Kontrola logu + nefinkční torrenty, nastavení routeru

[MaxDamageCZ]

Ahoj, mám tento problém: viewtopic.php?f=41&t=47672 a mám obavy, že se jedná o záškodníka. Měl jsem na to podezření už před tím a tak jsem zkusil systém projet Dr. Webem. Jenže ejhle! Po asi 3 minutách počítač klekne a sám se restartuje. HJT log vypadá takto

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:25:09, on 13.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Matěj\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 0551591984
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 5373 bytes




PS: Zkusím ten sken ještě jednou a ověřím, jestli se neobjevila nějaká BSOD

[Reklama]

[MaxDamageCZ]

No zase to exlo a zase jsem bohužel nepostřehl, jestli tam něco bylo, jestli ano, byla to asi jen malá chvilička, jak se dá nastavit, aby se to po BSOD samo nerestartovalo? Anebo to je vlastně jedno. Určitě tam mám nějakého záškodníka tak vás prosím o radu, co dělat. Dík

[MaxDamageCZ]

Mohl by se toho někdo ujmout? Thx

[guest]

Pokud máš XP, pak aby se to nerestartovalo nastavíš ve Vlastnostech systému, vis screen.

// Chápu, že těten problém štve, ale s vyhodnocením logu to chce trochu trpělivosti - je neděle a navíc předvánoční. //

[MaxDamageCZ]

Ok dík chápu počkám :-)

[Damned]

Odinstaluj si ICQ6Toolbar. Domovskou stránku si nastave Seznam.

Spusť HJT (HijackThis), vypni prohlížeče, odpoj se od internetu a fixni (spustit HJT, "Do a system scan only",
zatrhnout políčko před hodnotou, zmáčknout "Fix checked" a poté "Ano"):

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ScanRegistry] C:\W
*****************************************************************************************************************************************
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[MaxDamageCZ]

Malwarebytes' Anti-Malware 1.42
Verze databáze: 3321
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

15.12.2009 8:39:23
mbam-log-2009-12-15 (08-39-23).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 139480
Uplynulý čas: 10 minute(s), 22 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

[Damned]

Stáhni si OTL na Plochu.
Ujisti se , že máš zavřena všechna ostatní okna a poklepej na ikonu OTL.Nahoře v okně pod Output klikni na minimal Output.Pod Standard Registry změň na All. Zatrhni LOP Check a Purity Check. Klikni na Run Scan. Všechny ostatní nastavení ponech jak jsou. Sken může trvat dlouho, až skončí otevřou se dva logy:
OTL.Txt
Extras.Txt
Jsou uloženy ve stejném místě jako OTL. Oba logy sem prosím zkopíruj

[MaxDamageCZ]

OTL logfile created on: 15.12.2009 14:54:48 - Run 1
OTL by OldTimer - Version 3.1.17.0 Folder = C:\Documents and Settings\Matěj\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,48 Mb Total Physical Memory | 776,04 Mb Available Physical Memory | 75,82% Memory free
2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,22% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 157,46 Gb Free Space | 67,61% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 6,75 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KOMPIK
Current User Name: Matěj
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Matěj\Dokumenty\Stažené soubory\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Update\1.2.183.13\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
PRC - C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\CyberLink\Shared files\RichVideo.exe ()
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\WINDOWS\system32\snmp.exe (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)
PRC - C:\WINDOWS\system32\drivers\CDANTSRV.EXE (C-Dilla Ltd)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Matěj\Dokumenty\Stažené soubory\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\mlang.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (PnkBstrB) -- C:\WINDOWS\system32\PnkBstrB.exe ()
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (Adobe LM Service) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems)
SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe (ESET)
SRV - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
SRV - (PnkBstrA) -- C:\WINDOWS\system32\PnkBstrA.exe ()
SRV - (iPod Service) -- C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (JavaQuickStarterService) -- C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) -- C:\Program Files\CyberLink\Shared files\RichVideo.exe ()
SRV - (NVSvc) -- C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (Bonjour Service) -- C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (gusvc) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (NetTcpPortSharing) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (SNMP) -- C:\WINDOWS\system32\snmp.exe (Microsoft Corporation)
SRV - (Irmon) -- C:\WINDOWS\system32\irmon.dll (Microsoft Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (LPDSVC) -- C:\WINDOWS\system32\tcpsvcs.exe (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (MSSQL$SONY_MEDIAMGR) -- C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (Microsoft Corporation)
SRV - (SQLAgent$SONY_MEDIAMGR) -- C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (Microsoft Corporation)
SRV - (C-DillaSrv) -- C:\WINDOWS\system32\drivers\CDANTSRV.EXE (C-Dilla Ltd)


========== Driver Services (SafeList) ==========

DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys.13370192 (Duplex Secure Ltd.)
DRV - (epfwtdi) -- C:\WINDOWS\system32\drivers\epfwtdi.sys (ESET)
DRV - (epfw) -- C:\WINDOWS\system32\drivers\epfw.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (USBAAPL) -- C:\WINDOWS\system32\drivers\usbaapl.sys (Apple, Inc.)
DRV - (vncmirror) -- C:\WINDOWS\system32\drivers\vncmirror.sys (RealVNC Ltd.)
DRV - (Epfwndis) -- C:\WINDOWS\system32\drivers\epfwndis.sys (ESET)
DRV - (GEARAspiWDM) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - ({B154377D-700F-42cc-9474-23858FBDF4BD}) -- C:\Program Files\CyberLink\PowerDVD9\000.fcl (CyberLink Corp.)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (PxHelp20) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (61883) -- C:\WINDOWS\system32\drivers\61883.sys (Microsoft Corporation)
DRV - (Avc) -- C:\WINDOWS\system32\drivers\avc.sys (Microsoft Corporation)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\alcxwdm.sys (Realtek Semiconductor Corp.)
DRV - (AmdPPM) -- C:\WINDOWS\system32\drivers\AmdPPM.sys (Advanced Micro Devices)
DRV - (TBPanel) -- C:\WINDOWS\system32\drivers\TBPanel.sys (Windows (R) 2000 DDK provider)
DRV - (Cardex) -- C:\WINDOWS\system32\drivers\TBPanel.sys (Windows (R) 2000 DDK provider)
DRV - (nvatabus) -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys (NVIDIA Corporation)
DRV - (nvata) -- C:\WINDOWS\system32\DRIVERS\nvata.sys (NVIDIA Corporation)
DRV - (MarkFun_NT) -- C:\Program Files\Gigabyte\ET5\MARKFUN.W32 (Windows (R) 2000 DDK provider)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (HPZius12) -- C:\WINDOWS\system32\drivers\HPZius12.sys (HP)
DRV - (HPZipr12) -- C:\WINDOWS\system32\drivers\HPZipr12.sys (HP)
DRV - (HPZid412) -- C:\WINDOWS\system32\drivers\HPZid412.sys (HP)
DRV - (ET5Drv) -- C:\WINDOWS\system32\drivers\ET5Drv.sys (Microsoft Corporation)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (MSDV) -- C:\WINDOWS\system32\drivers\msdv.sys (Microsoft Corporation)
DRV - (C-Dilla) -- C:\WINDOWS\system32\drivers\CDANT.SYS (Macrovision)
DRV - (irsir) -- C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009.11.23 17:19:54 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2009.12.10 16:19:35 | 00,000,000 | ---D | M]

