PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

prosím o kontrolu logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=53781

Stránka 1 z 2

prosím o kontrolu logu

Napsal: 27 kvě 2010 17:51
od p.l.a.y.e.r
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:47:39, on 27.5.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ICQ7.1\ICQ.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\Windows\system32\dfrgui.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\Plajeeer\AppData\Local\Opera\Opera\temporary_downloads\hijackthis.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\Windows\SYSTEM32\avgrsstx.dll
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 5226 bytes

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 18:04
od Damned
Odsinstaluj si Daemon Tool Toolbar a Ask Toolbar.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost Uložit protokol a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 21:28
od p.l.a.y.e.r
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4148

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

27.5.2010 21:26:30
mbam-log-2010-05-27 (21-26-30).txt

Typ skenu: Rychlý sken
Skenované objekty: 125632
Uplynulý čas: 1 hodina(y), 12 minuta(y), 45 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 1
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 21:56
od Damned
Spusť znovu MbAM a dej Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit vybrané
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Konec

Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 22:21
od p.l.a.y.e.r
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4148

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

27.5.2010 22:17:51
mbam-log-2010-05-27 (22-17-51).txt

Typ skenu: Rychlý sken
Skenované objekty: 125632
Uplynulý čas: 1 hodina(y), 12 minuta(y), 45 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 1
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

a jeste dodam to druhy

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 22:43
od p.l.a.y.e.r
ComboFix 10-05-27.01 - Plajeeer 27.05.2010 22:27:35.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2046.1252 [GMT 2:00]
Spuštěný z: c:\users\Plajeeer\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Install.exe
c:\users\Plajeeer\AppData\Roaming\Desktopicon
c:\users\Plajeeer\AppData\Roaming\Desktopicon\eBay.ico
c:\users\Plajeeer\AppData\Roaming\Desktopicon\uninst.exe
c:\users\Plajeeer\AppData\Roaming\EurekaLog
c:\users\Plajeeer\WoW-2.3.3.7799-to-2.4.0.8089-enGB-patch.exe
c:\windows\system32\vbzlib1.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-04-27 do 2010-05-27 )))))))))))))))))))))))))))))))
.

