Prosím kontrolu logu Vyřešeno

[BiScHop]

Prosím kontrolu logu
MBAM mi neco nasel, ale nic se nemazal tak prosím kontrolu

Děkuji

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:40:15, on 11.7.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
F:\Programy\DAEMON Tools Lite\DTLiteShellHlp.exe
F:\Programy\Total Commander\TOTALCMD.EXE
F:\Programy\Opera\Opera.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
F:\Programy\HJT\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~2\INSTAL~1\{76E41~1\Setup.exe -rebootC:\PROGRA~2\INSTAL~1\{76E41~1\reboot.ini
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] F:\Programy\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "F:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files (x86)\FlashGet\jc_all.htm
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files (x86)\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\FlashGet.exe
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.53.0.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9046 bytes

[Reklama]

[jaro3]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Stáhni si OTH
na svojí plochu( pokud používáš Firefox , pravým klikni na OTH link a vyber uložit jako (Save as..).

Stáhni si OTL
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Stáhni si soubor Scan.txt
na svojí plochu (pokud používáš Firefox , pravým klikni na OTL link a vyber uložit jako (Save as..).

Poklepej na soubor OTH na ploše , po spuštění programu klikni na Kill All Processes.Poté klikni na Start OTL .Poklepej Do prázdného okna pod Vlastní skenování /opravy ( Custom Scans box). Objeví se zpráva: Kliknutím na OK vyberete cestu k souboru, kliknutím na Zrušit zrušíte výběr.
Klikni na OK. Objeví se okno průzkumníku , zde klikneš na plochu a najdeš na ní soubor Scan.txt .Klikni na Otevřít.
Poté klikni na Rychle prohledat (Quick Scan). Neměň žádná jiná nastavení . Sken může trvat dlouho.
Kdy sken skončí , objeví se na ploše dva logy:
OTL.Txt a Extras.Txt , jsou uloženy ve stejném místě jako OTL.
Zkopíruj sem prosím celý obsah obou logů.

[BiScHop]

OTL logfile created on: 11.7.2010 11:06:45 - Run 2
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Mc Mrož\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 48,00% Memory free
8,00 Gb Paging File | 5,00 Gb Available in Paging File | 61,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,50 Gb Total Space | 21,34 Gb Free Space | 28,64% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 465,75 Gb Total Space | 25,89 Gb Free Space | 5,56% Space Free | Partition Type: NTFS
Drive F: | 465,66 Gb Total Space | 90,45 Gb Free Space | 19,42% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MCMROŽ-PC
Current User Name: Mc Mrož
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010.07.11 11:03:26 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTH.exe
PRC - [2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\otl.exe
PRC - [2010.06.30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- F:\Programy\Opera\opera.exe
PRC - [2010.06.20 11:00:57 | 000,214,520 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2010.06.15 16:33:40 | 010,358,072 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\iTunes\iTunes.exe
PRC - [2010.06.10 21:18:20 | 000,019,760 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
PRC - [2010.06.10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010.06.03 13:45:42 | 000,012,592 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
PRC - [2010.04.07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2010.03.25 18:42:36 | 000,388,096 | ---- | M] (Trend Micro Inc.) -- F:\Programy\HJT\Trend Micro\HiJackThis\HiJackThis.exe
PRC - [2010.03.14 17:29:18 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009.10.30 13:57:00 | 000,229,936 | ---- | M] (DT Soft Ltd) -- F:\Programy\DAEMON Tools Lite\DTLiteShellHlp.exe
PRC - [2009.08.29 08:56:10 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
PRC - [2009.08.16 18:04:44 | 001,037,312 | ---- | M] () -- F:\Programy\WinRAR\WinRAR.exe
PRC - [2009.07.16 08:50:00 | 003,497,720 | ---- | M] (C. Ghisler & Co.) -- F:\Programy\Total Commander\TOTALCMD.EXE
PRC - [2006.11.10 08:12:28 | 000,099,936 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe


========== Modules (SafeList) ==========

MOD - [2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\otl.exe
MOD - [2010.05.06 14:41:49 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Internet Explorer\ieproxy.dll
MOD - [2010.03.18 13:16:28 | 006,730,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
MOD - [2010.03.18 13:16:28 | 000,771,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcr100_clr0400.dll
MOD - [2010.03.18 13:16:28 | 000,413,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
MOD - [2010.03.10 04:01:13 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.dll
MOD - [2009.11.25 21:47:32 | 001,130,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dfshim.dll
MOD - [2009.07.14 03:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll
MOD - [2009.07.14 03:16:18 | 001,011,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll
MOD - [2009.07.14 03:16:16 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll
MOD - [2009.07.14 03:16:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\thumbcache.dll
MOD - [2009.07.14 03:16:15 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\StructuredQuery.dll
MOD - [2009.07.14 03:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll
MOD - [2009.07.14 03:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll
MOD - [2009.07.14 03:16:13 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SearchFolder.dll
MOD - [2009.07.14 03:16:13 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll
MOD - [2009.07.14 03:16:11 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntshrui.dll
MOD - [2009.07.14 03:16:03 | 001,661,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\networkexplorer.dll
MOD - [2009.07.14 03:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\linkinfo.dll
MOD - [2009.07.14 03:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll
MOD - [2009.07.14 03:15:07 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll
MOD - [2009.07.14 03:14:52 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\actxprxy.dll
MOD - [2009.07.14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009.07.14 03:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2009.06.10 23:23:11 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\msvcr80.dll
MOD - [2009.03.06 05:33:26 | 000,961,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveUtil.dll
MOD - [2009.02.12 16:19:38 | 000,178,040 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
MOD - [2009.02.12 16:19:32 | 002,217,848 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
MOD - [2008.10.25 12:44:34 | 000,022,872 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveNew.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB)
SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:64bit: - [2010.04.07 21:10:42 | 000,042,336 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:64bit: - [2010.04.07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2010.03.01 20:35:38 | 000,199,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:64bit: - [2009.08.18 03:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:64bit: - [2009.07.14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010.07.07 01:56:07 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.06.20 11:00:57 | 000,214,520 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2010.06.10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.03.23 23:38:23 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010.03.18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.14 17:29:18 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2008.10.25 12:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006.11.10 08:12:28 | 000,099,936 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.06.29 22:24:36 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:64bit: - [2010.04.20 20:10:12 | 000,033,344 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2010.04.19 20:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010.04.07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2010.04.07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:64bit: - [2010.04.07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2010.04.07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2010.04.07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2010.04.07 03:23:30 | 000,195,584 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.03.05 17:17:35 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.03.01 20:35:40 | 002,060,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VX1000.sys -- (VX1000)
DRV:64bit: - [2009.11.09 19:12:42 | 000,035,112 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV:64bit: - [2009.08.18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009.08.18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:64bit: - [2009.07.14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:64bit: - [2009.07.14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:64bit: - [2009.07.14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:64bit: - [2009.07.14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.03.02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 AE F1 24 7E C4 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.06.29 22:10:18 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [TNOD UP] C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe (Tukero[X]Team)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] F:\Programy\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKLM..\RunOnce: [InstallShieldSetup] C:\PROGRA~2\INSTAL~1\{76E41~1\Setup.exe File not found
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] F:\Programy\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files (x86)\FlashGet\JC_ALL.HTM ()
O8:64bit: - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files (x86)\FlashGet\JC_LINK.HTM ()
O8 - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files (x86)\FlashGet\JC_ALL.HTM ()
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files (x86)\FlashGet\JC_LINK.HTM ()
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\flashget.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\flashget.exe (FlashGet.com)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKCU\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/stati ... 0.53.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.03.08 15:55:48 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell - "" = AutoRun
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell\AutoRun\command - "" = G:\Autoplay.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 90 Days ==========