[2009.11.04 18:02:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\Mozilla\Extensions
[2009.11.04 18:02:02 | 00,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Matěj\Data aplikací\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

O1 HOSTS File: (737 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKCU\..\Toolbar\WebBrowser: (&Adresa) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O3 - HKCU\..\Toolbar\WebBrowser: (&Odkazy) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Centrum.cz Toolbar) - {D5D47440-0750-463D-BAEF-A47D02414806} - Reg Error: Value error. File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Google Update] C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe (Google Inc.)
O4 - HKCU..\Run: [ICQ] C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - Startup: C:\Documents and Settings\Matěj\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 8 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 0551591984 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Proces mezipaměti kategorií součástí - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.11.28 14:30:56 | 00,000,097 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{47676244-c88e-11de-99c3-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{47676244-c88e-11de-99c3-806d6172696f}\Shell\AutoRun\command - "" = G:\setup.exe -- File not found
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\RunGame.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2009.12.15 11:05:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\gtk-2.0
[2009.12.15 11:05:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\.thumbnails
[2009.12.15 11:04:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\gegl-0.0
[2009.12.15 11:04:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\.gimp-2.6
[2009.12.15 11:03:39 | 00,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2009.12.15 10:58:34 | 00,000,000 | ---D | C] -- C:\Program Files\GIMP-2
[2009.12.15 10:24:12 | 00,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2009.12.15 10:24:12 | 00,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2009.12.15 10:24:08 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\avc.sys
[2009.12.15 10:24:08 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avc.sys
[2009.12.15 10:24:03 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\61883.sys
[2009.12.15 10:24:03 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\61883.sys
[2009.12.15 09:07:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\Sony Media Libraries
[2009.12.15 09:07:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Publish Providers
[2009.12.15 09:06:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Sony
[2009.12.15 09:06:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\My Videos
[2009.12.15 08:56:56 | 00,033,340 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbmsqlgc.dll
[2009.12.15 08:56:56 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dbmsgnet.dll
[2009.12.15 08:55:38 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
[2009.12.15 08:55:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Sony
[2009.12.15 08:54:26 | 00,000,000 | ---D | C] -- C:\Program Files\Vstplugins
[2009.12.15 08:54:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Sony
[2009.12.15 08:53:49 | 00,000,000 | ---D | C] -- C:\Program Files\Sony
[2009.12.15 08:52:52 | 00,000,000 | ---D | C] -- C:\Program Files\Sony Setup
[2009.12.15 08:45:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\WoW-2.3.0.7561-enUS
[2009.12.15 08:45:48 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2009.12.11 18:30:59 | 00,000,000 | ---D | C] -- C:\VideoCAM Express V2
[2009.12.11 18:14:16 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2009.12.11 15:22:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\skypePM
[2009.12.11 15:20:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Skype
[2009.12.11 15:19:56 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2009.12.11 15:19:51 | 00,000,000 | R--D | C] -- C:\Program Files\Skype
[2009.12.11 15:19:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Skype
[2009.12.11 15:08:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.12.11 15:07:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\ICQ
[2009.12.11 15:07:00 | 00,000,000 | ---D | C] -- C:\Program Files\ICQ6.5
[2009.12.10 16:19:34 | 00,000,000 | ---D | C] -- C:\Program Files\ESET
[2009.12.09 20:17:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IOSUBSYS
[2009.12.09 20:17:52 | 00,000,000 | ---D | C] -- C:\Program Files\Google
[2009.12.09 20:12:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\WMTools Downloaded Files
[2009.12.09 20:02:30 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Filmy
[2009.12.09 18:12:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\SystemKey
[2009.12.09 15:14:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\VDLL.DLL
[2009.12.09 15:14:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\runouce.exe
[2009.12.09 15:14:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\RUNDL132.EXE
[2009.12.09 15:14:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\logo_1.exe
[2009.12.09 15:13:17 | 00,632,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr80.dll
[2009.12.09 15:13:16 | 00,554,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp80.dll
[2009.12.09 15:13:15 | 00,034,048 | ---- | C] (MicroWorld Technologies Inc.) -- C:\WINDOWS\System32\eEmpty.exe
[2009.12.09 15:13:14 | 00,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\REGEDIT.COM
[2009.12.09 15:13:14 | 00,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\R.COM
[2009.12.09 15:13:14 | 00,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TASKMGR.COM
[2009.12.09 15:13:14 | 00,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\T.COM
[2009.12.09 15:13:11 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MicroWorld
[2009.12.09 15:13:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
[2009.12.09 15:05:24 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Matěj\Recent
[2009.12.08 16:22:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Malwarebytes
[2009.12.08 16:22:32 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009.12.08 16:22:31 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009.12.08 16:22:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2009.12.08 16:22:30 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009.12.07 19:56:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Call of Juarez
[2009.12.07 19:02:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\GTA 4 Crack Keygen Serial
[2009.12.07 18:48:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Rockstar Games
[2009.12.07 18:47:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\microsoft
[2009.12.07 18:40:02 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Matěj\Data aplikací\SecuROM
[2009.12.07 18:37:33 | 00,018,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009.12.07 18:36:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\umdf
[2009.12.07 18:35:44 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2009.12.07 18:35:44 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2009.12.07 18:19:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Cyberlink
[2009.12.07 18:18:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\CyberLink
[2009.12.07 18:18:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\CyberLink
[2009.12.07 18:17:20 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\CyberLink
[2009.12.07 18:16:54 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\CyberLink
[2009.12.07 17:59:42 | 00,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2009.12.07 17:58:15 | 00,029,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2009.12.07 17:58:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2009.12.07 17:42:18 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Toolbar
[2009.12.07 17:41:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\DAEMON Tools Lite
[2009.12.07 17:41:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2009.12.07 17:33:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Hide IP NG
[2009.12.07 17:19:25 | 00,000,000 | ---D | C] -- C:\Program Files\Rockstar Games
[2009.12.07 17:00:23 | 00,000,000 | ---D | C] -- C:\Program Files\HyCam2
[2009.12.05 13:10:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
[2009.12.05 12:50:16 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2009.12.05 12:46:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Adobe CS3
[2009.12.04 19:40:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Adobe PDF
[2009.12.04 19:36:28 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstdecod.dll
