64bit: - (WudfPf) -- C:\Windows\SysNative\drivers\WUDFPf.sys (Microsoft Corporation)
DRV:64bit: - (MTConfig) -- C:\Windows\SysNative\drivers\MTConfig.sys (Microsoft Corporation)
DRV:64bit: - (CompositeBus) -- C:\Windows\SysNative\drivers\CompositeBus.sys (Microsoft Corporation)
DRV:64bit: - (Beep) -- C:\Windows\SysNative\drivers\beep.sys (Microsoft Corporation)
DRV:64bit: - (AppID) -- C:\Windows\SysNative\drivers\appid.sys (Microsoft Corporation)
DRV:64bit: - (scfilter) -- C:\Windows\SysNative\drivers\scfilter.sys (Microsoft Corporation)
DRV:64bit: - (discache) -- C:\Windows\SysNative\drivers\discache.sys (Microsoft Corporation)
DRV:64bit: - (HidBatt) -- C:\Windows\SysNative\drivers\hidbatt.sys (Microsoft Corporation)
DRV:64bit: - (CmBatt) -- C:\Windows\SysNative\drivers\CmBatt.sys (Microsoft Corporation)
DRV:64bit: - (AcpiPmi) -- C:\Windows\SysNative\drivers\acpipmi.sys (Microsoft Corporation)
DRV:64bit: - (AmdPPM) -- C:\Windows\SysNative\drivers\amdppm.sys (Microsoft Corporation)
DRV:64bit: - (Epfwndis) -- C:\Windows\SysNative\drivers\epfwndis.sys (ESET)
DRV:64bit: - (LUsbFilt) -- C:\Windows\SysNative\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (RTL8023x64) -- C:\Windows\SysNative\drivers\Rtnic64.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (hap17v2k) -- C:\Windows\SysNative\drivers\HAP17V2K.SYS (Creative Technology Ltd)
DRV:64bit: - (hap16v2k) -- C:\Windows\SysNative\drivers\HAP16V2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ha10kx2k) -- C:\Windows\SysNative\drivers\HA10KX2K.SYS (Creative Technology Ltd)
DRV:64bit: - (emupia) -- C:\Windows\SysNative\drivers\EMUPIA2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctsfm2k) -- C:\Windows\SysNative\drivers\CTSFM2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctprxy2k) -- C:\Windows\SysNative\drivers\CTPRXY2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ossrv) -- C:\Windows\SysNative\drivers\CTOSS2K.SYS (Creative Technology Ltd.)
DRV:64bit: - (ctaud2k) Creative Audio Driver (WDM) -- C:\Windows\SysNative\drivers\CTAUD2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctac32k) -- C:\Windows\SysNative\drivers\CTAC32K.SYS (Creative Technology Ltd)
DRV:64bit: - (CTHWIUT.DLL) -- C:\Windows\SysNative\CTHWIUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CT20XUT.DLL) -- C:\Windows\SysNative\CT20XUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEXFIFX.DLL) -- C:\Windows\SysNative\CTEXFIFX.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEDSPSY.DLL) -- C:\Windows\SysNative\CTEDSPSY.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPIO.DLL) -- C:\Windows\SysNative\CTEDSPIO.DLL (Creative Technology Ltd)
DRV:64bit: - (CTERFXFX.DLL) -- C:\Windows\SysNative\CTERFXFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTERFXFX) -- C:\Windows\SysNative\CTERFXFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPFX.DLL) -- C:\Windows\SysNative\CTEDSPFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEAPSFX.DLL) -- C:\Windows\SysNative\cteapsfx.dll (Creative Technology Ltd)
DRV:64bit: - (CTSBLFX.DLL) -- C:\Windows\SysNative\CTSBLFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTSBLFX) -- C:\Windows\SysNative\CTSBLFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTAUDFX.DLL) -- C:\Windows\SysNative\CTAUDFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTAUDFX) -- C:\Windows\SysNative\CTAUDFX.DLL (Creative Technology Ltd)
DRV:64bit: - (COMMONFX.DLL) -- C:\Windows\SysNative\COMMONFX.DLL (Creative Technology Ltd)
DRV:64bit: - (COMMONFX) -- C:\Windows\SysNative\COMMONFX.DLL (Creative Technology Ltd)
DRV - (truecrypt) -- C:\Windows\SysWOW64\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (NetBIOS) -- C:\Windows\SysWOW64\netbios.dll (Microsoft Corporation)
DRV - (mpsdrv) -- C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (Tcpip) -- C:\Windows\SysWOW64\wbem\tcpip.mof ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 1A AC 4B 2A 94 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "seznam.cz"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.04.05 20:35:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.04.05 20:35:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.01.03 00:45:33 | 000,000,000 | ---D | M]

[2010.01.02 09:59:51 | 000,000,000 | ---D | M] -- C:\Users\Pepik\AppData\Roaming\Mozilla\Extensions
[2010.01.02 09:59:51 | 000,000,000 | ---D | M] -- C:\Users\Pepik\AppData\Roaming\Mozilla\Firefox\Profiles\7pnfgag4.default\extensions
[2010.04.02 08:15:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.01.16 02:50:40 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.01.16 02:50:40 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.01.16 02:50:40 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.01.16 02:50:40 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.01.16 02:50:40 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.04.09 22:04:02 | 000,770,242 | RH-- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 127.0.0.1 123haustiereundmehr.com
O1 - Hosts: 127.0.0.1 123moviedownload.com
O1 - Hosts: 127.0.0.1 123simsen.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 125sms.co.uk
O1 - Hosts: 127.0.0.1 125sms.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 1337crew.info
O1 - Hosts: 127.0.0.1 1337-crew.to
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 127.0.0.1 150freesms.de
O1 - Hosts: 127.0.0.1 163ns.com
O1 - Hosts: 127.0.0.1 171203.com
O1 - Hosts: 127.0.0.1 17concepts.info
O1 - Hosts: 127.0.0.1 17-plus.com
O1 - Hosts: 127.0.0.1 1800searchonline.com
O1 - Hosts: 127.0.0.1 180searchassistant.com
O1 - Hosts: 127.0.0.1 180solutions.com
O1 - Hosts: 127.0.0.1 181.365soft.info
O1 - Hosts: 127.0.0.1 1987324.com
O1 - Hosts: 127.0.0.1 1-domains-registrations.com
O1 - Hosts: 127.0.0.1 1sexparty.com
O1 - Hosts: 127.0.0.1 1sms.de
O1 - Hosts: 127.0.0.1 1spybot.com
O1 - Hosts: 13278 more lines...
O4:64bit: - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWOW64\CTASIO.DLL (Creative Technology Ltd)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\CTASIO.DLL (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTXFIREG] C:\Windows\SysWow64\Ctxfireg.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SBAudigy4\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - Startup: C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
O4 - Startup: C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 192.168.1.254
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.04.09 22:03:53 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.04.09 18:41:20 | 000,000,000 | ---D | C] -- C:\Users\Pepik\AppData\Roaming\Malwarebytes
[2010.04.09 18:41:14 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.04.09 18:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.04.09 18:41:12 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.04.09 18:41:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010.04.09 17:11:24 | 000,561,664 | ---- | C] (OldTimer Tools) -- C:\Users\Pepik\Desktop\OTL.exe
[2010.04.09 16:57:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HijackThis
[2010.04.09 16:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010.04.09 16:53:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010.04.02 08:15:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010.04.02 08:15:30 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010.04.02 08:15:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010.04.02 08:15:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010.04.02 00:08:45 | 000,000,000 | ---D | C] -- C:\Users\Pepik\Documents\The KMPlayer
[2010.04.02 00:06:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ KMPlayer
[2010.04.01 23:53:49 | 000,000,000 | ---D | C] -- C:\Users\Pepik\Documents\Downloads
[2010.03.30 22:39:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010.03.30 22:39:44 | 000,000,000 | ---D | C] -- C:\Users\Pepik\AppData\Local\Google
[2010.03.30 19:45:01 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll
[2010.03.30 19:45:01 | 001,026,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstime.dll
[2010.03.30 19:45:01 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstime.dll
[2010.03.30 19:45:00 | 000,977,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll
[2010.03.30 19:45:00 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll
[2010.03.30 19:45:00 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll
[2010.03.30 19:45:00 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll
[2010.03.30 19:45:00 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll
[2010.03.29 17:00:17 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010.03.21 15:56:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\SecuROM
[2010.03.16 17:30:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2010.03.16 17:30:34 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2010.03.16 17:24:26 | 000,090,112 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\Updreg.EXE
[2010.03.16 17:22:24 | 000,194,048 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctdvinst.dll
[2010.03.16 17:22:24 | 000,133,632 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\sfms32.dll
[2010.03.16 17:22:24 | 000,073,728 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctcoinst.dll
[2010.03.16 17:22:24 | 000,034,816 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[2010.03.16 17:22:24 | 000,027,648 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\ac3api.dll
[2010.03.16 17:22:24 | 000,022,528 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\sfman32.dll
[2010.03.16 17:22:22 | 000,068,096 | ---- | C] (Creative Technology, Ltd) -- C:\Windows\SysWow64\ctedasio.dll
[2010.03.16 17:21:34 | 000,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL
[2010.03.16 17:21:34 | 000,010,240 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\CTDCRES.DLL
[2010.03.16 17:21:34 | 000,010,240 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\CTDCRES.DLL
[2010.03.16 17:21:34 | 000,009,216 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\CTPRES.DLL
[2010.03.16 17:18:35 | 000,034,304 | ---- | C] (Daniel Kawakami) -- C:\Windows\SysWow64\CTAudCS.cpl
[2010.03.14 17:40:38 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.04.10 10:25:07 | 005,505,024 | -HS- | M] () -- C:\Users\Pepik\NTUSER.DAT
[2010.04.10 09:44:00 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.04.10 08:38:09 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.04.10 08:38:09 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.04.10 08:35:12 | 001,445,734 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.04.10 08:35:12 | 000,622,422 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.04.10 08:35:12 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.04.10 08:35:12 | 000,118,604 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.04.10 08:35:12 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.04.10 08:31:10 | 000,283,584 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.04.10 08:31:06 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.04.10 08:31:01 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.04.10 08:30:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.04.10 08:30:42 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.09 23:02:16 | 000,036,208 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.09 23:02:16 | 000,036,208 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.09 23:02:16 | 000,031,224 | ---- | M] () -- C:\Windows\SysNative\BMXCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.09 23:02:16 | 000,031,224 | ---- | M] () -- C:\Windows\SysNative\BMXBkpCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.09 23:02:16 | 000,011,564 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.09 23:02:07 | 007,253,822 | -H-- | M] () -- C:\Users\Pepik\AppData\Local\IconCache.db
[2010.04.09 22:04:02 | 000,770,242 | RH-- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010.04.09 21:34:36 | 000,000,000 | -H-- | M] () -- C:\Users\Pepik\Documents\Default.rdp
[2010.04.09 18:41:17 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.09 17:11:39 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Users\Pepik\Desktop\OTL.exe
[2010.04.09 16:57:36 | 000,001,921 | ---- | M] () -- C:\Users\Pepik\Desktop\HijackThis.lnk
[2010.04.09 16:53:22 | 000,001,262 | ---- | M] () -- C:\Users\Pepik\Desktop\Spybot - Search & Destroy.lnk
[2010.04.05 16:47:23 | 000,001,358 | ---- | M] () -- C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk
[2010.04.01 18:44:37 | 000,002,198 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010.03.30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.03.30 00:45:56 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.03.17 18:25:14 | 000,001,702 | ---- | M] () -- C:\Users\Pepik\Desktop\Recuva.lnk
[2010.03.16 22:34:36 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm
[2010.03.16 22:34:36 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm
[2010.03.16 17:33:48 | 004,958,588 | ---- | M] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.CDF
[2010.03.16 17:33:48 | 004,958,588 | ---- | M] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.BAK
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.09 21:34:36 | 000,000,000 | -H-- | C] () -- C:\Users\Pepik\Documents\Default.rdp
[2010.04.09 18:41:17 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.09 16:57:36 | 000,001,921 | ---- | C] () -- C:\Users\Pepik\Desktop\HijackThis.lnk
[2010.04.09 16:53:22 | 000,001,262 | ---- | C] () -- C:\Users\Pepik\Desktop\Spybot - Search & Destroy.lnk
[2010.04.05 16:47:23 | 000,001,358 | ---- | C] () -- C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk
[2010.03.30 22:41:25 | 000,002,198 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010.03.30 22:39:50 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.30 22:39:49 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.03.16 22:34:36 | 000,001,080 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm
[2010.03.16 22:34:36 | 000,001,080 | ---- | C] () -- C:\Windows\SysNative\settings.sfm
[2010.03.16 17:32:40 | 000,036,208 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,036,208 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,031,224 | ---- | C] () -- C:\Windows\SysNative\BMXCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,031,224 | ---- | C] () -- C:\Windows\SysNative\BMXBkpCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,011,564 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:30 | 004,958,588 | ---- | C] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.BAK
[2010.03.16 17:24:06 | 004,958,588 | ---- | C] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.CDF
[2010.03.16 17:22:25 | 001,048,576 | ---- | C] () -- C:\Windows\SysWow64\CT1MGM.ROM
[2010.03.16 17:22:25 | 001,048,576 | ---- | C] () -- C:\Windows\SysNative\CT1MGM.ROM
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default8.sfm
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default4.sfm
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default.sfm
[2010.03.16 17:22:25 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2010.03.16 17:22:25 | 000,000,054 | ---- | C] () -- C:\Windows\SysNative\ctzapxx.ini
[2010.03.16 17:22:24 | 000,313,207 | ---- | C] () -- C:\Windows\SysWow64\ctstatic.dat
[2010.03.16 17:22:24 | 000,055,904 | ---- | C] () -- C:\Windows\SysNative\ctdnlstr.dat
[2010.03.16 17:22:24 | 000,053,932 | ---- | C] () -- C:\Windows\SysWow64\ctdaught.dat
[2010.03.16 17:22:24 | 000,007,406 | ---- | C] () -- C:\Windows\SysNative\SBAudigy.ico
[2010.03.16 17:22:24 | 000,001,912 | ---- | C] () -- C:\Windows\SysNative\Audigy.bmp
[2010.03.16 17:22:23 | 000,325,724 | ---- | C] () -- C:\Windows\SysNative\ctdlang.dat
[2010.03.16 17:21:34 | 000,003,584 | ---- | C] () -- C:\Windows\SysNative\CTXFIRES.DLL
[2010.03.16 17:21:34 | 000,003,072 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL
[2010.03.16 17:21:25 | 007,572,224 | ---- | C] () -- C:\Windows\SysNative\CT8MGM.SF2
[2010.03.16 17:21:25 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2
[2010.03.16 17:21:24 | 029,705,938 | ---- | C] () -- C:\Windows\SysNative\28MBGM.sf2
[2010.03.16 17:21:23 | 007,572,224 | ---- | C] () -- C:\Windows\SysWow64\CT8MGM.SF2
[2010.03.16 17:21:22 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2
[2010.03.16 17:21:16 | 029,705,938 | ---- | C] () -- C:\Windows\SysWow64\28MBGM.sf2
[2010.03.16 17:21:14 | 000,137,728 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.dll
[2010.03.16 17:21:14 | 000,107,008 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.dll
[2010.03.16 17:21:14 | 000,083,456 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.dll
[2010.03.16 17:21:14 | 000,069,120 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.dll
[2010.02.05 15:56:45 | 000,046,593 | R--- | C] () -- C:\Windows\SysWow64\e10kxwdm.ini
[2010.01.16 19:16:12 | 000,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.01.16 19:16:12 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.01.16 19:16:07 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.01.16 19:16:07 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.01.16 19:16:03 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.01.16 19:16:03 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010.01.04 13:33:15 | 000,007,601 | ---- | C] () -- C:\Users\Pepik\AppData\Local\Resmon.ResmonCfg
[2010.01.01 22:35:25 | 005,505,024 | -HS- | C] () -- C:\Users\Pepik\NTUSER.DAT
[2010.01.01 22:35:25 | 000,524,288 | -HS- | C] () -- C:\Users\Pepik\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010.01.01 22:35:25 | 000,524,288 | -HS- | C] () -- C:\Users\Pepik\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010.01.01 22:35:25 | 000,262,144 | -HS- | C] () -- C:\Users\Pepik\ntuser.dat.LOG1
[2010.01.01 22:35:25 | 000,065,536 | -HS- | C] () -- C:\Users\Pepik\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010.01.01 22:35:25 | 000,000,020 | -HS- | C] () -- C:\Users\Pepik\ntuser.ini
[2010.01.01 22:35:25 | 000,000,000 | -HS- | C] () -- C:\Users\Pepik\ntuser.dat.LOG2
[2009.11.06 11:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009.08.03 01:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.23 13:29:50 | 000,097,713 | R--- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2007.04.12 09:10:28 | 000,105,728 | ---- | C] () -- C:\Windows\SysWow64\APOMgrH.dll
[2007.03.05 16:10:20 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CTBURST.DLL
[2006.10.02 18:25:18 | 000,000,307 | ---- | C] () -- C:\Windows\SysWow64\KILL.INI
[2005.10.05 00:28:12 | 000,071,680 | ---- | C] () -- C:\Windows\SysWow64\CTMMACTL.DLL
< End of report >

Stáhni si HostsXpert 4.3- Hosts File Manager
Rozbal do následující složky:
C:\HostsXpert 4.3 - Hosts File Manager
Spusť HostsXpert 4.3 - Hosts File Manager z této složky.Klikni na "File Handling". Poté klikni na "Restore MS Hosts File".
Klikni OK na k potvrzení.
Klikni na "Make Read Only?" a poté na X k opuštění programu.
////////////////////////////////////////////////////////////////////

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\Windows\SysNative\settingsbkup.sfm
C:\Windows\SysNative\settings.sfm
Pokud už byl soubor testován-klikni na otestovat znovu.
Až skončí test všech antivirů, vlož sem pak odkazy na stránky s výsledky.