[2010.07.11 11:02:30 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
[2010.07.11 11:02:19 | 000,258,560 | ---- | C] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTH.exe
[2010.07.11 10:22:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.07.09 17:28:16 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\redsn0w_win_0.9.5b5-5
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iPod
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010.07.09 17:00:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010.07.09 16:58:35 | 000,000,000 | ---D | C] -- C:\Windows\LastGood
[2010.07.09 16:58:18 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010.07.09 16:58:16 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.07.09 16:53:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Safari
[2010.07.08 11:11:39 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Mp3tag
[2010.07.07 01:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2010.07.07 00:00:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2010.07.06 23:58:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.07.01 00:30:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TNod User & Password Finder
[2010.06.29 23:11:55 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\OxyCube
[2010.06.29 23:10:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oxygen Software
[2010.06.29 22:24:36 | 000,034,032 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys
[2010.06.29 22:23:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson
[2010.06.29 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\ESET
[2010.06.29 21:08:23 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\GetRightToGo
[2010.06.29 16:34:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2010.06.29 07:05:29 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010.06.27 17:22:37 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Ironclad Games
[2010.06.27 17:22:33 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Stardock
[2010.06.27 17:13:06 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\NFS Most Wanted
[2010.06.21 18:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Soluto
[2010.06.12 01:54:26 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\Wallpapers
[2010.06.05 21:14:50 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\OpenTTD
[2010.06.05 21:13:29 | 000,000,000 | ---D | C] -- C:\Program Files\OpenTTD
[2010.05.30 13:03:17 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\AutoCAD
[2010.05.23 10:42:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\directx
[2010.05.23 10:39:58 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2010.05.23 00:50:45 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2010.05.23 00:49:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2010.05.23 00:49:16 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010.05.23 00:48:55 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010.05.22 22:30:28 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Apps
[2010.05.22 22:30:26 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Deployment
[2010.05.21 17:11:51 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\NeroVision
[2010.05.20 03:00:53 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2010.05.20 03:00:53 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2010.05.19 17:04:08 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\Command and Conquer Generals Zero Hour Data
[2010.05.19 16:59:03 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\Command and Conquer Generals Data
[2010.05.18 20:17:55 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\CSF Data
[2010.05.18 20:02:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pyro Studios
[2010.05.16 14:58:13 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\Rockstar Games
[2010.05.16 14:51:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Rockstar Games
[2010.05.16 14:49:33 | 000,161,088 | ---- | C] (Take-Two Interactive Software, Inc.) -- C:\Users\Mc Mrož\Desktop\Grand Thref Auto IV.exe
[2010.05.16 14:46:39 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Rockstar Games
[2010.05.16 14:42:52 | 000,000,000 | RH-D | C] -- C:\Users\Mc Mrož\AppData\Roaming\SecuROM
[2010.05.16 14:41:29 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010.05.13 17:22:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2010.05.12 15:32:52 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\Dočasné
[2010.05.09 12:37:03 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Winsplit Revolution
[2010.05.05 22:43:54 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Desktopicon
[2010.05.05 22:43:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DsNET Corp
[2010.05.02 10:53:53 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Mc Mrož
[2010.05.02 10:53:53 | 000,000,000 | ---D | C] -- C:\ProgramData\LangSoft
[2010.05.02 10:53:32 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\LangSoft
[2010.04.27 20:03:25 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\WEB
[2010.04.26 18:31:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autokelly
[2010.04.26 14:47:15 | 000,000,000 | -H-D | C] -- C:\Users\Mc Mrož\Desktop\pwdump2
[2010.04.26 14:47:15 | 000,000,000 | -H-D | C] -- C:\Users\Mc Mrož\Desktop\lang
[2010.04.23 16:52:10 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Souptoys
[2010.04.23 16:52:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Souptoys
[2010.04.23 16:50:32 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Playsets
[2010.04.20 20:36:27 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Soldat
[2010.04.20 20:10:44 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Hamachi
[2010.04.20 20:10:12 | 000,033,344 | ---- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
[2010.04.20 20:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hamachi
[2010.04.13 16:20:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Easy Editor 2005
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2010.07.11 11:10:05 | 003,670,016 | -HS- | M] () -- C:\Users\Mc Mrož\NTUSER.DAT
[2010.07.11 11:03:26 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTH.exe
[2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
[2010.07.11 10:38:18 | 000,002,971 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.lnk
[2010.07.11 10:37:33 | 000,279,864 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat
[2010.07.11 10:37:01 | 001,402,880 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.msi
[2010.07.11 10:22:15 | 000,000,656 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.11 10:13:53 | 000,000,600 | ---- | M] () -- C:\Users\Mc Mrož\AppData\Roaming\winscp.rnd
[2010.07.11 09:01:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.07.09 21:50:21 | 001,478,586 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.07.09 21:50:21 | 000,634,308 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.07.09 21:50:21 | 000,618,714 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.07.09 21:50:21 | 000,122,898 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.07.09 21:50:21 | 000,107,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.07.09 16:53:35 | 000,002,491 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2010.07.09 16:38:22 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.07.09 16:38:22 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.07.09 12:49:45 | 005,330,651 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\N.A.S.A. - Gifted.mp3
[2010.07.09 10:10:42 | 004,085,037 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Russian - Kalinka _Soviet Army Chorus_ .mp3
[2010.07.08 11:11:29 | 000,000,640 | ---- | M] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.07.08 11:07:29 | 009,212,155 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Shots Feat. Lil Jon.mp3
[2010.07.08 11:07:24 | 004,129,780 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Lil Jon - Outta Your Mind.mp3
[2010.07.08 11:07:12 | 005,961,768 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\14 - 140 Grime Street (Produced By Wbwoy).mp3
[2010.07.07 09:33:49 | 003,496,640 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.07.07 09:33:11 | 000,227,520 | ---- | M] () -- C:\Users\Mc Mrož\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.07.07 09:32:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.07.07 09:31:50 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.07.07 02:25:57 | 003,826,882 | -H-- | M] () -- C:\Users\Mc Mrož\AppData\Local\IconCache.db