2010-05-27 20:20 . 2010-05-27 20:22 -------- d-----w- C:\32788R22FWJFW
2010-05-27 19:54 . 2010-05-27 19:54 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\bizarre creations
2010-05-27 16:08 . 2010-05-27 16:08 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Malwarebytes
2010-05-27 16:07 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-27 16:07 . 2010-05-27 16:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-27 16:07 . 2010-05-27 16:07 -------- d-----w- c:\programdata\Malwarebytes
2010-05-27 16:07 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-27 15:36 . 2010-05-27 15:36 -------- d-----w- c:\program files\Activision
2010-05-26 20:17 . 2010-05-26 20:17 -------- d-----w- c:\users\Plajeeer\AppData\Local\4A Games
2010-05-26 19:48 . 2010-02-04 08:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-05-26 19:48 . 2010-02-04 08:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-05-26 19:48 . 2010-02-04 08:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-05-26 19:48 . 2010-02-04 08:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-05-26 19:36 . 2010-05-26 19:36 -------- d-----w- c:\program files\THQ
2010-05-26 16:01 . 2010-05-26 16:01 -------- d-----w- c:\program files\Common Files\Steam
2010-05-26 16:01 . 2010-05-26 16:10 -------- d-----w- c:\program files\Steam
2010-05-26 13:54 . 2010-05-27 15:30 -------- d-----w- C:\download
2010-05-26 13:46 . 2010-05-26 13:55 -------- d-----w- c:\program files\JDownloader
2010-05-26 13:46 . 2010-05-26 13:45 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-05-26 13:45 . 2010-05-26 13:45 -------- d-----w- c:\program files\Java
2010-05-26 13:44 . 2010-05-26 13:44 152576 ----a-w- c:\users\Plajeeer\AppData\Roaming\Sun\Java\jre1.6.0_15\lzma.dll
2010-05-26 05:40 . 2010-04-23 07:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-23 19:03 . 2010-05-24 19:33 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Mount&Blade Warband
2010-05-23 18:52 . 2010-05-24 19:21 -------- d-----w- c:\program files\Mount&Blade Warband
2010-05-23 08:46 . 2010-05-23 09:07 -------- d-----w- c:\program files\Divine Divinity
2010-05-22 09:23 . 2010-04-19 08:25 2117704 ----a-w- c:\programdata\AVG Security Toolbar\IEToolbar.dll
2010-05-17 13:45 . 2010-05-17 13:45 -------- d-----w- c:\program files\GameTracker
2010-05-17 13:44 . 2010-05-26 15:45 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\GameTracker
2010-05-16 07:19 . 2010-05-16 07:19 -------- d-----w- c:\program files\Common Files\Skype
2010-05-16 07:19 . 2010-05-16 07:19 -------- d-----r- c:\program files\Skype
2010-05-13 12:16 . 2010-05-13 12:17 -------- d-----w- c:\users\Plajeeer\AppData\Local\Microsoft Games
2010-05-13 11:59 . 2010-05-13 11:59 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\AVG9
2010-05-12 13:25 . 2010-05-12 13:25 -------- d-----w- C:\$AVG
2010-05-12 13:11 . 2010-03-04 07:33 740864 ----a-w- c:\windows\system32\inetcomm.dll
2010-05-10 14:56 . 2010-05-10 14:56 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-05-10 14:56 . 2010-05-26 12:49 -------- d-----w- c:\windows\system32\drivers\Avg
2010-05-10 14:56 . 2010-05-22 09:23 -------- d-----w- c:\programdata\AVG Security Toolbar
2010-05-10 14:55 . 2010-05-10 14:55 25096 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-05-10 14:55 . 2010-05-10 14:55 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-05-10 14:55 . 2010-05-10 14:55 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-05-10 14:55 . 2010-05-10 14:55 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-05-10 14:55 . 2010-05-10 14:55 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-05-10 14:54 . 2010-05-10 14:54 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-05-10 14:54 . 2010-05-10 14:54 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-05-10 14:53 . 2010-05-10 14:53 -------- d-----w- c:\program files\AVG
2010-05-10 14:53 . 2010-05-10 14:53 -------- d-----w- c:\programdata\avg9
2010-05-09 18:25 . 2010-05-09 18:25 -------- d-----w- c:\program files\Lavalys
2010-05-08 20:26 . 2010-05-08 20:26 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\NVIDIA
2010-05-08 20:26 . 2010-05-08 20:26 -------- d-----w- c:\users\Plajeeer\AppData\Local\Risen
2010-05-08 20:16 . 2010-05-08 20:16 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-05-08 20:16 . 2010-05-08 20:16 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-05-08 20:16 . 2010-05-08 20:16 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP
2010-05-08 10:04 . 2010-05-08 10:04 -------- d-----w- c:\program files\GamePark
2010-05-07 20:08 . 2010-05-07 20:08 -------- d-sh--w- c:\windows\ftpcache
2010-05-06 15:23 . 2009-10-02 18:49 -------- d-----w- C:\PraseciTravian
2010-05-04 13:56 . 2010-05-04 13:56 -------- d-----w- c:\users\Plajeeer\AppData\Local\storage
2010-05-03 11:57 . 2010-05-03 12:19 -------- d-----w- c:\program files\Scorpions WinCheater
2010-05-01 20:23 . 2010-05-02 08:37 -------- d-----w- c:\program files\uTorrent
2010-05-01 20:23 . 2010-05-01 22:17 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\uTorrent
2010-04-28 13:42 . 2010-04-28 13:42 -------- d-----w- c:\program files\Common Files\lightning group shared files
2010-04-28 13:24 . 2009-09-26 05:58 194488 ----a-w- c:\windows\system32\drivers\fvevol.sys
2010-04-28 13:24 . 2009-12-11 07:44 133720 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2010-04-28 13:24 . 2009-12-11 07:38 1037312 ----a-w- c:\windows\system32\lsasrv.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-27 20:22 . 2010-03-30 20:13 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Skype
2010-05-27 20:22 . 2010-03-30 16:07 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\ICQ
2010-05-27 16:04 . 2010-04-25 18:48 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-05-27 15:53 . 2010-04-04 08:23 -------- d-----w- c:\programdata\NVIDIA
2010-05-27 15:53 . 2010-04-04 08:22 -------- d-----w- c:\program files\NVIDIA Corporation
2010-05-27 15:46 . 2010-03-30 16:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-27 14:04 . 2010-03-30 20:13 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\skypePM
2010-05-26 19:54 . 2010-04-04 08:26 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-05-26 15:33 . 2010-04-14 14:01 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Software Informer
2010-05-17 14:05 . 2010-04-03 18:41 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-05-17 14:05 . 2010-04-03 18:41 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-05-16 07:19 . 2010-03-30 20:12 -------- d-----w- c:\programdata\Skype
2010-05-13 01:03 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-05-08 10:13 . 2010-04-03 18:41 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-05-08 09:32 . 2010-04-03 18:41 22328 ----a-w- c:\users\Plajeeer\AppData\Roaming\PnkBstrK.sys
2010-05-08 09:32 . 2010-04-03 18:41 22328 ----a-w- c:\users\Plajeeer\AppData\Roaming\PnkBstrK.sys
2010-05-05 15:19 . 2010-03-30 16:05 -------- d-----w- c:\program files\Opera
2010-05-04 13:56 . 2010-04-06 15:57 -------- d-----w- c:\programdata\Ubisoft
2010-04-28 13:45 . 2010-04-14 14:01 -------- d-----w- c:\program files\Software Informer
2010-04-27 20:11 . 2010-04-27 15:06 -------- d-----w- c:\program files\Bethesda Softworks
2010-04-27 14:47 . 2010-04-27 14:47 -------- d-----w- c:\program files\directx
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ashampoo
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\programdata\ashampoo
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\program files\Ashampoo
2010-04-25 18:48 . 2010-04-25 18:48 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-04-24 08:46 . 2010-04-24 08:45 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-22 20:33 . 2010-04-22 14:54 -------- d-----w- c:\program files\ChrisTV PVR Standard
2010-04-22 18:20 . 2010-04-22 18:20 -------- d-sh--w- c:\programdata\SecuROM
2010-04-22 18:18 . 2010-04-22 18:16 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-04-22 15:06 . 2010-03-30 20:04 70872 ----a-w- c:\users\Plajeeer\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-17 21:52 . 2010-04-01 11:54 -------- d-----w- c:\program files\GameShadow
2010-04-17 10:27 . 2010-04-17 10:27 -------- d-----w- c:\program files\DsNET Corp
2010-04-15 15:12 . 2010-04-15 15:11 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2010-04-15 15:11 . 2010-04-15 15:11 -------- d-----w- c:\program files\DVDVideoSoft
2010-04-14 20:23 . 2010-04-14 20:23 -------- d-----w- c:\program files\WinFast
2010-04-13 14:21 . 2010-04-13 14:21 -------- d-----w- c:\programdata\Hewlett-Packard
2010-04-12 16:58 . 2010-04-12 16:58 -------- d--h--r- c:\users\Plajeeer\AppData\Roaming\SecuROM
2010-04-12 16:48 . 2010-04-03 18:41 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-04-12 16:42 . 2010-04-12 16:42 -------- d-----w- c:\program files\Electronic Arts
2010-04-12 05:23 . 2010-04-01 14:50 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-04-11 20:47 . 2010-04-11 20:47 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-04-11 20:47 . 2010-04-11 20:47 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2010-04-11 20:47 . 2010-04-11 20:47 -------- d-----w- c:\program files\OpenAL
2010-04-11 20:37 . 2010-04-11 20:37 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2010-04-11 19:22 . 2010-04-11 19:11 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-04-11 12:10 . 2010-04-11 10:29 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ulead Systems
2010-04-11 10:29 . 2010-04-11 10:24 -------- d-----w- c:\programdata\Ulead Systems
2010-04-11 10:25 . 2010-04-11 10:25 -------- d-----w- c:\program files\Common Files\InterVideo
2010-04-11 10:25 . 2010-04-11 10:25 -------- d-----w- c:\programdata\InterVideo
2010-04-11 10:24 . 2010-03-30 19:38 -------- d-----w- c:\program files\Common Files\InstallShield
2010-04-11 10:24 . 2010-04-11 10:24 -------- d-----w- c:\program files\Windows Media Components
2010-04-11 10:24 . 2010-04-11 10:24 -------- d-----w- c:\program files\Common Files\Ulead Systems
2010-04-11 10:24 . 2010-04-11 10:21 -------- d-----w- c:\program files\Ulead Systems
2010-04-10 14:03 . 2010-04-10 14:02 -------- d-----w- c:\program files\Xvid
2010-04-10 14:02 . 2010-04-10 14:01 -------- d-----w- c:\program files\FDRLab
2010-04-10 11:29 . 2010-04-10 09:24 -------- d-----w- c:\program files\Avidemux 2.5
2010-04-10 11:24 . 2010-04-10 09:24 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\avidemux
2010-04-10 10:57 . 2010-04-10 10:57 -------- d-----w- c:\program files\Total Video Converter
2010-04-10 08:58 . 2010-04-10 08:58 -------- d-----w- c:\program files\VirtualDJ
2010-04-06 15:57 . 2010-04-06 15:57 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ubisoft
2010-04-06 15:53 . 2010-04-06 15:53 -------- d-----w- c:\program files\Ubisoft
2010-04-05 12:30 . 2010-04-05 12:24 304160 ----a-w- C:\PA207.DAT
2010-04-03 18:51 . 2010-04-03 18:51 -------- d-----w- c:\programdata\Electronic Arts
2010-04-03 16:27 . 2010-04-03 16:27 985704 ----a-w- c:\windows\system32\nvsvc.dll
2010-04-03 16:27 . 2010-04-03 16:27 13683816 ----a-w- c:\windows\system32\nvcpl.dll
2010-04-03 16:27 . 2010-04-03 16:27 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-04-03 16:27 . 2010-04-03 16:27 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-04-02 10:25 . 2009-07-14 09:21 -------- d-----w- c:\program files\Windows Journal
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-04-02 10:17 . 2010-04-02 10:18 289060 ----a-w- c:\windows\system32\perfi001.dat
2010-04-02 10:17 . 2010-04-02 10:18 42056 ----a-w- c:\windows\system32\perfd001.dat
2010-04-02 10:17 . 2010-04-02 10:17 42056 ----a-w- c:\windows\inf\PERFLIB\0401\perfd.dat
2010-04-02 10:17 . 2010-04-02 10:17 42056 ----a-w- c:\windows\inf\PERFLIB\0401\perfc.dat
2010-04-02 10:17 . 2010-04-02 10:17 289060 ----a-w- c:\windows\inf\PERFLIB\0401\perfi.dat
2010-04-02 10:17 . 2010-04-02 10:17 289060 ----a-w- c:\windows\inf\PERFLIB\0401\perfh.dat
2010-04-02 10:03 . 2010-04-02 10:04 38710 ----a-w- c:\windows\system32\perfd015.dat
2010-04-02 10:03 . 2010-04-02 10:04 337158 ----a-w- c:\windows\system32\perfi015.dat
2010-04-02 10:03 . 2010-04-02 10:03 38710 ----a-w- c:\windows\inf\PERFLIB\0415\perfd.dat
2010-04-02 10:03 . 2010-04-02 10:03 38710 ----a-w- c:\windows\inf\PERFLIB\0415\perfc.dat
2010-04-02 10:03 . 2010-04-02 10:03 337158 ----a-w- c:\windows\inf\PERFLIB\0415\perfi.dat
2010-04-02 10:03 . 2010-04-02 10:03 337158 ----a-w- c:\windows\inf\PERFLIB\0415\perfh.dat
2010-04-02 09:56 . 2010-04-02 09:57 38536 ----a-w- c:\windows\system32\prfd0416.dat
2010-04-02 09:56 . 2010-04-02 09:57 323154 ----a-w- c:\windows\system32\prfi0416.dat
2010-04-02 09:56 . 2010-04-02 09:56 38536 ----a-w- c:\windows\inf\PERFLIB\0416\perfd.dat
2010-04-02 09:56 . 2010-04-02 09:56 38536 ----a-w- c:\windows\inf\PERFLIB\0416\perfc.dat
2010-04-02 09:56 . 2010-04-02 09:56 323154 ----a-w- c:\windows\inf\PERFLIB\0416\perfi.dat
2010-04-02 09:56 . 2010-04-02 09:56 323154 ----a-w- c:\windows\inf\PERFLIB\0416\perfh.dat
2010-04-02 09:49 . 2010-04-02 09:50 39446 ----a-w- c:\windows\system32\perfd019.dat
2010-04-02 09:49 . 2010-04-02 09:50 336704 ----a-w- c:\windows\system32\perfi019.dat
2010-04-02 09:49 . 2010-04-02 09:49 39446 ----a-w- c:\windows\inf\PERFLIB\0419\perfd.dat
2010-04-02 09:49 . 2010-04-02 09:49 39446 ----a-w- c:\windows\inf\PERFLIB\0419\perfc.dat
2010-04-02 09:49 . 2010-04-02 09:49 336704 ----a-w- c:\windows\inf\PERFLIB\0419\perfi.dat
2010-04-02 09:49 . 2010-04-02 09:49 336704 ----a-w- c:\windows\inf\PERFLIB\0419\perfh.dat
2010-04-02 09:42 . 2010-04-02 09:43 41390 ----a-w- c:\windows\system32\perfd00A.dat
2010-04-02 09:42 . 2010-04-02 09:43 341432 ----a-w- c:\windows\system32\perfi00A.dat
2010-04-02 09:42 . 2010-04-02 09:42 41390 ----a-w- c:\windows\inf\PERFLIB\0C0A\perfd.dat
2010-04-02 09:42 . 2010-04-02 09:42 41390 ----a-w- c:\windows\inf\PERFLIB\0C0A\perfc.dat
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 08:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-03-30 133368]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-10 26959144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-17 8546848]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-05-10 14:56 12464 ----a-w- c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 23:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
2010-05-10 14:55 2064736 ----a-w- c:\progra~1\AVG\AVG9\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ChrisTV Agent]
2008-11-11 12:35 275456 ----a-w- c:\program files\ChrisTV PVR Standard\ChrisTV_Agent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameShadow]
2009-11-18 14:40 614680 ----a-w- c:\program files\GameShadow\GameShadow.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameTracker]
2010-04-14 15:51 3831648 ----a-w- c:\program files\GameTracker\GTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Software Informer]
2010-04-13 15:28 2285637 ----a-w- c:\program files\Software Informer\softinfo.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-05-26 16:05 1238352 ----a-w- c:\program files\Steam\steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS11 Preload]
2007-03-03 12:12 341488 ----a-w- c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
2007-10-18 11:47 876544 ----a-w- c:\program files\WinFast\WFTVFM\WFWIZ.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-30 691696]
R3 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-05-10 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [2010-05-10 122376]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [2010-05-10 30216]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [2010-05-10 26120]
R3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFTVFM\WFIOCTL.SYS [2005-01-06 9446]
R4 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-04-19 430152]
R4 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-05-10 916760]
R4 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-05-10 308064]
R4 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [2010-05-10 2325816]
R4 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe AVGIDSAgent [x]
R4 GS In-Game Service;GS In-Game Service;c:\program files\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\System32\Drivers\AVGIDSxx.sys [2010-05-10 25096]
S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2010-05-10 52872]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2010-05-10 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2010-05-10 242896]
S1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
S2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2007-09-19 31744]
S2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-05-10 30104]
S3 PAC207;Webcam 1200;c:\windows\system32\DRIVERS\PFC027.SYS [2007-06-29 611584]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
S3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2007-09-19 10496]

.
.
------- Doplňkový sken -------
.
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-fsm - (no file)
AddRemove-eBay Icon - c:\users\Plajeeer\AppData\Roaming\Desktopicon\uninst.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2395478803-2595547709-390266301-1001\Software\SecuROM\License information*]
"datasecu"=hex:2f,a6,cc,22,54,98,2e,09,86,9f,55,e6,9f,cc,83,c6,9e,7b,d3,79,f3,
fb,6b,10,ed,fa,35,5b,0e,36,d9,c3,4b,43,a5,17,6d,1f,df,2c,3f,bd,c1,d4,58,0f,\
"rkeysecu"=hex:ef,1a,82,bf,1c,7a,ef,0e,ac,94,82,f8,41,14,81,be

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-05-27 22:40:21
ComboFix-quarantined-files.txt 2010-05-27 20:40

Před spuštěním: Volných bajtů: 178 564 030 464
Po spuštění: Volných bajtů: 179 229 401 088

- - End Of File - - D13047E2BAB0724DFD06B2E9460DBA72

Re: pls o kontrolu logu

Napsal: 27 kvě 2010 23:49
od Damned
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\1C4551A64743409391E41477CD655043.TMP

Folder::
c:\program files\DAEMON Tools Toolbar



Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.
Obrázek

- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

Re: prosím o kontrolu logu

Napsal: 28 kvě 2010 17:34
od p.l.a.y.e.r
ComboFix 10-05-27.03 - Plajeeer 28.05.2010 16:34:48.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.2046.1215 [GMT 2:00]
Spuštěný z: c:\users\Plajeeer\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Plajeeer\Desktop\CFScript.txt

FILE ::
"c:\windows\1C4551A64743409391E41477CD655043.TMP"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\DAEMON Tools Toolbar
c:\program files\DAEMON Tools Toolbar\_DTLite.xml

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-04-28 do 2010-05-28 )))))))))))))))))))))))))))))))
.

