OTL logfile created on: 4. 9. 2010 22:23:29 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Documents and Settings\Jakub\Dokumenty\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d. M. yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 46,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 74,00% Paging File free
Paging file location(s): C:\pagefile.sys 3072 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465,75 Gb Total Space | 55,64 Gb Free Space | 11,95% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: AOLORN
Current User Name: Jakub
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ========== PRC - [2010.09.04 22:21:11 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jakub\Dokumenty\Downloads\OTL.exe
PRC - [2010.09.02 11:33:19 | 000,923,136 | ---- | M] (Microsoft) -- C:\Program Files\Team17\Worms Reloaded\Worms_Reloaded_+10Trainer-SKIDROW~HoG.exe
PRC - [2010.08.26 20:16:06 | 000,811,616 | ---- | M] ( ) -- C:\Program Files\Miranda IM\miranda32.exe
PRC - [2010.08.25 20:10:41 | 004,530,176 | ---- | M] (Team17 Software Ltd.) -- C:\Program Files\Team17\Worms Reloaded\WormsReloaded.exe
PRC - [2010.08.24 10:31:47 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010.08.18 03:58:17 | 000,945,720 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2010.08.06 12:50:32 | 000,531,456 | ---- | M] (Tiger grp (
www.dimonius.ru)) -- C:\Documents and Settings\Jakub\Plocha\USD\USDownloader.exe
PRC - [2010.07.09 21:04:34 | 003,493,776 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\Xfire.exe
PRC - [2010.07.06 13:57:00 | 000,720,704 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2010.07.06 13:55:16 | 001,051,968 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2010.07.04 19:13:56 | 000,095,576 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2010.07.04 19:07:40 | 000,238,952 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2010.06.28 22:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.01.14 00:44:52 | 000,037,888 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe
PRC - [2009.02.28 19:40:38 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files\CyberLink\Shared Files\brs.exe
PRC - [2009.02.16 09:55:38 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
PRC - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
PRC - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
PRC - [2008.10.31 07:24:26 | 001,705,256 | ---- | M] (Sunbelt Software, Inc.) -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.11.15 10:12:04 | 000,784,912 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2007.11.15 10:08:26 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
PRC - [2007.09.02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2007.08.03 12:51:18 | 001,422,632 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007.08.03 12:51:06 | 000,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
PRC - [2005.09.24 00:42:32 | 000,475,136 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
PRC - [2005.03.14 12:05:02 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
========== Modules (SafeList) ========== MOD - [2010.09.04 22:21:11 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jakub\Dokumenty\Downloads\OTL.exe
MOD - [2010.07.09 21:04:44 | 000,970,640 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\xfire_toucan_43094.dll
MOD - [2010.05.12 19:58:18 | 000,353,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll
MOD - [2009.07.12 01:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
MOD - [2009.07.12 01:09:20 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
MOD - [2008.04.14 05:22:06 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll
MOD - [2008.04.14 05:19:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2007.11.15 10:10:38 | 000,062,480 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\lgscroll.dll
MOD - [2007.11.15 10:06:18 | 000,064,016 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\GameHook.dll
MOD - [2007.09.02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010.07.24 17:14:27 | 000,435,008 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.07.06 13:55:16 | 001,051,968 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010.07.06 13:52:04 | 000,030,016 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2010.07.04 19:07:40 | 000,238,952 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010.06.28 22:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2008.10.31 07:24:28 | 001,365,288 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe -- (SPF4)
