Na ploše se mi objevil jen ten OTL. Extras.txt se neobjevil..Přikládám OTM a OTL.
OTMAll processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer\\ForceActiveDesktopOn deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer\\NoActiveDesktopChanges deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\System32\*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAP3082.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI2E3B.tmp moved successfully.
C:\WINDOWS\Installer\MSIF159.tmp moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2646040906-3391474901-3083940661-1000Core.job moved successfully.
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2646040906-3391474901-3083940661-1000UA.job moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Hurvajz
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 7881001 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 24784352 bytes
->Flash cache emptied: 1040 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 608 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 32768 bytes
RecycleBin emptied: 317180571 bytes
Total Files Cleaned = 334,00 mb
OTM by OldTimer - Version 3.1.12.2 log created on 06122010_152534
Files moved on Reboot...
Registry entries deleted on Reboot...
OTLOTL logfile created on: 12.6.2010 15:37:50 - Run 2
OTL by OldTimer - Version 3.2.6.0 Folder = C:\Users\Hurvajz\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 34,18 Gb Total Space | 2,46 Gb Free Space | 7,20% Space Free | Partition Type: NTFS
Drive D: | 197,24 Gb Total Space | 13,79 Gb Free Space | 6,99% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: HURVAJZ-PC
Current User Name: Hurvajz
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan
========== Processes (SafeList) ========== PRC - C:\Users\Hurvajz\Desktop\OTH.scr (OldTimer Tools)
PRC - C:\Users\Hurvajz\Desktop\otl.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe (Nokia)
========== Modules (SafeList) ========== MOD - C:\Users\Hurvajz\Desktop\otl.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\wininet.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Internet Explorer\ieproxy.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\rsaenh.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\WindowsCodecs.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\thumbcache.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\StructuredQuery.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\srvcli.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\slc.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\SearchFolder.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\RpcRtRemote.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\ntshrui.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\networkexplorer.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\linkinfo.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\EhStorShell.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\cscapi.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\actxprxy.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\normaliz.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\msvcr80.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Microsoft Office\Office12\GrooveUtil.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Microsoft Office\Office12\GrooveNew.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ========== SRV:
64bit: - (WatAdminSvc) -- C:\Windows\SysNative\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV:
64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:
64bit: - (WwanSvc) -- C:\Windows\SysNative\wwansvc.dll (Microsoft Corporation)
SRV:
64bit: - (WbioSrvc) -- C:\Windows\SysNative\wbiosrvc.dll (Microsoft Corporation)
SRV:
64bit: - (UmRdpService) -- C:\Windows\SysNative\umrdp.dll (Microsoft Corporation)
SRV:
64bit: - (Power) -- C:\Windows\SysNative\umpo.dll (Microsoft Corporation)
SRV:
64bit: - (Themes) -- C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
SRV:
64bit: - (sppuinotify) -- C:\Windows\SysNative\sppuinotify.dll (Microsoft Corporation)