2010-05-28 14:43 . 2010-05-28 14:43 -------- d-----w- c:\users\Plajeeer\AppData\Local\temp
2010-05-28 14:43 . 2010-05-28 14:43 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-05-28 14:43 . 2010-05-28 14:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-05-28 14:31 . 2010-05-28 14:32 -------- d-----w- C:\32788R22FWJFW
2010-05-27 21:43 . 2010-05-27 21:43 -------- d-----w- c:\windows\system32\Wat
2010-05-27 19:54 . 2010-05-27 19:54 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\bizarre creations
2010-05-27 16:08 . 2010-05-27 16:08 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Malwarebytes
2010-05-27 16:07 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-27 16:07 . 2010-05-27 16:08 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-27 16:07 . 2010-05-27 16:07 -------- d-----w- c:\programdata\Malwarebytes
2010-05-27 16:07 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-27 15:36 . 2010-05-27 15:36 -------- d-----w- c:\program files\Activision
2010-05-26 20:17 . 2010-05-26 20:17 -------- d-----w- c:\users\Plajeeer\AppData\Local\4A Games
2010-05-26 19:48 . 2010-02-04 08:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-05-26 19:48 . 2010-02-04 08:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-05-26 19:48 . 2010-02-04 08:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-05-26 19:48 . 2010-02-04 08:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-05-26 19:36 . 2010-05-26 19:36 -------- d-----w- c:\program files\THQ
2010-05-26 16:01 . 2010-05-26 16:01 -------- d-----w- c:\program files\Common Files\Steam
2010-05-26 16:01 . 2010-05-26 16:10 -------- d-----w- c:\program files\Steam
2010-05-26 13:54 . 2010-05-27 15:30 -------- d-----w- C:\download
2010-05-26 13:46 . 2010-05-26 13:55 -------- d-----w- c:\program files\JDownloader
2010-05-26 13:46 . 2010-05-26 13:45 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-05-26 13:45 . 2010-05-26 13:45 -------- d-----w- c:\program files\Java
2010-05-26 13:44 . 2010-05-26 13:44 152576 ----a-w- c:\users\Plajeeer\AppData\Roaming\Sun\Java\jre1.6.0_15\lzma.dll
2010-05-26 05:40 . 2010-04-23 07:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-23 19:03 . 2010-05-24 19:33 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Mount&Blade Warband
2010-05-23 18:52 . 2010-05-24 19:21 -------- d-----w- c:\program files\Mount&Blade Warband
2010-05-23 08:46 . 2010-05-23 09:07 -------- d-----w- c:\program files\Divine Divinity
2010-05-22 09:23 . 2010-04-19 08:25 2117704 ----a-w- c:\programdata\AVG Security Toolbar\IEToolbar.dll
2010-05-17 13:45 . 2010-05-17 13:45 -------- d-----w- c:\program files\GameTracker
2010-05-17 13:44 . 2010-05-26 15:45 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\GameTracker
2010-05-16 07:19 . 2010-05-16 07:19 -------- d-----w- c:\program files\Common Files\Skype
2010-05-16 07:19 . 2010-05-16 07:19 -------- d-----r- c:\program files\Skype
2010-05-13 12:16 . 2010-05-13 12:17 -------- d-----w- c:\users\Plajeeer\AppData\Local\Microsoft Games
2010-05-13 11:59 . 2010-05-13 11:59 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\AVG9
2010-05-12 13:25 . 2010-05-12 13:25 -------- d-----w- C:\$AVG
2010-05-12 13:11 . 2010-03-04 07:33 740864 ----a-w- c:\windows\system32\inetcomm.dll
2010-05-10 14:56 . 2010-05-10 14:56 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-05-10 14:56 . 2010-05-26 12:49 -------- d-----w- c:\windows\system32\drivers\Avg
2010-05-10 14:56 . 2010-05-22 09:23 -------- d-----w- c:\programdata\AVG Security Toolbar
2010-05-10 14:55 . 2010-05-10 14:55 25096 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-05-10 14:55 . 2010-05-10 14:55 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-05-10 14:55 . 2010-05-10 14:55 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-05-10 14:55 . 2010-05-10 14:55 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-05-10 14:55 . 2010-05-10 14:55 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-05-10 14:54 . 2010-05-10 14:54 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-05-10 14:54 . 2010-05-10 14:54 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-05-10 14:53 . 2010-05-10 14:53 -------- d-----w- c:\program files\AVG
2010-05-10 14:53 . 2010-05-10 14:53 -------- d-----w- c:\programdata\avg9
2010-05-09 18:25 . 2010-05-09 18:25 -------- d-----w- c:\program files\Lavalys
2010-05-08 20:26 . 2010-05-08 20:26 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\NVIDIA
2010-05-08 20:26 . 2010-05-08 20:26 -------- d-----w- c:\users\Plajeeer\AppData\Local\Risen
2010-05-08 20:16 . 2010-05-08 20:16 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-05-08 20:16 . 2010-05-08 20:16 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-05-08 20:16 . 2010-05-08 20:16 -------- d-----w- c:\windows\1C4551A64743409391E41477CD655043.TMP
2010-05-08 10:04 . 2010-05-08 10:04 -------- d-----w- c:\program files\GamePark
2010-05-07 20:08 . 2010-05-07 20:08 -------- d-sh--w- c:\windows\ftpcache
2010-05-06 15:23 . 2009-10-02 18:49 -------- d-----w- C:\PraseciTravian
2010-05-04 13:56 . 2010-05-04 13:56 -------- d-----w- c:\users\Plajeeer\AppData\Local\storage
2010-05-03 11:57 . 2010-05-03 12:19 -------- d-----w- c:\program files\Scorpions WinCheater
2010-05-01 20:23 . 2010-05-02 08:37 -------- d-----w- c:\program files\uTorrent
2010-05-01 20:23 . 2010-05-01 22:17 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\uTorrent

