Zamrzá mně PC po spuštění Ultimy Online

[Damned]

Stáhni si OTL na Plochu.
Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Výstup klikni na Minimální výstup, zaškrtni Pro všechny uživatele.Pod Běžné registry změň na Vše, Specifické registry na Vše. Zatrhni Kontrola na havěť LOP a Kontrola na havěť Purity. Stáří souborů změň na 14 dnů. Všechny ostatní nastavení ponech jak jsou. Klikni na Prohledat. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj.

[Reklama]

[Dirion]

OTL logfile created on: 4.4.2012 8:46:55 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\Pavel\Dokumenty\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,48 Mb Total Physical Memory | 497,00 Mb Available Physical Memory | 48,56% Memory free
2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,46% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,03 Gb Total Space | 129,65 Gb Free Space | 87,00% Space Free | Partition Type: NTFS

Computer Name: DIRION | User Name: Pavel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 14 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Pavel\Dokumenty\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\QIP 2012\qip.exe (QIP)
PRC - C:\Program Files\QipGuard\QipGuard.exe (QIP.ru)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\RocketDock\RocketDock.exe ()
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe (Nuance Communications, Inc.)
PRC - C:\Program Files\GigaByte\VGA Utility Manager\G-vga.exe ()
PRC - C:\WINDOWS\system32\nvraidservice.exe (NVIDIA Corporation)
PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\system32\28463\AIPI.006 ()
MOD - C:\WINDOWS\system32\28463\AIPI.007 ()
MOD - C:\Program Files\WinRAR\rarlng.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Program Files\QIP 2012\Plugins\Win7Helper\Win7Helper.dll ()
MOD - C:\Program Files\QIP 2012\Plugins\cards\cards.dll ()
MOD - C:\Program Files\QIP 2012\Protos\Social\Social.dll ()
MOD - C:\Program Files\QIP 2012\Protos\MRA\mra.dll ()
MOD - C:\Program Files\QIP 2012\Protos\MRA\pics.dll ()
MOD - C:\Program Files\QIP 2012\Protos\InfICQ\inficq.dll ()
MOD - C:\Program Files\QIP 2012\Core\WebWindow.dll ()
MOD - C:\Program Files\QIP 2012\Core\voip.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Program Files\RocketDock\RocketDock.exe ()
MOD - C:\Program Files\RocketDock\RocketDock.dll ()
MOD - C:\Program Files\GigaByte\VGA Utility Manager\G-vga.exe ()
MOD - C:\Program Files\GigaByte\VGA Utility Manager\GVGENL.DLL ()
MOD - C:\Program Files\GigaByte\VGA Utility Manager\GVTunner.dll ()
MOD - C:\Program Files\GigaByte\VGA Utility Manager\NVFLASHL.DLL ()


========== Win32 Services (SafeList) ==========

SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (QipGuard) -- C:\Program Files\QipGuard\QipGuard.exe (QIP.ru)
SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)


========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (GPCIDrv) -- C:\WINDOWS\GPCIDrv.sys ()
DRV - (GVTDrv) -- C:\WINDOWS\system32\drivers\GVTDrv.sys ()
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (epfwtdir) -- C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (DumpDrv) -- C:\WINDOWS\System32\drivers\dumpdrv.sys (Microsoft Corporation)
DRV - (nvatabus) -- C:\WINDOWS\system32\drivers\nvatabus.sys (NVIDIA Corporation)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (GVCplDrv) -- C:\WINDOWS\System32\drivers\GVCplDrv.sys ()
DRV - (W8100PCI) -- C:\WINDOWS\system32\drivers\mrv8k51.sys (Marvell Semiconductor, Inc)
DRV - (ASNDIS5) -- C:\WINDOWS\system32\ASNDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\..\SearchScopes,DefaultScope = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\SearchScopes,DefaultScope = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}: "URL" = http://search.qip.ru/search?query={searchTerms}&from=IE
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2012.03.20 21:28:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012.03.26 09:56:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012.03.21 08:19:07 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Pavel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\17.0.963.78\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Pavel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\17.0.963.78\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Pavel\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\17.0.963.78\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\
CHR - Extension: Gmail = C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,737 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\Toolbar\ShellBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AIPI Agent] C:\WINDOWS\system32\28463\AIPI.exe ()
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [Norton] C:\Program Files\ASUS\WLAN Card Utilities\NorExec.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [VGAUtil] C:\Program Files\GigaByte\VGA Utility Manager\G-vga.exe ()
O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004..\Run: [Infium] C:\Program Files\QIP 2012\qip.exe (QIP)
O4 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2532FDFF-09AB-452E-9353-F888D25BF03E}: DhcpNameServer = 10.0.0.138 192.168.2.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - (%SystemRoot%\System32\dimsntfy.dll) - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\RailNotification: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Proces mezipaměti kategorií součástí - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.03.20 21:27:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 14 Days ==========