Dobrý den, takže HostsXpert nic neprovedl, resp. vyskocila chybova hlaska ERROR: Cannot create file C:\Windows\system32\DRIVERS\ETC\hosts

Pak následuje log z OTL:

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
127.0.0.1 123fporn.info removed from HOSTS file successfully
127.0.0.1 123haustiereundmehr.com removed from HOSTS file successfully
127.0.0.1 123moviedownload.com removed from HOSTS file successfully
127.0.0.1 123simsen.com removed from HOSTS file successfully
127.0.0.1 123topsearch.com removed from HOSTS file successfully
127.0.0.1 125sms.co.uk removed from HOSTS file successfully
127.0.0.1 125sms.com removed from HOSTS file successfully
127.0.0.1 132.com removed from HOSTS file successfully
127.0.0.1 1337crew.info removed from HOSTS file successfully
127.0.0.1 1337-crew.to removed from HOSTS file successfully
127.0.0.1 136136.net removed from HOSTS file successfully
127.0.0.1 150freesms.de removed from HOSTS file successfully
127.0.0.1 163ns.com removed from HOSTS file successfully
127.0.0.1 171203.com removed from HOSTS file successfully
127.0.0.1 17concepts.info removed from HOSTS file successfully
127.0.0.1 17-plus.com removed from HOSTS file successfully
127.0.0.1 1800searchonline.com removed from HOSTS file successfully
127.0.0.1 180searchassistant.com removed from HOSTS file successfully
127.0.0.1 180solutions.com removed from HOSTS file successfully
127.0.0.1 181.365soft.info removed from HOSTS file successfully
127.0.0.1 1987324.com removed from HOSTS file successfully
127.0.0.1 1-domains-registrations.com removed from HOSTS file successfully
127.0.0.1 1sexparty.com removed from HOSTS file successfully
127.0.0.1 1sms.de removed from HOSTS file successfully
127.0.0.1 1spybot.com removed from HOSTS file successfully
File move failed. C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk scheduled to be moved on reboot.
C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File sethosts] not found.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.1.1 log created on 04112010_141424

Files\Folders moved on Reboot...
File\Folder C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk not found!

Registry entries deleted on Reboot...


Nakonec jsem chtěl otestovat ty dva soubory, ale tuto složku nemám - C:\Windows\SysNative\

Co s tím je vlastně??

Děkuji za Vaší pomoc!

To tam máš:
V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\Windows\SysNative\settingsbkup.sfm
C:\Windows\SysNative\settings.sfm


Podle mě si ten script nezkopíroval celý , je tam vpravo posuvník!
Zkus ještě jednou ( ten samý script).

ADD:: možná infikace hosts..

Díky! Tahle složka mi tam fakticky chybí, v možnostech složky jsem to už měl v pořádku předtím. Ale dal jsem prostě vyhledat soubor a nachazi se to ve složce system32.. No ale teď mám zas problém - když ten soubor chci načíst do virustotal okna, jakoby ve složce system32 nebyl, přitom ve windows okne je vidět? Přetahl jsem oba na plochu a odtud jsem je načetl. Výsledky jsou zde:

http://www.virustotal.com/cs/analisis/2 ... 1270999093
http://www.virustotal.com/cs/analisis/2 ... 1270999392


All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
127.0.0.1 123fporn.info removed from HOSTS file successfully
127.0.0.1 123haustiereundmehr.com removed from HOSTS file successfully
127.0.0.1 123moviedownload.com removed from HOSTS file successfully
127.0.0.1 123simsen.com removed from HOSTS file successfully
127.0.0.1 123topsearch.com removed from HOSTS file successfully
127.0.0.1 125sms.co.uk removed from HOSTS file successfully
127.0.0.1 125sms.com removed from HOSTS file successfully
127.0.0.1 132.com removed from HOSTS file successfully
127.0.0.1 1337crew.info removed from HOSTS file successfully
127.0.0.1 1337-crew.to removed from HOSTS file successfully
127.0.0.1 136136.net removed from HOSTS file successfully
127.0.0.1 150freesms.de removed from HOSTS file successfully
127.0.0.1 163ns.com removed from HOSTS file successfully
127.0.0.1 171203.com removed from HOSTS file successfully
127.0.0.1 17concepts.info removed from HOSTS file successfully
127.0.0.1 17-plus.com removed from HOSTS file successfully
127.0.0.1 1800searchonline.com removed from HOSTS file successfully
127.0.0.1 180searchassistant.com removed from HOSTS file successfully
127.0.0.1 180solutions.com removed from HOSTS file successfully
127.0.0.1 181.365soft.info removed from HOSTS file successfully
127.0.0.1 1987324.com removed from HOSTS file successfully
127.0.0.1 1-domains-registrations.com removed from HOSTS file successfully
127.0.0.1 1sexparty.com removed from HOSTS file successfully
127.0.0.1 1sms.de removed from HOSTS file successfully
127.0.0.1 1spybot.com removed from HOSTS file successfully
File move failed. C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk scheduled to be moved on reboot.
C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
File sethosts] not found.
File rity] not found.
File ptytemp] not found.
File art explorer] not found.
File boot] not found.

OTL by OldTimer - Version 3.2.1.1 log created on 04112010_141424

Files\Folders moved on Reboot...
File\Folder C:\Users\Pepik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk not found!

Registry entries deleted on Reboot...


To je vážně celý log..

OK.

Poklepej znovu na ikonu OTL by OldTimer, pod Custom Scans/Fixes vlož následující text , zeleně zbarvený:



Neměň nastavení, jen klikni na Run Scan, nech sken dokončit. Až se se objeví textový soubor , tak sem vlož prosím jeho celý obsah.

Vylezla nějaká šílenost.. Musel jsem haldu tech klikihaku odmazat, aby se to veslo do 60000 znaku. Co to znamená?


OTL logfile created on: 11.4.2010 20:49:47 - Run 5
OTL by OldTimer - Version 3.2.1.1 Folder = C:\Users\Jarsk\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,08 Gb Total Space | 253,33 Gb Free Space | 84,99% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive W: | 698,63 Gb Total Space | 167,61 Gb Free Space | 23,99% Space Free | Partition Type: NTFS

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Jarsk\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (ESET)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe ()
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Windows\SysWOW64\CTHELPER.EXE (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Creative\SBAudigy4\Volume Panel\VolPanlu.exe (Creative Technology Ltd)


========== Modules (SafeList) ==========

MOD - C:\Users\Jarsk\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (EhttpSrv) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe (ESET)
SRV:64bit: - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (ESET)
SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (WwanSvc) -- C:\Windows\SysNative\wwansvc.dll (Microsoft Corporation)
SRV:64bit: - (WbioSrvc) -- C:\Windows\SysNative\wbiosrvc.dll (Microsoft Corporation)
SRV:64bit: - (Power) -- C:\Windows\SysNative\umpo.dll (Microsoft Corporation)
SRV:64bit: - (Themes) -- C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
SRV:64bit: - (sppuinotify) -- C:\Windows\SysNative\sppuinotify.dll (Microsoft Corporation)
SRV:64bit: - (SensrSvc) -- C:\Windows\SysNative\sensrsvc.dll (Microsoft Corporation)
SRV:64bit: - (PNRPsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:64bit: - (p2pimsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:64bit: - (HomeGroupProvider) -- C:\Windows\SysNative\provsvc.dll (Microsoft Corporation)
SRV:64bit: - (RpcEptMapper) -- C:\Windows\SysNative\RpcEpMap.dll (Microsoft Corporation)
SRV:64bit: - (PNRPAutoReg) -- C:\Windows\SysNative\pnrpauto.dll (Microsoft Corporation)
SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (HomeGroupListener) -- C:\Windows\SysNative\ListSvc.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) -- C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (Dhcp) -- C:\Windows\SysNative\dhcpcore.dll (Microsoft Corporation)
SRV:64bit: - (defragsvc) -- C:\Windows\SysNative\defragsvc.dll (Microsoft Corporation)
SRV:64bit: - (bthserv) -- C:\Windows\SysNative\bthserv.dll (Microsoft Corporation)
SRV:64bit: - (BDESVC) -- C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
SRV:64bit: - (AxInstSV) -- C:\Windows\SysNative\AxInstSv.dll (Microsoft Corporation)
SRV:64bit: - (AppIDSvc) -- C:\Windows\SysNative\appidsvc.dll (Microsoft Corporation)
SRV:64bit: - (wbengine) -- C:\Windows\SysNative\wbengine.exe (Microsoft Corporation)
SRV:64bit: - (sppsvc) -- C:\Windows\SysNative\sppsvc.exe (Microsoft Corporation)
SRV:64bit: - (Fax) -- C:\Windows\SysNative\FXSSVC.exe (Microsoft Corporation)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (DAUpdaterSvc) -- W:\Games\Dragon Age\bin_ship\daupdatersvc.service.exe (BioWare)
SRV - (VSS) -- C:\Windows\Vss [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (MSDTC) Služba DTC (Distributed Transaction Coordinator) -- C:\Windows\SysWOW64\Msdtc [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (HomeGroupProvider) -- C:\Windows\SysWOW64\provsvc.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\SysWOW64\dhcpcore.dll (Microsoft Corporation)
SRV - (vds) -- C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (clr_optimization_v2.0.50727_64) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (epfwwfp) -- C:\Windows\SysNative\drivers\epfwwfp.sys (ESET)
DRV:64bit: - (epfw) -- C:\Windows\SysNative\drivers\epfw.sys (ESET)
DRV:64bit: - (ehdrv) -- C:\Windows\SysNative\drivers\ehdrv.sys (ESET)
DRV:64bit: - (eamon) -- C:\Windows\SysNative\drivers\eamon.sys (ESET)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (KSecPkg) -- C:\Windows\SysNative\drivers\ksecpkg.sys (Microsoft Corporation)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (hwpolicy) -- C:\Windows\SysNative\drivers\hwpolicy.sys (Microsoft Corporation)
DRV:64bit: - (FsDepends) -- C:\Windows\SysNative\drivers\fsdepends.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (WIMMount) -- C:\Windows\SysNative\drivers\wimmount.sys (Microsoft Corporation)
DRV:64bit: - (vhdmp) -- C:\Windows\SysNative\drivers\vhdmp.sys (Microsoft Corporation)
DRV:64bit: - (vdrvroot) -- C:\Windows\SysNative\drivers\vdrvroot.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (rdyboost) -- C:\Windows\SysNative\drivers\rdyboost.sys (Microsoft Corporation)
DRV:64bit: - (pcw) -- C:\Windows\SysNative\drivers\pcw.sys (Microsoft Corporation)
DRV:64bit: - (CNG) -- C:\Windows\SysNative\drivers\cng.sys (Microsoft Corporation)
DRV:64bit: - (fvevol) -- C:\Windows\SysNative\drivers\fvevol.sys (Microsoft Corporation)
DRV:64bit: - (rdpbus) -- C:\Windows\SysNative\drivers\rdpbus.sys (Microsoft Corporation)
DRV:64bit: - (RDPREFMP) -- C:\Windows\SysNative\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV:64bit: - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\SysNative\drivers\agilevpn.sys (Microsoft Corporation)
DRV:64bit: - (WfpLwf) -- C:\Windows\SysNative\drivers\wfplwf.sys (Microsoft Corporation)
DRV:64bit: - (NdisCap) -- C:\Windows\SysNative\drivers\ndiscap.sys (Microsoft Corporation)
DRV:64bit: - (vwifibus) -- C:\Windows\SysNative\drivers\vwifibus.sys (Microsoft Corporation)
DRV:64bit: - (1394ohci) -- C:\Windows\SysNative\drivers\1394ohci.sys (Microsoft Corporation)
DRV:64bit: - (BthPan) Zařízení Bluetooth (síť PAN) -- C:\Windows\SysNative\drivers\bthpan.sys (Microsoft Corporation)
DRV:64bit: - (BTHPORT) -- C:\Windows\SysNative\drivers\bthport.sys (Microsoft Corporation)
DRV:64bit: - (RFCOMM) Zařízení Bluetooth (RFCOMM protokol TDI) -- C:\Windows\SysNative\drivers\rfcomm.sys (Microsoft Corporation)
DRV:64bit: - (BthEnum) -- C:\Windows\SysNative\drivers\bthenum.sys (Microsoft Corporation)
DRV:64bit: - (BTHUSB) -- C:\Windows\SysNative\drivers\BTHUSB.SYS (Microsoft Corporation)
DRV:64bit: - (UmPass) -- C:\Windows\SysNative\drivers\umpass.sys (Microsoft Corporation)
DRV:64bit: - (mshidkmdf) -- C:\Windows\SysNative\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV:64bit: - (WudfPf) -- C:\Windows\SysNative\drivers\WUDFPf.sys (Microsoft Corporation)
DRV:64bit: - (MTConfig) -- C:\Windows\SysNative\drivers\MTConfig.sys (Microsoft Corporation)
DRV:64bit: - (CompositeBus) -- C:\Windows\SysNative\drivers\CompositeBus.sys (Microsoft Corporation)
DRV:64bit: - (Beep) -- C:\Windows\SysNative\drivers\beep.sys (Microsoft Corporation)
DRV:64bit: - (AppID) -- C:\Windows\SysNative\drivers\appid.sys (Microsoft Corporation)
DRV:64bit: - (scfilter) -- C:\Windows\SysNative\drivers\scfilter.sys (Microsoft Corporation)
DRV:64bit: - (discache) -- C:\Windows\SysNative\drivers\discache.sys (Microsoft Corporation)
DRV:64bit: - (HidBatt) -- C:\Windows\SysNative\drivers\hidbatt.sys (Microsoft Corporation)
DRV:64bit: - (CmBatt) -- C:\Windows\SysNative\drivers\CmBatt.sys (Microsoft Corporation)
DRV:64bit: - (AcpiPmi) -- C:\Windows\SysNative\drivers\acpipmi.sys (Microsoft Corporation)
DRV:64bit: - (AmdPPM) -- C:\Windows\SysNative\drivers\amdppm.sys (Microsoft Corporation)
DRV:64bit: - (Epfwndis) -- C:\Windows\SysNative\drivers\epfwndis.sys (ESET)
DRV:64bit: - (LUsbFilt) -- C:\Windows\SysNative\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (RTL8023x64) -- C:\Windows\SysNative\drivers\Rtnic64.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (hap17v2k) -- C:\Windows\SysNative\drivers\HAP17V2K.SYS (Creative Technology Ltd)
DRV:64bit: - (hap16v2k) -- C:\Windows\SysNative\drivers\HAP16V2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ha10kx2k) -- C:\Windows\SysNative\drivers\HA10KX2K.SYS (Creative Technology Ltd)
DRV:64bit: - (emupia) -- C:\Windows\SysNative\drivers\EMUPIA2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctsfm2k) -- C:\Windows\SysNative\drivers\CTSFM2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctprxy2k) -- C:\Windows\SysNative\drivers\CTPRXY2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ossrv) -- C:\Windows\SysNative\drivers\CTOSS2K.SYS (Creative Technology Ltd.)
DRV:64bit: - (ctaud2k) Creative Audio Driver (WDM) -- C:\Windows\SysNative\drivers\CTAUD2K.SYS (Creative Technology Ltd)
DRV:64bit: - (ctac32k) -- C:\Windows\SysNative\drivers\CTAC32K.SYS (Creative Technology Ltd)
DRV:64bit: - (CTHWIUT.DLL) -- C:\Windows\SysNative\CTHWIUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CT20XUT.DLL) -- C:\Windows\SysNative\CT20XUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEXFIFX.DLL) -- C:\Windows\SysNative\CTEXFIFX.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEDSPSY.DLL) -- C:\Windows\SysNative\CTEDSPSY.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPIO.DLL) -- C:\Windows\SysNative\CTEDSPIO.DLL (Creative Technology Ltd)
DRV:64bit: - (CTERFXFX.DLL) -- C:\Windows\SysNative\CTERFXFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTERFXFX) -- C:\Windows\SysNative\CTERFXFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPFX.DLL) -- C:\Windows\SysNative\CTEDSPFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEAPSFX.DLL) -- C:\Windows\SysNative\cteapsfx.dll (Creative Technology Ltd)
DRV:64bit: - (CTSBLFX.DLL) -- C:\Windows\SysNative\CTSBLFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTSBLFX) -- C:\Windows\SysNative\CTSBLFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTAUDFX.DLL) -- C:\Windows\SysNative\CTAUDFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTAUDFX) -- C:\Windows\SysNative\CTAUDFX.DLL (Creative Technology Ltd)
DRV:64bit: - (COMMONFX.DLL) -- C:\Windows\SysNative\COMMONFX.DLL (Creative Technology Ltd)
DRV:64bit: - (COMMONFX) -- C:\Windows\SysNative\COMMONFX.DLL (Creative Technology Ltd)
DRV - (truecrypt) -- C:\Windows\SysWOW64\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (NetBIOS) -- C:\Windows\SysWOW64\netbios.dll (Microsoft Corporation)
DRV - (mpsdrv) -- C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (Tcpip) -- C:\Windows\SysWOW64\wbem\tcpip.mof ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 1A AC 4B 2A 94 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "seznam.cz"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.04.05 20:35:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.04.05 20:35:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.01.03 00:45:33 | 000,000,000 | ---D | M]

