OTL logfile created on: 16.1.2015 19:35:13 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\SandraD\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
3,50 Gb Total Physical Memory | 3,01 Gb Available Physical Memory | 86,00% Memory free
5,34 Gb Paging File | 4,98 Gb Available in Paging File | 93,29% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465,75 Gb Total Space | 240,62 Gb Free Space | 51,66% Space Free | Partition Type: NTFS
Drive D: | 465,75 Gb Total Space | 59,18 Gb Free Space | 12,71% Space Free | Partition Type: NTFS
Computer Name: SANDRA | User Name: SandraD | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - C:\Documents and Settings\SandraD\Plocha\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\avastui.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe (COMODO)
PRC - C:\Program Files\Comodo\COMODO Internet Security\cis.exe (COMODO)
PRC - C:\Program Files\Comodo\COMODO Internet Security\cistray.exe (COMODO)
PRC - C:\Program Files\Comodo\COMODO Internet Security\cavwp.exe (COMODO)
PRC - C:\Program Files\Comodo\Dragon\dragon_updater.exe (Comodo Security Solutions, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe ()
PRC - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (NVIDIA Corporation)
PRC - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe (Apache Software Foundation)
========== Modules (No Company Name) ========== MOD - C:\Program Files\AVAST Software\Avast\defs\15011600\algo.dll ()
MOD - C:\Program Files\AVAST Software\Avast\libcef.dll ()
MOD - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe ()
MOD - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libeay32.dll ()
MOD - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\ssleay32.dll ()
MOD - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so ()
========== Services (SafeList) ========== SRV - (avast! Antivirus) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (cmdAgent) -- C:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe (COMODO)
SRV - (cmdvirth) -- C:\Program Files\Comodo\COMODO Internet Security\cmdvirth.exe (COMODO)
SRV - (DragonUpdater) -- C:\Program Files\Comodo\Dragon\dragon_updater.exe (Comodo Security Solutions, Inc.)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (ForceWare Intelligent Application Manager (IAM) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe ()
SRV - (nSvcIp) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (NVIDIA Corporation)
SRV - (nSvcLog) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe (NVIDIA Corporation)
SRV - (ForcewareWebInterface) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe (Apache Software Foundation)
========== Driver Services (SafeList) ========== DRV - (DrvAgent32) -- C:\WINDOWS\system32\drivers\DrvAgent32.sys (Phoenix Technologies)
DRV - (HWiNFO32) -- C:\WINDOWS\system32\drivers\HWiNFO32.SYS (REALiX(tm))
DRV - (aswSnx) -- C:\WINDOWS\system32\drivers\aswsnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\system32\drivers\aswsp.sys (AVAST Software)
DRV - (aswVmm) -- C:\WINDOWS\System32\drivers\aswVmm.sys ()
DRV - (aswMonFlt) -- C:\WINDOWS\system32\drivers\aswmonflt.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\system32\drivers\aswTdi.sys (AVAST Software)
DRV - (AswRdr) -- C:\WINDOWS\system32\drivers\aswrdr.sys (AVAST Software)
DRV - (aswRvrt) -- C:\WINDOWS\System32\drivers\aswRvrt.sys ()
DRV - (aswHwid) -- C:\WINDOWS\system32\drivers\aswHwid.sys ()
DRV - (Inspect) -- C:\WINDOWS\system32\drivers\inspect.sys (COMODO)
DRV - (cmdHlp) -- C:\WINDOWS\system32\drivers\cmdhlp.sys (COMODO)
DRV - (cmdGuard) -- C:\WINDOWS\system32\drivers\cmdGuard.sys (COMODO)
DRV - (cmderd) -- C:\WINDOWS\system32\drivers\cmderd.sys (COMODO)
DRV - (dtsoftbus01) -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys (Disc Soft Ltd)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (NVTCP) -- C:\WINDOWS\system32\drivers\nvtcp.sys (NVIDIA Corporation)
DRV - (nvata) -- C:\WINDOWS\system32\drivers\nvata.sys (NVIDIA Corporation)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (EIO) -- C:\WINDOWS\system32\drivers\EIO.sys (ASUSTeK Computer Inc.)
DRV - (SI3132) -- C:\WINDOWS\system32\drivers\SI3132.sys (Silicon Image, Inc.)