[2009.12.04 19:36:28 | 00,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys
[2009.12.04 19:36:28 | 00,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys
[2009.12.04 19:36:28 | 00,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys
[2009.12.04 19:36:28 | 00,010,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys
[2009.12.04 19:36:27 | 01,230,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvidctl.dll
[2009.12.04 19:36:27 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2009.12.04 19:36:27 | 00,285,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax
[2009.12.04 19:36:27 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2009.12.04 19:36:27 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2009.12.04 19:36:27 | 00,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2009.12.04 19:36:27 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\msdv.sys
[2009.12.04 19:36:27 | 00,052,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdv.sys
[2009.12.04 19:36:27 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2009.12.04 19:36:27 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax
[2009.12.04 19:36:27 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2009.12.04 19:36:27 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bdaplgin.ax
[2009.12.04 19:36:27 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys
[2009.12.04 19:36:27 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mpe.sys
[2009.12.04 19:36:27 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys
[2009.12.04 19:36:27 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2009.12.04 19:36:27 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax
[2009.12.04 19:36:27 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksolay.ax
[2009.12.04 19:36:27 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bdasup.sys
[2009.12.04 19:36:27 | 00,011,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bdasup.sys
[2009.12.04 19:36:27 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys
[2009.12.04 19:36:26 | 01,798,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qedit.dll
[2009.12.04 19:36:26 | 00,470,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdvd.dll
[2009.12.04 19:36:26 | 00,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qdv.dll
[2009.12.04 19:36:26 | 00,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qcap.dll
[2009.12.04 19:36:26 | 00,181,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmime.dll
[2009.12.04 19:36:26 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\devenum.dll
[2009.12.04 19:36:26 | 00,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmusic.dll
[2009.12.04 19:36:26 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmsynth.dll
[2009.12.04 19:36:26 | 00,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmstyle.dll
[2009.12.04 19:36:26 | 00,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmcompos.dll
[2009.12.04 19:36:26 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmloader.dll
[2009.12.04 19:36:26 | 00,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmband.dll
[2009.12.04 19:36:25 | 01,201,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8.dll
[2009.12.04 19:36:25 | 00,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dxdiag.exe
[2009.12.04 19:36:25 | 00,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput8.dll
[2009.12.04 19:36:25 | 00,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmscript.dll
[2009.12.04 19:36:25 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dswave.dll
[2009.12.04 19:36:24 | 01,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound3d.dll
[2009.12.04 19:36:24 | 01,189,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx8vb.dll
[2009.12.04 19:36:24 | 00,797,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3dim700.dll
[2009.12.04 19:36:24 | 00,723,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnet.dll
[2009.12.04 19:36:24 | 00,648,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dinput.dll
[2009.12.04 19:36:24 | 00,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dx7vb.dll
[2009.12.04 19:36:24 | 00,491,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmoprp.dll
[2009.12.04 19:36:24 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsound.dll
[2009.12.04 19:36:24 | 00,381,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvoice.dll
[2009.12.04 19:36:24 | 00,292,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddraw.dll
[2009.12.04 19:36:24 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplayx.dll
[2009.12.04 19:36:24 | 00,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\joy.cpl
[2009.12.04 19:36:24 | 00,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsdmo.dll
[2009.12.04 19:36:24 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvvox.dll
[2009.12.04 19:36:24 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvsetup.exe
[2009.12.04 19:36:24 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpwsockx.dll
[2009.12.04 19:36:24 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpmodemx.dll
[2009.12.04 19:36:24 | 00,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhupnp.dll
[2009.12.04 19:36:24 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdllreg.exe
[2009.12.04 19:36:24 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnhpast.dll
[2009.12.04 19:36:24 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pid.dll
[2009.12.04 19:36:24 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dplaysvr.exe
[2009.12.04 19:36:24 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddrawex.dll
[2009.12.04 19:36:24 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpvacm.dll
[2009.12.04 19:36:24 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnsvr.exe
[2009.12.04 19:36:24 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\d3d8thk.dll
[2009.12.04 19:36:24 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnlobby.dll
[2009.12.04 19:36:24 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpnaddr.dll
[2009.12.04 18:51:18 | 00,000,000 | ---D | C] -- C:\My Video
[2009.12.04 18:50:49 | 00,000,000 | ---D | C] -- C:\Program Files\Crystal Software
[2009.12.04 18:46:51 | 00,000,000 | ---D | C] -- C:\Program Files\Pure Motion
[2009.12.04 18:46:50 | 00,000,000 | ---D | C] -- C:\Program Files\Sonic Foundry
[2009.12.04 18:46:42 | 00,000,000 | ---D | C] -- C:\Program Files\DebugMode
[2009.12.04 18:19:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\Adobe
[2009.12.04 18:18:55 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\DivX
[2009.12.04 18:18:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Adobe Systems
[2009.12.04 18:18:03 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe Systems Shared
[2009.12.04 18:14:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Adobe
[2009.12.03 16:19:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Nepoužívané odkazy plochy
[2009.11.30 18:47:25 | 00,000,000 | ---D | C] -- C:\Program Files\Autodesk
[2009.11.28 16:03:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Autodesk
[2009.11.28 15:53:58 | 00,170,496 | ---- | C] (WexTech Systems, Inc.) -- C:\WINDOWS\System32\awrtl30.dll
[2009.11.28 15:53:58 | 00,111,616 | ---- | C] (Lernout & Hauspie) -- C:\WINDOWS\System32\Ltih30tb.dll
[2009.11.28 15:53:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\WexTech Shared
[2009.11.28 15:53:57 | 00,000,000 | ---D | C] -- C:\Program Files\WexTech
[2009.11.28 15:53:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\LHSPF
[2009.11.28 15:53:07 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Downloaded Program Files
[2009.11.28 15:52:07 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Designer
[2009.11.28 15:52:06 | 00,000,000 | ---D | C] -- C:\WINDOWS\occache
[2009.11.28 15:51:27 | 00,000,000 | ---D | C] -- C:\Program Files\Autodesk Architectural Desktop 3
[2009.11.28 15:32:16 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\ESET
[2009.11.28 14:49:35 | 00,000,000 | ---D | C] -- C:\temp
[2009.11.28 14:32:03 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\AB Studio Shared
[2009.11.28 14:31:56 | 00,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUn0405.exe
[2009.11.28 14:31:27 | 00,000,000 | -H-D | C] -- C:\C_DILLA
[2009.11.28 14:29:32 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Autodesk Shared
[2009.11.28 12:56:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Terminal.app
[2009.11.26 18:07:21 | 00,361,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tcpip.copy
[2009.11.26 17:56:29 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2009.11.26 17:56:29 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2009.11.26 17:56:29 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2009.11.25 19:05:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\backups