[2012.04.03 08:48:59 | 000,357,376 | ---- | C] (SteelWerX) -- C:\Documents and Settings\Pavel\Plocha\regsearch.exe
[2012.04.02 09:46:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CrystalDiskInfo
[2012.04.02 09:46:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\OpenCandy
[2012.04.02 09:46:13 | 000,000,000 | ---D | C] -- C:\Program Files\CrystalDiskInfo
[2012.04.01 18:52:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\Skype
[2012.04.01 18:52:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Skype
[2012.04.01 18:52:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012.04.01 18:52:15 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2012.04.01 18:52:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Skype
[2012.03.30 14:11:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Nabídka Start\Programy\Razor
[2012.03.30 14:11:50 | 000,000,000 | ---D | C] -- C:\Program Files\Razor
[2012.03.30 13:54:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\EA Games
[2012.03.30 13:51:09 | 000,000,000 | ---D | C] -- C:\Program Files\EA Games
[2012.03.27 20:56:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Temp
[2012.03.27 20:56:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Adobe
[2012.03.27 20:55:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012.03.27 20:55:09 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012.03.27 20:54:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Adobe
[2012.03.27 11:37:52 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Documents and Settings\Pavel\Plocha\Minecraft.exe
[2012.03.27 11:33:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\.minecraft
[2012.03.26 09:57:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Nabídka Start\Programy\Andaria
[2012.03.26 09:57:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Sun
[2012.03.26 09:57:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.03.26 09:56:52 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012.03.26 09:56:52 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.03.26 09:56:52 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.03.26 09:56:52 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.03.26 09:56:52 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012.03.26 09:56:43 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012.03.26 09:55:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\Sun
[2012.03.23 14:07:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
[2012.03.23 13:48:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2012.03.23 11:34:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\Windows Search
[2012.03.23 11:10:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Dokumenty\ZPS14
[2012.03.23 11:10:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\Zoner
[2012.03.23 11:10:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Zoner
[2012.03.23 11:10:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Zoner
[2012.03.23 11:09:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Zoner Photo Studio 14
[2012.03.23 11:08:25 | 000,000,000 | ---D | C] -- C:\Program Files\Zoner
[2012.03.23 10:57:30 | 000,000,000 | ---D | C] -- C:\Program Files\screenshots
[2012.03.23 10:57:29 | 000,000,000 | ---D | C] -- C:\Program Files\data
[2012.03.23 10:51:30 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2012.03.23 10:50:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Nabídka Start\Programy\San Andreas Multiplayer
[2012.03.23 10:50:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Dokumenty\GTA San Andreas User Files
[2012.03.23 09:33:33 | 000,000,000 | ---D | C] -- C:\Program Files\UOAM
[2012.03.23 09:18:29 | 000,000,000 | ---D | C] -- C:\Program Files\Rockstar Games
[2012.03.23 09:18:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Rockstar Games
[2012.03.23 09:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Scansoft
[2012.03.22 22:32:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Barbie(TM)
[2012.03.22 22:31:38 | 000,000,000 | ---D | C] -- C:\Program Files\Barbie(TM) Dobrodruzstvi s konmi(TM)
[2012.03.22 22:31:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\InstallShield
[2012.03.22 22:31:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Nabídka Start\Programy\WinRAR
[2012.03.22 22:31:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\WinRAR
[2012.03.22 22:31:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\WinRAR
[2012.03.22 22:30:59 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2012.03.22 22:21:49 | 000,000,000 | -HSD | C] -- C:\WINDOWS\System32\28463
[2012.03.22 21:39:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Plocha\Terka
[2012.03.22 21:20:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Nabídka Start\Programy\Emilka Holubová - Montezumův poklad
[2012.03.22 21:20:03 | 000,000,000 | ---D | C] -- C:\Program Files\Emilka Holubová - Montezumův poklad