SRV:
64bit: - (SensrSvc) -- C:\Windows\SysNative\sensrsvc.dll (Microsoft Corporation)
SRV:
64bit: - (PeerDistSvc) -- C:\Windows\SysNative\PeerDistSvc.dll (Microsoft Corporation)
SRV:
64bit: - (PNRPsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:
64bit: - (p2pimsvc) -- C:\Windows\SysNative\pnrpsvc.dll (Microsoft Corporation)
SRV:
64bit: - (HomeGroupProvider) -- C:\Windows\SysNative\provsvc.dll (Microsoft Corporation)
SRV:
64bit: - (RpcEptMapper) -- C:\Windows\SysNative\RpcEpMap.dll (Microsoft Corporation)
SRV:
64bit: - (PNRPAutoReg) -- C:\Windows\SysNative\pnrpauto.dll (Microsoft Corporation)
SRV:
64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:
64bit: - (HomeGroupListener) -- C:\Windows\SysNative\ListSvc.dll (Microsoft Corporation)
SRV:
64bit: - (FontCache) -- C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:
64bit: - (Dhcp) -- C:\Windows\SysNative\dhcpcore.dll (Microsoft Corporation)
SRV:
64bit: - (defragsvc) -- C:\Windows\SysNative\defragsvc.dll (Microsoft Corporation)
SRV:
64bit: - (CscService) -- C:\Windows\SysNative\cscsvc.dll (Microsoft Corporation)
SRV:
64bit: - (bthserv) -- C:\Windows\SysNative\bthserv.dll (Microsoft Corporation)
SRV:
64bit: - (BDESVC) -- C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
SRV:
64bit: - (AxInstSV) -- C:\Windows\SysNative\AxInstSv.dll (Microsoft Corporation)
SRV:
64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:
64bit: - (AppIDSvc) -- C:\Windows\SysNative\appidsvc.dll (Microsoft Corporation)
SRV:
64bit: - (wbengine) -- C:\Windows\SysNative\wbengine.exe (Microsoft Corporation)
SRV:
64bit: - (sppsvc) -- C:\Windows\SysNative\sppsvc.exe (Microsoft Corporation)
SRV:
64bit: - (Fax) -- C:\Windows\SysNative\FXSSVC.exe (Microsoft Corporation)
SRV - (avg9wd) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (TeamViewer5) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (VSS) -- C:\Windows\Vss [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (MSDTC) Služba DTC (Distributed Transaction Coordinator) -- C:\Windows\SysWOW64\Msdtc [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
SRV - (HomeGroupProvider) -- C:\Windows\SysWOW64\provsvc.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\SysWOW64\dhcpcore.dll (Microsoft Corporation)
SRV - (vds) -- C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (clr_optimization_v2.0.50727_64) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Microsoft Office Groove Audit Service) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (CCALib8) -- C:\Program Files (x86)\Canon\CAL\CALMAIN.exe (Canon Inc.)
========== Driver Services (SafeList) ========== DRV:
64bit: - (AvgTdiA) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:
64bit: - (AvgMfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:
64bit: - (AvgLdx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:
64bit: - (AvgRkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
DRV:
64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys ()
DRV:
64bit: - (nmwcdx64) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys (Nokia)
DRV:
64bit: - (UsbserFilt) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys (Nokia)
DRV:
64bit: - (nmwcdcx64) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys (Nokia)
DRV:
64bit: - (upperdev) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys (Nokia)
DRV:
64bit: - (KSecPkg) -- C:\Windows\SysNative\drivers\ksecpkg.sys (Microsoft Corporation)
DRV:
64bit: - (fvevol) -- C:\Windows\SysNative\drivers\fvevol.sys (Microsoft Corporation)
DRV:
64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:
64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:
64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:
64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:
64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:
64bit: - (hwpolicy) -- C:\Windows\SysNative\drivers\hwpolicy.sys (Microsoft Corporation)
DRV:
64bit: - (FsDepends) -- C:\Windows\SysNative\drivers\fsdepends.sys (Microsoft Corporation)
DRV:
64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:
64bit: - (WIMMount) -- C:\Windows\SysNative\drivers\wimmount.sys (Microsoft Corporation)
DRV:
64bit: - (vhdmp) -- C:\Windows\SysNative\drivers\vhdmp.sys (Microsoft Corporation)
DRV:
64bit: - (vmbus) -- C:\Windows\SysNative\drivers\vmbus.sys (Microsoft Corporation)
DRV:
64bit: - (storflt) -- C:\Windows\SysNative\drivers\vmstorfl.sys (Microsoft Corporation)
DRV:
64bit: - (vdrvroot) -- C:\Windows\SysNative\drivers\vdrvroot.sys (Microsoft Corporation)
DRV:
64bit: - (storvsc) -- C:\Windows\SysNative\drivers\storvsc.sys (Microsoft Corporation)
DRV:
64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:
64bit: - (rdyboost) -- C:\Windows\SysNative\drivers\rdyboost.sys (Microsoft Corporation)
DRV:
64bit: - (pcw) -- C:\Windows\SysNative\drivers\pcw.sys (Microsoft Corporation)
DRV:
64bit: - (CNG) -- C:\Windows\SysNative\drivers\cng.sys (Microsoft Corporation)
DRV:
64bit: - (rdpbus) -- C:\Windows\SysNative\drivers\rdpbus.sys (Microsoft Corporation)
DRV:
64bit: - (RDPREFMP) -- C:\Windows\SysNative\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV:
64bit: - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\SysNative\drivers\agilevpn.sys (Microsoft Corporation)
DRV:
64bit: - (WfpLwf) -- C:\Windows\SysNative\drivers\wfplwf.sys (Microsoft Corporation)
DRV:
64bit: - (NdisCap) -- C:\Windows\SysNative\drivers\ndiscap.sys (Microsoft Corporation)
DRV:
64bit: - (vwifimp) -- C:\Windows\SysNative\drivers\vwifimp.sys (Microsoft Corporation)
DRV:
64bit: - (vwififlt) -- C:\Windows\SysNative\drivers\vwififlt.sys (Microsoft Corporation)
DRV:
64bit: - (vwifibus) -- C:\Windows\SysNative\drivers\vwifibus.sys (Microsoft Corporation)
DRV:
64bit: - (1394ohci) -- C:\Windows\SysNative\drivers\1394ohci.sys (Microsoft Corporation)
DRV:
64bit: - (HdAudAddService) -- C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation)
DRV:
64bit: - (usbvideo) Zobrazovací zařízení USB (WDM) -- C:\Windows\SysNative\drivers\usbvideo.sys (Microsoft Corporation)
DRV:
64bit: - (UmPass) -- C:\Windows\SysNative\drivers\umpass.sys (Microsoft Corporation)
DRV:
64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:
64bit: - (WinUsb) -- C:\Windows\SysNative\drivers\winusb.sys (Microsoft Corporation)
DRV:
64bit: - (mshidkmdf) -- C:\Windows\SysNative\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV:
64bit: - (WudfPf) -- C:\Windows\SysNative\drivers\WUDFPf.sys (Microsoft Corporation)
DRV:
64bit: - (MTConfig) -- C:\Windows\SysNative\drivers\MTConfig.sys (Microsoft Corporation)
DRV:
64bit: - (CompositeBus) -- C:\Windows\SysNative\drivers\CompositeBus.sys (Microsoft Corporation)
DRV:
64bit: - (Beep) -- C:\Windows\SysNative\drivers\beep.sys (Microsoft Corporation)
DRV:
64bit: - (AppID) -- C:\Windows\SysNative\drivers\appid.sys (Microsoft Corporation)
DRV:
64bit: - (scfilter) -- C:\Windows\SysNative\drivers\scfilter.sys (Microsoft Corporation)
DRV:
64bit: - (s3cap) -- C:\Windows\SysNative\drivers\vms3cap.sys (Microsoft Corporation)
DRV:
64bit: - (VMBusHID) -- C:\Windows\SysNative\drivers\VMBusHID.sys (Microsoft Corporation)
DRV:
64bit: - (discache) -- C:\Windows\SysNative\drivers\discache.sys (Microsoft Corporation)
DRV:
64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:
64bit: - (HidBatt) -- C:\Windows\SysNative\drivers\hidbatt.sys (Microsoft Corporation)
DRV:
64bit: - (CmBatt) -- C:\Windows\SysNative\drivers\CmBatt.sys (Microsoft Corporation)
DRV:
64bit: - (AcpiPmi) -- C:\Windows\SysNative\drivers\acpipmi.sys (Microsoft Corporation)
DRV:
64bit: - (CSC) -- C:\Windows\SysNative\drivers\csc.sys (Microsoft Corporation)
DRV:
64bit: - (AmdPPM) -- C:\Windows\SysNative\drivers\amdppm.sys (Microsoft Corporation)
DRV:
64bit: - (AgereSoftModem) -- C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp)
DRV:
64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:
64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:
64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:
64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:
64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:
64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.)