DRV - (SiFilter) -- C:\WINDOWS\system32\drivers\SiWinAcc.sys (Silicon Image, Inc.)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.12.23 20:41:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2014.12.23 20:41:48 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
O1 HOSTS File: ([2015.01.16 19:28:41 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\Comodo\COMODO Internet Security\cistray.exe (COMODO)
O4 - Startup: C:\Documents and Settings\SandraD\Nabídka Start\Programy\Po spuštění\_uninst_19379560.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://windowsupdate.microsoft.com/wind ... 4963591953 (WUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC7DF73B-BEF3-402B-BC28-DAE115D2CE1A}: DhcpNameServer = 192.168.100.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.07.14 09:39:17 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2013.07.13 18:24:18 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ========== [2015.01.16 19:34:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2015.01.16 19:24:04 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\SandraD\Recent
[2015.01.15 15:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Local Settings\Data aplikací\SlimWare Utilities Inc
[2015.01.15 15:33:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\SlimDrivers
[2015.01.15 15:33:06 | 000,000,000 | ---D | C] -- C:\Program Files\SlimDrivers
[2015.01.15 15:33:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Downloaded Installers
[2015.01.14 13:09:04 | 000,858,432 | ---- | C] (SlimWare Utilities, Inc.) -- C:\Documents and Settings\SandraD\Plocha\slimdrivers-setup.exe
[2015.01.13 21:05:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2015.01.13 21:04:43 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2015.01.13 21:02:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2015.01.13 21:02:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Data aplikací\chc
[2015.01.13 20:29:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2015.01.13 20:29:41 | 000,146,432 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2015.01.13 20:29:41 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2015.01.13 20:29:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
[2015.01.13 20:28:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Oracle
[2015.01.13 20:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2015.01.13 20:24:25 | 000,023,456 | ---- | C] (Phoenix Technologies) -- C:\WINDOWS\System32\drivers\DrvAgent32.sys
[2015.01.13 20:24:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Local Settings\Data aplikací\eSupport.com
[2015.01.13 20:23:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2015.01.13 20:20:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\SoundMAXAD1988_Audio_V510X6110
[2015.01.13 20:01:33 | 029,727,656 | ---- | C] (Oracle Corporation) -- C:\Documents and Settings\SandraD\Plocha\jre-8u25-windows-i586.exe
[2015.01.13 19:41:23 | 001,176,984 | ---- | C] (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) -- C:\Documents and Settings\SandraD\Plocha\driveragent-setup-874.exe
[2015.01.13 00:00:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CrystalDiskInfo
[2015.01.13 00:00:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Data aplikací\OpenCandy
[2015.01.13 00:00:41 | 000,000,000 | ---D | C] -- C:\Program Files\CrystalDiskInfo
[2015.01.12 21:49:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919
[2015.01.12 19:05:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Local Settings\Data aplikací\SKIDROW
[2015.01.12 18:57:50 | 000,000,000 | ---D | C] -- C:\Games
[2015.01.12 18:43:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\Saints Row The Third PC full game + all DLC active ^^nosTEAM^^
[2015.01.12 15:48:13 | 000,000,000 | ---D | C] -- C:\_OTL
[2015.01.10 13:29:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\backups
[2015.01.10 13:20:58 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\SandraD\Plocha\OTL.exe
[2015.01.09 13:57:08 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2015.01.09 13:52:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\x86
[2015.01.09 13:52:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\DDU Logs
[2015.01.09 13:51:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\settings
[2015.01.09 13:42:32 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2015.01.09 13:04:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\regid.1986-12.com.adobe
[2015.01.08 21:41:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\MemTest
[2015.01.08 21:15:35 | 005,198,336 | ---- | C] (AVAST Software) -- C:\Documents and Settings\SandraD\Plocha\aswmbr.exe
[2015.01.08 13:16:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2015.01.08 12:26:34 | 000,000,000 | ---D | C] -- C:\zoek_backup
[2015.01.07 13:33:57 | 002,997,112 | ---- | C] (Crystal Dew World ) -- C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo6_2_2-en.exe