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-28 14:43 . 2010-03-30 20:13 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Skype
2010-05-28 14:32 . 2010-03-30 16:07 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\ICQ
2010-05-28 14:25 . 2010-03-30 20:13 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\skypePM
2010-05-27 15:53 . 2010-04-04 08:23 -------- d-----w- c:\programdata\NVIDIA
2010-05-27 15:53 . 2010-04-04 08:22 -------- d-----w- c:\program files\NVIDIA Corporation
2010-05-27 15:46 . 2010-03-30 16:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-26 19:54 . 2010-04-04 08:26 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-05-26 15:33 . 2010-04-14 14:01 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Software Informer
2010-05-17 14:05 . 2010-04-03 18:41 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-05-17 14:05 . 2010-04-03 18:41 215128 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-05-16 07:19 . 2010-03-30 20:12 -------- d-----w- c:\programdata\Skype
2010-05-13 01:03 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-05-08 10:13 . 2010-04-03 18:41 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-05-08 09:32 . 2010-04-03 18:41 22328 ----a-w- c:\users\Plajeeer\AppData\Roaming\PnkBstrK.sys
2010-05-08 09:32 . 2010-04-03 18:41 22328 ----a-w- c:\users\Plajeeer\AppData\Roaming\PnkBstrK.sys
2010-05-05 15:19 . 2010-03-30 16:05 -------- d-----w- c:\program files\Opera
2010-05-04 13:56 . 2010-04-06 15:57 -------- d-----w- c:\programdata\Ubisoft
2010-04-28 13:45 . 2010-04-14 14:01 -------- d-----w- c:\program files\Software Informer
2010-04-28 13:42 . 2010-04-28 13:42 -------- d-----w- c:\program files\Common Files\lightning group shared files
2010-04-27 20:11 . 2010-04-27 15:06 -------- d-----w- c:\program files\Bethesda Softworks
2010-04-27 14:47 . 2010-04-27 14:47 -------- d-----w- c:\program files\directx
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ashampoo
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\programdata\ashampoo
2010-04-27 13:49 . 2010-04-27 13:49 -------- d-----w- c:\program files\Ashampoo
2010-04-25 18:48 . 2010-04-25 18:48 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-04-24 08:46 . 2010-04-24 08:45 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-22 20:33 . 2010-04-22 14:54 -------- d-----w- c:\program files\ChrisTV PVR Standard
2010-04-22 18:20 . 2010-04-22 18:20 -------- d-sh--w- c:\programdata\SecuROM
2010-04-22 18:18 . 2010-04-22 18:16 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-04-22 15:06 . 2010-03-30 20:04 70872 ----a-w- c:\users\Plajeeer\AppData\Local\GDIPFONTCACHEV1.DAT
2010-04-17 21:52 . 2010-04-01 11:54 -------- d-----w- c:\program files\GameShadow
2010-04-17 10:27 . 2010-04-17 10:27 -------- d-----w- c:\program files\DsNET Corp
2010-04-15 15:12 . 2010-04-15 15:11 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2010-04-15 15:11 . 2010-04-15 15:11 -------- d-----w- c:\program files\DVDVideoSoft
2010-04-14 20:23 . 2010-04-14 20:23 -------- d-----w- c:\program files\WinFast
2010-04-13 14:21 . 2010-04-13 14:21 -------- d-----w- c:\programdata\Hewlett-Packard
2010-04-12 16:58 . 2010-04-12 16:58 -------- d--h--r- c:\users\Plajeeer\AppData\Roaming\SecuROM
2010-04-12 16:48 . 2010-04-03 18:41 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe
2010-04-12 16:42 . 2010-04-12 16:42 -------- d-----w- c:\program files\Electronic Arts
2010-04-12 05:23 . 2010-04-01 14:50 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-04-11 20:47 . 2010-04-11 20:47 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2010-04-11 20:47 . 2010-04-11 20:47 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2010-04-11 20:47 . 2010-04-11 20:47 -------- d-----w- c:\program files\OpenAL
2010-04-11 20:37 . 2010-04-11 20:37 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2010-04-11 19:22 . 2010-04-11 19:11 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-04-11 12:10 . 2010-04-11 10:29 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ulead Systems
2010-04-11 10:29 . 2010-04-11 10:24 -------- d-----w- c:\programdata\Ulead Systems
2010-04-11 10:25 . 2010-04-11 10:25 -------- d-----w- c:\program files\Common Files\InterVideo
2010-04-11 10:25 . 2010-04-11 10:25 -------- d-----w- c:\programdata\InterVideo
2010-04-11 10:24 . 2010-03-30 19:38 -------- d-----w- c:\program files\Common Files\InstallShield
2010-04-11 10:24 . 2010-04-11 10:24 -------- d-----w- c:\program files\Windows Media Components
2010-04-11 10:24 . 2010-04-11 10:24 -------- d-----w- c:\program files\Common Files\Ulead Systems
2010-04-11 10:24 . 2010-04-11 10:21 -------- d-----w- c:\program files\Ulead Systems
2010-04-10 14:03 . 2010-04-10 14:02 -------- d-----w- c:\program files\Xvid
2010-04-10 14:02 . 2010-04-10 14:01 -------- d-----w- c:\program files\FDRLab
2010-04-10 11:29 . 2010-04-10 09:24 -------- d-----w- c:\program files\Avidemux 2.5
2010-04-10 11:24 . 2010-04-10 09:24 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\avidemux
2010-04-10 10:57 . 2010-04-10 10:57 -------- d-----w- c:\program files\Total Video Converter
2010-04-10 08:58 . 2010-04-10 08:58 -------- d-----w- c:\program files\VirtualDJ
2010-04-06 15:57 . 2010-04-06 15:57 -------- d-----w- c:\users\Plajeeer\AppData\Roaming\Ubisoft
2010-04-06 15:53 . 2010-04-06 15:53 -------- d-----w- c:\program files\Ubisoft
2010-04-05 12:30 . 2010-04-05 12:24 304160 ----a-w- C:\PA207.DAT
2010-04-03 18:51 . 2010-04-03 18:51 -------- d-----w- c:\programdata\Electronic Arts
2010-04-03 16:27 . 2010-04-03 16:27 985704 ----a-w- c:\windows\system32\nvsvc.dll
2010-04-03 16:27 . 2010-04-03 16:27 13683816 ----a-w- c:\windows\system32\nvcpl.dll
2010-04-03 16:27 . 2010-04-03 16:27 129640 ----a-w- c:\windows\system32\nvvsvc.exe
2010-04-03 16:27 . 2010-04-03 16:27 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Sidebar
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\DVD Maker
2010-04-02 10:25 . 2009-07-14 09:21 -------- d-----w- c:\program files\Windows Journal
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Photo Viewer
2010-04-02 10:25 . 2009-07-14 04:52 -------- d-----w- c:\program files\Windows Defender
2010-04-02 10:17 . 2010-04-02 10:18 289060 ----a-w- c:\windows\system32\perfi001.dat
2010-04-02 10:17 . 2010-04-02 10:18 42056 ----a-w- c:\windows\system32\perfd001.dat
2010-04-02 10:17 . 2010-04-02 10:17 42056 ----a-w- c:\windows\inf\PERFLIB\0401\perfd.dat
2010-04-02 10:17 . 2010-04-02 10:17 42056 ----a-w- c:\windows\inf\PERFLIB\0401\perfc.dat
2010-04-02 10:17 . 2010-04-02 10:17 289060 ----a-w- c:\windows\inf\PERFLIB\0401\perfi.dat
2010-04-02 10:17 . 2010-04-02 10:17 289060 ----a-w- c:\windows\inf\PERFLIB\0401\perfh.dat
2010-04-02 10:03 . 2010-04-02 10:04 38710 ----a-w- c:\windows\system32\perfd015.dat
2010-04-02 10:03 . 2010-04-02 10:04 337158 ----a-w- c:\windows\system32\perfi015.dat
2010-04-02 10:03 . 2010-04-02 10:03 38710 ----a-w- c:\windows\inf\PERFLIB\0415\perfd.dat
2010-04-02 10:03 . 2010-04-02 10:03 38710 ----a-w- c:\windows\inf\PERFLIB\0415\perfc.dat
2010-04-02 10:03 . 2010-04-02 10:03 337158 ----a-w- c:\windows\inf\PERFLIB\0415\perfi.dat
2010-04-02 10:03 . 2010-04-02 10:03 337158 ----a-w- c:\windows\inf\PERFLIB\0415\perfh.dat
2010-04-02 09:56 . 2010-04-02 09:57 38536 ----a-w- c:\windows\system32\prfd0416.dat
2010-04-02 09:56 . 2010-04-02 09:57 323154 ----a-w- c:\windows\system32\prfi0416.dat
2010-04-02 09:56 . 2010-04-02 09:56 38536 ----a-w- c:\windows\inf\PERFLIB\0416\perfd.dat
2010-04-02 09:56 . 2010-04-02 09:56 38536 ----a-w- c:\windows\inf\PERFLIB\0416\perfc.dat
2010-04-02 09:56 . 2010-04-02 09:56 323154 ----a-w- c:\windows\inf\PERFLIB\0416\perfi.dat
2010-04-02 09:56 . 2010-04-02 09:56 323154 ----a-w- c:\windows\inf\PERFLIB\0416\perfh.dat
2010-04-02 09:49 . 2010-04-02 09:50 39446 ----a-w- c:\windows\system32\perfd019.dat
2010-04-02 09:49 . 2010-04-02 09:50 336704 ----a-w- c:\windows\system32\perfi019.dat
2010-04-02 09:49 . 2010-04-02 09:49 39446 ----a-w- c:\windows\inf\PERFLIB\0419\perfd.dat
2010-04-02 09:49 . 2010-04-02 09:49 39446 ----a-w- c:\windows\inf\PERFLIB\0419\perfc.dat
2010-04-02 09:49 . 2010-04-02 09:49 336704 ----a-w- c:\windows\inf\PERFLIB\0419\perfi.dat
2010-04-02 09:49 . 2010-04-02 09:49 336704 ----a-w- c:\windows\inf\PERFLIB\0419\perfh.dat
2010-04-02 09:42 . 2010-04-02 09:43 41390 ----a-w- c:\windows\system32\perfd00A.dat
2010-04-02 09:42 . 2010-04-02 09:43 341432 ----a-w- c:\windows\system32\perfi00A.dat
2010-04-02 09:42 . 2010-04-02 09:42 41390 ----a-w- c:\windows\inf\PERFLIB\0C0A\perfd.dat
2010-04-02 09:42 . 2010-04-02 09:42 41390 ----a-w- c:\windows\inf\PERFLIB\0C0A\perfc.dat
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-05-27_20.36.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-30 18:38 . 2010-05-28 14:32 34720 c:\windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 04:55 . 2010-05-28 14:32 40842 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 04:55 . 2010-05-27 20:25 40842 c:\windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-03-30 16:01 . 2010-05-28 14:32 10828 c:\windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2395478803-2595547709-390266301-1001_UserData.bin
- 2010-03-30 15:57 . 2010-05-26 12:46 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-03-30 15:57 . 2010-05-27 21:43 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-03-30 15:57 . 2010-05-27 21:43 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-03-30 15:57 . 2010-05-26 12:46 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:41 . 2010-05-26 12:46 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:41 . 2010-05-27 21:43 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:34 . 2010-05-28 14:29 71944 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-04-06 06:03 . 2010-05-27 20:11 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
+ 2010-04-06 06:03 . 2010-05-28 14:29 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
- 2010-04-06 06:03 . 2010-05-27 20:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2010-04-06 06:03 . 2010-05-28 14:29 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2010-04-06 06:03 . 2010-05-28 14:29 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
- 2010-04-06 06:03 . 2010-05-27 20:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\Cookies\index.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-03-30 16:01 . 2010-05-27 20:26 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-03-30 16:01 . 2010-05-28 14:32 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-04-02 16:03 . 2010-05-28 13:46 6292 c:\windows\System32\wdi\ERCQueuedResolutions.dat
+ 2010-05-28 14:30 . 2010-05-28 14:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-05-27 20:24 . 2010-05-27 20:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2010-05-28 14:30 . 2010-05-28 14:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2010-05-27 20:24 . 2010-05-27 20:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-05-27 21:43 . 2010-01-28 02:11 128424 c:\windows\winsxs\x86_microsoft-windows-s..ologies-webcontrols_31bf3856ad364e35_7.1.7600.16395_none_39bc056e339474f4\WatWeb.dll
+ 2010-05-27 21:43 . 2010-01-28 02:11 114600 c:\windows\winsxs\x86_microsoft-windows-s..ologies-webcontrols_31bf3856ad364e35_7.1.7600.16395_none_39bc056e339474f4\npWatWeb.dll
+ 2010-05-27 21:43 . 2010-01-28 02:11 249768 c:\windows\winsxs\x86_microsoft-windows-s..ivationtechnologies_31bf3856ad364e35_7.1.7600.16395_none_2dac82dbc20710f5\WatUX.exe
+ 2010-05-27 21:43 . 2010-05-27 21:43 128424 c:\windows\System32\Wat\WatWeb.dll
+ 2010-05-27 21:43 . 2010-05-27 21:43 249768 c:\windows\System32\Wat\WatUX.exe
+ 2010-05-27 21:43 . 2010-05-27 21:43 114600 c:\windows\System32\Wat\npWatWeb.dll
+ 2010-05-27 21:43 . 2010-01-28 02:11 1343400 c:\windows\winsxs\x86_microsoft-windows-s..ivationtechnologies_31bf3856ad364e35_7.1.7600.16395_none_2dac82dbc20710f5\WatAdminSvc.exe
+ 2010-05-27 21:43 . 2010-05-27 21:43 1343400 c:\windows\System32\Wat\WatAdminSvc.exe
+ 2009-07-14 02:03 . 2010-05-28 12:39 7077888 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 02:03 . 2010-05-27 15:46 7077888 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 04:34 . 2010-05-27 15:50 3607895 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:34 . 2010-05-28 12:27 3607895 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 08:40 . 2010-05-27 21:43 251488155 c:\windows\winsxs\ManifestCache\e4e8be02b8fae2a7_blobs.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 08:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2010-03-30 133368]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-10 26959144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-03-17 8546848]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-05-10 14:56 12464 ----a-w- c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 23:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
2010-05-10 14:55 2064736 ----a-w- c:\progra~1\AVG\AVG9\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ChrisTV Agent]
2008-11-11 12:35 275456 ----a-w- c:\program files\ChrisTV PVR Standard\ChrisTV_Agent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameShadow]
2009-11-18 14:40 614680 ----a-w- c:\program files\GameShadow\GameShadow.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameTracker]
2010-04-14 15:51 3831648 ----a-w- c:\program files\GameTracker\GTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Software Informer]
2010-04-13 15:28 2285637 ----a-w- c:\program files\Software Informer\softinfo.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-05-26 16:05 1238352 ----a-w- c:\program files\Steam\steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS11 Preload]
2007-03-03 12:12 341488 ----a-w- c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
2007-10-18 11:47 876544 ----a-w- c:\program files\WinFast\WFTVFM\WFWIZ.exe