SRV - [2008.10.31 07:24:28 | 000,095,528 | ---- | M] (Sunbelt Software, Inc.) [Auto | Running] -- C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe -- (SbPF.Launcher)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2007.11.15 10:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2005.03.14 12:05:02 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Jakub\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010.09.04 22:22:21 | 000,445,936 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010.06.28 22:37:52 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010.06.28 22:37:30 | 000,165,456 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010.06.28 22:33:13 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010.06.28 22:32:45 | 000,100,176 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010.06.28 22:32:33 | 000,017,744 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010.06.28 22:32:16 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010.06.14 09:32:54 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010.05.12 19:07:10 | 006,032,928 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010.05.12 19:07:08 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2010.05.12 19:07:06 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2010.05.12 18:45:39 | 000,016,512 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2010.04.27 04:25:20 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2010.04.27 04:25:20 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2010.04.27 04:25:20 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2010.04.04 00:55:31 | 010,232,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2010.02.25 10:18:08 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.02.28 19:40:18 | 000,087,536 | ---- | M] (CyberLink Corp.) [2010/09/02 19:58:53] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD9\000.fcl -- ({B154377D-700F-42cc-9474-23858FBDF4BD})
DRV - [2008.10.31 07:09:06 | 000,270,888 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SbFw.sys -- (SbFw)
DRV - [2008.06.21 04:54:54 | 000,066,600 | R--- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sbhips.sys -- (sbhips)
DRV - [2008.06.21 04:54:54 | 000,065,576 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007.09.21 03:11:02 | 000,028,432 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2007.09.21 03:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007.09.21 03:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007.09.21 03:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007.06.13 17:47:12 | 000,048,256 | R--- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\jraid.sys -- (JRAID)
DRV - [2007.05.31 09:19:22 | 000,096,896 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006.07.01 22:42:58 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-789336058-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.2
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Mozilla Firefox\components [2010.09.02 19:36:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Mozilla Firefox\plugins [2010.09.02 19:36:37 | 000,000,000 | ---D | M]
[2010.05.12 19:33:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Extensions
[2010.09.02 19:35:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\b4au0fkb.default\extensions
[2010.05.12 21:09:10 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\b4au0fkb.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
[2010.05.12 21:09:10 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\b4au0fkb.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2010.05.13 13:59:35 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\b4au0fkb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
O1 HOSTS File: ([2010.05.14 22:28:37 | 000,000,933 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com
O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com
O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com
O1 - Hosts: 127.0.0.1 orbitservice.ubi.com
O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [36X Raid Configurer] C:\WINDOWS\System32\xRaidSetup.exe (Gigabyte Technology Corp.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BDRegion] C:\Program Files\CyberLink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [PDVD9LanguageShortcut] C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-789336058-1637723038-725345543-1004..\Run: [USDownloader] C:\Documents and Settings\Jakub\Plocha\USD\USDownloader.exe (Tiger grp (
www.dimonius.ru))
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Development Company, L.P.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Documents and Settings\Jakub\Nabídka Start\Programy\Po spuštění\Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (Xfire Inc.)
O4 - Startup: C:\Documents and Settings\Jakub\Nabídka Start\Programy\Po spuštění\Yaho's Miranda Pack.lnk = C:\Program Files\Yaho's Miranda IM\miranda32.exe ( )
O4 - Startup: C:\Documents and Settings\Jakub\Nabídka Start\Programy\Po spuštění\Zástupce - sgalert.exe.lnk = C:\SG Alert\sgalert.exe (y)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-789336058-1637723038-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-789336058-1637723038-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
https://fpdownload.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe) - C:\Documents and Settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Jakub\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jakub\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.05.12 17:52:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (
http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.XFR1 - C:\WINDOWS\System32\xfcodec.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (
www.helixcommunity.org)
CREATERESTOREPOINT
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