[2012.03.22 19:46:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\Canon
[2012.03.22 19:45:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Registrace uživatele zařízení Canon MP520 series
[2012.03.22 19:45:04 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2012.03.22 19:44:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\InstallShield
[2012.03.22 19:44:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Data aplikací\ScanSoft
[2012.03.22 19:44:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\ScanSoft OmniPage SE 4
[2012.03.22 19:44:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ScanSoft Shared
[2012.03.22 19:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ScanSoft
[2012.03.22 19:44:21 | 000,000,000 | ---D | C] -- C:\Program Files\ScanSoft
[2012.03.22 19:41:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon Utilities
[2012.03.22 19:41:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon MP520 series Manual
[2012.03.22 19:41:04 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2012.03.22 19:40:57 | 000,215,040 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMLM94.DLL
[2012.03.22 19:40:55 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\CanonIJ Uninstaller Information
[2012.03.22 19:40:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon MP520 series
[2012.03.22 19:40:45 | 000,200,704 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC520L.DLL
[2012.03.22 19:40:45 | 000,188,416 | ---- | C] (Canon Inc.) -- C:\WINDOWS\System32\CNC520O.DLL
[2012.03.22 19:40:45 | 000,098,304 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC520I.DLL
[2012.03.22 19:40:44 | 001,400,832 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC520C.DLL
[2012.03.22 19:40:30 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2012.03.22 19:38:45 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2012.03.22 19:25:13 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys
[2012.03.22 18:55:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\.thumbnails
[2012.03.22 18:54:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\.gimp-2.6
[2012.03.22 18:54:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pavel\Dokumenty\gegl-0.0
[2012.03.22 18:54:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\GIMP
[2012.03.22 18:53:41 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2012.03.21 17:01:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012.03.21 15:25:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2012.04.04 08:41:47 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.04.04 08:41:43 | 000,013,440 | ---- | M] () -- C:\WINDOWS\GPCIDrv.sys
[2012.04.04 08:41:43 | 000,000,004 | ---- | M] () -- C:\WINDOWS\System32\GVGenl.ref
[2012.04.04 08:41:13 | 000,026,682 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012.04.04 08:41:13 | 000,023,524 | ---- | M] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2012.04.04 08:41:13 | 000,000,004 | ---- | M] () -- C:\WINDOWS\System32\GVTunner.ref
[2012.04.04 08:40:59 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.04.02 09:46:15 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\CrystalDiskInfo.lnk
[2012.04.01 18:52:19 | 000,001,896 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2012.03.30 14:11:51 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Razor.lnk
[2012.03.30 13:54:49 | 000,002,022 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Ultima Online Registration.lnk
[2012.03.30 13:54:49 | 000,001,825 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Ultima Online Mondain's Legacy.lnk
[2012.03.27 20:55:18 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader X.lnk
[2012.03.27 11:26:28 | 000,215,012 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Danger_in_Paradise_by_DerMonkey.jpg
[2012.03.27 11:26:02 | 000,096,069 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\classic_allen__s_by_good_e_nuf-d4df81l.jpg
[2012.03.27 11:23:59 | 000,213,161 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\17972miscellaneousnucle.jpg
[2012.03.27 11:23:47 | 000,046,810 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\155260.jpg
[2012.03.27 08:54:07 | 000,031,017 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Paladin_by_littleac.JPG
[2012.03.27 08:33:56 | 000,689,050 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 1561.PNG
[2012.03.27 08:33:56 | 000,004,092 | ---- | M] () -- C:\Documents and Settings\Pavel\.recently-used.xbel
[2012.03.26 11:00:02 | 001,058,550 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Mapa barva.bmp
[2012.03.26 09:57:46 | 000,000,000 | ---- | M] () -- C:\AndariaPatcherConfig.xml
[2012.03.26 09:57:35 | 000,002,316 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Andaria Patcher.lnk