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-03-30 691696]
R3 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-05-10 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [2010-05-10 122376]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [2010-05-10 30216]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [2010-05-10 26120]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-27 1343400]
R3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFTVFM\WFIOCTL.SYS [2005-01-06 9446]
R4 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-04-19 430152]
R4 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-05-10 916760]
R4 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-05-10 308064]
R4 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [2010-05-10 2325816]
R4 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe AVGIDSAgent [x]
R4 GS In-Game Service;GS In-Game Service;c:\program files\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\System32\Drivers\AVGIDSxx.sys [2010-05-10 25096]
S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2010-05-10 52872]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2010-05-10 216200]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2010-05-10 242896]
S1 wfcxacap;WinFast TV PCI Audio Capture Driver;c:\windows\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
S2 wfcxatun;WinFast TV Analog Tuner Driver;c:\windows\system32\drivers\wfcxatun.sys [2007-09-19 31744]
S2 WFCXVCAP;WinFast TV Video Capture Driver;c:\windows\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\DRIVERS\avgfwdx.sys [2010-05-10 30104]
S3 PAC207;Webcam 1200;c:\windows\system32\DRIVERS\PFC027.SYS [2007-06-29 611584]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;c:\windows\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
S3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;c:\windows\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
S3 wfcxxbar;WinFast TV Crossbar Driver;c:\windows\system32\drivers\wfcxxbar.sys [2007-09-19 10496]

.
.
------- Doplňkový sken -------
.
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-HijackThis - c:\users\Plajeeer\AppData\Local\Opera\Opera\temporary_downloads\HijackThis.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2395478803-2595547709-390266301-1001\Software\SecuROM\License information*]
"datasecu"=hex:2f,a6,cc,22,54,98,2e,09,86,9f,55,e6,9f,cc,83,c6,9e,7b,d3,79,f3,
fb,6b,10,ed,fa,35,5b,0e,36,d9,c3,4b,43,a5,17,6d,1f,df,2c,3f,bd,c1,d4,58,0f,\
"rkeysecu"=hex:ef,1a,82,bf,1c,7a,ef,0e,ac,94,82,f8,41,14,81,be

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2010-05-28 16:47:35
ComboFix-quarantined-files.txt 2010-05-28 14:47
ComboFix2.txt 2010-05-27 20:40

Před spuštěním: Volných bajtů: 176 780 169 216
Po spuštění: Volných bajtů: 176 548 843 520

- - End Of File - - F8F2B0DFC39AFD32C0E4FCD4339C2350

Re: prosím o kontrolu logu

Napsal: 28 kvě 2010 17:58
od Damned
Vypni antivir a pokud máš i Antispyware a odinstaluj ComboFix ( nutné ) .
ComboFix se odinstaluje takto:
Start -> Spustit a zadej do řádku: Combofix[mezera]/uninstall
*****************************************************************************************************************************************
Stáhni si OTL na Plochu.
Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na Minimální výstup.Pod Běžné registry změň na Vše, Specifické registry na Použít whitelist. Zatrhni Kontrola na havěť LOP a Kontrola na havěť Purity. Stáří souborů změň na 14 dnů. Všechny ostatní nastavení ponech jak jsou. Klikni na Prohledat. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj

Re: prosím o kontrolu logu

Napsal: 28 kvě 2010 18:27
od p.l.a.y.e.r
OTL logfile created on: 28.5.2010 18:21:50 - Run 1
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Users\Plajeeer\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 72,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 416,93 Gb Total Space | 164,59 Gb Free Space | 39,48% Space Free | Partition Type: NTFS
Drive D: | 48,73 Gb Total Space | 9,91 Gb Free Space | 20,35% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PLAJEEER-PC
Current User Name: Plajeeer
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 14 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Plajeeer\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
PRC - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Users\Plajeeer\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (avgfws9) -- C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9emc) -- C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVG Security Toolbar Service) -- C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe ()
SRV - (GS In-Game Service) -- C:\Program Files\GameTracker\GSInGameService.exe (ClanServers Hosting LLC)
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) Protokol PNRP (Peer Name Resolution Protocol) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) Instalační program ovládacích prvků ActiveX (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (Capture Device Service) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe (InterVideo Inc.)
SRV - (UleadBurningHelper) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)


========== Driver Services (SafeList) ==========

DRV - (catchme) -- File not found
DRV - (AVGIDSErHrxpx) -- C:\Windows\System32\Drivers\AVGIDSxx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AvgTdiX) -- C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) -- C:\Windows\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgLdx86) -- C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSDriverxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilterxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSShimxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgfwfd) -- C:\Windows\System32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) -- C:\Windows\System32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\system32\DRIVERS\umpass.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (HidBatt) -- C:\Windows\system32\DRIVERS\HidBatt.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (RTL8167) -- C:\Windows\System32\drivers\Rt86win7.sys (Realtek Corporation )
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (wfcxatun) -- C:\Windows\System32\drivers\wfcxatun.sys (Leadtek Research Inc.)
DRV - (wfcxdtun) -- C:\Windows\System32\drivers\wfcxdtun.sys (Leadtek Research Inc.)
DRV - (WFCXVCAP) -- C:\Windows\System32\drivers\wfcxvcap.sys (Leadtek Research Inc.)
DRV - (wfcxxbar) -- C:\Windows\System32\drivers\wfcxxbar.sys (Leadtek Research Inc.)
DRV - (wfcxtcap) -- C:\Windows\System32\drivers\wfcxtcap.sys (Leadtek Research Inc.)
DRV - (wfcxacap) -- C:\Windows\System32\drivers\wfcxacap.sys (Leadtek Research Inc.)
DRV - (PAC207) -- C:\Windows\System32\drivers\PFC027.SYS (PixArt Imaging Inc.)
DRV - (WFIOCTL) -- C:\Program Files\WinFast\WFTVFM\WFIOCTL.sys (Leadtek Research Inc.)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 8D 7C C7 13 71 FB CA 01 [binary data]
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: ([2010.05.28 16:43:19 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\System32\webcheck.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 14 Days ==========