[2010.07.07 02:04:16 | 000,001,143 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Adobe Photoshop CS3.lnk
[2010.07.07 01:11:38 | 000,000,592 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.07.01 22:08:24 | 000,000,602 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\WinSCP.lnk
[2010.07.01 00:30:46 | 000,001,866 | ---- | M] () -- C:\Users\Public\Desktop\Update NOD32 license.lnk
[2010.06.30 22:15:40 | 004,662,737 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\DJ Inphinity Techno Mix.mp3
[2010.06.29 22:24:36 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys
[2010.06.27 16:07:48 | 000,066,364 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\35706_139676956043186_100000026473857_404033_1008846_n.jpg
[2010.06.26 00:10:22 | 000,000,281 | ---- | M] () -- C:\Windows\EReg072.dat
[2010.06.26 00:02:37 | 000,020,480 | ---- | M] () -- C:\Windows\SysWow64\H@tKeysH@@k.DLL
[2010.06.22 23:15:43 | 001,683,568 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Arash Temptation Russian feat. Blastjashie arashfans.com videos.mp3
[2010.06.22 15:39:47 | 000,378,622 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\sshot-1.png
[2010.06.21 20:54:52 | 004,423,661 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\BassHunter Mega Mix.mp3
[2010.06.21 18:42:32 | 000,000,098 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010.06.21 06:46:05 | 088,375,228 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\MC Tommy Ne jamais céder (Dedicated).mp4
[2010.06.20 11:01:54 | 000,214,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2010.06.20 11:00:57 | 000,214,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.06.19 21:18:59 | 003,581,942 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\bushido - ich regele das.mp3
[2010.06.19 20:38:13 | 000,000,156 | ---- | M] () -- C:\Windows\Twunk001.MTX
[2010.06.19 20:38:13 | 000,000,003 | ---- | M] () -- C:\Windows\Twain001.Mtx
[2010.06.18 20:08:50 | 001,813,508 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Gladiator Techno Remix.mp3
[2010.06.16 06:55:29 | 008,597,492 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\01_Nothin_On_You__feat_Bruno_M.mp3
[2010.06.11 23:21:16 | 001,849,032 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Rytmus Cigansky sen.mp3
[2010.06.11 22:07:28 | 001,359,182 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Lost Techno Dance.mp3
[2010.06.08 15:39:53 | 000,000,675 | ---- | M] () -- C:\Users\Public\Desktop\Red Alert 2.lnk
[2010.06.08 15:39:52 | 000,000,846 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\OpenTTD.lnk
[2010.06.07 20:38:09 | 000,000,000 | ---- | M] () -- C:\Windows\XXLGSC
[2010.06.05 21:49:35 | 004,058,576 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Techno 2009 Mega Remix.mp3
[2010.06.01 22:56:38 | 001,680,660 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Def3 Factor Losing You feat. Val Halla.mp3
[2010.05.30 20:59:08 | 007,453,960 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\bob-airplanes_(feat._hayley_williams).mp3
[2010.05.30 20:59:08 | 004,477,056 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Darin Step Up.mp3
[2010.05.22 22:31:26 | 000,000,318 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\CZShare Manager.appref-ms
[2010.05.20 20:49:28 | 006,300,487 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Alex_M_vs_Marc_Van_Damme_-_Tec.mp3
[2010.05.20 20:49:28 | 002,289,992 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Gigi d'agostino lento violento man 08.mp3
[2010.05.20 20:49:27 | 004,391,540 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\_2__05-musis.mp3
[2010.05.20 20:49:27 | 004,071,003 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Závislost.mp3
[2010.05.20 20:49:20 | 002,134,092 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\04 - Twisted Nerve - Bernard Hermann.mp3
[2010.05.20 20:49:17 | 002,934,826 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\13 - Hello Zepp.mp3
[2010.05.20 20:06:35 | 003,584,031 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\soulja boy tell`em - turn my swag on.mp3
[2010.05.19 17:03:28 | 000,000,979 | ---- | M] () -- C:\Windows\eReg.dat
[2010.05.19 17:02:11 | 000,000,509 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer Generals Zero Hour .lnk
[2010.05.19 16:56:36 | 000,000,501 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk
[2010.05.18 20:13:23 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\Commandos Strike Force.lnk
[2010.05.17 20:16:18 | 000,010,624 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\Folder.jpg
[2010.05.17 20:16:18 | 000,010,624 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{0FEA73FD-7BCE-47E7-9A59-1833AF0FF020}_Large.jpg
[2010.05.17 20:16:17 | 000,002,724 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\AlbumArtSmall.jpg
[2010.05.17 20:16:17 | 000,002,724 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{0FEA73FD-7BCE-47E7-9A59-1833AF0FF020}_Small.jpg
[2010.05.17 19:30:24 | 000,000,608 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Mafia.lnk
[2010.05.16 14:51:42 | 000,002,056 | ---- | M] () -- C:\Users\Public\Desktop\Rockstar Games Social Club.lnk
[2010.05.16 14:49:33 | 000,161,088 | ---- | M] (Take-Two Interactive Software, Inc.) -- C:\Users\Mc Mrož\Desktop\Grand Thref Auto IV.exe
[2010.05.16 14:41:29 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010.05.15 22:29:27 | 000,007,442 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{5BE7B9E8-E84D-439B-8FF7-5C2E26EAAABE}_Large.jpg
[2010.05.15 22:29:27 | 000,002,037 | -HS- | M] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{5BE7B9E8-E84D-439B-8FF7-5C2E26EAAABE}_Small.jpg
[2010.05.08 19:59:28 | 000,000,000 | ---- | M] () -- C:\Windows\Twunk002.MTX
[2010.05.08 10:55:50 | 000,001,190 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Filmy.lnk
[2010.05.08 00:21:53 | 000,000,644 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Kuba.lnk
[2010.05.08 00:17:58 | 000,001,170 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\MP3.lnk
[2010.05.07 23:35:22 | 000,000,659 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Call of Duty 2 Singleplayer.lnk
[2010.05.07 23:35:02 | 000,000,659 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Call of Duty 2 Multiplayer.lnk
[2010.05.07 23:33:41 | 000,000,678 | ---- | M] () -- C:\Users\Public\Desktop\IL-2 Sturmovik 1946.lnk
[2010.05.07 23:33:03 | 000,000,653 | ---- | M] () -- C:\Users\Public\Desktop\PF+FB+AEP.lnk
[2010.05.05 22:43:55 | 000,002,000 | ---- | M] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
[2010.05.05 17:05:34 | 030,212,843 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Governor of Poker.exe
[2010.05.02 10:55:18 | 000,002,686 | ---- | M] () -- C:\Windows\TRNCOM.INI
[2010.05.02 10:55:16 | 000,000,631 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\PC Translator 2009.lnk
[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.04.29 15:39:28 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.04.26 18:31:11 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Elektronický katalog E-cat.lnk
[2010.04.24 00:35:29 | 000,000,728 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\CCleaner.lnk
[2010.04.20 20:38:07 | 000,000,000 | R--- | M] () -- C:\logwmemory.bin
[2010.04.20 20:10:12 | 000,033,344 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\drivers\hamachi.sys
[2010.04.20 20:10:12 | 000,000,949 | ---- | M] () -- C:\Users\Public\Desktop\hamachi.lnk
[2010.04.13 16:00:57 | 000,000,737 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\PSPad.lnk
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.07.11 10:37:33 | 000,279,864 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2010.07.11 10:36:53 | 001,402,880 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.msi
[2010.07.11 10:22:15 | 000,000,656 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.09 16:53:35 | 000,002,491 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk
[2010.07.09 12:23:52 | 005,330,651 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\N.A.S.A. - Gifted.mp3
[2010.07.09 10:10:42 | 004,085,037 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Russian - Kalinka _Soviet Army Chorus_ .mp3
[2010.07.08 11:11:29 | 000,000,640 | ---- | C] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.07.07 14:52:05 | 009,212,155 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Shots Feat. Lil Jon.mp3
[2010.07.07 12:23:53 | 005,961,768 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\14 - 140 Grime Street (Produced By Wbwoy).mp3