[2015.01.07 11:43:27 | 001,707,939 | ---- | C] (Thisisu) -- C:\Documents and Settings\SandraD\Plocha\JRT.exe
[2015.01.06 12:51:15 | 002,347,384 | ---- | C] (ESET) -- C:\Documents and Settings\SandraD\Plocha\esetsmartinstaller_csy.exe
[2015.01.06 12:45:40 | 000,023,840 | ---- | C] (REALiX(tm)) -- C:\WINDOWS\System32\drivers\HWiNFO32.SYS
[2015.01.06 12:45:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\HWiNFO32
[2015.01.06 12:45:07 | 000,000,000 | ---D | C] -- C:\Program Files\HWiNFO32
[2015.01.06 12:44:02 | 002,598,648 | ---- | C] (Martin Malík - REALiX ) -- C:\Documents and Settings\SandraD\Plocha\hw32_448.exe
[2015.01.06 12:08:53 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2015.01.06 11:44:12 | 020,447,072 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\SandraD\Plocha\mbam-setup-2.0.4.1028.exe
[2015.01.06 11:43:37 | 000,448,512 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\SandraD\Plocha\TFC.exe
[2015.01.05 21:58:43 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Documents and Settings\SandraD\Plocha\ATF-Cleaner.exe
[2015.01.05 12:42:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Dokumenty\boooook
[2015.01.05 12:38:12 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\SandraD\Plocha\HijackThis.exe
[2015.01.03 20:54:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Local Settings\Data aplikací\Help
[2015.01.03 20:54:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Data aplikací\Help
[2015.01.03 20:44:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon PIXMA iP2000
[2015.01.03 20:38:22 | 000,116,736 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMLM66.DLL
[2015.01.03 20:38:20 | 000,086,016 | R--- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMCP66.exe
[2015.01.03 20:38:04 | 000,000,000 | -H-D | C] -- C:\BJPrinter
[2015.01.03 20:35:39 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys
[2015.01.03 20:02:13 | 001,165,474 | ---- | C] (Igor Pavlov) -- C:\Documents and Settings\SandraD\Plocha\DDU v13.5.5.0.exe
[2014.12.29 12:20:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\KNIHY
[2014.12.29 11:09:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\knihy staženo - roztřídit
[2014.12.29 11:07:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\SandraD\Plocha\nnttbb
[2014.12.27 16:46:55 | 155,770,064 | ---- | C] (NVIDIA Corporation) -- C:\Documents and Settings\SandraD\Plocha\307.83-desktop-winxp-32bit-international-whql.exe
[2014.12.27 15:46:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\QuickTime
[2014.12.27 15:45:46 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2014.12.27 15:45:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2014.12.23 20:48:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\COMODO
[2014.12.23 20:41:49 | 000,291,352 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.12.23 20:41:47 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
========== Files - Modified Within 30 Days ========== [2015.01.16 19:34:26 | 000,430,496 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2015.01.16 19:34:26 | 000,427,336 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2015.01.16 19:34:26 | 000,077,706 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2015.01.16 19:34:26 | 000,067,220 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2015.01.16 19:30:33 | 000,000,440 | ---- | M] () -- C:\WINDOWS\tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job
[2015.01.16 19:30:33 | 000,000,440 | ---- | M] () -- C:\WINDOWS\tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job
[2015.01.16 19:30:29 | 000,000,432 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2015.01.16 19:30:03 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015.01.16 19:28:41 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2015.01.16 16:43:25 | 000,002,231 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\SlimDrivers.lnk
[2015.01.14 19:33:07 | 000,000,818 | ---- | M] () -- C:\Documents and Settings\SandraD\Nabídka Start\Programy\Po spuštění\_uninst_19379560.lnk
[2015.01.14 13:10:02 | 159,428,216 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\Kaspersky_Virus_Removal_Tool_11.0.3.7_[28.08.2014].exe
[2015.01.14 13:09:06 | 000,858,432 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Documents and Settings\SandraD\Plocha\slimdrivers-setup.exe
[2015.01.13 21:09:06 | 000,026,057 | ---- | M] () -- C:\WINDOWS\Ascd_log.ini
[2015.01.13 21:08:38 | 000,026,019 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini
[2015.01.13 21:07:37 | 000,000,339 | RHS- | M] () -- C:\boot.ini
[2015.01.13 20:29:02 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2015.01.13 20:28:58 | 000,146,432 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2015.01.13 20:24:25 | 000,023,456 | ---- | M] (Phoenix Technologies) -- C:\WINDOWS\System32\drivers\DrvAgent32.sys