[2010.05.28 18:19:50 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Users\Plajeeer\Desktop\OTL.exe
[2010.05.28 18:18:58 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010.05.28 16:47:38 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010.05.28 16:47:36 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010.05.28 16:47:36 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Local\temp
[2010.05.28 15:31:42 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\Emulator AC2
[2010.05.28 15:31:42 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\assassin's creed II upe vsecko
[2010.05.28 15:13:50 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\asscIIkcarc
[2010.05.27 23:43:40 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2010.05.27 22:24:03 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010.05.27 21:54:24 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Roaming\bizarre creations
[2010.05.27 18:08:18 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Roaming\Malwarebytes
[2010.05.27 18:07:59 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.05.27 18:07:58 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.05.27 18:07:58 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.05.27 18:07:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.05.27 17:36:43 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2010.05.26 22:22:08 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Documents\4A Games
[2010.05.26 22:17:29 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Local\4A Games
[2010.05.26 21:48:00 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll
[2010.05.26 21:48:00 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll
[2010.05.26 21:48:00 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll
[2010.05.26 21:48:00 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll
[2010.05.26 21:36:23 | 000,000,000 | ---D | C] -- C:\Program Files\THQ
[2010.05.26 18:01:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Steam
[2010.05.26 18:01:58 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2010.05.26 15:54:29 | 000,000,000 | ---D | C] -- C:\download
[2010.05.26 15:46:56 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader
[2010.05.26 15:46:32 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deploytk.dll
[2010.05.26 15:46:32 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.05.26 15:46:31 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.05.26 15:46:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.05.26 15:45:50 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010.05.26 15:44:03 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Roaming\Sun
[2010.05.26 07:40:57 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2010.05.24 21:20:44 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\MBWMP
[2010.05.23 21:05:00 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Documents\Mount&Blade Warband Savegames
[2010.05.23 21:03:34 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Roaming\Mount&Blade Warband
[2010.05.23 20:52:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mount&Blade Warband
[2010.05.23 10:46:37 | 000,000,000 | ---D | C] -- C:\Program Files\Divine Divinity
[2010.05.23 10:37:11 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\Divine Divinity
[2010.05.17 15:45:09 | 000,000,000 | ---D | C] -- C:\Program Files\GameTracker
[2010.05.17 15:44:57 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\AppData\Roaming\GameTracker
[2010.05.16 14:14:56 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\asdfg
[2010.05.16 11:53:48 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\mrdky
[2010.05.16 11:52:45 | 000,000,000 | ---D | C] -- C:\Users\Plajeeer\Desktop\sračky
[2010.05.16 09:19:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010.05.16 09:19:42 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010.05.28 18:22:55 | 002,359,296 | -HS- | M] () -- C:\Users\Plajeeer\NTUSER.DAT
[2010.05.28 18:19:50 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Users\Plajeeer\Desktop\OTL.exe
[2010.05.28 16:43:23 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini
[2010.05.28 16:43:19 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2010.05.28 16:40:44 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.05.28 16:40:44 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.05.28 16:30:45 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.05.28 16:30:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.05.28 16:30:39 | 1609,424,896 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.28 16:29:48 | 001,716,611 | -H-- | M] () -- C:\Users\Plajeeer\AppData\Local\IconCache.db
[2010.05.28 15:37:33 | 018,260,838 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Assassins Creed 2 - crack.rar
[2010.05.28 15:31:00 | 016,182,418 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Assassins Creed 2 CZ +emulator, crack+návod.rar
[2010.05.28 15:13:38 | 016,796,900 | ---- | M] () -- C:\Users\Plajeeer\Desktop\asscIIkcarc.rar
[2010.05.28 15:05:19 | 1881,945,242 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine Divinity.rar
[2010.05.27 18:08:01 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.27 17:46:54 | 000,001,966 | ---- | M] () -- C:\Users\Public\Desktop\Blur(TM).lnk
[2010.05.26 21:43:50 | 000,001,074 | ---- | M] () -- C:\Users\Public\Desktop\Metro 2033.lnk
[2010.05.26 20:57:07 | 000,105,365 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Dragon_by_kozmaty.jpg
[2010.05.26 20:57:01 | 000,194,782 | ---- | M] () -- C:\Users\Plajeeer\Desktop\delogo2.png
[2010.05.26 18:45:27 | 088,090,411 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Me33CZUpd.rar
[2010.05.26 18:08:27 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2010.05.26 15:48:07 | 000,000,995 | ---- | M] () -- C:\Users\Plajeeer\Desktop\JDownloader.lnk
[2010.05.26 15:45:56 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deploytk.dll
[2010.05.26 15:45:56 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2010.05.26 15:45:56 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2010.05.26 15:45:56 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2010.05.26 14:49:37 | 060,395,639 | ---- | M] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2010.05.26 08:47:39 | 1293,543,423 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Blur-ViTALiTY.iso
[2010.05.25 16:57:09 | 000,079,095 | ---- | M] () -- C:\Users\Plajeeer\Desktop\03.jpg
[2010.05.23 21:24:39 | 000,020,901 | ---- | M] () -- C:\Users\Plajeeer\Desktop\1363219-ceska-vlajka.jpg
[2010.05.23 20:59:43 | 009,161,577 | ---- | M] () -- C:\Users\Plajeeer\Desktop\MBWMP.rar
[2010.05.23 20:58:19 | 000,001,052 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Mount&Blade Warband.lnk
[2010.05.23 14:59:49 | 647,045,955 | ---- | M] () -- C:\Users\Plajeeer\Desktop\sr-mbwbd.rar
[2010.05.23 14:35:30 | 010,351,662 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.05.23 14:35:30 | 000,684,756 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2010.05.23 14:35:30 | 000,683,802 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
[2010.05.23 14:35:30 | 000,679,812 | ---- | M] () -- C:\Windows\System32\perfh010.dat
[2010.05.23 14:35:30 | 000,679,444 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2010.05.23 14:35:30 | 000,666,534 | ---- | M] () -- C:\Windows\System32\perfh019.dat
[2010.05.23 14:35:30 | 000,654,272 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2010.05.23 14:35:30 | 000,633,338 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.05.23 14:35:30 | 000,622,422 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2010.05.23 14:35:30 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.05.23 14:35:30 | 000,439,854 | ---- | M] () -- C:\Windows\System32\perfh014.dat
[2010.05.23 14:35:30 | 000,426,820 | ---- | M] () -- C:\Windows\System32\perfh001.dat
[2010.05.23 14:35:30 | 000,424,702 | ---- | M] () -- C:\Windows\System32\perfh00B.dat
[2010.05.23 14:35:30 | 000,394,780 | ---- | M] () -- C:\Windows\System32\perfh012.dat
[2010.05.23 14:35:30 | 000,371,100 | ---- | M] () -- C:\Windows\System32\prfh0404.dat
[2010.05.23 14:35:30 | 000,355,130 | ---- | M] () -- C:\Windows\System32\prfh0804.dat
[2010.05.23 14:35:30 | 000,346,476 | ---- | M] () -- C:\Windows\System32\perfh00D.dat
[2010.05.23 14:35:30 | 000,133,506 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
[2010.05.23 14:35:30 | 000,131,034 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2010.05.23 14:35:30 | 000,128,694 | ---- | M] () -- C:\Windows\System32\perfc019.dat
[2010.05.23 14:35:30 | 000,126,872 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2010.05.23 14:35:30 | 000,125,730 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.05.23 14:35:30 | 000,124,724 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2010.05.23 14:35:30 | 000,123,808 | ---- | M] () -- C:\Windows\System32\perfc010.dat
[2010.05.23 14:35:30 | 000,118,604 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2010.05.23 14:35:30 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.05.23 14:35:30 | 000,101,658 | ---- | M] () -- C:\Windows\System32\perfc012.dat
[2010.05.23 14:35:30 | 000,101,230 | ---- | M] () -- C:\Windows\System32\prfc0804.dat
[2010.05.23 14:35:30 | 000,096,316 | ---- | M] () -- C:\Windows\System32\prfc0404.dat
[2010.05.23 14:35:30 | 000,078,392 | ---- | M] () -- C:\Windows\System32\perfc00B.dat
[2010.05.23 14:35:30 | 000,075,966 | ---- | M] () -- C:\Windows\System32\perfc001.dat
[2010.05.23 14:35:30 | 000,073,804 | ---- | M] () -- C:\Windows\System32\perfc014.dat
[2010.05.23 14:35:30 | 000,066,076 | ---- | M] () -- C:\Windows\System32\perfc00D.dat
[2010.05.23 14:11:17 | 1116,339,455 | ---- | M] () -- C:\Users\Plajeeer\Desktop\CoDMW2cz_2cast.zip
[2010.05.23 13:41:49 | 1202,612,461 | ---- | M] () -- C:\Users\Plajeeer\Desktop\CoDMW2cz_1cast.zip
[2010.05.23 12:37:16 | 000,000,669 | ---- | M] () -- C:\Users\Plajeeer\Desktop\AssassinsCreedIIGame.exe – zástupce.lnk
[2010.05.23 11:11:22 | 001,703,791 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity_CZ.zip
[2010.05.23 11:08:07 | 000,001,115 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine Divinity.lnk
[2010.05.23 10:46:21 | 000,000,065 | ---- | M] () -- C:\Windows\WININIT.INI
[2010.05.23 10:34:19 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part18.rar
[2010.05.23 10:34:15 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part16.rar
[2010.05.23 10:34:12 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part17.rar
[2010.05.23 10:34:11 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part15.rar
[2010.05.23 10:33:58 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part13.rar
[2010.05.23 10:33:45 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part14.rar
[2010.05.23 10:33:24 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part12.rar
[2010.05.23 10:32:09 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part11.rar
[2010.05.23 10:26:05 | 010,696,580 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part19.rar
[2010.05.23 10:23:29 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part09.rar
[2010.05.23 10:23:28 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part10.rar
[2010.05.23 10:23:23 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part08.rar
[2010.05.23 10:23:17 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part06.rar
[2010.05.23 10:23:02 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part07.rar