[2010.07.07 12:21:23 | 004,129,780 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Lil Jon - Outta Your Mind.mp3
[2010.07.07 02:04:16 | 000,001,143 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Adobe Photoshop CS3.lnk
[2010.07.01 22:08:25 | 000,000,600 | ---- | C] () -- C:\Users\Mc Mrož\AppData\Roaming\winscp.rnd
[2010.07.01 22:08:24 | 000,000,602 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\WinSCP.lnk
[2010.07.01 00:30:46 | 000,001,866 | ---- | C] () -- C:\Users\Public\Desktop\Update NOD32 license.lnk
[2010.06.30 22:15:13 | 004,662,737 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\DJ Inphinity Techno Mix.mp3
[2010.06.27 16:07:48 | 000,066,364 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\35706_139676956043186_100000026473857_404033_1008846_n.jpg
[2010.06.26 00:10:22 | 000,000,281 | ---- | C] () -- C:\Windows\EReg072.dat
[2010.06.26 00:02:37 | 000,020,480 | ---- | C] () -- C:\Windows\SysWow64\H@tKeysH@@k.DLL
[2010.06.22 23:15:32 | 001,683,568 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Arash Temptation Russian feat. Blastjashie arashfans.com videos.mp3
[2010.06.22 15:39:47 | 000,378,622 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\sshot-1.png
[2010.06.21 20:54:27 | 004,423,661 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\BassHunter Mega Mix.mp3
[2010.06.21 18:42:32 | 000,000,098 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010.06.21 06:45:14 | 088,375,228 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\MC Tommy Ne jamais céder (Dedicated).mp4
[2010.06.19 21:16:01 | 003,581,942 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\bushido - ich regele das.mp3
[2010.06.18 20:08:41 | 001,813,508 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Gladiator Techno Remix.mp3
[2010.06.16 06:54:15 | 008,597,492 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\01_Nothin_On_You__feat_Bruno_M.mp3
[2010.06.11 23:21:05 | 001,849,032 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Rytmus Cigansky sen.mp3
[2010.06.11 22:07:23 | 001,359,182 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Lost Techno Dance.mp3
[2010.06.05 21:49:16 | 004,058,576 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Techno 2009 Mega Remix.mp3
[2010.06.05 21:13:30 | 000,000,846 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\OpenTTD.lnk
[2010.06.01 22:40:22 | 001,680,660 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Def3 Factor Losing You feat. Val Halla.mp3
[2010.05.30 19:43:34 | 007,453,960 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\bob-airplanes_(feat._hayley_williams).mp3
[2010.05.30 19:17:15 | 004,477,056 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Darin Step Up.mp3
[2010.05.27 18:31:14 | 000,024,576 | ---- | C] () -- C:\Windows\UniFISH.exe
[2010.05.22 22:31:26 | 000,000,318 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\CZShare Manager.appref-ms
[2010.05.20 20:03:35 | 003,584,031 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\soulja boy tell`em - turn my swag on.mp3
[2010.05.19 17:02:11 | 000,000,509 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer Generals Zero Hour .lnk
[2010.05.19 16:58:24 | 000,000,979 | ---- | C] () -- C:\Windows\eReg.dat
[2010.05.19 16:56:36 | 000,000,501 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer Generals.lnk
[2010.05.18 20:13:23 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\Commandos Strike Force.lnk
[2010.05.18 19:30:26 | 000,000,675 | ---- | C] () -- C:\Users\Public\Desktop\Red Alert 2.lnk
[2010.05.17 20:16:18 | 000,010,624 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{0FEA73FD-7BCE-47E7-9A59-1833AF0FF020}_Large.jpg
[2010.05.17 20:16:18 | 000,002,724 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{0FEA73FD-7BCE-47E7-9A59-1833AF0FF020}_Small.jpg
[2010.05.17 19:30:24 | 000,000,608 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Mafia.lnk
[2010.05.16 14:51:42 | 000,002,056 | ---- | C] () -- C:\Users\Public\Desktop\Rockstar Games Social Club.lnk
[2010.05.15 22:29:27 | 000,010,624 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\Folder.jpg
[2010.05.15 22:29:27 | 000,007,442 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{5BE7B9E8-E84D-439B-8FF7-5C2E26EAAABE}_Large.jpg
[2010.05.15 22:29:27 | 000,002,724 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\AlbumArtSmall.jpg
[2010.05.15 22:29:27 | 000,002,037 | -HS- | C] () -- C:\Users\Mc Mrož\Desktop\AlbumArt_{5BE7B9E8-E84D-439B-8FF7-5C2E26EAAABE}_Small.jpg
[2010.05.15 22:29:21 | 002,134,092 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\04 - Twisted Nerve - Bernard Hermann.mp3
[2010.05.15 22:28:07 | 002,934,826 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\13 - Hello Zepp.mp3
[2010.05.12 21:19:42 | 000,000,000 | ---- | C] () -- C:\Users\Mc Mrož\Sti_Trace.log
[2010.05.08 19:59:28 | 000,000,156 | ---- | C] () -- C:\Windows\Twunk001.MTX
[2010.05.08 19:59:28 | 000,000,003 | ---- | C] () -- C:\Windows\Twain001.Mtx
[2010.05.08 19:59:28 | 000,000,000 | ---- | C] () -- C:\Windows\Twunk002.MTX
[2010.05.08 10:55:50 | 000,001,190 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Filmy.lnk
[2010.05.08 00:21:55 | 000,000,644 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Kuba.lnk
[2010.05.08 00:17:58 | 000,001,170 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\MP3.lnk
[2010.05.08 00:13:09 | 004,391,540 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\_2__05-musis.mp3
[2010.05.08 00:13:01 | 004,071,003 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Závislost.mp3
[2010.05.08 00:10:59 | 000,152,103 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Arilin.docx
[2010.05.07 23:34:31 | 000,000,659 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Call of Duty 2 Singleplayer.lnk
[2010.05.07 23:34:31 | 000,000,659 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Call of Duty 2 Multiplayer.lnk
[2010.05.05 22:45:21 | 002,289,992 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Gigi d'agostino lento violento man 08.mp3
[2010.05.05 22:43:55 | 000,002,000 | ---- | C] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
[2010.05.05 22:43:29 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\vbzlib1.dll
[2010.05.05 17:04:59 | 030,212,843 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Governor of Poker.exe
[2010.05.02 10:58:58 | 000,000,000 | ---- | C] () -- C:\Windows\XXLGSC
[2010.05.02 10:55:18 | 000,002,686 | ---- | C] () -- C:\Windows\TRNCOM.INI
[2010.05.02 10:55:16 | 000,000,631 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\PC Translator 2009.lnk
[2010.05.01 22:10:20 | 006,300,487 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Alex_M_vs_Marc_Van_Damme_-_Tec.mp3
[2010.04.26 18:31:11 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Elektronický katalog E-cat.lnk
[2010.04.26 18:31:08 | 000,569,368 | ---- | C] () -- C:\Windows\SysWow64\olelib.tlb
[2010.04.22 17:13:41 | 001,282,560 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\StressRelief.EXE
[2010.04.20 20:38:07 | 000,000,000 | R--- | C] () -- C:\logwmemory.bin
[2010.04.20 20:10:12 | 000,000,949 | ---- | C] () -- C:\Users\Public\Desktop\hamachi.lnk
[2010.04.18 10:19:59 | 000,000,678 | ---- | C] () -- C:\Users\Public\Desktop\IL-2 Sturmovik 1946.lnk
[2010.04.13 16:00:57 | 000,000,737 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\PSPad.lnk
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010.03.24 16:16:36 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2010.03.14 17:15:48 | 000,000,257 | ---- | C] () -- C:\Windows\game.ini
[2010.03.14 15:19:07 | 000,000,083 | ---- | C] () -- C:\Windows\wp.INI
[2010.03.14 00:12:56 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.03.14 00:12:55 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.03.14 00:12:48 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.03.14 00:12:48 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.03.14 00:12:42 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.03.14 00:12:42 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010.03.13 19:42:06 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2010.03.09 20:57:00 | 001,470,766 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.03.06 01:06:46 | 000,146,432 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010.03.06 01:06:46 | 000,072,704 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010.03.01 20:35:40 | 000,015,498 | ---- | C] () -- C:\Windows\VX1000.ini
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== LOP Check ==========