========== Files/Folders - Created Within 30 Days ========== [2010.09.04 22:15:50 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010.09.04 20:40:22 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.09.04 20:34:32 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.09.04 20:34:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.09.04 17:10:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Data aplikací\Malwarebytes
[2010.09.04 17:09:53 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.09.04 17:09:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2010.09.04 17:09:51 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.09.04 17:09:51 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.09.04 17:08:30 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.09.04 17:08:29 | 000,000,000 | ---D | C] -- C:\rsit
[2010.09.04 16:48:20 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jakub\Recent
[2010.09.03 20:09:03 | 000,591,952 | ---- | C] (Miranda IM project) -- C:\Documents and Settings\Jakub\Plocha\tabsrmm.dll
[2010.09.03 19:31:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Data aplikací\Miranda
[2010.09.03 19:29:17 | 000,000,000 | ---D | C] -- C:\Program Files\Miranda IM
[2010.09.02 19:57:45 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2010.09.02 15:31:15 | 000,132,424 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdmdm.sys
[2010.09.02 15:31:15 | 000,014,920 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdmdfl.sys
[2010.09.02 15:31:15 | 000,012,616 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdcmnt.sys
[2010.09.02 15:31:15 | 000,012,616 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdcm.sys
[2010.09.02 15:31:14 | 000,104,648 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdbus.sys
[2010.09.02 15:31:14 | 000,012,488 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdwhnt.sys
[2010.09.02 15:31:14 | 000,012,488 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sscdwh.sys
[2010.09.02 15:27:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\firmwer
[2010.09.02 15:26:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Dokumenty\Samsung
[2010.09.02 15:26:23 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAny
[2010.09.02 15:24:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\Downloaded Installations
[2010.09.02 15:11:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\mobil
[2010.08.30 23:45:01 | 000,000,000 | ---D | C] -- C:\Program Files\Team17
[2010.08.29 23:39:20 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Jakub\Data aplikací\SecuROM
[2010.08.29 23:35:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\D56B0E274A3E46C9B5C1D93D580C099C.TMP
[2010.08.29 23:35:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010.08.29 23:24:55 | 000,000,000 | ---D | C] -- C:\Program Files\2K Games
[2010.08.29 23:24:44 | 000,000,000 | ---D | C] -- C:\BDS
[2010.08.26 13:27:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\mafja
[2010.08.26 13:26:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\Phx_data
[2010.08.25 18:12:16 | 000,000,000 | ---D | C] -- C:\PFiles
[2010.08.24 13:08:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\THQ
[2010.08.24 12:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Volition Inc
[2010.08.23 22:53:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\amateur_girl_set08
[2010.08.23 22:53:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\amateur_girl_set06
[2010.08.21 23:38:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Dokumenty\Square Enix
[2010.08.21 23:38:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\119615131254334708
[2010.08.21 23:38:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\119611918618797300
[2010.08.21 23:20:42 | 000,000,000 | ---D | C] -- C:\Program Files\Kane & Lynch 2- Dog Days
[2010.08.19 21:24:54 | 000,000,000 | ---D | C] -- C:\Program Files\FOnline
[2010.08.17 14:59:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Data aplikací\vghd
[2010.08.15 11:08:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Plocha\20 Sexy Anime Girls Wallpapers [Set 4]
[2010.08.15 10:47:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Dokumenty\Nová složka
[2010.08.13 21:43:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Data aplikací\skypePM
[2010.08.13 21:40:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Data aplikací\Skype
[2010.08.13 21:40:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010.08.13 21:40:24 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2010.08.13 21:40:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Skype
[2010.08.13 16:47:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\76561197999573361
[2010.08.13 16:44:57 | 000,444,952 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010.08.13 16:44:57 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010.08.13 16:44:57 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2010.08.11 21:17:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\2K Games
[2010.08.11 21:16:40 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_7.dll
[2010.08.11 21:16:40 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_5.dll
[2010.08.11 21:16:39 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_43.dll
[2010.08.11 21:16:39 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_7.dll