[2010.05.23 10:21:17 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part05.rar
[2010.05.23 10:21:17 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part04.rar
[2010.05.23 10:20:38 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part03.rar
[2010.05.23 10:20:02 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part02.rar
[2010.05.23 10:18:51 | 104,857,600 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part01.rar
[2010.05.22 15:29:18 | 004,436,218 | ---- | M] () -- C:\Users\Plajeeer\Desktop\lbigbkdoss.mp3
[2010.05.22 15:14:06 | 000,320,971 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Genius SW HF 6000.mp3
[2010.05.22 12:08:14 | 000,007,246 | ---- | M] () -- C:\Users\Plajeeer\Desktop\s_4081421694c7fb085b94dd0976d1cd45.jpg
[2010.05.22 07:59:29 | 000,590,284 | ---- | M] () -- C:\Windows\System32\drivers\Avg\iavifw.avm
[2010.05.20 22:28:48 | 000,013,815 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Výstřižek.JPG
[2010.05.20 15:37:41 | 001,723,221 | ---- | M] () -- C:\Users\Plajeeer\Desktop\heavy new beat.mp3
[2010.05.20 15:30:04 | 000,091,711 | ---- | M] () -- C:\Users\Plajeeer\Desktop\warrior-talent-build.jpg
[2010.05.19 19:50:54 | 002,417,490 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Hot Rap Beat (Hip Hop) Instrumental Made with reason..mp3
[2010.05.18 17:12:49 | 103,723,008 | ---- | M] () -- C:\Users\Plajeeer\Desktop\ambossandslayer.mpg
[2010.05.18 17:06:47 | 002,759,122 | ---- | M] () -- C:\Users\Plajeeer\Desktop\untitled.mp3
[2010.05.18 16:59:21 | 000,090,906 | ---- | M] () -- C:\Users\Plajeeer\Desktop\lbigbdoss.mp3
[2010.05.18 16:53:47 | 003,308,982 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Dj slayer Mc Amboss májka.mp3
[2010.05.18 16:46:53 | 002,580,967 | ---- | M] () -- C:\Users\Plajeeer\Desktop\amboss.mp3
[2010.05.17 20:36:58 | 001,782,026 | ---- | M] () -- C:\Users\Plajeeer\Desktop\x86.zip
[2010.05.17 20:36:37 | 000,887,493 | ---- | M] () -- C:\Users\Plajeeer\Desktop\CX23880.5.0.18.7002.zip
[2010.05.17 16:37:30 | 000,001,040 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Wow Twinstar.lnk
[2010.05.17 16:05:49 | 000,139,128 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010.05.17 16:05:40 | 000,215,128 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2010.05.17 15:45:17 | 000,000,974 | ---- | M] () -- C:\Users\Plajeeer\Desktop\GameTracker Lite.lnk
[2010.05.17 15:44:33 | 000,210,224 | ---- | M] () -- C:\Users\Plajeeer\Desktop\GTSetup.exe
[2010.05.17 15:15:51 | 000,075,056 | ---- | M] () -- C:\Users\Plajeeer\Desktop\24883_115833091762141_100000063514608_271004_933980_n.jpg
[2010.05.17 13:13:09 | 000,437,955 | ---- | M] () -- C:\Users\Plajeeer\Desktop\(4) Battlefield-Bad-Company-2 – kopie.jpg
[2010.05.16 15:40:30 | 834,579,792 | ---- | M] () -- C:\Users\Plajeeer\Desktop\Robin.Hood.2010.TS.MD.XviD Russel Crowe.avi
[2010.05.16 15:27:48 | 000,439,383 | ---- | M] () -- C:\Users\Plajeeer\Desktop\(3) Battlefield-Bad-Company-2 – kopie.jpg
[2010.05.16 14:46:06 | 000,000,758 | ---- | M] () -- C:\Windows\win.ini
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.05.28 15:36:36 | 018,260,838 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Assassins Creed 2 - crack.rar
[2010.05.28 15:29:57 | 016,182,418 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Assassins Creed 2 CZ +emulator, crack+návod.rar
[2010.05.28 15:12:14 | 016,796,900 | ---- | C] () -- C:\Users\Plajeeer\Desktop\asscIIkcarc.rar
[2010.05.28 14:44:03 | 1881,945,242 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine Divinity.rar
[2010.05.27 18:08:01 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.27 17:46:54 | 000,001,966 | ---- | C] () -- C:\Users\Public\Desktop\Blur(TM).lnk
[2010.05.27 17:31:08 | 1293,543,423 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Blur-ViTALiTY.iso
[2010.05.26 21:43:50 | 000,001,074 | ---- | C] () -- C:\Users\Public\Desktop\Metro 2033.lnk
[2010.05.26 21:27:43 | 2871,097,344 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Metro 2033 DVD 2.iso
[2010.05.26 20:57:07 | 000,105,365 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Dragon_by_kozmaty.jpg
[2010.05.26 20:57:01 | 000,194,782 | ---- | C] () -- C:\Users\Plajeeer\Desktop\delogo2.png
[2010.05.26 20:35:46 | 4000,065,536 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Metro 2033 DVD 1.iso
[2010.05.26 18:22:27 | 088,090,411 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Me33CZUpd.rar
[2010.05.26 18:01:58 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2010.05.26 15:48:07 | 000,000,995 | ---- | C] () -- C:\Users\Plajeeer\Desktop\JDownloader.lnk
[2010.05.26 07:40:58 | 000,419,880 | ---- | C] () -- C:\Windows\System32\locale.nls
[2010.05.25 16:57:09 | 000,079,095 | ---- | C] () -- C:\Users\Plajeeer\Desktop\03.jpg
[2010.05.23 21:24:39 | 000,020,901 | ---- | C] () -- C:\Users\Plajeeer\Desktop\1363219-ceska-vlajka.jpg
[2010.05.23 20:59:40 | 009,161,577 | ---- | C] () -- C:\Users\Plajeeer\Desktop\MBWMP.rar
[2010.05.23 20:58:19 | 000,001,052 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Mount&Blade Warband.lnk
[2010.05.23 20:40:06 | 000,000,074 | ---- | C] () -- C:\Users\Plajeeer\Desktop\sr-mbwbd.cue
[2010.05.23 20:39:07 | 647,035,200 | ---- | C] () -- C:\Users\Plajeeer\Desktop\sr-mbwbd.mds
[2010.05.23 14:42:10 | 647,045,955 | ---- | C] () -- C:\Users\Plajeeer\Desktop\sr-mbwbd.rar
[2010.05.23 13:53:28 | 1116,339,455 | ---- | C] () -- C:\Users\Plajeeer\Desktop\CoDMW2cz_2cast.zip
[2010.05.23 13:22:39 | 1202,612,461 | ---- | C] () -- C:\Users\Plajeeer\Desktop\CoDMW2cz_1cast.zip
[2010.05.23 12:37:16 | 000,000,669 | ---- | C] () -- C:\Users\Plajeeer\Desktop\AssassinsCreedIIGame.exe – zástupce.lnk
[2010.05.23 11:11:21 | 001,703,791 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity_CZ.zip
[2010.05.23 11:08:07 | 000,001,115 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine Divinity.lnk
[2010.05.23 10:46:21 | 000,000,065 | ---- | C] () -- C:\Windows\WININIT.INI
[2010.05.23 10:24:54 | 010,696,580 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part19.rar
[2010.05.23 10:24:42 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part18.rar
[2010.05.23 10:24:34 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part17.rar
[2010.05.23 10:24:26 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part16.rar
[2010.05.23 10:24:18 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part15.rar
[2010.05.23 10:24:10 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part14.rar
[2010.05.23 10:24:03 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part13.rar
[2010.05.23 10:23:53 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part12.rar
[2010.05.23 10:23:42 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part11.rar
[2010.05.23 10:13:27 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part10.rar
[2010.05.23 10:13:19 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part09.rar
[2010.05.23 10:13:09 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part08.rar
[2010.05.23 10:13:00 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part07.rar
[2010.05.23 10:12:50 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part06.rar
[2010.05.23 10:10:51 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part05.rar
[2010.05.23 10:10:41 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part04.rar
[2010.05.23 10:10:33 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part03.rar
[2010.05.23 10:10:26 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part02.rar
[2010.05.23 10:10:16 | 104,857,600 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Divine_Divinity.part01.rar
[2010.05.22 15:22:50 | 004,436,218 | ---- | C] () -- C:\Users\Plajeeer\Desktop\lbigbkdoss.mp3
[2010.05.22 15:13:58 | 000,320,971 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Genius SW HF 6000.mp3
[2010.05.22 12:08:13 | 000,007,246 | ---- | C] () -- C:\Users\Plajeeer\Desktop\s_4081421694c7fb085b94dd0976d1cd45.jpg
[2010.05.20 22:28:48 | 000,013,815 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Výstřižek.JPG
[2010.05.20 15:37:30 | 001,723,221 | ---- | C] () -- C:\Users\Plajeeer\Desktop\heavy new beat.mp3
[2010.05.20 15:30:04 | 000,091,711 | ---- | C] () -- C:\Users\Plajeeer\Desktop\warrior-talent-build.jpg
[2010.05.19 19:50:32 | 002,417,490 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Hot Rap Beat (Hip Hop) Instrumental Made with reason..mp3
[2010.05.18 17:11:30 | 103,723,008 | ---- | C] () -- C:\Users\Plajeeer\Desktop\ambossandslayer.mpg
[2010.05.18 17:06:28 | 002,759,122 | ---- | C] () -- C:\Users\Plajeeer\Desktop\untitled.mp3
[2010.05.18 16:59:17 | 000,090,906 | ---- | C] () -- C:\Users\Plajeeer\Desktop\lbigbdoss.mp3
[2010.05.18 16:51:28 | 003,308,982 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Dj slayer Mc Amboss májka.mp3
[2010.05.18 16:46:36 | 002,580,967 | ---- | C] () -- C:\Users\Plajeeer\Desktop\amboss.mp3
[2010.05.17 20:36:58 | 001,782,026 | ---- | C] () -- C:\Users\Plajeeer\Desktop\x86.zip
[2010.05.17 20:36:37 | 000,887,493 | ---- | C] () -- C:\Users\Plajeeer\Desktop\CX23880.5.0.18.7002.zip
[2010.05.17 16:37:30 | 000,001,040 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Wow Twinstar.lnk
[2010.05.17 15:45:17 | 000,000,974 | ---- | C] () -- C:\Users\Plajeeer\Desktop\GameTracker Lite.lnk
[2010.05.17 15:44:33 | 000,210,224 | ---- | C] () -- C:\Users\Plajeeer\Desktop\GTSetup.exe
[2010.05.17 15:15:51 | 000,075,056 | ---- | C] () -- C:\Users\Plajeeer\Desktop\24883_115833091762141_100000063514608_271004_933980_n.jpg
[2010.05.17 13:13:09 | 000,437,955 | ---- | C] () -- C:\Users\Plajeeer\Desktop\(4) Battlefield-Bad-Company-2 – kopie.jpg
[2010.05.16 15:27:48 | 000,439,383 | ---- | C] () -- C:\Users\Plajeeer\Desktop\(3) Battlefield-Bad-Company-2 – kopie.jpg
[2010.05.16 14:55:06 | 834,579,792 | ---- | C] () -- C:\Users\Plajeeer\Desktop\Robin.Hood.2010.TS.MD.XviD Russel Crowe.avi
[2010.05.08 22:16:40 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2010.05.08 22:16:40 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2010.05.08 11:31:49 | 000,000,298 | ---- | C] () -- C:\Windows\game.ini
[2010.04.28 15:58:27 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2010.04.22 16:54:43 | 000,001,376 | ---- | C] () -- C:\Windows\System32\zipfapy.dll
[2010.04.14 22:23:59 | 000,000,196 | ---- | C] () -- C:\Windows\ulead32.ini
[2010.04.11 12:25:00 | 000,210,456 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2010.04.11 12:25:00 | 000,206,360 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2010.04.11 12:25:00 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2010.04.11 12:25:00 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2010.04.11 12:25:00 | 000,194,072 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2010.04.11 12:25:00 | 000,026,136 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2010.04.10 16:02:57 | 000,815,104 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.04.10 16:02:57 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.04.03 20:41:44 | 000,139,128 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010.03.30 22:16:51 | 000,000,566 | ---- | C] () -- C:\Windows\System32\SP207.INI
[2009.11.06 10:58:04 | 000,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009.07.14 02:55:09 | 000,587,776 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll
[2009.07.14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2002.03.17 02:00:00 | 000,007,420 | ---- | C] () -- C:\Windows\UA000080.DLL