DRV:
64bit: - (pccsmcfd) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:
64bit: - (TVALZ) -- C:\Windows\SysNative\drivers\TVALZ_O.SYS (TOSHIBA Corporation)
DRV:
64bit: - (OlyUsbCam) -- C:\Windows\SysNative\drivers\OlyUsbCam.sys (OLYMPUS IMAGING CORP.)
DRV:
64bit: - (Hardlock) -- C:\Windows\SysNative\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}) -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl (CyberLink Corp.)
DRV - (CSC) -- C:\Windows\CSC [2009.10.29 23:41:46 | 000,000,000 | ---D | M]
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\SysWOW64\winusb.dll (Microsoft Corporation)
DRV - (NetBIOS) -- C:\Windows\SysWOW64\netbios.dll (Microsoft Corporation)
DRV - (mpsdrv) -- C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (Tcpip) -- C:\Windows\SysWOW64\wbem\tcpip.mof ()
DRV - (DgiVecp) -- C:\Windows\SysWOW64\drivers\Dgivecp.Sys (DeviceGuys, Inc.)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page =
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 1C 22 A2 8D F5 DE CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search13.net/search.php?clid=486&q="
FF - prefs.js..browser.search.param.yahoo-fr: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search13.net?clid=486"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.825
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA82}:1.0.2
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA99}:1.0.1
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.2.26
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA81}:1.0.2
FF - prefs.js..extensions.enabledItems:
bkmrksync@nokia.com:1.0.0.723
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.3
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA80}:1.0.22
FF - prefs.js..extensions.enabledItems: {7645f4b1-1f19-13dd-2d6b-0200600c2a56}:1.0
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA96}:1.0.3
FF - prefs.js..keyword.URL: "http://search13.net/search.php?clid=486&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010.03.13 15:15:47 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.04.12 15:37:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG9\Firefox [2010.06.03 12:17:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.05.07 12:32:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.04.12 15:37:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.04.12 15:38:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.05.07 12:32:27 | 000,000,000 | ---D | M]
[2009.11.01 23:58:28 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Extensions
[2010.06.07 12:55:28 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions
[2010.01.29 09:46:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA80}
[2010.01.29 09:46:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA81}
[2010.01.29 09:46:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA82}
[2010.03.26 17:59:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}
[2009.11.08 14:11:27 | 000,000,000 | ---D | M] (FBFan) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{6236BA26-C117-4007-928C-DE0716C7FA99}
[2010.02.17 19:05:09 | 000,000,000 | ---D | M] (U Flv) -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\extensions\{7645f4b1-1f19-13dd-2d6b-0200600c2a56}
[2010.05.04 13:52:55 | 000,001,586 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\Mozilla\Firefox\Profiles\ghu30t3w.default\searchplugins\web-search.xml
[2010.05.18 13:48:58 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2009.11.15 23:24:32 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2009.11.15 23:24:32 | 000,001,687 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\mall-cz.xml
[2009.11.15 23:24:32 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\seznam-cz.xml
[2009.11.15 23:24:32 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2009.11.15 23:24:32 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:
64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:
64bit: - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:
64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files (x86)\Google\Gmail Notifier\gnotify.exe (Google Inc.)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe ()
O4 - HKCU..\Run: [] File not found
O4 - HKCU..\Run: [BitComet] C:\Program Files (x86)\BitLord\BitLord.exe (
www.BitLord.com)
O4 - HKCU..\Run: [CooLWPC3] C:\Program Files (x86)\CooL Wallpaper Changer\coolwpc.exe (Pavel Chmelař)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [feedreader.exe] C:\Program Files (x86)\FeedReader30\feedreader.exe ()
O4 - HKCU..\Run: [NokiaOviSuite2] C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia)
O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKCU..\Run: [QIP2005] C:\Program Files (x86)\QIP\qip.exe (The Author of QIP)