[MaxDamageCZ]

[2009.11.25 19:02:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\Downloads
[2009.11.25 19:01:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Temp
[2009.11.25 19:01:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Google
[2009.11.25 18:36:50 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2009.11.25 18:36:50 | 00,000,000 | ---D | C] -- C:\Program Files\DivX
[2009.11.23 20:52:39 | 00,020,992 | ---- | C] (RealVNC Ltd.) -- C:\WINDOWS\System32\vncmirror.dll
[2009.11.23 20:52:39 | 00,004,608 | ---- | C] (RealVNC Ltd.) -- C:\WINDOWS\System32\drivers\vncmirror.sys
[2009.11.23 20:49:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\UltraVNC
[2009.11.23 19:24:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2009.11.23 17:24:21 | 00,000,000 | ---D | C] -- C:\Program Files\UltraVNC
[2009.11.23 17:20:06 | 00,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll
[2009.11.23 17:20:06 | 00,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2009.11.23 17:19:49 | 00,000,000 | ---D | C] -- C:\Program Files\Java
[2009.11.23 17:19:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Sun
[2009.11.20 10:38:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\IObit
[2009.11.20 10:38:22 | 00,000,000 | ---D | C] -- C:\Program Files\IObit
[2009.11.20 10:37:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\Stažené soubory
[2009.11.20 10:05:53 | 00,107,368 | ---- | C] (GEAR Software Inc.) -- C:\WINDOWS\System32\GEARAspi.dll
[2009.11.20 10:05:53 | 00,026,600 | ---- | C] (GEAR Software Inc.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys
[2009.11.20 10:05:06 | 00,000,000 | ---D | C] -- C:\Program Files\iPod
[2009.11.20 10:05:03 | 00,000,000 | ---D | C] -- C:\Program Files\iTunes
[2009.11.20 10:05:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.11.20 10:04:50 | 02,065,696 | ---- | C] (Apple, Inc.) -- C:\WINDOWS\System32\usbaaplrc.dll
[2009.11.20 10:04:50 | 00,040,448 | ---- | C] (Apple, Inc.) -- C:\WINDOWS\System32\drivers\usbaapl.sys
[2009.11.19 10:31:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\Aiseesoft Studio
[2009.11.19 10:31:51 | 00,000,000 | ---D | C] -- C:\Program Files\Aiseesoft Studio
[2009.11.19 10:09:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
[2009.11.18 19:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Adobe
[2009.11.16 15:03:34 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Data aplikací\Apple Computer
[2009.11.16 15:02:21 | 00,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2009.11.16 15:01:49 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2009.11.16 15:01:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
[2009.11.16 15:01:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Apple
[2009.11.16 15:01:35 | 00,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2009.11.16 15:01:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009.11.16 15:00:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2009.11.16 15:00:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Apple
[2009.11.16 15:00:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\Apple Computer
[2009.11.16 14:38:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Dokumenty\IP
[2009.11.16 14:27:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Matěj\Plocha\GTA IV PC Version
[2009.11.16 13:05:37 | 00,000,000 | ---D | C] -- C:\Program Files\WinSCP
[2009.11.16 09:06:48 | 00,055,768 | ---- | C] (ESET) -- C:\WINDOWS\System32\drivers\epfwtdi.sys
[2009.11.16 09:06:44 | 00,135,048 | ---- | C] (ESET) -- C:\WINDOWS\System32\drivers\epfw.sys
[2009.11.16 09:03:36 | 00,108,792 | ---- | C] (ESET) -- C:\WINDOWS\System32\drivers\ehdrv.sys
[2009.11.16 08:56:12 | 00,116,520 | ---- | C] (ESET) -- C:\WINDOWS\System32\drivers\eamon.sys
[2009.11.04 19:32:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2009.11.02 20:18:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2009.11.02 20:15:52 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2009.11.02 20:15:52 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[2005.05.11 23:36:48 | 00,012,288 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\Fonts\RandFont.dll
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2009.12.15 14:06:45 | 00,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-725345543-1004UA.job
[2009.12.15 11:16:33 | 00,003,091 | ---- | M] () -- C:\Documents and Settings\Matěj\.recently-used.xbel
[2009.12.15 11:04:36 | 00,000,776 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\GIMP 2.lnk
[2009.12.15 10:40:44 | 00,134,760 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 2.sfk
[2009.12.15 10:40:44 | 00,007,168 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 1.sfk
[2009.12.15 10:38:57 | 17,240,804 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 2.wav
[2009.12.15 10:36:55 | 00,909,124 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 1.wav
[2009.12.15 10:36:12 | 00,166,608 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 3 nahrát 1.sfk
[2009.12.15 10:35:11 | 21,317,744 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 3 nahrát 1.wav
[2009.12.15 10:32:54 | 00,023,496 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 4 nahrát 1.sfk
[2009.12.15 10:31:17 | 02,999,780 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 4 nahrát 1.wav
[2009.12.15 10:29:24 | 00,001,480 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Default.sfvidcap
[2009.12.15 10:28:12 | 00,023,824 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 001.avi.sfk
[2009.12.15 10:28:12 | 00,001,304 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 002.avi.sfk
[2009.12.15 10:25:52 | 88,992,256 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 001.avi
[2009.12.15 10:25:52 | 04,770,304 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 002.avi
[2009.12.15 10:21:04 | 00,000,003 | ---- | M] () -- C:\WINDOWS\Twain001.Mtx
[2009.12.15 10:20:52 | 00,000,156 | ---- | M] () -- C:\WINDOWS\Twunk001.MTX
[2009.12.15 09:23:54 | 00,197,075 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009.12.15 09:21:47 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009.12.15 09:21:40 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009.12.15 09:21:35 | 10,732,70784 | -HS- | M] () -- C:\hiberfil.sys
[2009.12.15 09:15:26 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\Matěj\ntuser.ini
[2009.12.15 09:15:25 | 04,718,592 | -H-- | M] () -- C:\Documents and Settings\Matěj\NTUSER.DAT
[2009.12.15 09:15:14 | 14,449,378 | -H-- | M] () -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\IconCache.db
[2009.12.15 09:07:26 | 00,000,000 | ---- | M] () -- C:\WINDOWS\Twunk002.MTX
[2009.12.15 08:57:05 | 01,135,302 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009.12.15 08:57:05 | 00,487,956 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009.12.15 08:57:05 | 00,482,838 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2009.12.15 08:57:05 | 00,105,884 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2009.12.15 08:57:05 | 00,091,990 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009.12.15 08:54:40 | 00,001,629 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Vegas 7.0.lnk
[2009.12.15 08:41:51 | 00,000,466 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{38FA12BF-8B5C-4F8B-8195-7FA3E4534F2A}.job
[2009.12.14 21:10:26 | 00,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2009.12.14 19:06:01 | 00,000,974 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-725345543-1004Core.job