[2015.01.13 20:09:54 | 000,122,602 | ---- | M] () -- C:\WINDOWS\System32\drivers\fvstore.dat
[2015.01.13 20:09:20 | 029,727,656 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\SandraD\Plocha\jre-8u25-windows-i586.exe
[2015.01.13 19:44:54 | 035,903,300 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\SoundMAXAD1988_Audio_V510X6110.zip
[2015.01.13 19:41:44 | 001,176,984 | ---- | M] (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) -- C:\Documents and Settings\SandraD\Plocha\driveragent-setup-874.exe
[2015.01.13 18:23:07 | 001,142,128 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\SteamSetup.exe
[2015.01.13 00:00:49 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo.lnk
[2015.01.12 20:43:49 | 062,776,121 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919.zip
[2015.01.12 15:18:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2015.01.10 13:21:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\SandraD\Plocha\OTL.exe
[2015.01.09 13:38:06 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\MBR.dat
[2015.01.08 22:08:44 | 003,564,216 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2015.01.08 21:15:41 | 005,198,336 | ---- | M] (AVAST Software) -- C:\Documents and Settings\SandraD\Plocha\aswmbr.exe
[2015.01.08 12:26:34 | 000,024,064 | ---- | M] () -- C:\WINDOWS\zoek-delete.exe
[2015.01.08 11:49:28 | 000,035,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\TrueSight.sys
[2015.01.08 11:46:10 | 001,295,360 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\zoek.exe
[2015.01.07 13:34:02 | 002,997,112 | ---- | M] (Crystal Dew World ) -- C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo6_2_2-en.exe
[2015.01.07 13:33:37 | 000,015,201 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\MemTest.zip
[2015.01.07 11:44:13 | 015,340,120 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\RogueKiller.exe
[2015.01.07 11:43:34 | 001,707,939 | ---- | M] (Thisisu) -- C:\Documents and Settings\SandraD\Plocha\JRT.exe
[2015.01.06 12:51:18 | 002,347,384 | ---- | M] (ESET) -- C:\Documents and Settings\SandraD\Plocha\esetsmartinstaller_csy.exe
[2015.01.06 12:45:40 | 000,023,840 | ---- | M] (REALiX(tm)) -- C:\WINDOWS\System32\drivers\HWiNFO32.SYS
[2015.01.06 12:44:10 | 002,598,648 | ---- | M] (Martin Malík - REALiX ) -- C:\Documents and Settings\SandraD\Plocha\hw32_448.exe
[2015.01.06 11:45:12 | 002,173,952 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\adwcleaner_4.106.exe
[2015.01.06 11:44:34 | 020,447,072 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\SandraD\Plocha\mbam-setup-2.0.4.1028.exe
[2015.01.06 11:43:40 | 000,448,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\SandraD\Plocha\TFC.exe
[2015.01.05 21:58:44 | 000,050,688 | ---- | M] (Atribune.org) -- C:\Documents and Settings\SandraD\Plocha\ATF-Cleaner.exe
[2015.01.05 12:38:14 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\SandraD\Plocha\HijackThis.exe
[2015.01.04 12:00:30 | 155,770,064 | ---- | M] (NVIDIA Corporation) -- C:\Documents and Settings\SandraD\Plocha\307.83-desktop-winxp-32bit-international-whql.exe
[2015.01.03 20:44:31 | 000,007,680 | ---- | M] () -- C:\WINDOWS\System32\CNMVS66.DLL
[2015.01.03 20:38:22 | 000,116,736 | ---- | M] (CANON INC.) -- C:\WINDOWS\System32\CNMLM66.DLL
[2015.01.03 20:35:44 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys
[2015.01.03 20:02:19 | 001,165,474 | ---- | M] (Igor Pavlov) -- C:\Documents and Settings\SandraD\Plocha\DDU v13.5.5.0.exe
[2014.12.31 01:46:38 | 001,783,808 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\Display Driver Uninstaller.exe
[2014.12.31 01:46:38 | 000,194,048 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\Display Driver Uninstaller.pdb
[2014.12.29 11:13:12 | 000,115,705 | ---- | M] () -- C:\Documents and Settings\SandraD\Plocha\Sandra_Dočkalová_životopis.pdf
[2014.12.23 21:02:13 | 000,428,828 | ---- | M] () -- C:\WINDOWS\System32\prfh0405.dat
[2014.12.23 21:02:13 | 000,078,714 | ---- | M] () -- C:\WINDOWS\System32\prfc0405.dat
[2014.12.23 20:57:58 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014.12.23 20:57:58 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014.12.23 20:44:00 | 000,048,392 | ---- | M] (COMODO CA Limited) -- C:\WINDOWS\System32\certsentry.dll
[2014.12.23 20:42:02 | 000,787,800 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsnx.sys
[2014.12.23 20:41:59 | 000,423,784 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsp.sys
[2014.12.23 20:41:47 | 000,291,352 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.12.23 20:41:47 | 000,206,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.12.23 20:41:47 | 000,070,384 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmonflt.sys
[2014.12.23 20:41:47 | 000,057,928 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.12.23 20:41:47 | 000,055,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswrdr.sys