O4 - Startup: C:\Users\Hurvajz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk = C:\Program Files (x86)\stickies\stickies.exe (Zhorn Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:
64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm ()
O9 - Extra 'Tools' menuitem : StylishProfile - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files (x86)\Stylish Profile\ct.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:
64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:
64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O30:
64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs:
64bit: Ias - C:\Windows\SysNative\ias [2009.07.14 05:20:14 | 000,000,000 | ---D | M]
NetSvcs:
64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:
64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs:
64bit: Themes - C:\Windows\SysNative\themeservice.dll (Microsoft Corporation)
NetSvcs:
64bit: BDESVC - C:\Windows\SysNative\bdesvc.dll (Microsoft Corporation)
NetSvcs:
64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias.dll (Microsoft Corporation)
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 90 Days ========== [2010.06.12 15:32:55 | 000,258,560 | ---- | C] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTH.scr
[2010.06.12 08:35:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2010.06.12 08:35:52 | 000,000,000 | ---D | C] -- C:\rsit
[2010.06.12 07:24:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\bfubackups
[2010.06.12 07:09:09 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\Desktop\Bfu
[2010.06.12 06:42:44 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.06.11 14:35:10 | 000,000,000 | ---D | C] -- C:\_OTM
[2010.06.11 14:34:09 | 000,518,656 | ---- | C] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTM.exe
[2010.06.07 11:26:41 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\Feedreader
[2010.06.07 11:26:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FeedReader30
[2010.06.03 07:36:13 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\gtk-2.0
[2010.06.03 07:29:00 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\.purple
[2010.06.03 07:28:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pidgin
[2010.06.01 11:57:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kolor
[2010.06.01 11:53:23 | 000,000,000 | ---D | C] -- C:\Program Files\Kolor
[2010.05.22 10:08:27 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2010.05.22 10:08:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2010.05.17 22:06:59 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\skypePM
[2010.05.17 22:06:18 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\Skype
[2010.05.17 22:05:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010.05.13 13:42:30 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\Desktop\Brouci Maďarsko na určení
[2010.05.07 19:43:54 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\Documents\Ovi
[2010.05.07 19:43:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Nokia
[2010.05.07 15:53:01 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Local\Nokia
[2010.05.07 15:52:57 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Local\NokiaAccount
[2010.05.07 12:32:21 | 000,025,600 | ---- | C] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys
[2010.05.07 12:32:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2010.05.07 12:06:29 | 000,000,000 | ---D | C] -- C:\ProgramData\OviInstallerCache
[2010.05.06 07:53:11 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\Desktop\Maďarsko brouci určení
[2010.05.03 09:13:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Helicon Software
[2010.04.28 18:31:29 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\AVG9
[2010.04.27 08:46:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2010.04.26 12:21:48 | 000,012,976 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll
[2010.04.26 12:21:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\avg
[2010.04.26 11:45:35 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010.04.26 11:45:32 | 000,056,008 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys
[2010.04.26 11:45:30 | 000,317,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
[2010.04.26 11:45:25 | 000,269,320 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
[2010.04.26 11:45:22 | 000,035,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
[2010.04.26 11:45:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\Avg
[2010.04.26 11:45:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2010.04.26 11:45:04 | 000,000,000 | ---D | C] -- C:\ProgramData\avg9
[2010.04.16 20:24:55 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure
[2010.04.16 20:20:26 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2010.04.16 15:29:50 | 000,572,416 | ---- | C] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTL.exe
[2010.04.16 12:20:49 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\Malwarebytes
[2010.04.16 12:20:32 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.04.16 12:20:30 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.04.16 12:20:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010.04.16 12:20:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.04.16 11:01:57 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\DoctorWeb
[2010.04.16 08:49:12 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\stickies
[2010.04.16 08:49:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\stickies
[2010.04.12 15:37:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2010.04.08 16:16:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Recognita Standard OCR 3.2
[2010.04.08 09:50:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Installer Clean Up
[2010.04.08 09:48:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECACHE
[2010.04.07 11:33:10 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Local\Cyberlink
[2010.04.07 11:33:05 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\Documents\CyberLink
[2010.04.07 11:33:04 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\CyberLink
[2010.04.07 11:23:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CyberLink
[2010.04.07 10:18:33 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2010.04.07 10:17:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CyberLink
[2010.04.07 10:11:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp
[2010.04.01 14:01:06 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\TeamViewer
[2010.04.01 14:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2010.03.31 10:13:57 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters Inc
[2010.03.31 10:11:08 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\GetRightToGo
[2010.03.30 15:22:48 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\OLYMPUS
[2010.03.30 15:18:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\QuickTime
[2010.03.30 12:49:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Helicon
[2010.03.30 12:34:09 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2010.03.30 12:34:00 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010.03.26 14:33:38 | 000,000,000 | ---D | C] -- C:\Program Files\WMV9_VCM
[2010.03.26 14:32:30 | 000,296,448 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\SysNative\drivers\hardlock.sys
[2010.03.26 14:32:29 | 003,063,808 | ---- | C] (Aladdin Knowledge Systems.) -- C:\Windows\SysWow64\hinstd.dll
[2010.03.26 14:32:29 | 002,164,411 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\SysWow64\haspds_windows.dll
[2010.03.26 14:06:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickPHOTO CAMERA 2.2
[2010.03.26 13:54:31 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Local\OLYMPUS
[2010.03.26 13:51:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OLYMPUS
[2010.03.26 12:27:26 | 000,000,000 | ---D | C] -- C:\Users\Hurvajz\AppData\Roaming\ZoomBrowser EX
[2010.03.26 12:06:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ZoomBrowser
[2010.03.26 12:06:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon
[2010.03.26 12:06:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Canon
========== Files - Modified Within 90 Days ========== [2010.06.12 15:39:47 | 003,670,016 | -HS- | M] () -- C:\Users\Hurvajz\NTUSER.DAT
[2010.06.12 15:35:10 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.06.12 15:35:10 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.06.12 15:32:55 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTH.scr
[2010.06.12 15:31:59 | 000,572,416 | ---- | M] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTL.exe
[2010.06.12 15:27:59 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.06.12 15:27:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.06.12 15:27:43 | 1609,076,736 | -HS- | M] () -- C:\hiberfil.sys
[2010.06.12 15:20:17 | 000,003,075 | ---- | M] () -- C:\Windows\WDICT32.INI
[2010.06.12 15:20:14 | 000,991,699 | -H-- | M] () -- C:\Users\Hurvajz\AppData\Local\IconCache.db
[2010.06.12 15:19:07 | 000,000,340 | ---- | M] () -- C:\Users\Hurvajz\Desktop\fixme.reg
[2010.06.12 15:12:17 | 003,072,590 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\CooLWPC Wallpaper.bmp
[2010.06.12 08:35:22 | 000,824,681 | ---- | M] () -- C:\Users\Hurvajz\Desktop\RSIT.exe