[2009.12.13 15:53:01 | 00,000,384 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag.job
[2009.12.13 15:52:31 | 00,000,792 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Smart Defrag.lnk
[2009.12.13 15:33:07 | 00,017,920 | ---- | M] () -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.11 18:31:01 | 00,000,045 | ---- | M] () -- C:\WINDOWS\Twacker.ini
[2009.12.11 18:30:59 | 00,000,045 | ---- | M] () -- C:\WINDOWS\lifeview.ini
[2009.12.11 18:13:58 | 00,013,682 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009.12.11 15:22:25 | 00,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.12.11 15:08:20 | 00,001,487 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\ICQ6.5.lnk
[2009.12.09 21:09:15 | 07,150,217 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\Nejfake ODHALENÍ.wmv
[2009.12.09 20:39:25 | 10,255,948 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\clip0002.avi
[2009.12.09 20:18:25 | 00,000,759 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2009.12.09 16:16:17 | 01,133,637 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\pinfect.zip
[2009.12.09 15:22:11 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009.12.09 15:14:35 | 00,000,054 | ---- | M] () -- C:\WINDOWS\Lic.xxx
[2009.12.09 15:13:16 | 00,632,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr80.dll
[2009.12.09 15:13:15 | 00,554,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp80.dll
[2009.12.09 15:13:14 | 00,034,048 | ---- | M] (MicroWorld Technologies Inc.) -- C:\WINDOWS\System32\eEmpty.exe
[2009.12.09 15:05:06 | 00,001,548 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\CCleaner.lnk
[2009.12.08 17:13:02 | 00,215,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2009.12.08 17:13:02 | 00,215,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009.12.08 16:22:34 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2009.12.07 18:37:34 | 00,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\umdf\MsftWdf_user_01_00_00.Wdf
[2009.12.07 18:17:08 | 00,001,749 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CyberLink PowerDVD 9.lnk
[2009.12.07 17:58:01 | 00,505,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp71.dll
[2009.12.07 17:58:01 | 00,353,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr71.dll
[2009.12.07 17:58:01 | 00,029,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2009.12.07 17:41:34 | 00,691,696 | ---- | M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys.13370192
[2009.12.07 17:19:25 | 00,001,733 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Rockstar Games Social Club.lnk
[2009.12.07 17:02:21 | 08,697,654 | ---- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\clip0001.avi
[2009.12.05 21:12:01 | 00,000,600 | ---- | M] () -- C:\Documents and Settings\Matěj\Data aplikací\winscp.rnd
[2009.12.05 13:18:57 | 00,056,736 | ---- | M] () -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2009.12.05 13:18:00 | 01,498,400 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009.12.04 19:26:47 | 00,000,005 | ---- | M] () -- C:\WINDOWS\System32\SySwmvtoavi.dat
[2009.12.04 18:50:52 | 00,000,991 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\WMV To AVI Converter.lnk
[2009.12.04 18:18:00 | 00,001,762 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Audition 3.0.lnk
[2009.12.03 16:14:06 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009.12.03 16:13:56 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009.11.30 18:53:11 | 00,000,071 | ---- | M] () -- C:\WINDOWS\CONTEXT.INI
[2009.11.30 18:12:21 | 00,000,388 | ---- | M] () -- C:\WINDOWS\tasks\AWC Update.job
[2009.11.28 16:22:47 | 00,000,585 | ---- | M] () -- C:\WINDOWS\win.ini
[2009.11.28 15:54:44 | 00,001,164 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Architectural Desktop 3 CZ.lnk
[2009.11.28 15:53:08 | 00,002,036 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Architectural Desktop 3.lnk
[2009.11.28 14:30:56 | 00,000,097 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009.11.27 17:00:39 | 00,138,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.11.25 19:02:22 | 00,002,259 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\Google Chrome.lnk
[2009.11.23 20:49:38 | 00,000,000 | -H-- | M] () -- C:\Documents and Settings\Matěj\Dokumenty\Default.rdp
[2009.11.23 17:24:31 | 00,000,618 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\UltraVNC Server.lnk
[2009.11.21 17:03:38 | 01,206,508 | ---- | M] () -- C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009.11.21 17:03:06 | 00,471,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2009.11.21 11:36:32 | 00,021,464 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2009.11.20 10:38:41 | 00,000,874 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Advanced SystemCare.lnk
[2009.11.20 10:38:41 | 00,000,150 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\IObit Freeware.url
[2009.11.20 10:12:52 | 00,023,180 | ---- | M] () -- C:\WINDOWS\System32\productregistry
[2009.11.19 10:31:55 | 00,001,123 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\Aiseesoft iPhone Ringtone Maker.lnk
[2009.11.19 10:09:00 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009.11.16 14:23:28 | 00,071,377 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\Grand_Theft_Auto_IV_PC_Edition__REAL_DEAL_FOLKS.4544939.TPB [mininova].torrent
[2009.11.16 13:05:40 | 00,000,606 | ---- | M] () -- C:\Documents and Settings\Matěj\Plocha\WinSCP.lnk
[2009.11.16 09:06:48 | 00,055,768 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\epfwtdi.sys
[2009.11.16 09:06:44 | 00,135,048 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\epfw.sys
[2009.11.16 09:03:36 | 00,108,792 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\ehdrv.sys
[2009.11.16 08:56:12 | 00,116,520 | ---- | M] (ESET) -- C:\WINDOWS\System32\drivers\eamon.sys
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2009.12.15 11:16:33 | 00,003,091 | ---- | C] () -- C:\Documents and Settings\Matěj\.recently-used.xbel
[2009.12.15 11:04:36 | 00,000,776 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\GIMP 2.lnk
[2009.12.15 10:38:57 | 00,134,760 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 2.sfk
[2009.12.15 10:36:55 | 17,240,804 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 2.wav
[2009.12.15 10:36:55 | 00,007,168 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 1.sfk
[2009.12.15 10:36:48 | 00,909,124 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 2 nahrát 1.wav
[2009.12.15 10:35:11 | 00,166,608 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 3 nahrát 1.sfk
[2009.12.15 10:33:08 | 21,317,744 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 3 nahrát 1.wav
[2009.12.15 10:31:18 | 00,023,496 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 4 nahrát 1.sfk
[2009.12.15 10:30:58 | 02,999,780 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Stopa 4 nahrát 1.wav
[2009.12.15 10:26:25 | 00,001,304 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 002.avi.sfk
[2009.12.15 10:26:22 | 00,023,824 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 001.avi.sfk
[2009.12.15 10:25:52 | 00,001,480 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Default.sfvidcap
[2009.12.15 10:25:43 | 04,770,304 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 002.avi
[2009.12.15 10:25:19 | 88,992,256 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Film - Clip 001.avi
[2009.12.15 09:07:26 | 00,000,156 | ---- | C] () -- C:\WINDOWS\Twunk001.MTX