[2014.12.23 20:41:47 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.12.23 20:41:47 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.12.23 20:41:47 | 000,024,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
========== Files Created - No Company Name ========== [2015.01.15 15:33:08 | 000,002,231 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\SlimDrivers.lnk
[2015.01.14 19:33:07 | 000,000,818 | ---- | C] () -- C:\Documents and Settings\SandraD\Nabídka Start\Programy\Po spuštění\_uninst_19379560.lnk
[2015.01.14 13:07:28 | 159,428,216 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\Kaspersky_Virus_Removal_Tool_11.0.3.7_[28.08.2014].exe
[2015.01.13 21:08:38 | 000,026,019 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2015.01.13 19:35:42 | 035,903,300 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\SoundMAXAD1988_Audio_V510X6110.zip
[2015.01.13 18:22:43 | 001,142,128 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\SteamSetup.exe
[2015.01.13 00:00:49 | 000,001,643 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo.lnk
[2015.01.12 20:24:50 | 062,776,121 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919.zip
[2015.01.12 15:49:24 | 000,000,440 | ---- | C] () -- C:\WINDOWS\tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job
[2015.01.12 15:49:24 | 000,000,440 | ---- | C] () -- C:\WINDOWS\tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job
[2015.01.09 13:51:11 | 001,783,808 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\Display Driver Uninstaller.exe
[2015.01.09 13:51:10 | 000,194,048 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\Display Driver Uninstaller.pdb
[2015.01.09 13:51:10 | 000,000,224 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\Display Driver Uninstaller.exe.config
[2015.01.09 13:38:06 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\MBR.dat
[2015.01.08 12:31:14 | 000,024,064 | ---- | C] () -- C:\WINDOWS\zoek-delete.exe
[2015.01.08 11:46:05 | 001,295,360 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\zoek.exe
[2015.01.07 13:33:34 | 000,015,201 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\MemTest.zip
[2015.01.07 11:43:59 | 015,340,120 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\RogueKiller.exe
[2015.01.06 11:45:08 | 002,173,952 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\adwcleaner_4.106.exe
[2015.01.03 20:38:23 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS66.DLL
[2014.12.29 11:13:51 | 000,115,705 | ---- | C] () -- C:\Documents and Settings\SandraD\Plocha\Sandra_Dočkalová_životopis.pdf
[2014.12.27 16:10:47 | 000,026,057 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2014.12.23 21:01:57 | 000,428,828 | ---- | C] () -- C:\WINDOWS\System32\prfh0405.dat
[2014.12.23 21:01:57 | 000,078,714 | ---- | C] () -- C:\WINDOWS\System32\prfc0405.dat
[2014.07.09 21:05:35 | 000,035,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\TrueSight.sys
[2014.05.03 13:26:14 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2013.12.31 21:04:16 | 000,218,200 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2013.11.16 17:13:44 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2013.11.16 17:13:44 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2013.11.16 17:13:44 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2013.11.16 17:04:26 | 000,035,502 | ---- | C] () -- C:\WINDOWS\DIIUnin.dat
[2013.10.09 20:47:06 | 000,122,602 | ---- | C] () -- C:\WINDOWS\System32\drivers\fvstore.dat
[2013.09.19 10:14:45 | 001,609,976 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.07.14 12:56:17 | 000,052,736 | ---- | C] () -- C:\Documents and Settings\SandraD\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.07.14 11:33:47 | 000,004,265 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013.07.14 11:32:35 | 003,564,216 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.07.14 10:32:26 | 000,206,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013.07.14 10:32:26 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013.07.14 09:57:30 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2013.07.14 09:45:40 | 000,001,428 | R--- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2013.07.14 09:45:22 | 000,000,962 | R--- | C] () -- C:\WINDOWS\System32\AsusSetup.ini
[2013.07.14 09:45:22 | 000,000,403 | R--- | C] () -- C:\WINDOWS\System32\raidmgmt.ini
[2013.07.14 09:44:24 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2013.07.14 09:44:13 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2013.07.14 09:40:27 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013.07.14 09:37:10 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ========== [2013.09.19 10:08:14 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 07:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2008.04.14 07:51:42 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 07:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Custom Scans ========== < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS >[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\erdnt\cache\agp440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.03 22:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