[2010.01.02 09:59:51 | 000,000,000 | ---D | M] -- C:\Users\Jarsk\AppData\Roaming\mozilla\Extensions
[2010.01.02 09:59:51 | 000,000,000 | ---D | M] -- C:\Users\Jarsk\AppData\Roaming\mozilla\Firefox\Profiles\7pnfgag4.default\extensions
[2010.04.02 08:15:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.01.16 02:50:40 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.01.16 02:50:40 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.01.16 02:50:40 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.01.16 02:50:40 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.01.16 02:50:40 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2010.04.11 14:56:38 | 000,385,170 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts:〮〮ㄮ眉睷瘮物楧楬潫椮൴ㄊ㜲〮〮ㄮ瘉物楧楬潫椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬⹬瑩਍㈱⸷⸰⸰ऱ楶杲汩汩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬潬椮൴ㄊ㜲〮〮ㄮ瘉物楧楬潬椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬は椮൴ㄊ㜲〮〮ㄮ瘉物楧楬は椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬㥯椮൴ㄊ㜲〮〮ㄮ瘉物楧楬㥯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬楯椮൴ㄊ㜲〮〮ㄮ瘉物楧楬楯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬歯椮൴ㄊ㜲〮〮ㄮ瘉物楧楬歯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬汯椮൴ㄊ㜲〮〮ㄮ瘉物楧楬汯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬灯椮൴ㄊ㜲〮〮ㄮ瘉物楧楬灯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬潰椮൴ㄊ㜲〮〮ㄮ瘉物楧楬潰椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楬潵椮൴ㄊ㜲〮〮ㄮ瘉物楧楬潵椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧橬潩椮൴ㄊ㜲〮〮ㄮ瘉物楧橬潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧歬潩椮൴ㄊ㜲〮〮ㄮ瘉物楧歬潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧潬潩椮൴ㄊ㜲〮〮ㄮ瘉物楧潬潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧潬⹯瑩਍㈱⸷⸰⸰ऱ楶杲汩潯椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧灬潩椮൴ㄊ㜲〮〮ㄮ瘉物楧灬潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧畬潩椮൴ㄊ㜲〮〮ㄮ瘉物楧畬潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧畬⹯瑩਍㈱⸷⸰⸰ऱ楶杲汩潵椮൴ㄊ㜲〮〮ㄮ瘉物楧⵮杴⹰敮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧楯⹯瑩਍㈱⸷⸰⸰ऱ楶杲潩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧汯潩椮൴ㄊ㜲〮〮ㄮ瘉物楧汯潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧汰潩椮൴ㄊ㜲〮〮ㄮ瘉物楧汰潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楧汵潩椮൴ㄊ㜲〮〮ㄮ瘉物楧汵潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物橧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物橧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物歧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物歧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物歧楬⹯瑩਍㈱⸷⸰⸰ऱ楶杲汫潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物汧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物汧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物潧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物潧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物瑧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物瑧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物畧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物畧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物癧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物癧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物祧汩潩椮൴ㄊ㜲〮〮ㄮ瘉物祧汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物杨汩潩椮൴ㄊ㜲〮〮ㄮ瘉物杨汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物牰瑯捥⹴潣൭ㄊ㜲〮〮ㄮ瘉物牰瑯捥⹴潣൭ㄊ㜲〮〮ㄮ眉睷瘮物杴汩潩椮൴ㄊ㜲〮〮ㄮ瘉物杴汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物楴楬⹯瑩਍㈱⸷⸰⸰ऱ楶瑲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮物牴杩敧⹲潣൭ㄊ㜲〮〮ㄮ瘉物牴杩敧⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物畴污潣敤⹣潣൭ㄊ㜲〮〮ㄮ瘉物畴污潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷瘮物畴污慤汩浹条挮浯਍㈱⸷⸰⸰ऱ楶瑲慵摬楡祬慭⹧潣൭ㄊ㜲〮〮ㄮ瘉物畴污琭捩敫⹴敮൴ㄊ㜲〮〮ㄮ眉睷瘮物畴污琭捩敫⹴敮൴ㄊ㜲〮〮ㄮ眉睷瘮物獵愭敬瑲挭湥整⹲潣൭ㄊ㜲〮〮ㄮ瘉物獵愭敬瑲挭湥整⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵戭来湯⹥潣൭ㄊ㜲〮〮ㄮ瘉物獵戭来湯⹥潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵畢獲⹴潣൭ㄊ㜲〮〮ㄮ瘉物獵畢獲⹴潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵牣獵敨⹲潣൭ㄊ㜲〮〮ㄮ瘉物獵牣獵敨⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵楤敦慳挮浯਍㈱⸷⸰⸰ऱ楶畲摳晩獥⹡潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵潦獲慶⹲潣൭ㄊ㜲〮〮ㄮ瘉物獵潦獲慶⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵慧摲⹥潣൭ㄊ㜲〮〮ㄮ瘉物獵慧摲⹥潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵敨瑡挮浯਍㈱⸷⸰⸰ऱ楶畲桳慥⹴潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵畨瑮牥挮浯਍㈱⸷⸰⸰ऱ楶畲桳湵整⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵獩汯瑡牯挮浯਍㈱⸷⸰⸰ऱ楶畲楳潳慬潴⹲潣൭ㄊ㜲〮〮ㄮ瘉物獵椭潳慬潴⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵椭潳慬潴⹲潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵慬獢〲㤰挮浯਍㈱⸷⸰⸰ऱ楶畲汳扡㉳〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷瘮物獵畮敫挮浯਍㈱⸷⸰⸰ऱ楶畲湳歵⹥潣൭ㄊ㜲〮〮ㄮ瘉物獵牰瑯捥灴潲挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲牳湡敧⹲潣൭ㄊ㜲〮〮ㄮ瘉物獵慲杮牥挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲牳浥癯牥〲㠰挮浯਍㈱⸷⸰⸰ऱ楶畲牳浥癯牥〲㠰挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲牳獥畣⹥潣൭ㄊ㜲〮〮ㄮ瘉物獵敲捳敵挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲獳慣獮瑩⹥潣൭ㄊ㜲〮〮ㄮ瘉物獵捳湡楳整挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲獳档慬档⹴潣൭ㄊ㜲〮〮ㄮ瘉物獵捳汨捡瑨挮浯਍㈱⸷⸰⸰ऱ睷⹷楶畲獳敷灥牥猭慣癮物獵渮瑥਍㈱⸷⸰⸰ऱ楶畲獳敷灥牥猭慣癮物獵渮瑥਍㈱⸷⸰⸰ऱ睷⹷楶畲癳歡⹴潣൭ㄊ㜲〮〮ㄮ瘉物獵慶瑫挮浯਍㈱⸷⸰⸰ऱ睷⹷楶癲楧楬⹯瑩਍㈱⸷⸰⸰ऱ楶癲楧楬⹯瑩਍㈱⸷⸰⸰ऱ睷⹷楶癲汩潩椮൴ㄊ㜲〮〮ㄮ瘉物楶楬⹯瑩਍㈱⸷⸰⸰ऱ睷⹷楶祲楧楬⹯瑩਍㈱⸷⸰⸰ऱ楶祲楧楬⹯瑩਍㈱⸷⸰⸰ऱ睷⹷楶楳捴敨灡硲挮浯਍㈱⸷⸰⸰ऱ楶楳捴敨灡硲挮浯਍㈱⸷⸰⸰ऱ睷⹷楶瑳ⵡ敲摡⹹潣൭ㄊ㜲〮〮ㄮ瘉獩慴爭慥祤挮浯਍㈱⸷⸰⸰