[2010.08.11 21:16:38 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_43.dll
[2010.08.11 21:16:38 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_43.dll
[2010.08.11 21:16:38 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_43.dll
[2010.08.11 21:16:37 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_43.dll
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010.09.04 22:22:21 | 000,445,936 | ---- | M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys
[2010.09.04 21:42:32 | 000,008,224 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Qoobox.zip
[2010.09.04 21:34:00 | 000,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1637723038-725345543-1004UA.job
[2010.09.04 21:29:47 | 000,066,060 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\borčus.JPG
[2010.09.04 21:22:48 | 000,036,892 | ---- | M] () -- C:\WINDOWS\System32\bassmod.dll
[2010.09.04 21:02:33 | 000,276,202 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010.09.04 21:02:29 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.09.04 21:02:25 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.09.04 21:02:22 | 2145,927,168 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2010.09.04 20:40:33 | 000,000,530 | RHS- | M] () -- C:\boot.ini
[2010.09.04 20:34:01 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.09.04 20:33:13 | 006,291,456 | ---- | M] () -- C:\Documents and Settings\Jakub\NTUSER.DAT
[2010.09.04 17:09:57 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.09.04 17:07:35 | 000,005,602 | ---- | M] () -- C:\Documents and Settings\Jakub\Dokumenty\cc_20100904_170729.reg
[2010.09.04 13:20:29 | 000,002,155 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\avatár.JPG
[2010.09.04 13:00:38 | 012,910,592 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\profile.dat
[2010.09.03 22:34:00 | 000,000,974 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1637723038-725345543-1004Core.job
[2010.09.03 20:44:56 | 000,000,703 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Zástupce - miranda32.exe.lnk
[2010.09.03 19:19:35 | 000,032,222 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\f49h_61Kxv.jpg
[2010.09.02 20:20:43 | 000,079,872 | ---- | M] () -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.09.02 19:58:51 | 000,001,757 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CyberLink PowerDVD 9.lnk
[2010.09.02 19:56:38 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2010.09.02 19:56:37 | 000,505,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp71.dll
[2010.09.02 19:41:35 | 025,244,810 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\youtube video.flv
[2010.09.02 15:31:39 | 000,001,795 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Samsung New PC Studio.lnk
[2010.09.02 15:30:15 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.09.02 15:26:52 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010.08.31 20:51:21 | 000,011,571 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\scifi.docx
[2010.08.31 11:32:04 | 000,042,987 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\268c212.jpg
[2010.08.31 11:29:47 | 000,056,254 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\b17C_4yxfo.jpg
[2010.08.31 11:24:34 | 000,160,984 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\P1268591174 (1).jpg
[2010.08.30 23:46:30 | 000,001,754 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Worms Reloaded.lnk
[2010.08.30 02:00:01 | 000,000,342 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-AOLORN-Jakub.job
[2010.08.29 23:37:25 | 000,001,825 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Borderlands.lnk
[2010.08.29 23:35:42 | 000,000,413 | ---- | M] () -- C:\Boot.bak
[2010.08.29 22:53:32 | 000,278,276 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Black_No_1_Wallpaper_by_phiberphreak.jpg
[2010.08.27 10:53:30 | 000,074,720 | ---- | M] () -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.08.27 10:53:25 | 003,578,152 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.08.26 13:46:10 | 000,000,597 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Phx_settings.ini
[2010.08.25 13:24:41 | 002,296,936 | ---- | M] () -- C:\Documents and Settings\Jakub\Dokumenty\Bez.skp
[2010.08.25 13:05:55 | 000,126,994 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Awesome Rifle.JPG
[2010.08.25 11:52:30 | 000,017,884 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\awesome gun.jpg
[2010.08.22 22:52:45 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2010.08.22 12:02:15 | 000,060,553 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\44626_1345329205502_1599437507_30777666_2683387_n.jpg
[2010.08.20 16:34:42 | 000,002,257 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Google Chrome.lnk
[2010.08.20 11:26:05 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Zástupce - FOnline.exe.lnk
[2010.08.19 02:46:47 | 000,000,182 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.08.17 15:13:03 | 000,000,003 | ---- | M] () -- C:\WINDOWS\treeskp.sys
[2010.08.17 15:13:03 | 000,000,003 | ---- | M] () -- C:\WINDOWS\sbacknt.bin
[2010.08.17 14:59:04 | 000,152,904 | ---- | M] () -- C:\WINDOWS\System32\vghd.scr