========== LOP Check ==========

[2010.04.27 15:49:19 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Ashampoo
[2010.05.13 13:59:00 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\AVG9
[2010.04.10 13:24:38 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\avidemux
[2010.05.27 21:54:24 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\bizarre creations
[2010.04.01 15:50:12 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\DAEMON Tools Lite
[2010.03.30 22:22:27 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Faces
[2010.05.26 17:45:57 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\GameTracker
[2010.04.01 18:39:21 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Hardcore
[2010.05.28 16:32:28 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\ICQ
[2010.05.24 21:33:14 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Mount&Blade Warband
[2010.03.30 18:05:53 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Opera
[2010.05.26 17:33:11 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Software Informer
[2010.04.06 17:57:09 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Ubisoft
[2010.04.11 14:10:35 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\Ulead Systems
[2010.05.02 00:17:39 | 000,000,000 | ---D | M] -- C:\Users\Plajeeer\AppData\Roaming\uTorrent
[2009.07.14 06:53:46 | 000,026,256 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:05EE1EEF
< End of report >

Re: prosím o kontrolu logu

Napsal: 28 kvě 2010 18:28
od p.l.a.y.e.r
OTL Extras logfile created on: 28.5.2010 18:21:50 - Run 1
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Users\Plajeeer\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 72,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 416,93 Gb Total Space | 164,59 Gb Free Space | 39,48% Space Free | Partition Type: NTFS
Drive D: | 48,73 Gb Total Space | 9,91 Gb Free Space | 20,35% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PLAJEEER-PC
Current User Name: Plajeeer
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 14 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\opera.exe" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}" = Risen
"{16D919E6-F019-4E15-BFBE-4A85EF19DA57}" = Oblivion - Spell Tomes
"{1A0D2EFC-C4FC-446A-8BC3-57A54CE5EADD}" = Opera 10.53
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 15
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{30BA90A9-E6B4-4FFC-8BC5-B7F2E014F432}" = Hitman Blood Money
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{418EC9DD-25EE-4C3F-8827-B7AA9B26405B}" = WinFast Multimedia Driver Installation
"{48A25E19-D9AE-4BBE-9411-6F4C5D328B39}" = Skype™ Beta 5.0
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}" = InterVideo DeviceService
"{54194F60-988C-4D03-B922-C2B00EFDA39A}" = NVIDIA PhysX
"{589A63D3-89E1-4D9B-8DBC-6039BB27289E}" = Activision(R)
"{66D475AE-F18B-43A0-8BAF-61AF4403E339}" = Webcam 1200
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}" = Tom Clancy's Splinter Cell Conviction
"{71BFC818-0CED-42D6-9C87-5142918957EE}" = ICQ7.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8ED35B48-AFBD-4F32-8271-2257AD8B907E}_is1" = Grand Theft Auto IV - Episodes From Liberty City
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{934519A2-4D50-4B83-A459-92D90E9E3188}" = WinFast PVR
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DEBE760-F2D0-11DD-6784-0195548618BE}" = GameShadow V3.0
"{A0A20753-92DF-4631-82B4-9CACE2FCED6A}" = Oblivion - The Fighter's Stronghold
"{A1C962E2-2426-49C6-A38B-9A07E40D607C}" = Microsoft Games for Windows - LIVE
"{AC76BA86-7AD7-1029-7B44-A93000000001}" = Adobe Reader 9.3 - Czech
"{BC489A88-74F1-48BF-8CE6-71FC8C235560}_is1" = ChrisTV PVR Standard 5.51
"{C325F588-D6B1-4A7F-B6A2-914C75DDA348}" = Morrowind
"{C69405BB-27AF-4940-B3DA-04910B4DFD23}_is1" = aTube Catcher 1.0
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{DB3C800B-081B-4146-B4E3-EFB5B77AA913}" = TES Construction Set
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = VideoStudio
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF70923C-8A51-47F4-A7E9-893C6D54EB68}" = TES Construction Set
"{FFFFFD17-B460-41EB-93F1-C48ABAD63828}" = Oblivion - Thieves Den
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE
"ASIO4ALL" = ASIO4ALL
"AVG9Uninstall" = AVG 9.0
"Avidemux 2.5" = Avidemux 2.5
"Divine Divinity" = Divine Divinity
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"FL Studio 9" = FL Studio 9
"Fraps" = Fraps (remove only)
"Free YouTube Download_is1" = Free YouTube Download 1.2
"GameParkClient_is1" = GamePark
"GameTracker Lite" = GameTracker Lite
"God Of War II_is1" = God Of War II
"IL Download Manager" = IL Download Manager
"InstallShield_{589A63D3-89E1-4D9B-8DBC-6039BB27289E}" = Blur(TM)
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = Ulead VideoStudio 11
"JDownloader" = JDownloader
"lgooblivionshiveringislesczech_is1" = Lightning Oblivion Shivering Isles Czech
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Metro 2033_is1" = Metro 2033
"Mount&Blade Warband" = Mount&Blade Warband
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"OpenAL" = OpenAL
"PoiZone" = PoiZone
"PunkBusterSvc" = PunkBuster Services
"save2pc Light_is1" = save2pc Light 4.02
"save2pc_is1" = save2pc 4.04
"Sawer" = Sawer
"Scorpions WinCheater 2.07 (s databází 112)_is1" = Scorpions WinCheater
"Software Informer_is1" = Software Informer 1.0 BETA
"Total Video Converter 3.12_is1" = Total Video Converter 3.12 080330
"Toxic Biohazard" = Toxic Biohazard
"uTorrent" = µTorrent
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"WinRAR archiver" = WinRAR archiver
"World of Warcraft" = World of Warcraft
"Xvid_is1" = Xvid 1.2.1 final uninstall
"YouTube Downloader_is1" = CENZURA 2.5

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 23.5.2010 12:31:59 | Computer Name = Plajeeer-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: sidebar.exe, verze: 6.1.7600.16385, časové
razítko: 0x4a5bc613 Název chybujícího modulu: ntdll.dll, verze: 6.1.7600.16385,
časové razítko: 0x4a5bdadb Kód výjimky: 0xc0000005 Posun chyby: 0x0002bc70 ID chybujícího
procesu: 0x788 Čas spuštění chybující aplikace: 0x01cafa469513f5e2 Cesta k chybující
aplikaci: C:\Program Files\Windows Sidebar\sidebar.exe Cesta k chybujícímu modulu:
C:\Windows\SYSTEM32\ntdll.dll ID zprávy: b543ddc3-6688-11df-aebb-001d7d9f8878

Error - 23.5.2010 14:52:54 | Computer Name = Plajeeer-PC | Source = VSS | ID = 8194
Description =

Error - 25.5.2010 10:25:17 | Computer Name = Plajeeer-PC | Source = VSS | ID = 8194
Description =

Error - 26.5.2010 16:02:22 | Computer Name = Plajeeer-PC | Source = Application Hang | ID = 1002
Description = Program vpatch.exe verze 3.5.1.0 přestal spolupracovat se systémem
Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto
problému, vyhledejte historii problému v ovládacím panelu Centrum akcí. ID procesu:
1db0 Čas spuštění: 01cafd0e42b5d404 Čas ukončení: 42 Cesta k aplikaci: C:\Users\Plajeeer\AppData\Local\Temp\_ir_vp2_temp_0\vpatch.exe

ID
hlášení: 958078e6-6901-11df-ba71-001d7d9f8878

Error - 27.5.2010 9:12:21 | Computer Name = Plajeeer-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\Users\Plajeeer\AppData\Local\Temp\pft8c98~tmp\Vista64\RAVBg64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 27.5.2010 9:12:22 | Computer Name = Plajeeer-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\Users\Plajeeer\AppData\Local\Temp\pft8c98~tmp\Vista64\RAVCpl64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 27.5.2010 9:12:23 | Computer Name = Plajeeer-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro c:\Users\Plajeeer\AppData\Local\Temp\pft8c98~tmp\Vista64\vncutil64.exe
se nezdařilo. Závislé sestavení Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 27.5.2010 16:13:27 | Computer Name = Plajeeer-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Blur.exe, verze: 0.0.0.0, časové razítko:
0x562b029a Název chybujícího modulu: Blur.exe, verze: 0.0.0.0, časové razítko: 0x562b029a
Kód
výjimky: 0xc0000005 Posun chyby: 0x001ec5a0 ID chybujícího procesu: 0x1554 Čas spuštění
chybující aplikace: 0x01cafdd661c9d2a0 Cesta k chybující aplikaci: C:\Program Files\Activision\Blur(TM)\Blur.exe
Cesta
k chybujícímu modulu: C:\Program Files\Activision\Blur(TM)\Blur.exe ID zprávy: 4f2aabdb-69cc-11df-bd76-001d7d9f8878

Error - 27.5.2010 17:38:33 | Computer Name = Plajeeer-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Blur.exe, verze: 0.0.0.0, časové razítko:
0x562b029a Název chybujícího modulu: Blur.exe, verze: 0.0.0.0, časové razítko: 0x562b029a
Kód
výjimky: 0xc0000005 Posun chyby: 0x00012708 ID chybujícího procesu: 0xb0c Čas spuštění
chybující aplikace: 0x01cafdde7dee5b93 Cesta k chybující aplikaci: C:\Program Files\Activision\Blur(TM)\Blur.exe
Cesta
k chybujícímu modulu: C:\Program Files\Activision\Blur(TM)\Blur.exe ID zprávy: 3276ca3c-69d8-11df-834c-001d7d9f8878

Error - 28.5.2010 12:18:22 | Computer Name = Plajeeer-PC | Source = Application Error | ID = 1000
Description = Název chybující aplikace: Blur.exe, verze: 0.0.0.0, časové razítko:
0x562b029a Název chybujícího modulu: Blur.exe, verze: 0.0.0.0, časové razítko: 0x562b029a
Kód
výjimky: 0xc0000005 Posun chyby: 0x00012708 ID chybujícího procesu: 0xb48 Čas spuštění
chybující aplikace: 0x01cafe7c9e9a1918 Cesta k chybující aplikaci: C:\Program Files\Activision\Blur(TM)\Blur.exe
Cesta
k chybujícímu modulu: C:\Program Files\Activision\Blur(TM)\Blur.exe ID zprávy: a230a3af-6a74-11df-bfea-001d7d9f8878

[ Media Center Events ]
Error - 5.4.2010 12:31:42 | Computer Name = Plajeeer-PC | Source = MCUpdate | ID = 0
Description = 18:31:42 - Načtení položky Directory se nezdařilo. (Chyba: Nadřízené
připojení bylo uzavřeno: Došlo k neočekávané chybě při příjmu.)

Error - 11.4.2010 15:16:32 | Computer Name = Plajeeer-PC | Source = MCUpdate | ID = 0
Description = 21:16:20 - Chyba při připojování k Internetu 21:16:20 - Nelze kontaktovat
server..

Error - 11.4.2010 15:18:09 | Computer Name = Plajeeer-PC | Source = MCUpdate | ID = 0
Description = 21:17:57 - Chyba při připojování k Internetu 21:17:57 - Nelze kontaktovat
server..

Error - 13.4.2010 12:09:31 | Computer Name = Plajeeer-PC | Source = MCUpdate | ID = 0
Description = 18:09:31 - Načtení položky Directory se nezdařilo. (Chyba: Platnost
operace vypršela.)

[ System Events ]
Error - 27.5.2010 1:36:38 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7016
Description = Služba NVIDIA Stereoscopic 3D Driver Service ohlásila neplatný současný
stav 0.

Error - 27.5.2010 10:12:13 | Computer Name = Plajeeer-PC | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error - 27.5.2010 10:12:17 | Computer Name = Plajeeer-PC | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\DR0 má chybný blok.

Error - 27.5.2010 16:26:45 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 27.5.2010 16:36:20 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 28.5.2010 8:26:18 | Computer Name = Plajeeer-PC | Source = DCOM | ID = 10005
Description =

Error - 28.5.2010 8:26:17 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby Windows Search bylo dosaženo časového
limitu (30000 ms).

Error - 28.5.2010 8:26:18 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7000
Description = Služba Windows Search neuspěla při spuštění v důsledku následující
chyby: %%1053

Error - 28.5.2010 10:34:27 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.

Error - 28.5.2010 10:43:21 | Computer Name = Plajeeer-PC | Source = Service Control Manager | ID = 7030
Description = Služba PEVSystemStart je označena jako interaktivní služba. Avšak
systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba
nebude fungovat správně.


< End of report >

Re: prosím o kontrolu logu

Napsal: 28 kvě 2010 18:42
od Damned
Odinstaloval si ComboFix?

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/Opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
DRV - (catchme) -- File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:05EE1EEF

:Files
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\System32\zipfapy.dll
C:\Recycler
C:\$RECYCLE.BIN
C:\327882R2FWJFW
C:\ComboFix
C:\Qoobox
C:\Combofix.txt
C:\Windows\PEV.exe
C:\Windows\SWXCACLS.exe
C:\Windows\SWREG.exe
C:\Windows\SWSC.exe
C:\Windows\sed.exe
C:\Windows\grep.exe
C:\Windows\NIRCMD.exe
C:\ComboFix
C:\Qoobox
C:\Windows\tasks\SA.DAT

:Reg

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]



Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.
Časové pásmo: UTC+02:00
Stránka 1 z 2
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/