[2012.03.26 09:56:45 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2012.03.26 09:56:45 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2012.03.26 09:56:45 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2012.03.26 09:56:45 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2012.03.26 09:56:45 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2012.03.26 09:31:34 | 000,712,497 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 5.PNG
[2012.03.26 08:13:41 | 000,518,190 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.03.26 08:13:41 | 000,502,444 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.03.26 08:13:41 | 000,110,738 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.03.26 08:13:41 | 000,087,968 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.03.23 15:55:18 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\UO Auto-Map.lnk
[2012.03.23 14:20:54 | 000,683,127 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 2.PNG
[2012.03.23 13:54:32 | 000,105,416 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.23 11:50:35 | 000,679,219 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Ukázka.PNG
[2012.03.23 11:09:16 | 000,001,704 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Zoner Photo Studio 14.lnk
[2012.03.23 10:57:30 | 000,064,346 | ---- | M] () -- C:\Program Files\Óäŕëčňü s0beit.exe
[2012.03.23 10:57:30 | 000,002,301 | ---- | M] () -- C:\Program Files\Uninstall.ini
[2012.03.23 10:51:30 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2012.03.23 09:18:29 | 000,001,591 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\GTA San Andreas.lnk
[2012.03.22 22:32:59 | 000,001,828 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Barbie(TM) Dobrodružství s koňmi(TM).lnk
[2012.03.22 22:32:55 | 000,000,098 | ---- | M] () -- C:\WINDOWS\ka.ini
[2012.03.22 21:20:08 | 000,001,782 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Pohádky zdarma ke stažení.lnk
[2012.03.22 21:20:08 | 000,001,775 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Špidla Data Processing, s.r.o..lnk
[2012.03.22 21:20:08 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Hry zdarma ke stažení.lnk
[2012.03.22 21:20:08 | 000,000,911 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\Emilka Holubová - Montezumův poklad.lnk
[2012.03.22 20:01:39 | 006,952,497 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\zip.zip
[2012.03.22 19:59:50 | 026,099,574 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\sc0000.bmp
[2012.03.22 19:50:14 | 026,099,574 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\boty.bmp
[2012.03.22 19:45:50 | 000,001,685 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Registrace uživatele zařízení Canon MP520 series.LNK
[2012.03.22 19:44:43 | 000,000,412 | ---- | M] () -- C:\WINDOWS\MAXLINK.INI
[2012.03.22 19:43:17 | 000,001,644 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\My Printer.lnk
[2012.03.22 19:42:56 | 000,001,680 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Canon Solution Menu.lnk
[2012.03.22 19:42:37 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Easy-PhotoPrint EX.lnk
[2012.03.22 19:41:52 | 000,001,736 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\MP Navigator EX 1.0.lnk
[2012.03.22 19:41:15 | 000,001,902 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\MP520 series Příručka online.lnk
[2012.03.22 18:55:33 | 000,676,855 | ---- | M] () -- C:\Documents and Settings\Pavel\Plocha\pergament.png
[2012.03.22 18:54:36 | 000,000,778 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\GIMP 2.lnk
[2012.03.21 17:02:24 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.04.02 09:46:15 | 000,001,643 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\CrystalDiskInfo.lnk
[2012.04.01 18:52:19 | 000,001,896 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2012.03.30 14:11:51 | 000,000,656 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Razor.lnk
[2012.03.30 13:54:49 | 000,002,022 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Ultima Online Registration.lnk
[2012.03.30 13:54:49 | 000,001,825 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Ultima Online Mondain's Legacy.lnk
[2012.03.27 20:55:18 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader X.lnk
[2012.03.27 20:55:18 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader X.lnk
[2012.03.27 11:26:30 | 000,215,012 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Danger_in_Paradise_by_DerMonkey.jpg
[2012.03.27 11:26:04 | 000,096,069 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\classic_allen__s_by_good_e_nuf-d4df81l.jpg
[2012.03.27 11:24:00 | 000,213,161 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\17972miscellaneousnucle.jpg
[2012.03.27 11:23:49 | 000,046,810 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\155260.jpg
[2012.03.27 08:54:07 | 000,031,017 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Paladin_by_littleac.JPG