[2010.08.13 21:43:45 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.08.13 16:44:57 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010.08.13 16:44:57 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010.08.13 02:03:47 | 001,013,926 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.08.13 02:03:47 | 000,444,164 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.08.13 02:03:47 | 000,441,086 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.08.13 02:03:47 | 000,083,742 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.08.13 02:03:47 | 000,072,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.08.12 12:16:28 | 001,862,098 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Fotografie0143.jpg
[2010.08.10 22:49:56 | 000,000,078 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Kane & Lynch 2 - Dog Days Demo.url
[2010.08.10 22:27:24 | 000,000,078 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\Mafia II - Public Demo.url
[2010.08.08 11:58:41 | 000,023,593 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\31858_1310153673981_1234774121_30721457_3083933_n.jpg
[2010.08.08 11:58:25 | 000,100,329 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\32508_1313933008462_1234774121_30730985_2421786_n.jpg
[2010.08.08 11:58:13 | 000,112,783 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\32508_1313932888459_1234774121_30730984_7966759_n.jpg
[2010.08.07 17:44:39 | 000,000,565 | ---- | M] () -- C:\Documents and Settings\Jakub\Data aplikací\myMPQ.ini
[2010.08.06 16:17:16 | 000,027,280 | ---- | M] () -- C:\Documents and Settings\Jakub\Plocha\facebookman.jpg
[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ========== [2010.09.04 21:42:32 | 000,008,224 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Qoobox.zip
[2010.09.04 21:29:47 | 000,066,060 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\borčus.JPG
[2010.09.04 21:22:48 | 000,036,892 | ---- | C] () -- C:\WINDOWS\System32\bassmod.dll
[2010.09.04 20:40:32 | 000,000,413 | ---- | C] () -- C:\Boot.bak
[2010.09.04 20:40:27 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2010.09.04 17:09:57 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.09.04 17:07:31 | 000,005,602 | ---- | C] () -- C:\Documents and Settings\Jakub\Dokumenty\cc_20100904_170729.reg
[2010.09.04 13:20:29 | 000,002,155 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\avatár.JPG
[2010.09.04 13:14:45 | 000,055,528 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\omurdoc2beta.jpg
[2010.09.03 20:44:56 | 000,000,703 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Zástupce - miranda32.exe.lnk
[2010.09.03 19:32:13 | 012,910,592 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\profile.dat
[2010.09.03 19:19:35 | 000,032,222 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\f49h_61Kxv.jpg
[2010.09.02 19:58:51 | 000,001,757 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CyberLink PowerDVD 9.lnk
[2010.09.02 19:41:33 | 025,244,810 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\youtube video.flv
[2010.09.02 15:31:39 | 000,001,795 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Samsung New PC Studio.lnk
[2010.08.31 20:51:20 | 000,011,571 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\scifi.docx
[2010.08.31 11:32:04 | 000,042,987 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\268c212.jpg
[2010.08.31 11:29:47 | 000,056,254 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\b17C_4yxfo.jpg
[2010.08.31 11:24:34 | 000,160,984 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\P1268591174 (1).jpg
[2010.08.30 23:46:30 | 000,001,754 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Worms Reloaded.lnk
[2010.08.29 23:37:25 | 000,001,825 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Borderlands.lnk
[2010.08.29 22:53:32 | 000,278,276 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Black_No_1_Wallpaper_by_phiberphreak.jpg
[2010.08.26 13:18:55 | 000,000,597 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Phx_settings.ini
[2010.08.26 13:18:52 | 008,578,951 | ---- | C] ($t@t!c_V()!D) -- C:\Documents and Settings\Jakub\Plocha\Phoenix.exe
[2010.08.25 13:24:40 | 002,296,936 | ---- | C] () -- C:\Documents and Settings\Jakub\Dokumenty\Bez.skp
[2010.08.25 13:05:55 | 000,126,994 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Awesome Rifle.JPG
[2010.08.25 11:52:30 | 000,017,884 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\awesome gun.jpg
[2010.08.22 12:02:15 | 000,060,553 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\44626_1345329205502_1599437507_30777666_2683387_n.jpg
[2010.08.20 01:22:26 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Zástupce - FOnline.exe.lnk
[2010.08.17 14:59:13 | 000,000,003 | ---- | C] () -- C:\WINDOWS\treeskp.sys
[2010.08.17 14:59:13 | 000,000,003 | ---- | C] () -- C:\WINDOWS\sbacknt.bin
[2010.08.17 14:59:04 | 000,152,904 | ---- | C] () -- C:\WINDOWS\System32\vghd.scr
[2010.08.13 21:43:45 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010.08.13 21:40:29 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2010.08.12 15:19:09 | 001,862,098 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Fotografie0143.jpg
[2010.08.10 22:49:56 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Kane & Lynch 2 - Dog Days Demo.url