ऱ楶慴業獮昭牯攭捡⹨潣൭ㄊ㜲〮〮ㄮ眉睷瘮瑩杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉瑩杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮畩杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉畩杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮癩ⵡ潣敤⹣潣൭ㄊ㜲〮〮ㄮ瘉癩ⵡ潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷瘮癩捡摯捥渮瑥਍㈱⸷⸰⸰ऱ楶慶潣敤⹣敮൴ㄊ㜲〮〮ㄮ眉睷瘮祩煥浣挮൮ㄊ㜲〮〮ㄮ瘉祩煥浣挮൮ㄊ㜲〮〮ㄮ眉睷瘮楪敢楢⹸湣਍㈱⸷⸰⸰ऱ橶扩扥硩挮൮ㄊ㜲〮〮ㄮ眉睷瘮楪杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉楪杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮楫杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉楫杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮牫楧楬⹯瑩਍㈱⸷⸰⸰ऱ歶杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮楬杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉楬杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮潭散慣⹸湣਍㈱⸷⸰⸰ऱ浶捯捥硡挮൮ㄊ㜲〮〮ㄮ瘉⵭湯楬敮捳湡渮瑥਍㈱⸷⸰⸰ऱ睷⹷浶漭汮湩獥慣⹮敮൴ㄊ㜲〮〮ㄮ眉睷瘮畭楨敤⹣湣਍㈱⸷⸰⸰ऱ浶桵摩捥挮൮ㄊ㜲〮〮ㄮ眉睷瘮瑮浰浧⹤湣਍㈱⸷⸰⸰ऱ湶灴杭摭挮൮ㄊ㜲〮〮ㄮ眉睷瘮摯獩牥祩挮൮ㄊ㜲〮〮ㄮ瘉摯獩牥祩挮൮ㄊ㜲〮〮ㄮ眉睷瘮杯灨挮浯਍㈱⸷⸰⸰ऱ潶桧⹰潣൭ㄊ㜲〮〮ㄮ瘉楯⹤牴瑵⵨獩漭瑵琭敨敲漮杲਍㈱⸷⸰⸰ऱ睷⹷潶物楧楬⹯瑩਍㈱⸷⸰⸰ऱ潶物楧楬⹯瑩਍㈱⸷⸰⸰ऱ睷⹷潶湯畤渮瑥਍㈱⸷⸰⸰ऱ潶湯畤渮瑥਍㈱⸷⸰⸰ऱ睷⹷潶穯潩渮瑥਍㈱⸷⸰⸰ऱ潶穯潩渮瑥਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥愭捲楨⹶潣൭ㄊ㜲〮〮ㄮ瘉牯慬敧⵮牡档癩挮浯਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥搭瑡湥慢歮渮瑥਍㈱⸷⸰⸰ऱ潶汲条湥搭瑡湥慢歮渮瑥਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥搭睯汮慯敤⹮潣൭ㄊ㜲〮〮ㄮ瘉牯慬敧⵮潤湷潬摡湥挮浯਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥搭睯汮慯獤搮൥ㄊ㜲〮〮ㄮ瘉牯慬敧⵮潤湷潬摡⹳敤਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥氭湡⹤敤਍㈱⸷⸰⸰ऱ潶汲条湥氭湡⹤敤਍㈱⸷⸰⸰ऱ潶汲条湥湯楬敮挮浯਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥湯楬敮挮浯਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥瀭牡摡敩⹳敤਍㈱⸷⸰⸰ऱ潶汲条湥瀭牡摡敩⹳敤਍㈱⸷⸰⸰ऱ睷⹷潶汲条湥眭牯摬搮൥ㄊ㜲〮〮ㄮ瘉牯慬敧⵮潷汲⹤敤਍㈱⸷⸰⸰ऱ睷⹷潶湲浡湥栭略整挮浯਍㈱⸷⸰⸰ऱ潶湲浡湥栭略整挮浯਍㈱⸷⸰⸰ऱ睷⹷潶湲浡湥猭捵敨⹮敤਍㈱⸷⸰⸰ऱ潶湲浡湥猭捵敨⹮敤਍㈱⸷⸰⸰ऱ睷⹷潶牲敩敲椮൴ㄊ㜲〮〮ㄮ瘉牯楲牥⹥瑩਍㈱⸷⸰⸰ऱ睷⹷潶畲祲⹳湣਍㈱⸷⸰⸰ऱ潶畲祲⹳湣਍㈱⸷⸰⸰ऱ潶整潨敷漮杲਍㈱⸷⸰⸰ऱ睷⹷潶桴牥椮普൯ㄊ㜲〮〮ㄮ瘉瑯敨⹲湩潦਍㈱⸷⸰⸰ऱ睷⹷潶牴敥瑮湯戮穩਍㈱⸷⸰⸰ऱ潶牴敥瑮湯戮穩਍㈱⸷⸰⸰ऱ睷⹷潶潶煱⹧湣਍㈱⸷⸰⸰ऱ潶潶煱⹧湣਍㈱⸷⸰⸰ऱ潶慹敧敳慶楳湯琮㔳挮浯਍㈱⸷⸰⸰ऱ灶牡癩污慫挮浯਍㈱⸷⸰⸰ऱ睷⹷灶潣灭敲獳牯挮浯਍㈱⸷⸰⸰ऱ灶潣灭敲獳牯挮浯਍㈱⸷⸰⸰ऱ睷⹷灶灬潲散畤敲挮浯਍㈱⸷⸰⸰ऱ灶灬潲散畤敲挮浯਍㈱⸷⸰⸰ऱ睷⹷牶獡穵橵挮൮ㄊ㜲〮〮ㄮ瘉慲畳畺⹪湣਍㈱⸷⸰⸰ऱ獶ⵥ潭⹥楢ൺㄊ㜲〮〮ㄮ眉睷瘮歳祥潬杧牥渮穡慷瀮൬ㄊ㜲〮〮ㄮ瘉歳祥潬杧牥渮穡慷瀮൬ㄊ㜲〮〮ㄮ眉睷瘮慴畦畫⹮湣਍㈱⸷⸰⸰ऱ瑶晡歵湵挮൮ㄊ㜲〮〮ㄮ眉睷瘮扴潭楶⹥潣൭ㄊ㜲〮〮ㄮ瘉扴潭楶⹥潣൭ㄊ㜲〮〮ㄮ眉睷瘮癴灣甭潥湲挮浯਍㈱⸷⸰⸰ऱ瑶捶⵰敵牯⹮潣൭ㄊ㜲〮〮ㄮ眉睷瘮癴灣礭捭⹴潣൭ㄊ㜲〮〮ㄮ瘉癴灣礭捭⹴潣൭ㄊ㜲〮〮ㄮ眉睷瘮極杲汩潩椮൴ㄊ㜲〮〮ㄮ瘉極杲汩潩椮൴ㄊ㜲〮〮ㄮ眉睷瘮汵牥畴敮楲潬⹳潣൭ㄊ㜲〮〮ㄮ瘉汵牥畴敮楲潬⹳潣൭ㄊ㜲〮〮ㄮ眉睷瘮穵橡桦挮൮ㄊ㜲〮〮ㄮ瘉穵橡桦挮൮ㄊ㜲〮〮ㄮ眉睷瘮癶睶猭祰潢⹴潣⹭湣਍㈱⸷⸰⸰ऱ癶癶⵷灳批瑯挮浯挮൮ㄊ㜲〮〮ㄮ眉睷瘮睶癶猭祰潢⹴潣⹭湣਍㈱⸷⸰⸰ऱ癶癷⵶灳批瑯挮浯挮൮ㄊ㜲〮〮ㄮ眉睷瘮潷敪潭⹨湣਍㈱⸷⸰⸰ऱ睶橯浥桯挮൮ㄊ㜲〮〮ㄮ瘉數潢祮挮浯਍㈱⸷⸰⸰ऱ睷⹷硶瑥睩獡挮൮ㄊ㜲〮〮ㄮ瘉數楴慷⹳湣਍㈱⸷⸰⸰ऱ慷煢挮浯਍㈱⸷⸰⸰ऱ慷畢挮浯਍㈱⸷⸰⸰ऱ睷⹷慷畣敹⹸湣਍㈱⸷⸰⸰ऱ慷畣敹⹸湣਍㈱⸷⸰⸰ऱ睷⹷慷瑩敲捡⹨敮൴ㄊ㜲〮〮ㄮ眉楡牴慥档渮瑥਍㈱⸷⸰⸰ऱ慷敫灵楤正挮浯਍㈱⸷⸰⸰ऱ睷⹷慷楬慴楬⹡瑩਍㈱⸷⸰⸰ऱ慷楬慴楬⹡瑩਍㈱⸷⸰⸰ऱ睷⹷慷普捵楨慮挮浯਍㈱⸷⸰⸰ऱ慷普捵楨慮挮浯਍㈱⸷⸰⸰ऱ睷⹷慷湮眭物瑳搭⵵瑳牥敢⹮潣൭ㄊ㜲〮〮ㄮ眉湡⵮楷獲⵴畤猭整扲湥挮浯਍㈱⸷⸰⸰ऱ睷⹷慷瑮楤楶敤挮浯਍㈱⸷⸰⸰ऱ慷瑮楤楶敤挮浯਍㈱⸷⸰⸰ऱ睷⹷慷慰祮⹦湣਍㈱⸷⸰⸰ऱ慷慰祮⹦湣਍㈱⸷⸰⸰ऱ睷⹷慷敲〲㘰挮浯਍㈱⸷⸰⸰ऱ慷敲〲㘰挮浯਍㈱⸷⸰⸰ऱ睷⹷慷敲⹺潣൭ㄊ㜲〮〮ㄮ眉牡穥挮浯਍㈱⸷⸰⸰ऱ慷敲⵺㉰⵰牦敥搭睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮牡穥瀭瀲昭敲ⵥ潤湷潬摡挮浯਍㈱⸷⸰⸰ऱ睷⹷慷湲湩楧灥条⹥潣൭ㄊ㜲〮〮ㄮ眉牡楮杮敩慰敧挮浯਍㈱⸷⸰⸰ऱ慷湲浯牯⹥牯൧ㄊ㜲〮〮ㄮ眉睷眮牡浵楳杮敬挮浯਍㈱⸷⸰⸰ऱ慷畲獭湩汧⹥潣൭ㄊ㜲〮〮ㄮ眉瑡牥灳牯⵴灳捥慩瑬敩⹳潣൭ㄊ㜲〮〮ㄮ眉瑡档潣⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮瑡档潣⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮瑡档敮瑴瑶摯祡挮浯਍㈱⸷⸰⸰ऱ慷捴湨瑥癴潴慤⹹潣൭ㄊ㜲〮〮ㄮ眉瑡档湯楬敮琮൶ㄊ㜲〮〮ㄮ眉睷眮瑡档湯楬敮琮൶ㄊ㜲〮〮ㄮ眉睷眮癡〲㠰挮浯਍㈱⸷⸰⸰ऱ慷㉶〰⸸潣൭ㄊ㜲〮〮ㄮ眉睷眮穡畺湰瑥挮浯਍㈱⸷⸰⸰ऱ慷空灵敮⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮慢⹹瑩਍㈱⸷⸰⸰ऱ扷祡椮൴ㄊ㜲〮〮ㄮ眉止⹢潣൭ㄊ㜲〮〮ㄮ眉睷眮潤潭慢⹷湣਍㈱⸷⸰⸰ऱ摷浯扯睡挮൮ㄊ㜲〮〮ㄮ眉扥氮湩獫愴汬戮穩਍㈱⸷⸰⸰ऱ敷ㅢ〰⸰潣൭ㄊ㜲〮〮ㄮ眉睷眮扥捡散敬慲楴杮挮浯਍㈱⸷⸰⸰ऱ敷慢捣汥牥瑡湩⹧潣൭ㄊ㜲〮〮ㄮ眉扥敢瑳楬歮挮浯਍㈱⸷⸰⸰ऱ睷⹷敷扢獥汴湩⹫潣൭ㄊ㜲〮〮ㄮ眉睷眮扥畢楹杮渮瑥਍㈱⸷⸰⸰ऱ敷扢祵湩⹧敮൴ㄊ㜲〮〮ㄮ眉扥挭摯捥挮浯਍㈱⸷⸰⸰ऱ睷⹷敷ⵢ潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉扥潣汯敳牡档挮浯਍㈱⸷⸰⸰ऱ敷ⵢ湥牴湡散挮൯ㄊ㜲〮〮ㄮ眉扥昭獡獴牥敶挮浯਍㈱⸷⸰⸰ऱ睷⹷敷ⵢ慦瑳敳癲⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮扥楦獥慴慣楳潮渮瑥਍㈱⸷⸰⸰ऱ敷晢敩瑳捡獡湩⹯敮൴ㄊ㜲〮〮ㄮ眉扥慧敭楶瑲慵⹬潣൭ㄊ㜲〮〮ㄮ眉睷眮扥慧敭楶瑲慵⹬潣൭ㄊ㜲〮〮ㄮ眉睷眮扥汧扯污慧敭挮浯਍㈱⸷⸰⸰ऱ敷杢潬慢杬浡⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮扥慨据牥挮浯਍㈱⸷⸰⸰ऱ敷桢湡散⹲潣൭ㄊ㜲〮〮ㄮ眉扥栭浯灥条⹥敮൴ㄊ㜲〮〮ㄮ眉扥湩敶瑳杩瑡牯挮浯਍㈱⸷⸰⸰ऱ睷⹷敷楢癮獥楴慧潴⹲潣൭ㄊ㜲〮〮ㄮ眉扥灩潨敮捡散獳挮浯਍㈱⸷⸰⸰ऱ睷⹷敷楢桰湯慥捣獥⹳潣൭ㄊ㜲〮〮ㄮ眉扥灩潨敮潤湷潬摡⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮扥灩潨敮潤湷潬摡⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮扥灩摯潤湷潬摡挮浯਍㈱⸷⸰⸰ऱ敷楢潰摤睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉扥潬慹瑬⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮扥潬慹瑬⹹潣൭ㄊ㜲〮〮ㄮ眉扥洭摥慩汰祡牥挮浯਍㈱⸷⸰⸰ऱ睷⹷敷ⵢ敭楤灡慬敹⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮扥敮楴普⹯敮൴ㄊ㜲〮〮ㄮ眉扥敮楴普⹯敮൴ㄊ㜲〮〮ㄮ眉扥渭硥獵渮瑥਍㈱⸷⸰⸰ऱ睷⹷敷灢灳潤湷潬摡挮浯਍㈱⸷⸰⸰ऱ敷灢灳潤湷潬摡挮浯਍㈱⸷⸰⸰ऱ睷⹷敷牢捩灨慬楹杮渮瑥਍㈱⸷⸰⸰ऱ敷牢捩灨慬楹杮渮瑥਍㈱⸷⸰⸰ऱ睷⹷敷牢祯污㜷⸷敮൴ㄊ㜲〮〮ㄮ眉扥潲慹㝬㜷渮瑥਍㈱⸷⸰⸰ऱ睷⹷敷獢慣湮牥潴汯⹳潣൭ㄊ㜲〮〮ㄮ眉扥捳湡敮瑲潯獬挮浯਍㈱⸷⸰⸰ऱ睷⹷敷獢督扥猭慣湮牥牦敥挮浯਍㈱⸷⸰⸰ऱ敷獢督扥猭慣湮牥牦敥挮浯਍㈱⸷⸰⸰ऱ睷⹷敷獢慥捲⹨潣൭ㄊ㜲〮〮ㄮ眉扥敳牡档挮浯਍㈱⸷⸰⸰ऱ敷ⵢ敳牡档琮൫ㄊ㜲〮〮ㄮ眉睷眮扥敳牡档㐲挮浯਍㈱⸷⸰⸰ऱ敷獢慥捲㉨⸴潣൭ㄊ㜲〮〮ㄮ眉扥敳牡档潤⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮扥敳畣敲慢⹲潣൭ㄊ㜲〮〮ㄮ眉扥敳畣敲慢⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮扥汳瑯㉳〰⸹潣൭ㄊ㜲〮〮ㄮ眉扥汳瑯㉳〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷眮扥浳摳敩獮⹴敤਍㈱⸷⸰⸰ऱ敷獢獭楤湥瑳搮൥ㄊ㜲〮〮ㄮ眉睷眮扥潳瑦愭挮浯਍㈱⸷⸰⸰ऱ敷獢景⵴⹡潣൭ㄊ㜲〮〮ㄮ眉睷眮扥潳瑦潣敤摣楲敶⹲潣൭ㄊ㜲〮〮ㄮ眉扥潳瑦潣敤摣楲敶⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮扥潳瑦潣敤摣楲敶㉲挮浯਍㈱⸷⸰⸰ऱ敷獢景捴摯捥牤癩牥⸲潣൭ㄊ㜲〮〮ㄮ眉睷眮扥潳潰⹴潣൭ㄊ㜲〮〮ㄮ眉扥潳潰⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮扥灳獹楨汥⹤潣൭ㄊ㜲〮〮ㄮ眉扥灳獹楨汥⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮扥潴ㅰ〰渮瑥਍㈱⸷⸰⸰ऱ敷瑢灯〱⸰敮൴ㄊ㜲〮〮ㄮ眉睷眮扥潴獰捥牵瑩⹹潣൭ㄊ㜲〮〮ㄮ眉扥潴獰捥牵瑩⹹潣൭ㄊ㜲〮〮ㄮ眉扥畴牮挮浯਍㈱⸷⸰⸰ऱ睷⹷敷瑢湵⹲潣൭ㄊ㜲〮〮ㄮ眉扥楶瑲慵杬浡⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮扥楶瑲慵杬浡⹥潣൭ㄊ㜲〮〮ㄮ眉扥楶瑲慵⵬慧敭挮浯਍㈱⸷⸰⸰ऱ睷⹷敷癢物畴污札浡⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮摥潰湲椮普൯ㄊ㜲〮〮ㄮ眉摥潰湲椮普൯ㄊ㜲〮〮ㄮ眉睷眮摥敳⹸湩潦਍㈱⸷⸰⸰ऱ敷獤硥椮普൯ㄊ㜲〮〮ㄮ眉敥敫摮洭癯敩⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮敥牰橯捥⹴潣൭ㄊ㜲〮〮ㄮ眉敥牰橯捥⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮来潶癮物湥挮浯਍㈱⸷⸰⸰ऱ敷癧湯楶敲⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮步浥橣挮൮ㄊ㜲〮〮ㄮ眉步浥橣挮൮ㄊ㜲〮〮ㄮ眉睷眮湥晴湵挮浯਍㈱⸷⸰⸰ऱ敷瑮畦⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮牥戭浵瑳洭捩⹨敤਍㈱⸷⸰⸰ऱ敷⵲畢獭⵴業档搮൥ㄊ㜲〮〮ㄮ眉睷眮牥汥歩⹥潣൭ㄊ㜲〮〮ㄮ眉牥汥歩⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮牥畴慨畧汩獯⹫潣൭ㄊ㜲〮〮ㄮ眉牥畴慨畧汩獯⹫潣൭ㄊ㜲〮〮ㄮ眉睷眮獥瑴灯慣楳潮挮浯਍㈱⸷⸰⸰ऱ敷瑳潴捰獡湩⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮瑥敨敲挮浯਍㈱⸷⸰⸰ऱ敷桴牥⹥潣൭ㄊ㜲〮〮ㄮ眉瑥潰湲獯慴獲挮浯਍㈱⸷⸰⸰ऱ睷⹷敷獴景睴牡獥挮浯਍㈱⸷⸰⸰ऱ敷獴景睴牡獥挮浯਍㈱⸷⸰⸰ऱ晷硩挮浯਍㈱⸷⸰⸰ऱ晷畬挮浯਍㈱⸷⸰⸰ऱ睷⹷杷㠵⸱潣൭ㄊ㜲〮〮ㄮ眉㕧ㄸ挮浯਍㈱⸷⸰⸰ऱ睷⹷杷潰湲椮普൯ㄊ㜲〮〮ㄮ眉灧牯⹮湩潦਍㈱⸷⸰⸰ऱ睷⹷杷敳⹸湩潦਍㈱⸷⸰⸰ऱ杷敳⹸湩潦਍㈱⸷⸰⸰ऱ睷⹷桷瑡睡湯敤晲汵癬摩潥挮浯਍㈱⸷⸰⸰ऱ桷瑡睡湯敤晲汵癬摩潥挮浯਍㈱⸷⸰⸰ऱ睷⹷桷瑡敭潴潤潮⹷牯൧ㄊ㜲〮〮ㄮ眉慨浴瑥摯湯睯漮杲਍㈱⸷⸰⸰ऱ桷瑡祳畯獲慥捲⹨潣൭ㄊ㜲〮〮ㄮ眉睷眮慨睴牡⹭潣൭ㄊ㜲〮〮ㄮ眉慨睴牡⹭潣൭ㄊ㜲〮〮ㄮ眉慨楺⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮楨整潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉楨整潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉楨整瀭条獥眮൳ㄊ㜲〮〮ㄮ眉睷眮楨整捳瑡挮浯਍㈱⸷⸰⸰ऱ桷瑩獥慣⹴潣൭ㄊ㜲〮〮ㄮ眉楨瑴敩扲癬⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮潨獩牰癩捡灹潲整瑣挮浯਍㈱⸷⸰⸰ऱ桷楯灳楲慶祣牰瑯捥⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮灨牯⹮湩潦਍㈱⸷⸰⸰ऱ桷潰湲椮普൯ㄊ㜲〮〮ㄮ眉睷眮獨硥椮普൯ㄊ㜲〮〮ㄮ眉獨硥椮普൯ㄊ㜲〮〮ㄮ眉睷眮敩愭穮敩敨摮戭獩⵴畤搮൥ㄊ㜲〮〮ㄮ眉敩愭穮敩敨摮戭獩⵴畤搮൥ㄊ㜲〮〮ㄮ眉睷眮敩猭档慬⵵楢⵮捩⹨潣൭ㄊ㜲〮〮ㄮ眉敩猭档慬⵵楢⵮捩⹨潣൭ㄊ㜲〮〮ㄮ眉睷眮敩猭档慬⵵楢瑳搭⹵潣൭ㄊ㜲〮〮ㄮ眉敩猭档慬⵵楢瑳搭⹵潣൭ㄊ㜲〮〮ㄮ眉睷眮敩猭档慬⵵楢瑳搭⹵敤਍㈱⸷⸰⸰ऱ楷ⵥ捳汨畡戭獩⵴畤搮൥ㄊ㜲〮〮ㄮ眉睷眮敩猭档慬⵵楢瑳搭㉵⸴潣൭ㄊ㜲〮〮ㄮ眉敩猭档慬⵵楢瑳搭㉵⸴潣൭ㄊ㜲〮〮ㄮ眉睷眮晩獩捥牵瑩獹慣⹮潣൭ㄊ㜲〮〮ㄮ眉晩獩捥牵瑩獹慣⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮汩獬⵴畤洭楥⵮牦略摮猭楥⹮潣൭ㄊ㜲〮〮ㄮ眉汩獬⵴畤洭楥⵮牦略摮猭楥⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮浩灡瑡挮൮ㄊ㜲〮〮ㄮ眉浩灡瑡挮൮ㄊ㜲〮〮ㄮ眉睷眮湩爮牡挭浯牰獥⹳潣൭ㄊ㜲〮〮ㄮ眉湩爮牡挭浯牰獥⹳潣൭ㄊ㜲〮〮ㄮ眉湩浡㉰〰⸷潣൭ㄊ㜲〮〮ㄮ眉睷眮湩浡㉰〰⸷潣൭ㄊ㜲〮〮ㄮ眉湩浡⵰潤湷潬摡渭睯挮浯਍㈱⸷⸰⸰ऱ睷⹷楷慮灭搭睯汮慯ⵤ潮⹷潣൭ㄊ㜲〮〮ㄮ眉睷眮湩浡⵰煨挮浯਍㈱⸷⸰⸰ऱ楷慮灭栭⹱潣൭ㄊ㜲〮〮ㄮ眉睷眮湩湡楴灳浡挮浯਍㈱⸷⸰⸰ऱ楷慮瑮獩慰⹭潣൭ㄊ㜲〮〮ㄮ眉湩湡楴灳⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩湡楴灳⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩湡楴灳睹牡⹥潣൭ㄊ㜲〮〮ㄮ眉湩湡楴灳睹牡⹥潣൭ㄊ㜲〮〮ㄮ眉湩湡楴楶畲⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮湩湡楴楶畲⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮湩湡楴楶畲灳潲挮浯਍㈱⸷⸰⸰ऱ楷慮瑮癩物獵牰⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮湩愭瑮⵩楶畲⵳牰⹯潣൭ㄊ㜲〮〮ㄮ眉湩愭瑮⵩楶畲⵳牰⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮湩敤敦摮牥挮浯਍㈱⸷⸰⸰ऱ楷摮晥湥敤⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮湩搭晥湥敤⹲潣൭ㄊ㜲〮〮ㄮ眉湩搭晥湥敤⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮湩敤敦摮牥〲㤰挮൮ㄊ㜲〮〮ㄮ眉湩敤敦摮牥〲㤰挮൮ㄊ㜲〮〮ㄮ眉湩敤敦摮牥㈭〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩敤敦摮牥㈭〰⸹潣൭ㄊ㜲〮〮ㄮ眉湩潤敷桮湡散⹲潣൭ㄊ㜲〮〮ㄮ眉湩潤獷湥整灲楲敳敤敦摮牥挮浯਍㈱⸷⸰⸰ऱ睷⹷楷摮睯敳瑮牥牰獩摥晥湥敤⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮湩潤獷湥整灲楲敳畳瑩⹥潣൭ㄊ㜲〮〮ㄮ眉湩潤獷湥整灲楲敳畳瑩⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮湩潤獷猭慣湮牥挮浯਍㈱⸷⸰⸰ऱ楷摮睯⵳捳湡敮⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮湩潤獷猭慣湮牥〲㤰挮浯਍㈱⸷⸰⸰ऱ楷摮睯⵳捳湡敮㉲〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩潤獷灵⹳湣਍㈱⸷⸰⸰ऱ楷摮睯畳獰挮൮ㄊ㜲〮〮ㄮ眉睷眮湩牤癩捥敬湡牥挮浯਍㈱⸷⸰⸰ऱ楷摮楲敶汣慥敮⹲潣൭ㄊ㜲〮〮ㄮ眉湩牤癩獥晡⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮湩牤癩獥晡⹥潣൭ㄊ㜲〮〮ㄮ眉湩畤摰瑡獥挮浯਍㈱⸷⸰⸰ऱ楷普物睥污⹬潣൭ㄊ㜲〮〮ㄮ眉睷眮湩楦敲慷汬挮浯਍㈱⸷⸰⸰ऱ睷⹷楷普硩牥挮浯਍㈱⸷⸰⸰ऱ楷普硩牥挮浯਍㈱⸷⸰⸰ऱ楷普硩牥〲㘰挮浯਍㈱⸷⸰⸰ऱ睷⹷楷普硩牥〲㘰挮浯਍㈱⸷⸰⸰ऱ睷⹷楷楮楦桧整⹲潣൭ㄊ㜲〮〮ㄮ眉湩晩杩瑨牥挮浯਍㈱⸷⸰⸰ऱ楷⵮湩挭獡湩⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮湩楬敶档瑡挮浯਍㈱⸷⸰⸰ऱ楷汮癩捥慨⹴潣൭ㄊ㜲〮〮ㄮ眉湩氭慯獤渮瑥਍㈱⸷⸰⸰ऱ睷⹷楷⵮潬摡⹳敮൴ㄊ㜲〮〮ㄮ眉睷眮湩敭楤捡摯捥挮浯਍㈱⸷⸰⸰ऱ楷浮摥慩潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉湩獭⹮潣൭ㄊ㜲〮〮ㄮ眉湩硭挮楬正渭睥搭睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭挮楬正渭睥搭睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉湩硭搭眰汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭搭眰汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭牦湡散挮浯਍㈱⸷⸰⸰ऱ楷浮晸慲据⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭昭敲扥敩挮浯਍㈱⸷⸰⸰ऱ楷浮⵸牦敥楢⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭洭獵捩搭睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉湩硭洭獵捩搭睯汮慯⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮湩硭甭慳挮浯਍㈱⸷⸰⸰ऱ楷浮⵸獵⹡潣൭ㄊ㜲〮〮ㄮ眉湩慮湮⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩慮湮⹹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩瀭ⵣ敤敦摮牥挮浯਍㈱⸷⸰⸰ऱ楷⵮捰搭晥湥敤⹲潣൭ㄊ㜲〮〮ㄮ眉湩牰瑯捥⹴敮൴ㄊ㜲〮〮ㄮ眉睷眮湩慲⹲潳瑦慷敲⵺敤潰⹴潣൭ㄊ㜲〮〮ㄮ眉湩慲⹲潳瑦慷敲⵺敤潰⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮湩慲⵲潤湷潬摡渭睯挮浯਍㈱⸷⸰⸰ऱ楷牮牡搭睯汮慯ⵤ潮⹷潣൭ㄊ㜲〮〮ㄮ眉睷眮湩慲⵲煨挮浯਍㈱⸷⸰⸰ऱ楷牮牡栭⹱潣൭ㄊ㜲〮〮ㄮ眉睷眮湩慲⵲瑳灯挮浯਍㈱⸷⸰⸰ऱ楷牮牡猭潴⹰潣൭ㄊ㜲〮〮ㄮ眉睷眮湩慲⵲楺⹰潣൭ㄊ㜲〮〮ㄮ眉湩慲⵲楺⹰潣൭ㄊ㜲〮〮ㄮ眉湩敲湡浩瑡牯挮浯਍㈱⸷⸰⸰ऱ睷⹷楷牮慥楮慭潴⹲潣൭ㄊ㜲〮〮ㄮ眉湩敳畣敲癡挮浯਍㈱⸷⸰⸰ऱ睷⹷楷獮捥牵慥⹶潣൭ㄊ㜲〮〮ㄮ眉睷眮湩敳畣敲牰㉯〰⸹潣൭ㄊ㜲〮〮ㄮ眉湩敳畣敲牰㉯〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷眮湩猭捥牵瑩⵹捳湡敮⹲牯൧ㄊ㜲〮〮ㄮ眉湩猭捥牵瑩⵹捳湡敮⹲牯൧ㄊ㜲〮〮ㄮ眉湩桳睯戮穩਍㈱⸷⸰⸰ऱ睷⹷楷獮景⵴灵摤瑡浥⹥潣൭ㄊ㜲〮〮ㄮ眉湩潳瑦甭摰慤整敭挮浯਍㈱⸷⸰⸰ऱ睷⹷楷獮景睴牡⹥潣൭ㄊ㜲〮〮ㄮ眉湩潳瑦慷敲挮浯਍㈱⸷⸰⸰ऱ睷⹷楷獮祰潣瑮潲⹬潣൭ㄊ㜲〮〮ㄮ眉湩灳捹湯牴汯挮浯਍㈱⸷⸰⸰ऱ睷⹷楷獮祰楫汬牥挮浯਍㈱⸷⸰⸰ऱ楷獮祰楫汬牥挮浯਍㈱⸷⸰⸰ऱ睷⹷楷獮祰慷敲牰瑯捥獴挮浯਍㈱⸷⸰⸰ऱ楷獮祰慷敲牰瑯捥獴挮浯਍㈱⸷⸰⸰ऱ睷⹷楷瑮杶極敤挮浯਍㈱⸷⸰⸰ऱ楷瑮杶極敤挮浯਍㈱⸷⸰⸰ऱ睷⹷楷⵮楶畲⵳牰⹯潣൭ㄊ㜲〮〮ㄮ眉湩瘭物獵瀭潲挮浯਍㈱⸷⸰⸰ऱ睷⹷楷确獰数摥灵挮浯਍㈱⸷⸰⸰ऱ楷确獰数摥灵挮浯਍㈱⸷⸰⸰ऱ楷穮灩搮睯汮慯ⵤ桴獩甮൳ㄊ㜲〮〮ㄮ眉睷眮湩楺⹰潤湷潬摡琭楨⹳獵਍㈱⸷⸰⸰ऱ睷⹷楷穮灩ㄭ⸱潣൭ㄊ㜲〮〮ㄮ眉湩楺⵰ㄱ挮浯਍㈱⸷⸰⸰ऱ睷⹷楷穮灩栭⹱潣൭ㄊ㜲〮〮ㄮ眉湩楺⵰煨挮浯਍㈱⸷⸰⸰ऱ睷⹷楷穮硩挮浯਍㈱⸷⸰⸰ऱ楷穮硩挮浯਍㈱⸷⸰⸰ऱ睷⹷楷数浦⹹湣਍㈱⸷⸰⸰ऱ楷数浦⹹湣਍㈱⸷⸰⸰ऱ睷⹷楷敲〲㤰挮浯਍㈱⸷⸰⸰ऱ楷敲〲㤰挮浯਍㈱⸷⸰⸰ऱ楷敲敳牡档挮浯਍㈱⸷⸰⸰ऱ楷桳⸷潣൭ㄊ㜲〮〮ㄮ眉睷眮瑩汨歡⹥潣൭ㄊ㜲〮〮ㄮ眉瑩汨歡⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮瑩敺〲㠰搮൥ㄊ㜲〮〮ㄮ眉瑩敺〲㠰搮൥ㄊ㜲〮〮ㄮ眉瑩敺栭略整挮浯਍㈱⸷⸰⸰ऱ睷⹷楷穴ⵥ敨瑵⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮楫楰畺⹴湣਍㈱⸷⸰⸰ऱ歷灩穩瑵挮൮ㄊ㜲〮〮ㄮ眉睷眮火牯⹮湩潦਍㈱⸷⸰⸰ऱ歷潰湲椮普൯ㄊ㜲〮〮ㄮ眉睷眮畬畫慦⹮湣਍㈱⸷⸰⸰ऱ汷歵晵湡挮൮ㄊ㜲〮〮ㄮ眉睷眮⹭畢慨瑲獥椮普൯ㄊ㜲〮〮ㄮ眉⹭畢慨瑲獥椮普൯ㄊ㜲〮〮ㄮ眉睷眮⹭慫湮汹穩捡祩⹡湩潦਍㈱⸷⸰⸰ऱ海欮湡祮楬慺楣慹椮普൯ㄊ㜲〮〮ㄮ眉睷眮⹭潫晭牯捯歨⹡湩潦਍㈱⸷⸰⸰ऱ海欮浯潦潲档慫椮普൯ㄊ㜲〮〮ㄮ眉睷眮⹭潶桴牥椮普൯ㄊ㜲〮〮ㄮ眉⹭潶桴牥椮普൯ㄊ㜲〮〮ㄮ眉睷眮慭獡楳瑳湡⹴潣൭ㄊ㜲〮〮ㄮ眉慭獡楳瑳湡⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮慭畣畱⹣湣਍㈱⸷⸰⸰ऱ海捡煵捵挮൮ㄊ㜲〮〮ㄮ眉睷眮慭楤敲瑣潩⹮潣൭ㄊ㜲〮〮ㄮ眉慭楤敲瑣潩⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮業慧敮⹹湣਍㈱⸷⸰⸰ऱ海杩湡祥挮൮ㄊ㜲〮〮ㄮ眉睷眮灭瑬潯獬挮浯਍㈱⸷⸰⸰ऱ海汰潴汯⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮癭灡汰慩据⹥潣൭ㄊ㜲〮〮ㄮ眉癭灡汰慩据⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮癭獡楳瑳湡⹴潣൭ㄊ㜲〮〮ㄮ眉癭獡楳瑳湡⹴潣൭ㄊ㜲〮〮ㄮ眉睷眮癭潣灭敲獳牯挮浯਍㈱⸷⸰⸰ऱ海捶浯牰獥潳⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮癭潳畬楴湯挮浯਍㈱⸷⸰⸰ऱ海獶汯瑵潩⹮潣൭ㄊ㜲〮〮ㄮ眉睷眮癭潴汯挮浯਍㈱⸷⸰⸰ऱ海瑶潯⹬潣൭ㄊ㜲〮〮ㄮ眉睷眮瑮癩物搮൥ㄊ㜲〮〮ㄮ眉瑮癩物搮൥ㄊ㜲〮〮ㄮ眉睷眮慯ㅩ㜱挮൮ㄊ㜲〮〮ㄮ眉慯ㅩ㜱挮൮ㄊ㜲〮〮ㄮ眉睷眮摯晡浱挮൮ㄊ㜲〮〮ㄮ眉摯晡浱挮൮ㄊ㜲〮〮ㄮ眉睷眮桯畮杮栭略整挮浯਍㈱⸷⸰⸰ऱ潷湨湵ⵧ敨瑵⹥潣൭ㄊ㜲〮〮ㄮ眉睷眮桯祯扳挮൮ㄊ㜲〮〮ㄮ眉桯祯扳挮൮ㄊ㜲〮〮ㄮ眉汯灦捡慲楣杮挮浯਍㈱⸷⸰⸰ऱ睷⹷潷摮牥挭湯整瑸挮浯਍㈱⸷⸰⸰ऱ潷摮牥挭湯整瑸挮浯਍㈱⸷⸰⸰ऱ潷捯獡湩⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮潯慣楳潮挮浯਍㈱⸷⸰⸰ऱ潷潯⹬〱㠰㠸㤲挰⹳潣൭ㄊ㜲〮〮ㄮ眉牯汤獩⹴灪⹳畲਍㈱⸷⸰⸰ऱ睷⹷潷汲慤瑮獩祰挮浯਍㈱⸷⸰⸰ऱ潷汲慤瑮獩祰挮浯਍㈱⸷⸰⸰ऱ睷⹷潷汲扤獥慴畤瑬挮浯਍㈱⸷⸰⸰ऱ潷汲扤獥慴畤瑬挮浯਍㈱⸷⸰⸰ऱ睷⹷潷汲灤慬癹来獡渮瑥਍㈱⸷⸰⸰ऱ潷汲灤慬癹来獡渮瑥਍㈱⸷⸰⸰ऱ睷⹷潷汲牤祡挮浯਍㈱⸷⸰⸰ऱ潷汲牤祡挮浯਍㈱⸷⸰⸰ऱ睷⹷潷汲獤捥牵瑩潹汮湩⹥楢ൺㄊ㜲〮〮ㄮ眉牯摬敳畣楲祴湯楬敮戮穩਍㈱⸷⸰⸰ऱ潷汲ⵤ敳⹸牵汬杯⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮牯摬潴瑳牡⹴潣൭ㄊ㜲〮〮ㄮ眉牯摬潴瑳牡⹴潣൭ㄊ㜲〮〮ㄮ眉牯摬獵⹡潣൭ㄊ㜲〮〮ㄮ眉睷眮牯摬敶慧灳慬⹹敮൴ㄊ㜲〮〮ㄮ眉牯摬敶慧灳慬⹹敮൴ㄊ㜲〮〮ㄮ眉睷眮牯摬楷敤摡敶瑲獩湩獧牥楶散⹳湩潦਍㈱⸷⸰⸰ऱ潷汲睤摩慥癤牥楴楳杮敳癲捩獥椮普൯ㄊ㜲〮〮ㄮ眉睷眮牯摬潷摮牥畦捬獡湩⹯潣൭ㄊ㜲〮〮ㄮ眉牯摬潷摮牥畦捬獡湩⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮瑯潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉瑯潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷眮癯楶睥挮浯਍㈱⸷⸰⸰ऱ潷癶敩⹷潣൭ㄊ㜲〮〮ㄮ眉睷眮睯敳牡档漮杲਍㈱⸷⸰⸰ऱ潷獷慥捲⹨牯൧ㄊ㜲〮〮ㄮ眉睷眮穯硡穦挮൮ㄊ㜲〮〮ㄮ眉穯硡穦挮൮ㄊ㜲〮〮ㄮ眉捰〲㄰漮杲਍㈱⸷⸰⸰ऱ睷⹷煷歯橵杯挮൮ㄊ㜲〮〮ㄮ眉潱畫潪⹧湣਍㈱⸷⸰⸰ऱ牷洮扣潯挮浯਍㈱⸷⸰⸰ऱ睷⹷牷瑩睥湡⹴畲਍㈱⸷⸰⸰ऱ牷瑩睥湡⹴畲਍㈱⸷⸰⸰ऱ牷⹳捭潢⹯潣൭ㄊ㜲〮〮ㄮ眉獲慮⹶睷慬⹸潣൭ㄊ㜲〮〮ㄮ眉睷眮楳楰敬⹧湣਍㈱⸷⸰⸰ऱ獷灩汩来挮൮ㄊ㜲〮〮ㄮ眉睷眮楳潶畴⹰湣਍㈱⸷⸰⸰ऱ獷癩瑯灵挮൮ㄊ㜲〮〮ㄮ眉睷眮潳敤畫⹺湣਍㈱⸷⸰⸰ऱ獷摯步穵挮൮ㄊ㜲〮〮ㄮ眉睷眮灳〲㠰捳湡敮⹲潣൭ㄊ㜲〮〮ㄮ眉灳〲㠰捳湡敮⹲潣൭ㄊ㜲〮〮ㄮ眉睷眮灳牯⹮湩潦਍㈱⸷⸰⸰ऱ獷潰湲椮普൯ㄊ㜲〮〮ㄮ眉灳潺敮献硥潰湲湯楬敮挮浯਍㈱⸷⸰⸰ऱ睷⹷獷灵牥癥⹡瑩਍㈱⸷⸰⸰ऱ獷灵牥癥⹡瑩਍㈱⸷⸰⸰ऱ睷⹷畷楤楬汵慩杮挮浯਍㈱⸷⸰⸰ऱ畷楤楬汵慩杮挮浯਍㈱⸷⸰⸰ऱ睷⹷畷敪汶⹳湣਍㈱⸷⸰⸰ऱ畷敪汶⹳湣਍㈱⸷⸰⸰ऱ睷⹷畷楲敢楣⹺湣਍㈱⸷⸰⸰ऱ畷楲敢楣⹺湣਍㈱⸷⸰⸰ऱ睷⹷畷獲浴敵穴⹥敤਍㈱⸷⸰⸰ऱ畷獲浴敵穴⹥敤਍㈱⸷⸰⸰ऱ睷⹷癷物⹡敤਍㈱⸷⸰⸰ऱ癷物⹡敤਍㈱⸷⸰⸰ऱ睷⹷癷癶⵷畱捩瑫浩⹥潣⹭湣਍㈱⸷⸰⸰ऱ癷癶⵷畱捩瑫浩⹥潣⹭湣਍㈱⸷⸰⸰ऱ睷慬⹸潣൭ㄊ㜲〮〮ㄮ眉睷眮汷硡挮浯਍㈱⸷⸰⸰ऱ睷⹷睷⹷捰湡楴灳睹牡⹥潣൭ㄊ㜲〮〮ㄮ眉睷⸱敢畲橩湩敤畧桮摡獥湵挮浯਍㈱⸷⸰⸰ऱ睷⹷睷㉷瀮爰㉴挮浯਍㈱⸷⸰⸰ऱ睷㉷瀮爰㉴挮浯਍㈱⸷⸰⸰ऱ睷㉷㐲瀮祡潰異⹰潣൭ㄊ㜲〮〮ㄮ眉睷⸳楢瑧慲晦捩敮睴牯⹫潣൭ㄊ㜲〮〮ㄮ眉睷⸳慨敤畳桮牡極敫慹挮浯਍㈱⸷⸰⸰ऱ睷㑷牦敥椮普൯ㄊ㜲〮〮ㄮ眉睷⸵潷汲牤祡挮浯਍㈱⸷⸰⸰ऱ睷㙷眮牯摬慲⹹潣൭ㄊ㜲〮〮ㄮ眉睷⸷潬楧⹨潣൭ㄊ㜲〮〮ㄮ眉睷眮睷⸷潬楧⹨潣൭ㄊ㜲〮〮ㄮ眉睷摡扯ⵥ潤湷潬摡渭睯挮浯਍㈱⸷⸰⸰ऱ睷⵷畡慤楣祴挮浯਍㈱⸷⸰⸰ऱ睷⹷睷⵷畡慤楣祴挮浯਍㈱⸷⸰⸰ऱ睷扷瑥渮瑥਍㈱⸷⸰⸰ऱ睷扷瑥楴杮渮瑥਍㈱⸷⸰⸰ऱ睷捷慲祺楧汲⵳潷汲⹤潣൭ㄊ㜲〮〮ㄮ眉睷眮睷搭睯汮慯ⵤ湡楴楶畲⹳潣൭ㄊ㜲〮〮ㄮ眉睷搭睯汮慯ⵤ湡楴楶畲⹳潣൭ㄊ㜲〮〮ㄮ眉睷眮睷搭睯汮慯ⵤ潮⹷潣൭ㄊ㜲〮〮ㄮ眉睷搭睯汮慯ⵤ潮⹷潣൭ㄊ㜲〮〮ㄮ眉睷潤湷潬摡楷慺摲挮浯਍㈱⸷⸰⸰ऱ睷⵷牦敥琭湵獥挮浯਍㈱⸷⸰⸰ऱ睷⹷睷⵷牦敥琭湵獥挮浯਍㈱⸷⸰⸰ऱ睷⹷睷晷潲瑳楷敲挮浯਍㈱⸷⸰⸰ऱ睷晷潲瑳楷敲挮浯਍㈱⸷⸰⸰ऱ睷灷歯牥慧敭⹳潣൭ㄊ㜲〮〮ㄮ眉睷潰敫灲慬敹獲挮浯਍㈱⸷⸰⸰ऱ睷牷畯敬瑴⹥敮൴ㄊ㜲〮〮ㄮ眉睷眮睷敳牡档戮穩਍㈱⸷⸰⸰ऱ睷獷慥捲⹨楢ൺㄊ㜲〮〮ㄮ眉睷眮睷猭祰潢瑯挮浯਍㈱⸷⸰⸰ऱ睷⵷灳批潯⹴潣൭ㄊ㜲〮〮ㄮ眉睷猭祰潢⹴敤਍㈱⸷⸰⸰ऱ睷⹷睷⵷灳批瑯搮൥ㄊ㜲〮〮ㄮ眉睷猭祰潢⹴敮൴ㄊ㜲〮〮ㄮ眉睷眮睷猭祰潢⹴敮൴ㄊ㜲〮〮ㄮ眉睷猭祰潢捴浯挮浯਍㈱⸷⸰⸰ऱ睷⹷睷⵷灳批瑯潣⹭潣൭ㄊ㜲〮〮ㄮ眉睷猭祰潢⵴湩潦挮浯਍㈱⸷⸰⸰ऱ睷⹷睷⵷灳批瑯椭普⹯潣൭ㄊ㜲〮〮ㄮ眉睷眮睷猭祰慷敲潢⹴牯൧ㄊ㜲〮〮ㄮ眉睷猭祰慷敲潢⹴牯൧ㄊ㜲〮〮ㄮ眉睷⹷㈲ㄱ渮瑥਍㈱⸷⸰⸰ऱ睷睷愮湤瑥瀭畬⹳潣൭ㄊ㜲〮〮ㄮ眉睷眭湩洭⹸潣൭ㄊ㜲〮〮ㄮ眉睷眮睷眭湩洭⹸潣൭ㄊ㜲〮〮ㄮ眉睷瑸敲敭潳瑦慷敲氭摴挮浯਍㈱⸷⸰⸰ऱ睷祷桡潯搮睯汮慯穤潮⹷敮൴ㄊ㜲〮〮ㄮ眉睷眮瑸牥楲⹹湩潦਍㈱⸷⸰⸰ऱ硷整牲祩椮普൯ㄊ㜲〮〮ㄮ眉睷眮摺⹱湣਍㈱⸷⸰⸰ऱ穷煤挮൮ㄊ㜲〮〮ㄮ眉睷眮楺楸潢⹣湣਍㈱⸷⸰⸰ऱ穷硩扩捯挮൮ㄊ㜲〮〮ㄮ砉昮汵⵬杴⹰敮൴ㄊ㜲〮〮ㄮ砉扡瑵桹挮൮ㄊ㜲〮〮ㄮ眉睷砮扡瑵桹挮൮ㄊ㜲〮〮ㄮ砉摡⹳汣歩⹳牯൧ㄊ㜲〮〮ㄮ眉睷砮晡獥捡挮൮ㄊ㜲〮〮ㄮ砉晡獥捡挮൮ㄊ㜲〮〮ㄮ砉瑡穨獥捯⹣潣൭ㄊ㜲〮〮ㄮ眉睷砮瑡穨獥捯⹣潣൭ㄊ㜲〮〮ㄮ眉睷砮癡瑩捫挮൮ㄊ㜲〮〮ㄮ砉癡瑩捫挮൮ㄊ㜲〮〮ㄮ砉睡捡摫挮൮ㄊ㜲〮〮ㄮ眉睷砮睡捡摫挮൮ㄊ㜲〮〮ㄮ砉敢慴㤶挮浯਍㈱⸷⸰⸰ऱ睷⹷扸硸癲祮獥挮浯਍㈱⸷⸰⸰ऱ扸硸癲祮獥挮浯਍㈱⸷⸰⸰ऱ捸浯捩㑳⹵潣൭ㄊ㜲〮〮ㄮ砉潣牲敩敲椮൴ㄊ㜲〮〮ㄮ眉睷砮潣牲敩敲椮൴ㄊ㜲〮〮ㄮ眉睷砮潤業慲⹴湣਍㈱⸷⸰⸰ऱ摸浯物瑡挮൮ㄊ㜲〮〮ㄮ眉睷砮牥捯摯捥挮浯਍㈱⸷⸰⸰ऱ數潲潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷砮牥捯摯捥渮瑥਍㈱⸷⸰⸰ऱ數潲潣敤⹣敮൴ㄊ㜲〮〮ㄮ砉札潯汧⹥敮൴ㄊ㜲〮〮ㄮ砉捨摯捥挮浯਍㈱⸷⸰⸰ऱ睷⹷桸潣敤⹣潣൭ㄊ㜲〮〮ㄮ砉⵨潣敤⹣敮൴ㄊ㜲〮〮ㄮ眉睷砮⵨潣敤⹣敮൴ㄊ㜲〮〮ㄮ眉睷砮扩㍵㔱挮浯਍㈱⸷⸰⸰ऱ楸畢ㄳ⸵潣൭ㄊ㜲〮〮ㄮ砉捩戭⹳潣൭ㄊ㜲〮〮ㄮ眉睷砮敪異楦⹶湣਍㈱⸷⸰⸰ऱ橸灥晵癩挮൮ㄊ㜲〮〮ㄮ眉睷砮楪摳畨睪挮൮ㄊ㜲〮〮ㄮ砉楪摳畨睪挮൮ㄊ㜲〮〮ㄮ眉睷砮番楰整⹲潣൭ㄊ㜲〮〮ㄮ砉番楰整⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮番慺潭⹤湣਍㈱⸷⸰⸰ऱ橸穵浡摯挮൮ㄊ㜲〮〮ㄮ眉睷砮慬敲⹡潣൭ㄊ㜲〮〮ㄮ砉慬敲⹡潣൭ㄊ㜲〮〮ㄮ眉睷砮摬⹤潣൭ㄊ㜲〮〮ㄮ砉摬⹤潣൭ㄊ㜲〮〮ㄮ砉摬⹲潣൭ㄊ㜲〮〮ㄮ砉氭扩慲祲挮浯਍㈱⸷⸰⸰ऱ睷⹷汸捩物穥挮൮ㄊ㜲〮〮ㄮ砉楬楣敲⹺湣਍㈱⸷⸰⸰ऱ汸汯⹡湵敤慲敧潨瑳挮浯਍㈱⸷⸰⸰ऱ浸獬慥捲⹨祭敧步挮浯਍㈱⸷⸰⸰ऱ睷⹷浸睬湩慤慴敷⹢敮൴ㄊ㜲〮〮ㄮ砉汭楷摮瑡睡扥渮瑥਍㈱⸷⸰⸰ऱ湸歡穡煥挮൮ㄊ㜲〮〮ㄮ眉睷砮慮慫敺⹱湣਍㈱⸷⸰⸰ऱ睷⹷湸獯浥浯挮൮ㄊ㜲〮〮ㄮ砉潮敳潭⹭湣਍㈱⸷⸰⸰ऱ湸楴楶⹲敤਍㈱⸷⸰⸰ऱ睷⹷湸楴楶⹲敤਍㈱⸷⸰⸰ऱ潸敮浶⹦湣਍㈱⸷⸰⸰ऱ睷⹷潸敮浶⹦湣਍㈱⸷⸰⸰ऱ睷⹷潸楲杣⹤湣਍㈱⸷⸰⸰ऱ潸楲杣⹤湣਍㈱⸷⸰⸰ऱ潸牲敩敲椮൴ㄊ㜲〮〮ㄮ眉睷砮牯楲牥⹥瑩਍㈱⸷⸰⸰ऱ睷⹷潸敳牡档硯挮浯਍㈱⸷⸰⸰ऱ潸敳牡档硯挮浯਍㈱⸷⸰⸰ऱ灸愮瑴敲空⹩楢ൺㄊ㜲〮〮ㄮ砉ㅰ⸸潣൭ㄊ㜲〮〮ㄮ眉睷砮慰瑮癩物獵牰⹯潣൭ㄊ㜲〮〮ㄮ砉慰瑮癩物獵牰⹯潣൭ㄊ㜲〮〮ㄮ砉慰㉳〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷砮慰㉳〰⸹潣൭ㄊ㜲〮〮ㄮ砉慰⵳〲㤰挮浯਍㈱⸷⸰⸰ऱ睷⹷灸獡㈭〰⸹潣൭ㄊ㜲〮〮ㄮ砉慰獳敧敮慲潴⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮慰獳敧敮慲潴⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮慰獳潷摲慭慮敧⹲潣൭ㄊ㜲〮〮ㄮ砉慰獳潷摲慭慮敧⹲潣൭ㄊ㜲〮〮ㄮ砉潰汮湩獥慣湮牥挮浯਍㈱⸷⸰⸰ऱ睷⹷灸湯楬敮捳湡敮⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮瀭牯杮污敬楲獥挮浯਍㈱⸷⸰⸰ऱ⵸潰湲慧汬牥敩⹳潣൭ㄊ㜲〮〮ㄮ砉瀭牯浮癯敩⹺潣൭ㄊ㜲〮〮ㄮ眉睷砮瀭牯浮癯敩⹺潣൭ㄊ㜲〮〮ㄮ砉瀭牯浮癯⹺潣൭ㄊ㜲〮〮ㄮ眉睷砮瀭牯浮癯⹺潣൭ㄊ㜲〮〮ㄮ砉灰散瑮牥挮浯਍㈱⸷⸰⸰ऱ睷⹷灸捰湥整⹲潣൭ㄊ㜲〮〮ㄮ砉⵰牰瑯捥⵴〲㠰挮浯਍㈱⸷⸰⸰ऱ睷⹷灸瀭潲整瑣㈭〰⸸潣൭ㄊ㜲〮〮ㄮ眉睷砮牰湭甴椮普൯ㄊ㜲〮〮ㄮ砉牰湭甴椮普൯ㄊ㜲〮〮ㄮ眉睷砮瀭湲潭楶穥挮浯਍㈱⸷⸰⸰ऱ⵸牰浮癯敩⹺潣൭ㄊ㜲〮〮ㄮ砉獰捥牵瑩捹湥整⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮獰捥牵瑩捹湥整⹲潣൭ㄊ㜲〮〮ㄮ砉⵰桳敩摬挮浯਍㈱⸷⸰⸰ऱ睷⹷灸猭楨汥⹤潣൭ㄊ㜲〮〮ㄮ砉癰物獵牰瑯捥楴湯〲㤰挮浯਍㈱⸷⸰⸰ऱ睷⹷灸楶畲灳潲整瑣潩㉮〰⸹潣൭ㄊ㜲〮〮ㄮ眉睷砮⵰楶瑳ⵡ灵慤整渮瑥਍㈱⸷⸰⸰ऱ灸瘭獩慴甭摰瑡⹥敮൴ㄊ㜲〮〮ㄮ砉爭瑡摥汣灩⹳潣൭ㄊ㜲〮〮ㄮ眉睷砮爭瑡摥汣灩⹳潣൭ㄊ㜲〮〮ㄮ眉睷砮摲湥整灲楲敳挮浯਍㈱⸷⸰⸰ऱ牸敤瑮牥牰獩⹥潣൭ㄊ㜲〮〮ㄮ砉敲散慫⹰湣਍㈱⸷⸰⸰ऱ睷⹷牸捥步灡挮൮ㄊ㜲〮〮ㄮ眉睷砮敲潮敤⹲潣൭ㄊ㜲〮〮ㄮ砉敲潮敤⹲潣൭ㄊ㜲〮〮ㄮ砉敲潮敳牡档挮浯਍㈱⸷⸰⸰ऱ牸湥浳条潰瑳挮浯਍㈱⸷⸰⸰ऱ獸捥漮杲਍㈱⸷⸰⸰ऱ睷⹷獸捥漮杲਍㈱⸷⸰⸰ऱ獸硥眮൳ㄊ㜲〮〮ㄮ眉睷砮灳牯⹮湩潦਍㈱⸷⸰⸰ऱ獸潰湲椮普൯ㄊ㜲〮〮ㄮ砉牳浥癯牥挮浯਍㈱⸷⸰⸰ऱ睷⹷獸敲潭敶⹲潣൭ㄊ㜲〮〮ㄮ砉畳潹慭⹨湣਍㈱⸷⸰⸰ऱ睷⹷獸祵浯桡挮൮ㄊ㜲〮〮ㄮ砉楴灰搮൥ㄊ㜲〮〮ㄮ眉睷砮楴灰搮൥ㄊ㜲〮〮ㄮ砉潴敳牡档戮穩਍㈱⸷⸰⸰ऱ睷⹷瑸獯慥捲⹨楢ൺㄊ㜲〮〮ㄮ砉牴条祡挮浯਍㈱⸷⸰⸰ऱ瑸慲楶敤獯挮浯਍㈱⸷⸰⸰ऱ睷⹷瑸慲楶敤獯挮浯਍㈱⸷⸰⸰ऱ瑸敲敭潳瑦慷敲氭摴挮浯਍㈱⸷⸰⸰ऱ畸瀮൬ㄊ㜲〮〮ㄮ砉⹵畸瀮൬ㄊ㜲〮〮ㄮ砉汵㌹瀮扵潤慭湩瑳⹲潣൭ㄊ㜲〮〮ㄮ眉睷砮浵睵睥挮൮ㄊ㜲〮〮ㄮ砉浵睵睥挮൮ㄊ㜲〮〮ㄮ砉灵瑩牥挮浯਍㈱⸷⸰⸰ऱ睷⹷畸楰整⹲潣൭ㄊ㜲〮〮ㄮ砉癵睥獶挮൮ㄊ㜲〮〮ㄮ眉睷砮癵睥獶挮൮ㄊ㜲〮〮ㄮ砉慶數楢⹭湣਍㈱⸷⸰⸰ऱ睷⹷癸硡扥浩挮൮ㄊ㜲〮〮ㄮ砉杶瑡⹥潣൭ㄊ㜲〮〮ㄮ眉睷砮杶瑡⹥潣൭ㄊ㜲〮〮ㄮ砉楶獤潣汬捥楴湯挮浯਍㈱⸷⸰⸰ऱ睷⹷癸摩捳汯敬瑣潩⹮潣൭ㄊ㜲〮〮ㄮ砉獶湥整灲楲敳挮浯਍㈱⸷⸰⸰ऱ睷⹷癸敳瑮牥牰獩⹥潣൭ㄊ㜲〮〮ㄮ砉眭扥敤楳湧挮浯਍㈱⸷⸰⸰ऱ睷⹷⵸敷摢獥杩⹮潣൭ㄊ㜲〮〮ㄮ眉睷砮敷獢慥捲⹨楢ൺㄊ㜲〮〮ㄮ砉敷獢慥捲⹨楢ൺㄊ㜲〮〮ㄮ砉⹸慫攳⹫潣൭ㄊ㜲〮〮ㄮ砉⹸煳瑬慥⹭湩潦਍㈱⸷⸰⸰ऱ睷⹷硸扬潬⹧湩潦਍㈱⸷⸰⸰ऱ硸扬潬⹧湩潦਍㈱⸷⸰⸰ऱ睷⹷硸歯牯煩挮൮ㄊ㜲〮〮ㄮ砉潸潫楲⹱湣਍㈱⸷⸰⸰ऱ硸⹸潣൭ㄊ㜲〮〮ㄮ眉睷砮硸挮浯਍㈱⸷⸰⸰