[2012.03.27 08:33:56 | 000,004,092 | ---- | C] () -- C:\Documents and Settings\Pavel\.recently-used.xbel
[2012.03.27 08:31:44 | 000,689,050 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 1561.PNG
[2012.03.26 09:57:46 | 000,000,000 | ---- | C] () -- C:\AndariaPatcherConfig.xml
[2012.03.26 09:57:35 | 000,002,316 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Andaria Patcher.lnk
[2012.03.26 09:29:42 | 000,712,497 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 5.PNG
[2012.03.26 08:29:13 | 001,058,550 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Mapa barva.bmp
[2012.03.23 14:19:39 | 000,683,127 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Pergamen test 2.PNG
[2012.03.23 11:48:04 | 000,679,219 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Ukázka.PNG
[2012.03.23 11:36:40 | 000,092,844 | ---- | C] () -- C:\WINDOWS\System32\RAINFOREST TRIAL___.otf
[2012.03.23 11:36:28 | 000,092,844 | ---- | C] () -- C:\WINDOWS\RAINFOREST TRIAL___.otf
[2012.03.23 11:09:16 | 000,001,704 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Zoner Photo Studio 14.lnk
[2012.03.23 10:57:30 | 000,002,301 | ---- | C] () -- C:\Program Files\Uninstall.ini
[2012.03.23 09:33:34 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\UO Auto-Map.lnk
[2012.03.23 09:18:29 | 000,001,591 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\GTA San Andreas.lnk
[2012.03.22 22:32:59 | 000,001,828 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Barbie(TM) Dobrodružství s koňmi(TM).lnk
[2012.03.22 22:32:55 | 000,000,098 | ---- | C] () -- C:\WINDOWS\ka.ini
[2012.03.22 21:20:08 | 000,001,782 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Pohádky zdarma ke stažení.lnk
[2012.03.22 21:20:08 | 000,001,775 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Špidla Data Processing, s.r.o..lnk
[2012.03.22 21:20:08 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Hry zdarma ke stažení.lnk
[2012.03.22 21:20:08 | 000,000,911 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\Emilka Holubová - Montezumův poklad.lnk
[2012.03.22 20:01:38 | 006,952,497 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\zip.zip
[2012.03.22 19:59:58 | 026,099,574 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\sc0000.bmp
[2012.03.22 19:50:46 | 026,099,574 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\boty.bmp
[2012.03.22 19:45:50 | 000,001,685 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Registrace uživatele zařízení Canon MP520 series.LNK
[2012.03.22 19:44:43 | 000,000,412 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2012.03.22 19:43:17 | 000,001,644 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\My Printer.lnk
[2012.03.22 19:42:56 | 000,001,680 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Canon Solution Menu.lnk
[2012.03.22 19:42:37 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Easy-PhotoPrint EX.lnk
[2012.03.22 19:41:52 | 000,001,736 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\MP Navigator EX 1.0.lnk
[2012.03.22 19:41:15 | 000,001,902 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\MP520 series Příručka online.lnk
[2012.03.22 18:54:36 | 000,000,778 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\GIMP 2.lnk
[2012.03.22 18:44:52 | 000,676,855 | ---- | C] () -- C:\Documents and Settings\Pavel\Plocha\pergament.png
[2012.03.21 07:46:06 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.03.20 22:12:10 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.03.20 22:10:12 | 000,105,416 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.20 21:48:32 | 000,249,344 | R--- | C] () -- C:\WINDOWS\System32\NvRaidMan.exe
[2012.03.20 21:48:32 | 000,223,232 | R--- | C] () -- C:\WINDOWS\System32\nvsataconnection.exe
[2012.03.20 21:46:52 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2012.03.20 21:46:49 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2012.03.20 21:46:49 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012.03.20 21:45:11 | 000,013,440 | ---- | C] () -- C:\WINDOWS\GPCIDrv.sys
[2012.03.20 21:45:08 | 000,023,524 | ---- | C] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2012.03.20 21:37:21 | 000,023,040 | R--- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys
[2012.03.20 21:31:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.03.20 21:29:03 | 000,064,200 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2012.03.20 21:22:26 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.03.20 21:21:32 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2012.03.20 21:21:32 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2012.03.20 21:21:31 | 000,021,464 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2012.03.20 21:21:31 | 000,015,552 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2012.03.20 21:21:31 | 000,014,910 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini

========== LOP Check ==========

[2012.03.22 19:41:04 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonBJ
[2012.03.21 08:19:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2012.03.22 19:44:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ScanSoft
[2012.03.23 11:10:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Zoner
[2012.03.30 10:30:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\.minecraft
[2012.03.22 19:49:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\Canon
[2012.04.02 09:46:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\OpenCandy
[2012.03.20 22:11:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\QIP
[2012.03.20 22:11:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\QipGuard
[2012.03.20 22:18:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\Razor
[2012.03.22 19:44:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\ScanSoft
[2012.03.20 22:07:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\TeamViewer
[2012.03.20 22:03:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\TS3Client
[2012.03.20 21:34:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\Windows Desktop Search
[2012.03.23 11:34:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\Windows Search
[2012.03.23 11:10:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pavel\Data aplikací\Zoner

========== Purity Check ==========



< End of report >

--- Doplnění předchozího příspěvku (04 Dub 2012 08:56) ---

ten druhý ti dám na poštu protože je to moc dlouhé...

http://leteckaposta.cz/236275112

[Damned]

Stáhni si IObit Uninstaller a pomocí Zdokonalené odinstalace odinstaluj Silverlight.

Na Virustotalu nech zkontrolovat tyto soubory:
C:\WINDOWS\system32\28463\AIPI.006
C:\WINDOWS\system32\28463\AIPI.007

a vlož mi sem odkaz na výsledek. Pokuid ti nabídne VT, že již soubor kontroloval, nech ho znovu zkontrolovat.

[Dirion]

Při odinstalaci mě to napsalo error: Chyba: nelze najít soubor INF c:/windows/INFMSSlight.ing

C:\WINDOWS\system32\28463\AIPI.006

File already analysed
This file was already analysed by VirusTotal on 2011-07-23 16:18:22.

Detection ratio: 32/43

You can take a look at the last analysis or analyse it again now.
-----------------------------------------------------------------------------------------
C:\WINDOWS\system32\28463\AIPI.007

This file was already analysed by VirusTotal on 2011-07-23 16:28:26.

Detection ratio: 35/43

You can take a look at the last analysis or analyse it again now.


https://www.virustotal.com/file/e6e8b4a29dccb3531f58c75b754caf7f26afe3e7043239305fd0ae7ab2f7571d/analysis/
https://www.virustotal.com/file/e6e8b4a29dccb3531f58c75b754caf7f26afe3e7043239305fd0ae7ab2f7571d/analysis/1333537641/
a

https://www.virustotal.com/file/cc440cfc4ce1a1ff503cc9e8937c59aae64bfce4daa3e7dc757220a25cadc2e4/analysis/
https://www.virustotal.com/file/cc440cfc4ce1a1ff503cc9e8937c59aae64bfce4daa3e7dc757220a25cadc2e4/analysis/1333537766/

[Damned]

Takovej soubor snad ani neexistuje

Dej mi sem prosím tě ODKAZ na ty dva soubory. Chcci vidět kdo a co našel a kdo a co nenašel

[Damned]

Zkus dát ještě do vyhledávání soubor "msslight.inf", jestli není někde schovanej. Já ho v compu nemám.

[Dirion]

msslight.inf soubor nenalezen

--- Doplnění předchozího příspěvku (04 Dub 2012 13:40) ---

Takovej soubor snad ani neexistuje

Dej mi sem prosím tě ODKAZ na ty dva soubory. Chcci vidět kdo a co našel a kdo a co nenašel

jak to myslíš odkaz na ty dva soubory? jako že ti je mám poslat?

[Damned]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/Opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
IE - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\..\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}: "URL" = http://search.qip.ru/search?query={searchTerms}&from=IE
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll File not found
O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\S-1-5-21-1275210071-1644491937-1417001333-1004..\Run: [Infium] C:\Program Files\QIP 2012\qip.exe (QIP)
O20 - Winlogon\Notify\RailNotification: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found

:Services

:Files
C:\Program Files\Óäŕëčňü s0beit.exe
C:\Program Files\Uninstall.ini
C:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
C:\WINDOWS\system32\28463\AIPI.006
C:\WINDOWS\system32\28463\AIPI.007
C:\Program Files\Microsoft Silverlight
C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Microsoft\Silverlight
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\tasks\SA.DAT
C:\WINDOWS\system32\SET*.tmp
C:\WINDOWS\System32\28463
C:\Recycler
C:\$RECYCLE.BIN
C:\RECYCLER
C:\Windows\tasks\*.job