[2010.08.10 22:45:54 | 1500,340,224 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Alenka V Risi Divu DVDripCZ 2010.avi
[2010.08.10 22:27:24 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\Mafia II - Public Demo.url
[2010.08.08 11:58:41 | 000,023,593 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\31858_1310153673981_1234774121_30721457_3083933_n.jpg
[2010.08.08 11:58:25 | 000,100,329 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\32508_1313933008462_1234774121_30730985_2421786_n.jpg
[2010.08.08 11:58:13 | 000,112,783 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\32508_1313932888459_1234774121_30730984_7966759_n.jpg
[2010.08.06 16:17:14 | 000,027,280 | ---- | C] () -- C:\Documents and Settings\Jakub\Plocha\facebookman.jpg
[2010.08.02 17:22:53 | 000,000,565 | ---- | C] () -- C:\Documents and Settings\Jakub\Data aplikací\myMPQ.ini
[2010.07.09 21:04:40 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.06.30 11:59:45 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\nvRegDev.dll
[2010.06.15 19:31:28 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010.06.15 19:31:28 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010.06.15 19:29:52 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Jakub\Data aplikací\$_hpcst$.hpc
[2010.06.10 14:52:41 | 000,000,182 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010.06.05 19:19:09 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll
[2010.05.28 23:16:55 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.05.28 23:16:49 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.05.28 23:16:49 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.05.28 23:16:49 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010.05.28 23:16:48 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.05.28 22:23:46 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2010.05.12 20:11:13 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\fusioncache.dat
[2010.05.12 19:57:15 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.05.12 19:47:30 | 000,000,751 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
[2010.05.12 19:46:14 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2010.05.12 19:44:57 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jakub\Data aplikací\setup_ldm.iss
[2010.05.12 19:37:27 | 000,079,872 | ---- | C] () -- C:\Documents and Settings\Jakub\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006.04.22 14:42:11 | 000,000,572 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2001.07.06 16:30:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
========== Custom Scans ========== < HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >"RocketDock" = "C:\Program Files\RocketDock\RocketDock.exe" -- [2007.09.02 13:58:52 | 000,495,616 | ---- | M] ()
"Google Update" = "C:\Documents and Settings\Jakub\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c -- [2010.05.13 22:29:40 | 000,136,176 | ---- | M] (Google Inc.)
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"Steam" = "C:\Program Files\Steam\Steam.exe" -silent -- [2010.08.24 10:31:47 | 001,242,448 | ---- | M] (Valve Corporation)
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" = "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" -- [2007.08.03 12:51:06 | 000,202,024 | ---- | M] (Nero AG)
"USDownloader" = "C:\Documents and Settings\Jakub\Plocha\USD\USDownloader.exe" -- [2010.08.06 12:50:32 | 000,531,456 | ---- | M] (Tiger grp (
www.dimonius.ru))
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2010.04.01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [2010.05.13 16:12:40 | 026,192,168 | R--- | M] (Skype Technologies S.A.)
"AutoStartNPSAgent" = C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe -- [2010.07.04 19:13:56 | 000,095,576 | ---- | M] (Samsung Electronics Co., Ltd.)
"SpybotSD TeaTimer" = C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe -- [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.)
< c:\windows\*.* /U >[7 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]
< MD5 for: AGP440.SYS >[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.03.02 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2006.03.02 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: HAL.DLL >[2006.03.02 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2010.05.14 15:37:45 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2006.03.02 14:00:00 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
< MD5 for: LSASS.EXE >[2006.03.02 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.03.02 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
< MD5 for: NETLOGON.DLL >[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2006.03.02 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >[2006.03.02 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >[2006.03.02 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
< MD5 for: USERINIT.EXE >[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >[2006.03.02 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >[2006.03.02 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles >[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< End of report >
Tohle vyplodil OTL
. Tak ho vynechej, zbytek pak uklidí OTL.
" = Mozilla Firefox (3.6.