[2009.12.15 09:07:26 | 00,000,003 | ---- | C] () -- C:\WINDOWS\Twain001.Mtx
[2009.12.15 09:07:26 | 00,000,000 | ---- | C] () -- C:\WINDOWS\Twunk002.MTX
[2009.12.15 08:54:40 | 00,001,629 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Vegas 7.0.lnk
[2009.12.13 15:53:01 | 00,000,384 | ---- | C] () -- C:\WINDOWS\tasks\SmartDefrag.job
[2009.12.13 15:52:31 | 00,000,792 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Smart Defrag.lnk
[2009.12.11 18:31:01 | 00,000,045 | ---- | C] () -- C:\WINDOWS\Twacker.ini
[2009.12.11 18:30:59 | 00,000,045 | ---- | C] () -- C:\WINDOWS\lifeview.ini
[2009.12.11 18:30:53 | 00,014,385 | ---- | C] () -- C:\WINDOWS\TW561a.ini
[2009.12.11 18:30:53 | 00,007,431 | ---- | C] () -- C:\WINDOWS\TW561a.src
[2009.12.11 15:22:25 | 00,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.12.11 15:19:56 | 00,002,283 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2009.12.11 15:08:20 | 00,001,487 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\ICQ6.5.lnk
[2009.12.09 21:06:37 | 07,150,217 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\Nejfake ODHALENÍ.wmv
[2009.12.09 20:39:01 | 10,255,948 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\clip0002.avi
[2009.12.09 20:18:25 | 00,000,759 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Picasa 3.lnk
[2009.12.09 16:16:17 | 01,133,637 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\pinfect.zip
[2009.12.09 15:22:10 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2009.12.09 15:13:34 | 00,000,054 | ---- | C] () -- C:\WINDOWS\Lic.xxx
[2009.12.09 15:13:15 | 00,000,522 | ---- | C] () -- C:\WINDOWS\System32\Microsoft.VC80.CRT.manifest
[2009.12.09 15:05:06 | 00,001,548 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\CCleaner.lnk
[2009.12.08 16:22:34 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2009.12.07 19:14:53 | 00,151,712 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2009.12.07 18:37:34 | 00,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\umdf\MsftWdf_user_01_00_00.Wdf
[2009.12.07 18:17:08 | 00,001,749 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CyberLink PowerDVD 9.lnk
[2009.12.07 17:19:25 | 00,001,733 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Rockstar Games Social Club.lnk
[2009.12.07 17:02:04 | 08,697,654 | ---- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\clip0001.avi
[2009.12.04 19:36:28 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009.12.04 19:36:28 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2009.12.04 19:36:28 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax
[2009.12.04 19:36:28 | 00,030,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2009.12.04 19:36:27 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax
[2009.12.04 19:36:27 | 00,052,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2009.12.04 19:36:26 | 00,733,184 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qedwipes.dll
[2009.12.04 19:36:26 | 00,136,192 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mpg2splt.ax
[2009.12.04 19:36:26 | 00,064,512 | ---- | C] () -- C:\WINDOWS\System32\dllcache\amstream.dll
[2009.12.04 19:36:26 | 00,034,304 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mciqtz32.dll
[2009.12.04 19:36:26 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdmo.dll
[2009.12.04 18:50:58 | 00,000,005 | ---- | C] () -- C:\WINDOWS\System32\SySwmvtoavi.dat
[2009.12.04 18:50:52 | 00,000,991 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\WMV To AVI Converter.lnk
[2009.12.04 18:18:00 | 00,001,762 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Audition 3.0.lnk
[2009.11.30 18:53:11 | 00,000,071 | ---- | C] () -- C:\WINDOWS\CONTEXT.INI
[2009.11.28 15:53:08 | 00,002,036 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Architectural Desktop 3.lnk
[2009.11.28 14:32:04 | 00,001,164 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Architectural Desktop 3 CZ.lnk
[2009.11.25 19:02:22 | 00,002,259 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\Google Chrome.lnk
[2009.11.25 19:01:30 | 00,001,026 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-725345543-1004UA.job
[2009.11.25 19:01:29 | 00,000,974 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-162531612-725345543-1004Core.job
[2009.11.23 20:49:38 | 00,000,000 | -H-- | C] () -- C:\Documents and Settings\Matěj\Dokumenty\Default.rdp
[2009.11.23 17:24:31 | 00,000,618 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\UltraVNC Server.lnk
[2009.11.21 13:30:59 | 00,000,388 | ---- | C] () -- C:\WINDOWS\tasks\AWC Update.job
[2009.11.21 11:36:32 | 00,021,464 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009.11.20 10:38:41 | 00,000,874 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Advanced SystemCare.lnk
[2009.11.20 10:38:41 | 00,000,150 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\IObit Freeware.url
[2009.11.19 10:31:55 | 00,001,123 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\Aiseesoft iPhone Ringtone Maker.lnk
[2009.11.17 12:34:41 | 10,732,70784 | -HS- | C] () -- C:\hiberfil.sys
[2009.11.16 15:01:39 | 00,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009.11.16 14:23:27 | 00,071,377 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\Grand_Theft_Auto_IV_PC_Edition__REAL_DEAL_FOLKS.4544939.TPB [mininova].torrent
[2009.11.16 13:05:42 | 00,000,600 | ---- | C] () -- C:\Documents and Settings\Matěj\Data aplikací\winscp.rnd
[2009.11.16 13:05:40 | 00,000,606 | ---- | C] () -- C:\Documents and Settings\Matěj\Plocha\WinSCP.lnk
[2009.11.12 12:20:16 | 00,138,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009.11.12 12:20:16 | 00,022,328 | ---- | C] () -- C:\Documents and Settings\Matěj\Data aplikací\PnkBstrK.sys
[2009.11.09 13:44:24 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009.11.06 10:58:04 | 00,178,975 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2009.11.04 18:30:34 | 00,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2009.11.04 17:19:09 | 00,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2009.11.04 17:13:42 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2009.11.04 16:47:47 | 00,032,768 | ---- | C] () -- C:\WINDOWS\TBPanelExt.dll
[2009.11.04 16:47:47 | 00,012,285 | ---- | C] () -- C:\WINDOWS\Cadx3.ini
[2009.11.04 16:47:47 | 00,006,942 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2009.11.04 16:47:47 | 00,005,120 | ---- | C] () -- C:\WINDOWS\TBManage.dll
[2009.11.04 16:36:11 | 00,000,733 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
[2009.11.03 16:58:24 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2009.11.03 16:58:24 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2009.11.03 16:58:24 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2009.11.03 16:40:32 | 00,000,125 | ---- | C] () -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\fusioncache.dat
[2009.11.02 21:06:29 | 00,017,920 | ---- | C] () -- C:\Documents and Settings\Matěj\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.10.07 09:13:30 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007.11.28 08:51:05 | 01,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007.11.28 08:51:05 | 01,503,232 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007.11.28 08:51:05 | 01,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007.11.28 08:51:05 | 00,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007.11.28 08:51:05 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2001.07.06 15:30:00 | 00,003,165 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