[2010.04.26 16:50:47 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Autodesk
[2010.03.24 20:59:18 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\BITS
[2010.03.29 21:13:27 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Canon
[2010.03.12 17:38:32 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\DAEMON Tools Lite
[2010.05.05 22:43:54 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Desktopicon
[2010.03.06 00:21:31 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\ESET
[2010.03.24 21:01:05 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\FlashGet
[2010.03.24 16:16:20 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\FlashGetBHO
[2010.06.29 21:08:37 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\GetRightToGo
[2010.03.06 08:15:57 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\GHISLER
[2010.07.11 10:29:04 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\ICQ
[2010.05.02 10:58:58 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\LangSoft
[2010.07.08 11:14:38 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Mp3tag
[2010.03.05 17:13:20 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Opera
[2010.06.29 23:11:55 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\OxyCube
[2010.03.14 14:04:35 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Publish Providers
[2010.03.14 19:18:25 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\SharePod
[2010.04.20 20:36:27 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Soldat
[2010.06.03 21:40:28 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Sony
[2010.04.23 16:52:10 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Souptoys
[2010.03.05 17:20:23 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Stardock
[2010.03.09 20:34:53 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\TeamViewer
[2010.03.06 01:09:13 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\TuneUp Software
[2005.10.08 06:37:36 | 000,000,000 | RHSD | M] -- C:\Users\Mc Mrož\AppData\Roaming\Winbooterr
[2010.05.09 12:39:27 | 000,000,000 | ---D | M] -- C:\Users\Mc Mrož\AppData\Roaming\Winsplit Revolution
[2009.07.14 07:08:49 | 000,010,444 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009.06.10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009.12.29 02:06:55 | 000,075,340 | ---- | M] () -- C:\co si o mne myslis.jpg
[2009.06.10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2010.07.07 09:31:50 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.04.20 20:38:07 | 000,000,000 | R--- | M] () -- C:\logwmemory.bin
[2010.07.11 10:23:07 | 000,000,103 | ---- | M] () -- C:\mbam-error.txt
[2010.07.07 09:32:04 | 4293,386,240 | -HS- | M] () -- C:\pagefile.sys
[2010.03.13 19:43:16 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009.07.14 03:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\msvbvm60.dll
[2009.08.29 08:59:32 | 011,406,336 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\SysWOW64\wmp.dll
[2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\drivers\*.sys /90 >
[2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys

========== Alternate Data Streams ==========

@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
< End of report >





ale log Extras.txt se asi nevytvořil nebo ho nemohu najít....

[jaro3]

Měl by být ve stejné složce jako OTL.


Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
O4 - HKLM..\RunOnce: [InstallShieldSetup] C:\PROGRA~2\INSTAL~1\{76E41~1\Setup.exe File not found
O13 - gopher Prefix: missing
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/stati ... 0.53.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell - "" = AutoRun
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell\AutoRun\command - "" = G:\Autoplay.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

:Files
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\system32\SET*.tmp
c:\windows\Tasks\*.job
C:\*.tmp
C:\Windows\SysWow64\*.tmp
C:\Windows\SysWow64\mlfcache.dat
C:\Windows\tasks\SA.DAT
C:\Windows\EReg072.dat
C:\Windows\Twunk001.MTX
C:\Windows\Twain001.Mtx
C:\Windows\XXLGSC
C:\Windows\Twunk002.MTX
C:\Windows\UniFISH.exe
C:\Windows\Twunk002.MTX

:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

Aktualizuj javu:
Java SE Runtime Environment 6u20
Vyber OS ( předpokládám Windows), dej zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u20-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.

spusť Malwarebytes' Anti-Malware
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[BiScHop]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\InstallShieldSetup deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Starting removal of ActiveX control {784797A8-342D-4072-9486-03C8D0F2F0A1}
C:\Windows\Downloaded Program Files\CONFLICT.1\BFHUpdater.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{784797A8-342D-4072-9486-03C8D0F2F0A1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{784797A8-342D-4072-9486-03C8D0F2F0A1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{784797A8-342D-4072-9486-03C8D0F2F0A1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{784797A8-342D-4072-9486-03C8D0F2F0A1}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\Windows\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\grooveLocalGWS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88FED34C-F0CA-4636-A375-3CB6248B04CD}\ deleted successfully.
File {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ deleted successfully.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}\ deleted successfully.
File {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\autoexec.bat moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
File G:\Autoplay.exe not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
ADS C:\ProgramData\TEMP:888AFB86 deleted successfully.
========== FILES ==========
C:\WINDOWS\System32\tmpD3BF.tmp moved successfully.
C:\WINDOWS\System32\tmpD44C.tmp moved successfully.
File\Folder C:\WINDOWS\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder c:\windows\Tasks\*.job not found.
File\Folder C:\*.tmp not found.
File\Folder C:\Windows\SysWow64\*.tmp not found.
C:\Windows\SysWow64\mlfcache.dat moved successfully.
C:\Windows\tasks\SA.DAT moved successfully.
C:\Windows\EReg072.dat moved successfully.
C:\Windows\Twunk001.MTX moved successfully.
C:\Windows\Twain001.Mtx moved successfully.
C:\Windows\XXLGSC moved successfully.
C:\Windows\Twunk002.MTX moved successfully.
C:\Windows\UniFISH.exe moved successfully.
File\Folder C:\Windows\Twunk002.MTX not found.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mc Mrož
->Temp folder emptied: 5906507 bytes
->Temporary Internet Files folder emptied: 2097594 bytes
->Java cache emptied: 3839672 bytes
->Apple Safari cache emptied: 16387727 bytes
->Opera cache emptied: 820852955 bytes
->Flash cache emptied: 3386 bytes

User: Mc Mro�
->Temp folder emptied: 12650555 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3322 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 8184949182 bytes

Total Files Cleaned = 8 628,00 mb


OTL by OldTimer - Version 3.2.9.0 log created on 07112010_133805

Files\Folders moved on Reboot...
C:\Users\Mc Mrož\AppData\Local\Temp\Rar$EX00.449\TotoneTheme.exe moved successfully.
File\Folder C:\Users\Mc Mrož\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...








Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4301

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11.7.2010 13:53:09
mbam-log-2010-07-11 (13-53-09).txt

Typ skenu: Rychlý sken
Skenované objekty: 136708
Uplynulý čas: 4 minuta(y), 49 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 2
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 2
Infikované soubory: 3

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{ydkc8f14-33j8-u43b-0k13-h26ue8quem6j} (Generic.Bot.H) -> No action taken.
HKEY_CURRENT_USER\Software\victim (Malware.Trace) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
C:\Users\Mc Mrož\AppData\Roaming\Winbooterr (Backdoor.SpyNet.M) -> No action taken.
C:\Windows\System32\Winbooterr (Trojan.Backdoor) -> No action taken.

Infikované soubory:
C:\Users\Mc Mrož\AppData\Roaming\Winbooterr\Svchost.exe (Backdoor.SpyNet.M) -> No action taken.
C:\Users\Mc Mrož\AppData\Roaming\logs.dat (Bifrose.Trace) -> No action taken.
C:\Windows\System32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.

[jaro3]

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit nový log z MbAM.

Poklepej znovu na ikonu OTL by OldTimer, pod Vlastní skenování/opravy (Custom Scans/Fixes) vlož následující text , zeleně zbarvený:

Kód: Vybrat vše

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT

Neměň nastavení, jen klikni na Prohledat (Run Scan), nech sken dokončit. Až se se objeví textový soubor , tak sem vlož prosím jeho celý obsah.

[BiScHop]

OTL logfile created on: 11.7.2010 17:14:57 - Run 3
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Mc Mrož\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74,50 Gb Total Space | 22,81 Gb Free Space | 30,61% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 465,75 Gb Total Space | 17,20 Gb Free Space | 3,69% Space Free | Partition Type: NTFS
Drive F: | 465,66 Gb Total Space | 101,22 Gb Free Space | 21,74% Space Free | Partition Type: NTFS
Drive G: | 2,63 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MCMROŽ-PC
Current User Name: Mc Mrož
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
PRC - [2010.06.30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- F:\Programy\Opera\opera.exe
PRC - [2010.06.20 11:00:57 | 000,214,520 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2010.06.15 16:33:40 | 010,358,072 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\iTunes\iTunes.exe
PRC - [2010.06.10 21:18:20 | 000,019,760 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
PRC - [2010.06.10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010.06.03 13:45:42 | 000,012,592 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
PRC - [2010.04.29 15:39:32 | 001,090,952 | ---- | M] (Malwarebytes Corporation) -- F:\Programy\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2010.04.07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2010.03.14 17:29:18 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009.10.30 13:57:00 | 000,229,936 | ---- | M] (DT Soft Ltd) -- F:\Programy\DAEMON Tools Lite\DTLiteShellHlp.exe
PRC - [2009.07.16 08:50:00 | 003,497,720 | ---- | M] (C. Ghisler & Co.) -- F:\Programy\Total Commander\TOTALCMD.EXE
PRC - [2006.11.10 08:12:28 | 000,099,936 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe


========== Modules (SafeList) ==========

MOD - [2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
MOD - [2009.07.14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB)
SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:64bit: - [2010.04.07 21:10:42 | 000,042,336 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV:64bit: - [2010.04.07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2010.03.01 20:35:38 | 000,199,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:64bit: - [2009.08.18 03:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.07.14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:64bit: - [2009.07.14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010.07.07 01:56:07 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.06.20 11:00:57 | 000,214,520 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2010.06.10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.03.23 23:38:23 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010.03.18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.14 17:29:18 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2008.10.25 12:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006.11.10 08:12:28 | 000,099,936 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2010.06.29 22:24:36 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:64bit: - [2010.04.20 20:10:12 | 000,033,344 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2010.04.19 20:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2010.04.07 21:08:30 | 000,050,600 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2010.04.07 21:08:28 | 000,033,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\epfwndis.sys -- (Epfwndis)
DRV:64bit: - [2010.04.07 21:08:26 | 000,169,592 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2010.04.07 21:07:10 | 000,139,704 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2010.04.07 21:03:52 | 000,163,888 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2010.04.07 03:23:30 | 000,195,584 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010.03.05 17:17:35 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010.03.01 20:35:40 | 002,060,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VX1000.sys -- (VX1000)
DRV:64bit: - [2009.11.09 19:12:42 | 000,035,112 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV:64bit: - [2009.08.18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009.08.18 04:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:64bit: - [2009.07.14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:64bit: - [2009.07.14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:64bit: - [2009.07.14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:64bit: - [2009.07.14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.03.02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.cz/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 AE F1 24 7E C4 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010.06.29 22:10:18 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files (x86)\FlashGet\jccatch.dll (www.flashget.com)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files (x86)\FlashGet\getflash.dll (www.flashget.com)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [TNOD UP] C:\Program Files (x86)\TNod User & Password Finder\TNODUP.exe (Tukero[X]Team)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] F:\Programy\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files (x86)\FlashGet\JC_ALL.HTM ()
O8:64bit: - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files (x86)\FlashGet\JC_LINK.HTM ()
O8 - Extra context menu item: &Stáhnout &vše FlashGetem - C:\Program Files (x86)\FlashGet\JC_ALL.HTM ()
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files (x86)\FlashGet\JC_LINK.HTM ()
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - F:\Programy\ICQ\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\flashget.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files (x86)\FlashGet\flashget.exe (FlashGet.com)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O15 - HKCU\..Trusted Domains: mojebanka.cz ([*] https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.03.08 15:55:48 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2005.04.05 18:51:26 | 000,000,000 | R--D | M] - G:\Autorun -- [ UDF ]
O32 - AutoRun File - [2004.11.06 07:32:48 | 000,023,040 | R--- | M] () - G:\autorun.exe -- [ UDF ]
O32 - AutoRun File - [2004.11.06 07:32:48 | 000,000,115 | R--- | M] () - G:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell - "" = AutoRun
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell\AutoRun\command - "" = G:\autorun.exe -- [2004.11.06 07:32:48 | 000,023,040 | R--- | M] ()
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010.07.11 13:48:08 | 000,455,680 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
[2010.07.11 13:48:08 | 000,182,784 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
[2010.07.11 13:48:08 | 000,165,888 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
[2010.07.11 13:48:08 | 000,165,888 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
[2010.07.11 13:47:54 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010.07.11 13:38:05 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.07.11 11:18:58 | 000,000,000 | ---D | C] -- C:\ProgramData\POPWWPROFILES
[2010.07.11 11:02:30 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
[2010.07.11 11:02:19 | 000,258,560 | ---- | C] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTH.exe
[2010.07.11 11:01:11 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Users\Mc Mrož\Desktop\ATF-Cleaner.exe
[2010.07.11 10:22:13 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.07.09 17:28:16 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\redsn0w_win_0.9.5b5-5
[2010.07.09 17:02:14 | 000,126,312 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\GEARAspi64.dll
[2010.07.09 17:02:14 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysWow64\GEARAspi.dll
[2010.07.09 17:02:14 | 000,034,152 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iPod
[2010.07.09 17:01:40 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010.07.09 17:00:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010.07.09 16:58:18 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010.07.09 16:53:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Safari
[2010.07.08 11:11:39 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\Mp3tag
[2010.07.07 01:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2010.07.07 00:00:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2010.07.06 23:58:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.07.01 00:30:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TNod User & Password Finder
[2010.06.29 23:11:55 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\OxyCube
[2010.06.29 23:10:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oxygen Software
[2010.06.29 22:24:36 | 000,034,032 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys
[2010.06.29 22:23:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson
[2010.06.29 22:11:11 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\ESET
[2010.06.29 21:08:23 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Roaming\GetRightToGo
[2010.06.29 16:34:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2010.06.29 07:05:29 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2010.06.27 17:22:37 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Ironclad Games
[2010.06.27 17:22:33 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\AppData\Local\Stardock
[2010.06.27 17:13:06 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Documents\NFS Most Wanted
[2010.06.23 23:03:37 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2010.06.23 23:03:20 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010.06.23 23:03:19 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010.06.23 23:03:18 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010.06.23 23:03:18 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010.06.23 23:03:18 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010.06.23 23:03:18 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010.06.23 23:03:18 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010.06.21 18:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Soluto
[2010.06.12 01:54:26 | 000,000,000 | ---D | C] -- C:\Users\Mc Mrož\Desktop\Wallpapers

========== Files - Modified Within 30 Days ==========

[2010.07.11 17:20:05 | 003,670,016 | -HS- | M] () -- C:\Users\Mc Mrož\NTUSER.DAT
[2010.07.11 17:20:01 | 000,226,088 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\File.zip
[2010.07.11 14:00:15 | 000,000,600 | ---- | M] () -- C:\Users\Mc Mrož\AppData\Roaming\winscp.rnd
[2010.07.11 13:50:38 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.07.11 13:50:38 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.07.11 13:47:56 | 000,455,680 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
[2010.07.11 13:47:56 | 000,182,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
[2010.07.11 13:47:56 | 000,165,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
[2010.07.11 13:47:56 | 000,165,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
[2010.07.11 13:42:49 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.07.11 13:42:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.07.11 13:41:59 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2010.07.11 13:40:48 | 003,808,275 | -H-- | M] () -- C:\Users\Mc Mrož\AppData\Local\IconCache.db
[2010.07.11 11:18:40 | 000,000,701 | ---- | M] () -- C:\Users\Public\Desktop\Prince of Persia Warrior Within.lnk
[2010.07.11 11:03:26 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTH.exe
[2010.07.11 11:02:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Mc Mrož\Desktop\OTL.exe
[2010.07.11 11:01:11 | 000,050,688 | ---- | M] (Atribune.org) -- C:\Users\Mc Mrož\Desktop\ATF-Cleaner.exe
[2010.07.11 10:38:18 | 000,002,971 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.lnk
[2010.07.11 10:37:01 | 001,402,880 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.msi
[2010.07.11 10:22:15 | 000,000,656 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.09 21:50:21 | 001,478,586 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.07.09 21:50:21 | 000,634,308 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.07.09 21:50:21 | 000,618,714 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.07.09 21:50:21 | 000,122,898 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.07.09 21:50:21 | 000,107,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.07.09 12:49:45 | 005,330,651 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\N.A.S.A. - Gifted.mp3
[2010.07.09 10:10:42 | 004,085,037 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Russian - Kalinka _Soviet Army Chorus_ .mp3
[2010.07.08 11:11:29 | 000,000,640 | ---- | M] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.07.08 11:07:29 | 009,212,155 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Shots Feat. Lil Jon.mp3
[2010.07.08 11:07:24 | 004,129,780 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Lil Jon - Outta Your Mind.mp3
[2010.07.08 11:07:12 | 005,961,768 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\14 - 140 Grime Street (Produced By Wbwoy).mp3
[2010.07.07 09:33:49 | 003,496,640 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.07.07 09:33:11 | 000,227,520 | ---- | M] () -- C:\Users\Mc Mrož\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.07.07 02:04:16 | 000,001,143 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Adobe Photoshop CS3.lnk
[2010.07.07 01:11:38 | 000,000,592 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.07.01 22:08:24 | 000,000,602 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\WinSCP.lnk
[2010.07.01 00:30:46 | 000,001,866 | ---- | M] () -- C:\Users\Public\Desktop\Update NOD32 license.lnk
[2010.06.30 22:15:40 | 004,662,737 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\DJ Inphinity Techno Mix.mp3
[2010.06.29 22:24:36 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\SysNative\drivers\seehcri.sys
[2010.06.27 16:07:48 | 000,066,364 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\35706_139676956043186_100000026473857_404033_1008846_n.jpg
[2010.06.26 00:02:37 | 000,020,480 | ---- | M] () -- C:\Windows\SysWow64\H@tKeysH@@k.DLL
[2010.06.22 23:15:43 | 001,683,568 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Arash Temptation Russian feat. Blastjashie arashfans.com videos.mp3
[2010.06.22 15:39:47 | 000,378,622 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\sshot-1.png
[2010.06.21 20:54:52 | 004,423,661 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\BassHunter Mega Mix.mp3
[2010.06.21 18:42:32 | 000,000,098 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010.06.21 06:46:05 | 088,375,228 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\MC Tommy Ne jamais céder (Dedicated).mp4
[2010.06.20 11:01:54 | 000,214,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2010.06.20 11:00:57 | 000,214,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.06.19 21:18:59 | 003,581,942 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\bushido - ich regele das.mp3
[2010.06.18 20:08:50 | 001,813,508 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Gladiator Techno Remix.mp3
[2010.06.16 06:55:29 | 008,597,492 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\01_Nothin_On_You__feat_Bruno_M.mp3
[2010.06.11 23:21:16 | 001,849,032 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Rytmus Cigansky sen.mp3
[2010.06.11 22:07:28 | 001,359,182 | ---- | M] () -- C:\Users\Mc Mrož\Desktop\Lost Techno Dance.mp3