ऱ睷⹷硸慸汬楶敤⹯潣൭ㄊ㜲〮〮ㄮ砉硸污癬摩潥挮浯਍㈱⸷⸰⸰ऱ硸捸瑡来牯敩⹳潣൭ㄊ㜲〮〮ㄮ砉硸浥楡硬硸挮浯਍㈱⸷⸰⸰ऱ硸浸癯敩潴牵挮浯਍㈱⸷⸰⸰ऱ睷⹷硸浸癯敩潴牵挮浯਍㈱⸷⸰⸰ऱ硸灸牯浮癯⹳潣൭ㄊ㜲〮〮ㄮ眉睷砮硸潰湲潭獶挮浯਍㈱⸷⸰⸰ऱ硸瑸敥普汩⹭潣൭ㄊ㜲〮〮ㄮ眉睷砮硸整湥楦浬挮浯਍㈱⸷⸰⸰ऱ睷⹷硸⵸整瑳湥搮൥ㄊ㜲〮〮ㄮ砉硸琭獥整⹮敤਍㈱⸷⸰⸰ऱ硸瑸潯扬牡挮浯਍㈱⸷⸰⸰ऱ睷⹷硸穸湯癥摩潥挮浯਍㈱⸷⸰⸰ऱ硸穸湯癥摩潥挮浯਍㈱⸷⸰⸰ऱ祸⹫硴桳⹩潣൭ㄊ㜲〮〮ㄮ眉睷砮穹楬業整⹤潣൭ㄊ㜲〮〮ㄮ砉穹楬業整⹤潣൭ㄊ㜲〮〮ㄮ眉睷砮穹潳畬楴湯挮浯਍㈱⸷⸰⸰ऱ祸獺汯瑵潩⹮潣൭ㄊ㜲〮〮ㄮ眉睷砮穹潴潧挮浯਍㈱⸷⸰⸰ऱ祸瑺杯⹯潣൭ㄊ㜲〮〮ㄮ砉潺浯⹹潣൭ㄊ㜲〮〮ㄮ眉睷砮潺慳潢⹭湣਍㈱⸷⸰⸰ऱ穸獯扡浯挮൮ㄊ㜲〮〮ㄮ眉睷礮桡扡条⹳潣൭ㄊ㜲〮〮ㄮ礉桡扡条⹳潣൭ㄊ㜲〮〮ㄮ礉桡潯搮睯汮慯穤潮⹷敮൴ㄊ㜲〮〮ㄮ礉桡潯瀮湡瑥漮杲਍㈱⸷⸰⸰ऱ睷⹷慹畬硣⹷湣਍㈱⸷⸰⸰ऱ慹畬硣⹷湣਍㈱⸷⸰⸰ऱ睷⹷慹瑳敲楢歮⹯畲਍㈱⸷⸰⸰ऱ慹瑳敲楢歮⹯畲਍㈱⸷⸰⸰ऱ睷⹷批敯慲畧挮浯਍㈱⸷⸰⸰ऱ批敯慲畧挮浯਍㈱⸷⸰⸰ऱ睷⹷摹灡潲敪瑣挮浯਍㈱⸷⸰⸰ऱ摹灡潲敪瑣挮浯਍㈱⸷⸰⸰ऱ睷⹷摹扯扡湯挮൮ㄊ㜲〮〮ㄮ礉潤慢潢⹮湣਍㈱⸷⸰⸰ऱ敹歡渮瑥਍㈱⸷⸰⸰ऱ⵹ⵥ⵬⵬ⵯ⹷潣൭ㄊ㜲〮〮ㄮ礉汥潬㕷〰挮浯਍㈱⸷⸰⸰ऱ敹潺⹬潣൭ㄊ㜲〮〮ㄮ眉睷礮捧畯潥湲挮浯਍㈱⸷⸰⸰ऱ杹潣敵牯⹮潣൭ㄊ㜲〮〮ㄮ眉睷礮捧癯癴灣挮浯਍㈱⸷⸰⸰ऱ杹潣瑶捶⹰潣൭ㄊ㜲〮〮ㄮ眉睷礮潧杯敬椮൴ㄊ㜲〮〮ㄮ礉潧杯敬椮൴ㄊ㜲〮〮ㄮ眉睷礮獧湯桤步⹳湩潦਍㈱⸷⸰⸰ऱ杹潳摮敨獫椮普൯ㄊ㜲〮〮ㄮ眉睷礮畧敶敬⹣湣਍㈱⸷⸰⸰ऱ杹癵汥捥挮൮ㄊ㜲〮〮ㄮ眉睷礮灨牯⹮湩潦਍㈱⸷⸰⸰ऱ桹潰湲椮普൯ㄊ㜲〮〮ㄮ眉睷礮獨硥椮普൯ㄊ㜲〮〮ㄮ礉獨硥椮普൯ㄊ㜲〮〮ㄮ眉睷礮捩祵扮挮൮ㄊ㜲〮〮ㄮ礉捩祵扮挮൮ㄊ㜲〮〮ㄮ眉睷礮晩牯橬挮൮ㄊ㜲〮〮ㄮ礉晩牯橬挮൮ㄊ㜲〮〮ㄮ眉睷礮浩猭潴⹰潣൭ㄊ㜲〮〮ㄮ礉浩猭潴⹰潣൭ㄊ㜲〮〮ㄮ眉睷礮獩慣楬椮൴ㄊ㜲〮〮ㄮ礉獩慣楬椮൴ㄊ㜲〮〮ㄮ礉捭慴煡摡⹡潣൭ㄊ㜲〮〮ㄮ眉睷礮捭慴煡摡⹡潣൭ㄊ㜲〮〮ㄮ礉捭⵴慡慱慤挮浯਍㈱⸷⸰⸰ऱ睷⹷浹瑣愭煡摡⹡潣൭ㄊ㜲〮〮ㄮ眉睷礮捭慴硶穩戮穩਍㈱⸷⸰⸰ऱ浹瑣癡楸⹺楢ൺㄊ㜲〮〮ㄮ眉睷礮潮畴敢挮浯਍㈱⸷⸰⸰ऱ湹瑯扵⹥潣൭ㄊ㜲〮〮ㄮ眉睷礮桯癯晦挮൮ㄊ㜲〮〮ㄮ礉桯癯晦挮൮ㄊ㜲〮〮ㄮ眉睷礮橯湥灰挮൮ㄊ㜲〮〮ㄮ礉橯湥灰挮൮ㄊ㜲〮〮ㄮ眉睷礮潯敧⹥潣൭ㄊ㜲〮〮ㄮ礉潯敧⹥潣൭ㄊ㜲〮〮ㄮ眉睷礮潯汧⹥瑩਍㈱⸷⸰⸰ऱ潹杯敬椮൴ㄊ㜲〮〮ㄮ礉潯畴敢椮普൯ㄊ㜲〮〮ㄮ眉睷礮灯⹳楢ൺㄊ㜲〮〮ㄮ礉灯⹳楢ൺㄊ㜲〮〮ㄮ礉畯楦摮污⹬潣൭ㄊ㜲〮〮ㄮ礉畯楦摮污⹬敮൴ㄊ㜲〮〮ㄮ礉畯潨⹷畲਍㈱⸷⸰⸰ऱ睷⹷潹桵睯爮൵ㄊ㜲〮〮ㄮ眉睷礮畯楬敫敨敲挮浯਍㈱⸷⸰⸰ऱ潹汵歩桥牥⹥潣൭ㄊ㜲〮〮ㄮ礉畯楮潹睵⹯潣൭ㄊ㜲〮〮ㄮ眉睷礮畯楮潹睵⹯潣൭ㄊ㜲〮〮ㄮ礉畯扲潯浫牡獫椮普൯ㄊ㜲〮〮ㄮ礉畯扲潯浫牡獫眮൳ㄊ㜲〮〮ㄮ眉睷礮畯捲摯捥挮浯਍㈱⸷⸰⸰ऱ潹牵潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷礮畯摲楡祬慭⹧潣൭ㄊ㜲〮〮ㄮ礉畯摲楡祬慭⹧潣൭ㄊ㜲〮〮ㄮ眉睷礮畯敲桮湡散敭瑮挮浯਍㈱⸷⸰⸰ऱ潹牵湥慨据浥湥⹴潣൭ㄊ㜲〮〮ㄮ眉睷礮畯捲楨汬癹摩⹳潣൭ㄊ㜲〮〮ㄮ礉畯捲楨汬癹摩⹳潣൭ㄊ㜲〮〮ㄮ眉睷礮畯捲潨獩捥獡湩⹯潣൭ㄊ㜲〮〮ㄮ礉畯捲潨獩捥獡湩⹯潣൭ㄊ㜲〮〮ㄮ礉畯楲灥潲整瑣挮浯਍㈱⸷⸰⸰ऱ睷⹷潹牵敩牰瑯捥⹴潣൭ㄊ㜲〮〮ㄮ眉睷礮畯楲獥晡瑥⹹潣൭ㄊ㜲〮〮ㄮ礉畯楲獥晡瑥⹹潣൭ㄊ㜲〮〮ㄮ礉畯楲獥捥牵⹥潣൭ㄊ㜲〮〮ㄮ眉睷礮畯楲獥捥牵⹥潣൭ㄊ㜲〮〮ㄮ礉畯灲潨潴潺敮挮浯਍㈱⸷⸰⸰ऱ睷⹷潹牵桰瑯穯湯⹥潣൭ㄊ㜲〮〮ㄮ礉畯⵲牰獥牣灩楴湯⹳敮൴ㄊ㜲〮〮ㄮ眉睷礮畯獲慥捲獨慰散挮浯਍㈱⸷⸰⸰ऱ潹牵敳牡档灳捡⹥潣൭ㄊ㜲〮〮ㄮ礉畯獲瑩扥牡挮浯਍㈱⸷⸰⸰ऱ潹牵眭湩潤獷猭慣湮牥挮浯਍㈱⸷⸰⸰ऱ睷⹷潹牵眭湩潤獷猭慣湮牥挮浯਍㈱⸷⸰⸰ऱ潹⵵敳牡档挮浯਍㈱⸷⸰⸰ऱ潹⵵敳牡档挮浯爮൵ㄊ㜲〮〮ㄮ眉睷礮畯慷敲渮瑥਍㈱⸷⸰⸰ऱ潹睵牡⹥敮൴ㄊ㜲〮〮ㄮ礉楰⹲潣൭ㄊ㜲〮〮ㄮ礉慳椭普⹯敮൴ㄊ㜲〮〮ㄮ眉睷礮扳敷⹢潣൭ㄊ㜲〮〮ㄮ礉扳敷⹢潣൭ㄊ㜲〮〮ㄮ眉睷礮楴捳污⹩瑩਍㈱⸷⸰⸰ऱ瑹獩慣楬椮൴ㄊ㜲〮〮ㄮ眉睷礮牴湥瑩污慩椮൴ㄊ㜲〮〮ㄮ礉牴湥瑩污慩椮൴ㄊ㜲〮〮ㄮ礉歵桯浡湡⹯潣൭ㄊ㜲〮〮ㄮ眉睷礮湵扩⹯瑩਍㈱⸷⸰⸰ऱ畹楮潢椮൴ㄊ㜲〮〮ㄮ礉牵杩浡潢㉡⸵潧杯敬慰敧⹳潣൭ㄊ㜲〮〮ㄮ眉睷礮穵湡睺挮൮ㄊ㜲〮〮ㄮ礉穵湡睺挮൮ㄊ㜲〮〮ㄮ眉睷礮楶慲搮൥ㄊ㜲〮〮ㄮ礉楶慲搮൥ㄊ㜲〮〮ㄮ礉敷獢慥捲⹨湩潦਍㈱⸷⸰⸰ऱぺ㝬挮浯਍㈱⸷⸰⸰ऱ睷⹷ぺ㝬挮浯਍㈱⸷⸰⸰ऱ慺祢橷穷牬戮穩戮穩਍㈱⸷⸰⸰ऱ睷⹷慺祢橷穷牬戮穩戮穩਍㈱⸷⸰⸰ऱ睷⹷慺楬慴楬⹡瑩਍㈱⸷⸰⸰ऱ慺楬慴楬⹡瑩਍㈱⸷⸰⸰ऱ慺杮潣敤⹣敮൴ㄊ㜲〮〮ㄮ眉睷種湡捧摯捥渮瑥਍㈱⸷⸰⸰ऱ慺杮捯獡⹨潣൭ㄊ㜲〮〮ㄮ眉睷種湡潧慣桳挮浯਍㈱⸷⸰⸰ऱ慺牰獯挮浯਍㈱⸷⸰⸰ऱ慺獰汯敶挮浯਍㈱⸷⸰⸰ऱ睷⹷慺獰汯敶挮浯਍㈱⸷⸰⸰ऱ慺慲楤⹦湣਍㈱⸷⸰⸰ऱ睷⹷慺慲楤⹦湣਍㈱⸷⸰⸰ऱ捺摯捥挮浯਍㈱⸷⸰⸰ऱ睷⹷捺摯捥挮浯਍㈱⸷⸰⸰ऱ摺煲灭摡挮浯਍㈱⸷⸰⸰ऱ睷⹷摺煲灭摡挮浯਍㈱⸷⸰⸰ऱ敺慬湺睹牯摬挮浯਍㈱⸷⸰⸰ऱ睷⹷敺慬湺睹牯摬挮浯਍㈱⸷⸰⸰ऱ睷⹷敺楬浬⹣湣਍㈱⸷⸰⸰ऱ敺楬浬⹣湣਍㈱⸷⸰⸰ऱ敺潮整湣捩⹯潣൭ㄊ㜲〮〮ㄮ眉睷種湥瑯捥楮潣挮浯਍㈱⸷⸰⸰ऱ敺潮整湣捩㉯挮浯਍㈱⸷⸰⸰ऱ睷⹷敺潮整湣捩㉯挮浯਍㈱⸷⸰⸰ऱ敺潲戮獥浴湡条⹥牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸰牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸱牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸲牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸳牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸴牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸵牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸶牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸷牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸸牯൧ㄊ㜲〮〮ㄮ稉牥⹯敢瑳慭慮敧⸹牯൧ㄊ㜲〮〮ㄮ稉牥⹯敳癲牥⹣牯൧ㄊ㜲〮〮ㄮ稉牥⹯楳摳瑯敮⹴潣൭ㄊ㜲〮〮ㄮ稉牥捯摯捥挮浯਍㈱⸷⸰⸰ऱ睷⹷敺潲潣敤⹣潣൭ㄊ㜲〮〮ㄮ稉牥ⵯ潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷種牥ⵯ潣敤⹣潣൭ㄊ㜲〮〮ㄮ稉獥慥捲⹨潣൭ㄊ㜲〮〮ㄮ稉獥牯瑮挮൮ㄊ㜲〮〮ㄮ眉睷種獥牯瑮挮൮ㄊ㜲〮〮ㄮ稉獥祴楦摮挮浯਍㈱⸷⸰⸰ऱ睷⹷敺瑳晹湩⹤潣൭ㄊ㜲〮〮ㄮ稉略⵳潬獧挮浯਍㈱⸷⸰⸰ऱ睷⹷敺獵氭杯⹳潣൭ㄊ㜲〮〮ㄮ稉祥桩瑵浡挮൮ㄊ㜲〮〮ㄮ眉睷種祥桩瑵浡挮൮ㄊ㜲〮〮ㄮ稉潦浬牤⹭湣਍㈱⸷⸰⸰ऱ睷⹷智汯摭浲挮൮ㄊ㜲〮〮ㄮ稉獦慥捲⹨潣൭ㄊ㜲〮〮ㄮ眉睷種獦慥捲⹨潣൭ㄊ㜲〮〮ㄮ眉睷種硦煡歺癥⹩潣൭ㄊ㜲〮〮ㄮ稉硦煡歺癥⹩潣൭ㄊ㜲〮〮ㄮ稉浨獢督杤⹫楢ൺㄊ㜲〮〮ㄮ眉睷種浨獢督杤⹫楢ൺㄊ㜲〮〮ㄮ眉睷種湩汢杯挮浯਍㈱⸷⸰⸰ऱ楺扮潬⹧潣൭ㄊ㜲〮〮ㄮ稉灩潣敤⹣潣൭ㄊ㜲〮〮ㄮ眉睷種灩潣敤⹣潣൭ㄊ㜲〮〮ㄮ稉灩牯慴⹬潣൭ㄊ㜲〮〮ㄮ稉灩潰瑲污挮浯਍㈱⸷⸰⸰ऱ楺灰⵹潬歯灵挮浯਍㈱⸷⸰⸰ऱ睷⹷楺灰⵹潬歯灵挮浯਍㈱⸷⸰⸰ऱ楺慱歮⹭湣਍㈱⸷⸰⸰ऱ睷⹷楺慱歮⹭湣਍㈱⸷⸰⸰ऱ楺煱⹩潣൭ㄊ㜲〮〮ㄮ眉睷種煩楱挮浯਍㈱⸷⸰⸰ऱ楺楶确⹣湣਍㈱⸷⸰⸰ऱ睷⹷楺楶确⹣湣਍㈱⸷⸰⸰ऱ睷⹷橺橫⹷潧⹶湣਍㈱⸷⸰⸰ऱ橺橫⹷潧⹶湣਍㈱⸷⸰⸰ऱ決桩灡癥挮൮ㄊ㜲〮〮ㄮ眉睷種楬慨数⹶湣਍㈱⸷⸰⸰ऱ睷⹷湺硥⹴潣൭ㄊ㜲〮〮ㄮ稉敮瑸挮浯਍㈱⸷⸰⸰ऱ睷⹷潺敮污牡⵭潤湷潬摡渭睯挮浯਍㈱⸷⸰⸰ऱ潺敮污牡⵭潤湷潬摡渭睯挮浯਍㈱⸷⸰⸰ऱ睷⹷潺敮污牡⵭瑳灯挮浯਍㈱⸷⸰⸰ऱ潺敮污牡⵭瑳灯挮浯਍㈱⸷⸰⸰ऱ潺敮洭摥慩挮浯਍㈱⸷⸰⸰ऱ睷⹷潺敮洭摥慩挮浯਍㈱⸷⸰⸰ऱ潺敮景牦敥潰湲挮浯਍㈱⸷⸰⸰ऱ潺景汩挮浯਍㈱⸷⸰⸰ऱ潺浯来獡瑩⹥潣൭ㄊ㜲〮〮ㄮ稉潯灭汵敳渮瑥਍㈱⸷⸰⸰ऱ睷⹷潺浯異獬⹥敮൴ㄊ㜲〮〮ㄮ稉異潦慳⹺湣਍㈱⸷⸰⸰ऱ睷⹷灺晵獯穡挮൮ㄊ㜲〮〮ㄮ眉睷種睰扥潳牵散挮浯਍㈱⸷⸰⸰ऱ灺敷獢畯捲⹥潣൭ㄊ㜲〮〮ㄮ稉慱慶橮湰戮穩਍㈱⸷⸰⸰ऱ睷⹷煺癡湡灪⹮楢ൺㄊ㜲〮〮ㄮ眉睷種焭敵瑳挮浯਍㈱⸷⸰⸰ऱ⵺畱獥⹴潣൭ㄊ㜲〮〮ㄮ眉睷種楲獷浵捯挮൮ㄊ㜲〮〮ㄮ稉楲獷浵捯挮൮ㄊ㜲〮〮ㄮ眉睷種楳潦数⹪湣਍㈱⸷⸰⸰ऱ獺晩灯橥挮൮ㄊ㜲〮〮ㄮ眉睷種畳数敲慶椮൴ㄊ㜲〮〮ㄮ稉畳数敲慶椮൴ㄊ㜲〮〮ㄮ眉睷種癳潣灭湡⹹潣൭ㄊ㜲〮〮ㄮ稉癳潣灭湡⹹潣൭ㄊ㜲〮〮ㄮ眉睷種晵湯杦挮൮ㄊ㜲〮〮ㄮ稉晵湯杦挮൮ㄊ㜲〮〮ㄮ眉睷種潵潹睵楥慮⹮潣൭ㄊ㜲〮〮ㄮ稉潵潹睵楥慮⹮潣൭ㄊ㜲〮〮ㄮ眉睷種牵畲捳⹯潣൭ㄊ㜲〮〮ㄮ稉牵畲捳⹯潣൭ㄊ㜲〮〮ㄮ眉睷種癵楰畱⹮湣਍㈱⸷⸰⸰ऱ畺灶煩湵挮൮ㄊ㜲〮〮ㄮ眉睷種睵桯捸挮൮ㄊ㜲〮〮ㄮ稉睵桯捸挮൮ㄊ㜲〮〮ㄮ稉楶業摧污挮浯਍㈱⸷⸰⸰ऱ睷⹷発穩瑵湥挮൮ㄊ㜲〮〮ㄮ稉楶畺整⹮湣਍㈱⸷⸰⸰ऱ睷⹷硺獣汯瑵潩⹮潣൭ㄊ㜲〮〮ㄮ稉捸潳畬楴湯挮浯਍㈱⸷⸰⸰ऱ睷⹷硺楬歮⹳潣൭ㄊ㜲〮〮ㄮ稉汸湩獫挮浯਍㈱⸷⸰⸰ऱ睷⹷硺煯捡牡挮൮ㄊ㜲〮〮ㄮ稉潸慱慣⹲湣਍㈱⸷⸰⸰ऱ祺慢⵮潺潣⵲敬楶牴⹡潣൭⌊吠楨⁳楬瑳椠⁳潃祰楲桧⁴〲〰㈭〰‸慓敦⁲敎睴牯楫杮䰠浩瑩摥਍‣湅⁤景攠瑮楲獥椠獮牥整⁤祢匠祰潢⁴‭敓牡档☠䐠獥牴祯਍
O4:64bit: - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWOW64\CTASIO.DLL (Creative Technology Ltd)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\CTASIO.DLL (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTXFIREG] C:\Windows\SysWow64\Ctxfireg.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SBAudigy4\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [ICQ] C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - Startup: C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe File not found
O4 - Startup: C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 192.168.1.254
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - Reg Error: Key error. - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs:64bit: Themes - C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
NetSvcs:64bit: BDESVC - C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation)
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 30 Days ==========