========== LOP Check ==========

[2009.11.04 19:44:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CentrumczToolbar
[2009.12.07 17:41:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2009.11.19 12:24:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
[2009.12.10 16:19:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2009.12.11 15:08:15 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.12.09 15:13:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
[2009.11.04 16:49:56 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\muvee Technologies
[2009.12.15 08:55:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Sony
[2009.12.09 20:01:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SystemKey
[2009.12.07 17:58:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Temp
[2009.11.20 10:05:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.11.28 16:03:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\Autodesk
[2009.12.07 17:47:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\DAEMON Tools Lite
[2009.11.04 17:47:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\ESET
[2009.12.15 11:16:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\gtk-2.0
[2009.12.07 19:54:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\Hide IP NG
[2009.12.11 15:13:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\ICQ
[2009.12.13 15:52:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\IObit
[2009.11.12 15:15:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\OpenOffice.org
[2009.12.15 09:07:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\Publish Providers
[2009.12.15 08:55:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\Sony
[2009.12.09 15:03:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Matěj\Data aplikací\uTorrent
[2009.11.30 18:12:21 | 00,000,388 | ---- | M] () -- C:\WINDOWS\Tasks\AWC Update.job
[2009.12.13 15:53:01 | 00,000,384 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag.job
[2009.12.15 08:41:51 | 00,000,466 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{38FA12BF-8B5C-4F8B-8195-7FA3E4534F2A}.job

========== Purity Check ==========


< End of report >

[MaxDamageCZ]

OTL Extras logfile created on: 15.12.2009 14:54:48 - Run 1
OTL by OldTimer - Version 3.1.17.0 Folder = C:\Documents and Settings\Matěj\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1023,48 Mb Total Physical Memory | 776,04 Mb Available Physical Memory | 75,82% Memory free
2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,22% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 157,46 Gb Free Space | 67,61% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
Drive F: | 6,75 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KOMPIK
Current User Name: Matěj
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\PROGRA~1\MICROS~3\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"5900:TCP" = 5900:TCP:*:Enabled:vnc5900
"5800:TCP" = 5800:TCP:*:Enabled:vnc5800

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe" = C:\Program Files\Electronic Arts\Need For Speed III\nfs3.exe:*:Enabled:Need For Speed III for Win32 -- (Electronic Arts, Inc.)
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\Gigabyte\BIOS\GWF32.EXE" = C:\Program Files\Gigabyte\BIOS\GWF32.EXE:*:Enabled:gwflash -- ()
"C:\WINDOWS\system32\PnkBstrA.exe" = C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA -- ()
"C:\WINDOWS\system32\PnkBstrB.exe" = C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB -- ()
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
"C:\Program Files\UltraVNC\winvnc.exe" = C:\Program Files\UltraVNC\winvnc.exe:*:Enabled:winvnc.exe -- (UltraVNC)
"C:\Program Files\UltraVNC\vncviewer.exe" = C:\Program Files\UltraVNC\vncviewer.exe:*:Enabled:vncviewer.exe -- (UltraVNC)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" = C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club -- (Take-Two Interactive Software, Inc.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"@BIOS" = @BIOS
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7}" = PhotoGallery
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{14B7A9EF-BB68-4529-9190-8CE164E0F548}" = ESET Smart Security
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{172975EB-9465-4861-95B5-C7BB6D3DE62A}" = DocumentViewer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{21DB3D90-D816-4092-A260-CA3F6B55A6DD}" = Sonic_PrimoSDK
"{23A7B376-BBEC-4e76-BBD7-0F155E70D74B}" = CP_Panorama1Config
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 17
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{32BDCCB8-9DC8-496d-9DB1-F77510775BDB}" = InstantShareDevices
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36E47DA1-10E1-45d9-8B19-14D19607CDCF}" = CP_CalendarTemplates1
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{53C141BA-4F9E-43FB-B4F9-0C01BB716FA8}" = Adobe Audition 3.0
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{56EE8B17-8274-418d-89AC-C057C5DB251E}" = RandMap
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{5783F2D7-000C-0405-0002-0060B0CE6BBA}" = Autodesk Architectural Desktop 3
"{5A01C58E-B0EC-49b9-AD71-7C0468688087}" = CP_Package_Basic1
"{5B622B7A-60FB-4630-B11D-F121D20BCCD6}" = MarketResearch
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F26311C-B135-4F7F-B11E-8E650F83651E}" = DeviceFunctionQFolder
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{65248369-7CB9-43A9-82C8-C438AE04DED4}" = 1500
"{66BA8C26-AFE4-4408-807B-43E76B57EF53}" = SkinsHP1
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{786C5747-1437-443D-B06E-79A00FE45110}" = Adobe Stock Photos 1.0
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
"{7C9B95B7-B598-4398-B30F-7F6827192E6C}" = ProductContext
"{7E27304E-BAA2-4d90-A34E-76641FAFABB4}" = CP_AtenaShokunin1Config
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{81E06318-EEB9-4D55-8CD5-7AC9148D5E66}" = 1500_Help
"{824BADF8-9A1B-4D07-8817-8DDDC8543F23}" = OpenOffice.org 3.1
"{878D2EB2-2D55-42A9-955E-1E08F28529FD}" = Sony Media Manager 2.2
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8EDBA74D-0686-4C99-BFDD-F894678E5102}" = Adobe Common File Installer
"{8FFC924C-ED06-44CB-8867-3CA778ECE903}" = Adobe Help Center 2.0
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{909F8EBC-EC7F-48FF-0085-475D818F0F31}" = Need for Speed Underground 2
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}" = QuickTime
"{A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D}" = CueTour
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2
"{AE3D38A6-13B1-40B3-9423-D1FA9982FB6A}" = Adobe Bridge 1.0
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B4A3B14A-1C4B-47B9-A5B5-BF429237D568}" = muveeNow 2.1
"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone
"{B607C354-CD79-4D22-86D1-92DC94153F42}" = Apple Application Support
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player
"{B74D4E10-0000-0000-0000-EDED00000102}" = Adobe ExtendScript Toolkit 1.0
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBA30674-A242-4531-82B5-586B31F90E04}" = 1500Trb
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}" = iTunes
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD362256-A7A2-4524-9457-213DDC2AFC2A}" = Adobe After Effects 7.0
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DFB951D6-4270-42D8-B4B7-AA4B01911DC3}" = Sony Vegas 7.0
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"Adobe After Effects 7.0" = Adobe After Effects 7.0
"Adobe AIR" = Adobe AIR
"Adobe Audition 3.0" = Adobe Audition 3.0
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"Aiseesoft iPhone Ringtone Maker_is1" = Aiseesoft iPhone Ringtone Maker
"AnswerWorks" = AnswerWorks Runtime
"Autodesk Express Viewer" = Autodesk Express Viewer
"CCleaner" = CCleaner
"Centrum.cz Toolbar_is1" = Centrum.cz Toolbar 1.110.021.004
"České rozšíření pro ADT 3" = České rozšíření pro ADT 3
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DebugMode Wax 2.0" = DebugMode Wax 2.0
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DMIView" = DMIView
"EasyTune5" = EasyTune5
"free-downloads.net Toolbar" = free-downloads.net Toolbar
"Gainward" = EXPERTool
"HijackThis" = HijackThis 2.0.2
"HP Document Viewer" = HP Document Viewer 5.3
"HP Imaging Device Functions" = HP Imaging Device Functions 5.3
"HP Photo & Imaging" = HP Image Zone 5.3
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPExtendedCapabilities" = HP Extended Capabilities 5.3
"HyperCam 2" = HyperCam 2
"ie8" = Windows Internet Explorer 8
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"Java Platform, Enterprise Edition 5 SDK" = Java Platform, Enterprise Edition 5 SDK
"LMS" = C-Dilla Licence Management System
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Need For Speed III" = Need For Speed III
"NVIDIA Drivers" = NVIDIA Drivers
"Picasa 3" = Picasa 3
"Raidmgr" = RaidMgr
"Revo Uninstaller" = Revo Uninstaller 1.83
"Smart Defrag_is1" = Smart Defrag
"Ultravnc2_is1" = UltraVNC 1.0.8.0
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.7
"WinRAR archiver" = WinRAR
"winscp3_is1" = WinSCP 4.1.9
"WMFDist11" = Windows Media Format 11 runtime
"WMV To AVI Converter_is1" = WMV To AVI Converter 1.00
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 28.11.2009 10:32:48 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 10:58:17 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 15:59:24 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 15:59:51 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:00:22 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:01:17 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:01:51 | Computer Name = KOMPIK | Source = EvntAgnt | ID = 3005
Description = Při přechodu na konec souboru protokolu došlo k chybě - vyhledávání
konce protokolu se nezdařilo. Byl zadán popisovač 615976. Návratový kód procedury
ReadEventLog je 1500.