========== Files Created - No Company Name ==========

[2010.07.11 11:18:40 | 000,000,701 | ---- | C] () -- C:\Users\Public\Desktop\Prince of Persia Warrior Within.lnk
[2010.07.11 10:36:53 | 001,402,880 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\HiJackThis.msi
[2010.07.11 10:22:15 | 000,000,656 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.09 12:23:52 | 005,330,651 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\N.A.S.A. - Gifted.mp3
[2010.07.09 10:10:42 | 004,085,037 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Russian - Kalinka _Soviet Army Chorus_ .mp3
[2010.07.08 11:11:29 | 000,000,640 | ---- | C] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.07.07 14:52:05 | 009,212,155 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Shots Feat. Lil Jon.mp3
[2010.07.07 12:23:53 | 005,961,768 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\14 - 140 Grime Street (Produced By Wbwoy).mp3
[2010.07.07 12:21:23 | 004,129,780 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Lil Jon - Outta Your Mind.mp3
[2010.07.07 02:04:16 | 000,001,143 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Adobe Photoshop CS3.lnk
[2010.07.01 22:08:25 | 000,000,600 | ---- | C] () -- C:\Users\Mc Mrož\AppData\Roaming\winscp.rnd
[2010.07.01 22:08:24 | 000,000,602 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\WinSCP.lnk
[2010.07.01 00:30:46 | 000,001,866 | ---- | C] () -- C:\Users\Public\Desktop\Update NOD32 license.lnk
[2010.06.30 22:15:13 | 004,662,737 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\DJ Inphinity Techno Mix.mp3
[2010.06.27 16:07:48 | 000,066,364 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\35706_139676956043186_100000026473857_404033_1008846_n.jpg
[2010.06.26 00:02:37 | 000,020,480 | ---- | C] () -- C:\Windows\SysWow64\H@tKeysH@@k.DLL
[2010.06.22 23:15:32 | 001,683,568 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Arash Temptation Russian feat. Blastjashie arashfans.com videos.mp3
[2010.06.22 15:39:47 | 000,378,622 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\sshot-1.png
[2010.06.21 20:54:27 | 004,423,661 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\BassHunter Mega Mix.mp3
[2010.06.21 18:42:32 | 000,000,098 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010.06.21 06:45:14 | 088,375,228 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\MC Tommy Ne jamais céder (Dedicated).mp4
[2010.06.19 21:16:01 | 003,581,942 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\bushido - ich regele das.mp3
[2010.06.18 20:08:41 | 001,813,508 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Gladiator Techno Remix.mp3
[2010.06.16 06:54:15 | 008,597,492 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\01_Nothin_On_You__feat_Bruno_M.mp3
[2010.06.11 23:21:05 | 001,849,032 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Rytmus Cigansky sen.mp3
[2010.06.11 22:07:23 | 001,359,182 | ---- | C] () -- C:\Users\Mc Mrož\Desktop\Lost Techno Dance.mp3
[2010.05.05 22:43:29 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\vbzlib1.dll
[2010.05.02 10:55:18 | 000,002,686 | ---- | C] () -- C:\Windows\TRNCOM.INI
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010.03.24 16:16:36 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2010.03.14 17:15:48 | 000,000,257 | ---- | C] () -- C:\Windows\game.ini
[2010.03.14 15:19:07 | 000,000,083 | ---- | C] () -- C:\Windows\wp.INI
[2010.03.14 00:12:56 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010.03.14 00:12:55 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.03.14 00:12:48 | 000,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010.03.14 00:12:48 | 000,205,824 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010.03.14 00:12:42 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010.03.14 00:12:42 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010.03.13 19:42:06 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2010.03.09 20:57:00 | 001,470,766 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.03.06 01:06:46 | 000,146,432 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010.03.06 01:06:46 | 000,072,704 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010.03.01 20:35:40 | 000,015,498 | ---- | C] () -- C:\Windows\VX1000.ini
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: AGP440.SYS >
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows.old\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows.old\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows.old\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\System32\drivers\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows.old\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\SysWow64\DriverStore\FileRepository\iastorv.inf_amd64_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows.old\Windows\System32\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\SysWOW64\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\SysWow64\DriverStore\FileRepository\nvraid.inf_amd64_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\System32\drivers\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows.old\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows.old\Windows\System32\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows.old\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\SysWOW64\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

< %systemroot%\*. /mp /s >
< End of report >

[jaro3]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell - "" = AutoRun
O33 - MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\Shell\AutoRun\command - "" = G:\autorun.exe --

:Files
G:\autorun.exe

:Reg
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[BiScHop]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
No active process named firefox.exe was found!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{e518c4d8-2de8-11df-adcb-001fd08cffa7}\ not found.
File move failed. G:\autorun.exe scheduled to be moved on reboot.
========== FILES ==========
File move failed. G:\autorun.exe scheduled to be moved on reboot.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Mc Mrož
->Temp folder emptied: 46899 bytes
->Temporary Internet Files folder emptied: 1071405 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 129125991 bytes
->Flash cache emptied: 4689 bytes

User: Mc Mro�
->Temp folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3708 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32902 bytes
RecycleBin emptied: 109358344 bytes

Total Files Cleaned = 229,00 mb


OTL by OldTimer - Version 3.2.9.0 log created on 07122010_101807

Files\Folders moved on Reboot...
File\Folder G:\autorun.exe not found!
C:\Users\Mc Mrož\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

[jaro3]

Smaž OTL
C:\_OTL

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.