[2010.04.10 19:59:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HostsXpert
[2010.04.09 22:03:53 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.04.09 18:41:20 | 000,000,000 | ---D | C] -- C:\Users\Jarsk\AppData\Roaming\Malwarebytes
[2010.04.09 18:41:14 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.04.09 18:41:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.04.09 18:41:12 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.04.09 18:41:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010.04.09 17:11:24 | 000,561,664 | ---- | C] (OldTimer Tools) -- C:\Users\Jarsk\Desktop\OTL.exe
[2010.04.09 16:57:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HijackThis
[2010.04.09 16:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010.04.09 16:53:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010.04.02 08:15:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010.04.02 08:15:30 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010.04.02 08:15:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010.04.02 08:15:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010.04.02 00:08:45 | 000,000,000 | ---D | C] -- C:\Users\Jarsk\Documents\The KMPlayer
[2010.04.02 00:06:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ KMPlayer
[2010.04.01 23:53:49 | 000,000,000 | ---D | C] -- C:\Users\Jarsk\Documents\Downloads
[2010.03.30 22:39:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010.03.30 22:39:44 | 000,000,000 | ---D | C] -- C:\Users\Jarsk\AppData\Local\Google
[2010.03.30 19:45:01 | 001,192,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wininet.dll
[2010.03.30 19:45:01 | 001,026,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstime.dll
[2010.03.30 19:45:01 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstime.dll
[2010.03.30 19:45:00 | 000,977,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wininet.dll
[2010.03.30 19:45:00 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iedkcs32.dll
[2010.03.30 19:45:00 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iedkcs32.dll
[2010.03.30 19:45:00 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedsbs.dll
[2010.03.30 19:45:00 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedsbs.dll
[2010.03.29 17:00:17 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010.03.21 15:56:03 | 000,000,000 | -HSD | C] -- C:\ProgramData\SecuROM
[2010.03.16 17:30:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2010.03.16 17:30:34 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2010.03.16 17:24:26 | 000,090,112 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\Updreg.EXE
[2010.03.16 17:22:24 | 000,194,048 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctdvinst.dll
[2010.03.16 17:22:24 | 000,133,632 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\sfms32.dll
[2010.03.16 17:22:24 | 000,073,728 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\ctcoinst.dll
[2010.03.16 17:22:24 | 000,034,816 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[2010.03.16 17:22:24 | 000,027,648 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\ac3api.dll
[2010.03.16 17:22:24 | 000,022,528 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\sfman32.dll
[2010.03.16 17:22:22 | 000,068,096 | ---- | C] (Creative Technology, Ltd) -- C:\Windows\SysWow64\ctedasio.dll
[2010.03.16 17:21:34 | 000,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL
[2010.03.16 17:21:34 | 000,010,240 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\CTDCRES.DLL
[2010.03.16 17:21:34 | 000,010,240 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\CTDCRES.DLL
[2010.03.16 17:21:34 | 000,009,216 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\CTPRES.DLL
[2010.03.16 17:18:35 | 000,034,304 | ---- | C] (Daniel Kawakami) -- C:\Windows\SysWow64\CTAudCS.cpl
[2010.03.14 17:40:38 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.04.11 20:50:54 | 005,505,024 | -HS- | M] () -- C:\Users\Jarsk\NTUSER.DAT
[2010.04.11 20:44:00 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.04.11 17:51:40 | 001,445,734 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.04.11 17:51:40 | 000,622,422 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.04.11 17:51:40 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.04.11 17:51:40 | 000,118,604 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.04.11 17:51:40 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.04.11 16:32:10 | 001,855,073 | ---- | M] () -- C:\Users\Jarsk\Desktop\DSC05016.JPG
[2010.04.11 16:30:54 | 002,013,885 | ---- | M] () -- C:\Users\Jarsk\Desktop\DSC05015.JPG
[2010.04.11 16:29:26 | 002,239,080 | ---- | M] () -- C:\Users\Jarsk\Desktop\DSC05014.JPG
[2010.04.11 14:56:38 | 000,385,170 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2010.04.11 14:22:56 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.04.11 14:22:56 | 000,014,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.04.11 14:15:55 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.04.11 14:15:52 | 000,283,584 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.04.11 14:15:47 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.04.11 14:15:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.04.11 14:15:29 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.11 14:15:00 | 000,036,208 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.11 14:15:00 | 000,036,208 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.11 14:15:00 | 000,031,224 | ---- | M] () -- C:\Windows\SysNative\BMXCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.11 14:15:00 | 000,031,224 | ---- | M] () -- C:\Windows\SysNative\BMXBkpCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.11 14:15:00 | 000,011,564 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.04.11 14:14:53 | 007,257,212 | -H-- | M] () -- C:\Users\Jarsk\AppData\Local\IconCache.db
[2010.04.11 14:14:35 | 000,766,808 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20100411-145638.backup
[2010.04.09 21:34:36 | 000,000,000 | -H-- | M] () -- C:\Users\Jarsk\Documents\Default.rdp
[2010.04.09 18:41:17 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.09 17:11:39 | 000,561,664 | ---- | M] (OldTimer Tools) -- C:\Users\Jarsk\Desktop\OTL.exe
[2010.04.09 16:57:36 | 000,001,921 | ---- | M] () -- C:\Users\Jarsk\Desktop\HijackThis.lnk
[2010.04.09 16:53:22 | 000,001,262 | ---- | M] () -- C:\Users\Jarsk\Desktop\Spybot - Search & Destroy.lnk
[2010.04.05 16:47:23 | 000,001,358 | ---- | M] () -- C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk
[2010.04.01 18:44:37 | 000,002,198 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010.03.30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.03.30 00:45:56 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.03.17 18:25:14 | 000,001,702 | ---- | M] () -- C:\Users\Jarsk\Desktop\Recuva.lnk
[2010.03.16 22:34:36 | 000,001,080 | ---- | M] () -- C:\Users\Jarsk\Desktop\settingsbkup.sfm
[2010.03.16 22:34:36 | 000,001,080 | ---- | M] () -- C:\Users\Jarsk\Desktop\settings.sfm
[2010.03.16 17:33:48 | 004,958,588 | ---- | M] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.CDF
[2010.03.16 17:33:48 | 004,958,588 | ---- | M] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.BAK
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.04.11 17:52:26 | 002,239,080 | ---- | C] () -- C:\Users\Jarsk\Desktop\DSC05014.JPG
[2010.04.11 17:52:26 | 002,013,885 | ---- | C] () -- C:\Users\Jarsk\Desktop\DSC05015.JPG
[2010.04.11 17:52:26 | 001,855,073 | ---- | C] () -- C:\Users\Jarsk\Desktop\DSC05016.JPG
[2010.04.09 21:34:36 | 000,000,000 | -H-- | C] () -- C:\Users\Jarsk\Documents\Default.rdp
[2010.04.09 18:41:17 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.09 16:57:36 | 000,001,921 | ---- | C] () -- C:\Users\Jarsk\Desktop\HijackThis.lnk
[2010.04.09 16:53:22 | 000,001,262 | ---- | C] () -- C:\Users\Jarsk\Desktop\Spybot - Search & Destroy.lnk
[2010.04.05 16:47:23 | 000,001,358 | ---- | C] () -- C:\Users\Jarsk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrace produktu.lnk
[2010.03.30 22:41:25 | 000,002,198 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2010.03.30 22:39:50 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.30 22:39:49 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.03.16 22:34:36 | 000,001,080 | ---- | C] () -- C:\Users\Jarsk\Desktop\settingsbkup.sfm
[2010.03.16 22:34:36 | 000,001,080 | ---- | C] () -- C:\Users\Jarsk\Desktop\settings.sfm
[2010.03.16 17:32:40 | 000,036,208 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,036,208 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,031,224 | ---- | C] () -- C:\Windows\SysNative\BMXCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,031,224 | ---- | C] () -- C:\Windows\SysNative\BMXBkpCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:40 | 000,011,564 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.03.16 17:32:30 | 004,958,588 | ---- | C] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.BAK
[2010.03.16 17:24:06 | 004,958,588 | ---- | C] () -- C:\Windows\{00000005-00000000-00000001-00001102-00000008-10211102}.CDF
[2010.03.16 17:22:25 | 001,048,576 | ---- | C] () -- C:\Windows\SysWow64\CT1MGM.ROM
[2010.03.16 17:22:25 | 001,048,576 | ---- | C] () -- C:\Windows\SysNative\CT1MGM.ROM
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default8.sfm
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default4.sfm
[2010.03.16 17:22:25 | 000,000,059 | ---- | C] () -- C:\Windows\SysWow64\default.sfm
[2010.03.16 17:22:25 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2010.03.16 17:22:25 | 000,000,054 | ---- | C] () -- C:\Windows\SysNative\ctzapxx.ini
[2010.03.16 17:22:24 | 000,313,207 | ---- | C] () -- C:\Windows\SysWow64\ctstatic.dat
[2010.03.16 17:22:24 | 000,055,904 | ---- | C] () -- C:\Windows\SysNative\ctdnlstr.dat
[2010.03.16 17:22:24 | 000,053,932 | ---- | C] () -- C:\Windows\SysWow64\ctdaught.dat
[2010.03.16 17:22:24 | 000,007,406 | ---- | C] () -- C:\Windows\SysNative\SBAudigy.ico
[2010.03.16 17:22:24 | 000,001,912 | ---- | C] () -- C:\Windows\SysNative\Audigy.bmp
[2010.03.16 17:22:23 | 000,325,724 | ---- | C] () -- C:\Windows\SysNative\ctdlang.dat
[2010.03.16 17:21:34 | 000,003,584 | ---- | C] () -- C:\Windows\SysNative\CTXFIRES.DLL
[2010.03.16 17:21:34 | 000,003,072 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL
[2010.03.16 17:21:25 | 007,572,224 | ---- | C] () -- C:\Windows\SysNative\CT8MGM.SF2
[2010.03.16 17:21:25 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2
[2010.03.16 17:21:24 | 029,705,938 | ---- | C] () -- C:\Windows\SysNative\28MBGM.sf2
[2010.03.16 17:21:23 | 007,572,224 | ---- | C] () -- C:\Windows\SysWow64\CT8MGM.SF2
[2010.03.16 17:21:22 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2
[2010.03.16 17:21:16 | 029,705,938 | ---- | C] () -- C:\Windows\SysWow64\28MBGM.sf2
[2010.03.16 17:21:14 | 000,137,728 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.dll
[2010.03.16 17:21:14 | 000,107,008 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.dll
[2010.03.16 17:21:14 | 000,083,456 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.dll
[2010.03.16 17:21:14 | 000,069,120 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.dll
[2010.02.05 15:56:45 | 000,046,593 | R--- | C] () -- C:\Windows\SysWow64\e10kxwdm.ini
[2010.01.16 19:16:12 | 000,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.01.16 19:16:12 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.01.16 19:16:07 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.01.16 19:16:07 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.01.16 19:16:03 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.01.16 19:16:03 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010.01.04 13:33:15 | 000,007,601 | ---- | C] () -- C:\Users\Jarsk\AppData\Local\Resmon.ResmonCfg
[2010.01.01 22:35:25 | 005,505,024 | -HS- | C] () -- C:\Users\Jarsk\NTUSER.DAT
[2010.01.01 22:35:25 | 000,524,288 | -HS- | C] () -- C:\Users\Jarsk\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010.01.01 22:35:25 | 000,524,288 | -HS- | C] () -- C:\Users\Jarsk\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010.01.01 22:35:25 | 000,262,144 | -HS- | C] () -- C:\Users\Jarsk\ntuser.dat.LOG1
[2010.01.01 22:35:25 | 000,065,536 | -HS- | C] () -- C:\Users\Jarsk\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010.01.01 22:35:25 | 000,000,020 | -HS- | C] () -- C:\Users\Jarsk\ntuser.ini
[2010.01.01 22:35:25 | 000,000,000 | -HS- | C] () -- C:\Users\Jarsk\ntuser.dat.LOG2
[2009.11.06 11:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009.08.03 01:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.23 13:29:50 | 000,097,713 | R--- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2007.04.12 09:10:28 | 000,105,728 | ---- | C] () -- C:\Windows\SysWow64\APOMgrH.dll
[2007.03.05 16:10:20 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CTBURST.DLL
[2006.10.02 18:25:18 | 000,000,307 | ---- | C] () -- C:\Windows\SysWow64\KILL.INI
[2005.10.05 00:28:12 | 000,071,680 | ---- | C] () -- C:\Windows\SysWow64\CTMMACTL.DLL

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< %systemroot%\*. /mp /s >
< End of report >

Stáhni si USBFix

Ukonči všechny procesy , okna a prohlížeče a spusť program. Vyber jazyk - v případě angličtiny stiskni E -> Enter. Dostaneš se do dalšího menu. V něm stiskni 2 -> Enter. Začne se sken, nech ho nerušeně běžet.Pokud program požádá o restart PC, tak ho povol. Vytvořený log najdeš v "C:\UsbFix.txt", prosím vlož ho sem.
/////////////////////////////////////////////////////////////////////////////////////

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.