Error - 29.11.2009 8:52:30 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace iobitupdate.exe, verze 1.0.0.256, chybující modul
kernel32.dll, verze 5.1.2600.5781, adresa chyby 0x00012afb.

Error - 4.12.2009 14:31:54 | Computer Name = KOMPIK | Source = MsiInstaller | ID = 10005
Description = Product: Adobe After Effects 7.0 -- You must install Adobe After Effects
7.0 using Setup.exe.

Error - 7.12.2009 14:06:05 | Computer Name = KOMPIK | Source = Google Update | ID = 20
Description =

[ Application Events ]
Error - 28.11.2009 10:32:48 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 10:58:17 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 15:59:24 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 15:59:51 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:00:22 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:01:17 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace acad.exe, verze 21.0.5.181, chybující modul kernel32.dll,
verze 5.1.2600.5781, adresa chyby 0x00009823.

Error - 28.11.2009 16:01:51 | Computer Name = KOMPIK | Source = EvntAgnt | ID = 3005
Description = Při přechodu na konec souboru protokolu došlo k chybě - vyhledávání
konce protokolu se nezdařilo. Byl zadán popisovač 615976. Návratový kód procedury
ReadEventLog je 1500.

Error - 29.11.2009 8:52:30 | Computer Name = KOMPIK | Source = Application Error | ID = 1000
Description = Chybující aplikace iobitupdate.exe, verze 1.0.0.256, chybující modul
kernel32.dll, verze 5.1.2600.5781, adresa chyby 0x00012afb.

Error - 4.12.2009 14:31:54 | Computer Name = KOMPIK | Source = MsiInstaller | ID = 10005
Description = Product: Adobe After Effects 7.0 -- You must install Adobe After Effects
7.0 using Setup.exe.

Error - 7.12.2009 14:06:05 | Computer Name = KOMPIK | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 15.12.2009 3:22:54 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: sptd

Error - 15.12.2009 3:23:22 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7009
Description = Vypršel časový limit (30000 milisekund) čekání na připojení služby
Služba brány aplikačního rozhraní.

Error - 15.12.2009 3:23:22 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7000
Description = Služba Služba brány aplikačního rozhraní neuspěla při spuštění v důsledku
následující chyby: %%1053

Error - 15.12.2009 3:59:40 | Computer Name = KOMPIK | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 15.12.2009 4:16:52 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7000
Description = Služba OMSCAN neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 15.12.2009 4:16:52 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: sptd

Error - 15.12.2009 4:18:10 | Computer Name = KOMPIK | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 15.12.2009 4:22:11 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7000
Description = Služba OMSCAN neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 15.12.2009 4:22:11 | Computer Name = KOMPIK | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: sptd

Error - 15.12.2009 4:24:56 | Computer Name = KOMPIK | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.


< End of report >

[Damned]

Odinstaluj si ten Daemon Tools toolbar a free-downloads.net Toolbar.
Složku C:\WINDOWS\System32\productregistry znáš?

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
O3 - HKCU\..\Toolbar\WebBrowser: (Centrum.cz Toolbar) - {D5D47440-0750-463D-BAEF-A47D02414806} - Reg Error: Value error. File not found

:Files
C:\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\tasks\SA.DAT
C:\WINDOWS\System32\ezsidmv.dat
C:\Documents and Settings\Matěj\Dokumenty\pinfect.zip
C:\WINDOWS\System32\mlfcache.dat
C:\WINDOWS\VDLL.DLL
C:\WINDOWS\System32\runouce.exe
C:\WINDOWS\RUNDL132.EXE
C:\WINDOWS\logo_1.exe
C:\WINDOWS\System32\eEmpty.exe

:Reg

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.