:Reg
[-HKEY_CLASSES_ROOT\Installer\Patches\7A7FFB02FB4E7E4488243D1990374C9B]
[-HKEY_CLASSES_ROOT\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFEAF541-F3E1-4c24-ACAC-99C30715084A}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Patches\7A7FFB02FB4E7E4488243D1990374C9B]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100]

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]

Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[Dirion]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-1275210071-1644491937-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1275210071-1644491937-1417001333-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-21-1275210071-1644491937-1417001333-1004\Software\Microsoft\Internet Explorer\URLSearchHooks\\{95289393-33EA-4F8D-B952-483415B9C955} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95289393-33EA-4F8D-B952-483415B9C955}\ not found.
File C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll not found.
Registry key HKEY_USERS\S-1-5-21-1275210071-1644491937-1417001333-1004\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95289393-33EA-4F8D-B952-483415B9C955}\ not found.
File C:\Documents and Settings\Pavel\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched not found.
File C:\Program Files\Common Files\Java\Java Update\jusched.exe not found.
Registry value HKEY_USERS\S-1-5-21-1275210071-1644491937-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Infium not found.
File C:\Program Files\QIP 2012\qip.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RailNotification\ not found.
Error: No service named WDICA was found to stop!
Service\Driver key WDICA not found.
File File not found not found.
Error: No service named PDRFRAME was found to stop!
Service\Driver key PDRFRAME not found.
File File not found not found.
Error: No service named PDRELI was found to stop!
Service\Driver key PDRELI not found.
File File not found not found.
Error: No service named PDFRAME was found to stop!
Service\Driver key PDFRAME not found.
File File not found not found.
Error: No service named PDCOMP was found to stop!
Service\Driver key PDCOMP not found.
File File not found not found.
Error: No service named PCIDump was found to stop!
Service\Driver key PCIDump not found.
File File not found not found.
Error: No service named lbrtfdc was found to stop!
Service\Driver key lbrtfdc not found.
File File not found not found.
Error: No service named i2omgmt was found to stop!
Service\Driver key i2omgmt not found.
File File not found not found.
Error: No service named Changer was found to stop!
Service\Driver key Changer not found.
File File not found not found.
========== SERVICES/DRIVERS ==========
========== FILES ==========
File\Folder C:\Program Files\Óäŕëčňü s0beit.exe not found.
File\Folder C:\Program Files\Uninstall.ini not found.
File\Folder C:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} not found.
File\Folder C:\WINDOWS\system32\28463\AIPI.006 not found.
File\Folder C:\WINDOWS\system32\28463\AIPI.007 not found.
File\Folder C:\Program Files\Microsoft Silverlight not found.
File\Folder C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Microsoft\Silverlight not found.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\tasks\SA.DAT moved successfully.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\WINDOWS\System32\28463 not found.
C:\RECYCLER\S-1-5-21-1275210071-1644491937-1417001333-1004 folder moved successfully.
C:\RECYCLER folder moved successfully.
File\Folder C:\$RECYCLE.BIN not found.
File\Folder C:\RECYCLER not found.
File\Folder C:\Windows\tasks\*.job not found.
========== REGISTRY ==========
Registry key HKEY_CLASSES_ROOT\Installer\Patches\7A7FFB02FB4E7E4488243D1990374C9B\ not found.
Registry key HKEY_CLASSES_ROOT\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFEAF541-F3E1-4c24-ACAC-99C30715084A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFEAF541-F3E1-4c24-ACAC-99C30715084A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Patches\7A7FFB02FB4E7E4488243D1990374C9B\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Pavel
->Temp folder emptied: 164784 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 6864271 bytes
->Flash cache emptied: 449 bytes

User: Pavla
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16867 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 7,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Pavel
->Flash cache emptied: 0 bytes

User: Pavla

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.39.2 log created on 04042012_154422

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Damned]

Smaž složku C:\_OTL a vysypej Koš.

Spusť OTL a zmáčkni "Vyčisti". Po restartu zkus nainstalovat Silverlight.

[Dirion]

Ok, Silverlight je nainstalován :) jinak jak to má pomoct tomu že se to nebude sekat? A co mám dělat dál?

[Damned]

K některým hrám je nutné mít správně nainstalován flash nebo Silverlight. Pokud není korektně nainstalovaný, může hra blbnout.
PC sme vyčistili a teď jen zbývá tedy, co vymyslí Miliness s tím MiniDumpem.