< MD5 for: ATAPI.SYS >[2002.09.20 19:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2002.09.20 17:17:54 | 010,174,968 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp1.cab:atapi.sys
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2002.08.29 02:27:50 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\erdnt\cache\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\erdnt\cache\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 14:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: NETLOGON.DLL >[2004.08.17 14:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\erdnt\cache\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: NVATA.SYS >[2015.01.12 21:49:14 | 000,105,344 | ---- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\Win2K\sata_ide\nvata.sys
[2015.01.12 21:49:14 | 000,105,344 | ---- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\WinXP\sata_ide\nvata.sys
[2006.08.21 19:24:28 | 000,105,344 | R--- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\WINDOWS\system32\drivers\nvata.sys
< MD5 for: NVATABUS.SYS >[2015.01.12 21:49:12 | 000,105,344 | ---- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Disk\WinXP\sataraid\nvatabus.sys
[2015.01.12 21:49:14 | 000,105,344 | ---- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\Win2K\sataraid\nvatabus.sys
[2015.01.12 21:49:14 | 000,105,344 | ---- | M] (NVIDIA Corporation) MD5=4D6C6B46B3EDF6F2E219A86B61D104AE -- C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\WinXP\sataraid\nvatabus.sys
< MD5 for: SCECLI.DLL >[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\erdnt\cache\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< %systemroot%\*. /mp /s > ========== Alternate Data Streams ========== @Alternate Data Stream - 64 bytes -> C:\WINDOWS\System32\drivers\usbprint.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\WINDOWS\System32\dllcache\usbprint.sys:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\WINDOWS\System32\CNMVS66.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\WINDOWS\System32\CNMLM66.DLL:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Program Files\Common Files\Java\Java Update\jusched.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\zoek.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\SteamSetup.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\slimdrivers-setup.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\RogueKiller.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\OTL.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\JRT.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\hw32_448.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\HijackThis.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\esetsmartinstaller_csy.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\driveragent-setup-874.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\DDU v13.5.5.0.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo6_2_2-en.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\ATF-Cleaner.exe:$CmdTcID
@Alternate Data Stream - 64 bytes -> C:\Documents and Settings\SandraD\Plocha\aswmbr.exe:$CmdTcID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\zoek.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\SteamSetup.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\SoundMAXAD1988_Audio_V510X6110.zip:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\slimdrivers-setup.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\RogueKiller.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\OTL.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\WinXP\sataraid\nvatabus.sys:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\Win2K\sataraid\nvatabus.sys:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Ide\Win2K\sata_ide\nvata.sys:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919\Drivers\32bit\Disk\WinXP\sataraid\nvatabus.sys:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\NVIDIA_chip_V919.zip:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\MemTest.zip:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\JRT.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\hw32_448.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\esetsmartinstaller_csy.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\driveragent-setup-874.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\DDU v13.5.5.0.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\CrystalDiskInfo6_2_2-en.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\aswmbr.exe:$CmdZnID
@Alternate Data Stream - 26 bytes -> C:\Documents and Settings\SandraD\Plocha\adwcleaner_4.106.exe:$CmdZnID
< End of report >