[2010.06.12 08:18:59 | 060,960,208 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010.06.12 08:07:03 | 001,586,164 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.06.12 08:07:03 | 000,672,622 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2010.06.12 08:07:03 | 000,656,802 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.06.12 08:07:03 | 000,137,882 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2010.06.12 08:07:03 | 000,122,294 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.06.12 06:54:50 | 002,344,840 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.06.11 14:34:09 | 000,518,656 | ---- | M] (OldTimer Tools) -- C:\Users\Hurvajz\Desktop\OTM.exe
[2010.06.11 08:04:25 | 000,011,382 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Metriorrhynchini.docx
[2010.06.09 14:09:43 | 000,002,413 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Google Chrome.lnk
[2010.06.09 12:14:42 | 000,034,304 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Zápočtový list 2010.xls
[2010.06.09 10:51:53 | 000,000,162 | -H-- | M] () -- C:\Users\Hurvajz\Desktop\~$ll (2002)Cenozoic geological and plate tectonic evolution of SE Asia.doc
[2010.06.09 10:49:56 | 011,701,697 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Hall (2002)Cenozoic geological and plate tectonic evolution of SE Asia.doc
[2010.06.08 15:54:58 | 000,000,162 | -H-- | M] () -- C:\Users\Hurvajz\Desktop\~$SuawesiJun06bPAUP5th.doc
[2010.06.07 11:26:40 | 000,000,977 | ---- | M] () -- C:\Users\Hurvajz\Desktop\FeedReader.lnk
[2010.06.03 12:15:34 | 000,000,162 | -H-- | M] () -- C:\Users\Hurvajz\Desktop\~$nosová posudek BP.doc
[2010.06.03 09:12:23 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
[2010.06.03 09:12:23 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
[2010.06.03 07:36:13 | 000,000,416 | ---- | M] () -- C:\Users\Hurvajz\Documents\Petr Macek.html
[2010.06.01 11:57:31 | 000,001,216 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Autopano Giga 2.lnk
[2010.05.18 15:45:30 | 000,561,307 | ---- | M] () -- C:\Users\Hurvajz\Desktop\csd_certifikat_2010_11148.pdf
[2010.05.17 22:07:05 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.05.16 18:30:35 | 000,000,833 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2010.05.10 19:10:33 | 000,000,162 | -H-- | M] () -- C:\Users\Hurvajz\Desktop\~$licon Focus registration.rtf
[2010.05.10 19:09:10 | 000,003,045 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Helicon Focus registration.rtf
[2010.05.07 15:53:30 | 000,004,608 | ---- | M] () -- C:\Users\Hurvajz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.07 12:34:24 | 000,002,063 | ---- | M] () -- C:\Users\Public\Desktop\Nokia Ovi Suite.lnk
[2010.05.04 11:21:38 | 000,001,160 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Helicon 3D Viewer.lnk
[2010.05.04 11:21:38 | 000,001,150 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Helicon Remote.lnk
[2010.05.04 11:21:38 | 000,001,145 | ---- | M] () -- C:\Users\Hurvajz\Desktop\Helicon Focus.lnk
[2010.04.28 18:39:59 | 000,000,162 | -H-- | M] () -- C:\Users\Hurvajz\Desktop\~$ologická exkurze.doc
[2010.04.27 08:47:24 | 000,001,954 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010.04.26 12:21:48 | 000,012,976 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll
[2010.04.26 12:21:37 | 000,269,320 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
[2010.04.26 12:21:37 | 000,142,495 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg
[2010.04.26 12:21:37 | 000,056,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys
[2010.04.26 11:45:34 | 000,001,858 | ---- | M] () -- C:\Users\Public\Desktop\AVG 9.0.lnk
[2010.04.26 11:45:22 | 006,061,540 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg
[2010.04.26 11:45:22 | 000,492,629 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg
[2010.04.26 11:45:22 | 000,113,461 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010.04.18 13:18:36 | 000,009,194 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.ini
[2010.04.18 13:06:03 | 000,009,194 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bak
[2010.04.17 23:57:41 | 000,009,194 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bk!
[2010.04.16 18:56:55 | 000,009,194 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bko
[2010.04.16 16:37:28 | 000,000,644 | ---- | M] () -- C:\Windows\win.ini
[2010.04.16 12:20:34 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.16 08:49:12 | 000,001,065 | ---- | M] () -- C:\Users\Hurvajz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk
[2010.04.16 08:49:12 | 000,000,643 | ---- | M] () -- C:\Windows\uninstallstickies.bat
[2010.04.12 15:36:41 | 000,278,528 | ---- | M] (Real Networks, Inc) -- C:\Windows\SysWow64\pncrt.dll
[2010.04.08 16:16:24 | 000,000,010 | ---- | M] () -- C:\Windows\WININIT.INI
[2010.04.07 11:28:35 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk
[2010.04.01 19:59:40 | 000,110,880 | ---- | M] () -- C:\Users\Hurvajz\AppData\Local\GDIPFONTCACHEV1.DAT
[2010.04.01 14:01:03 | 000,001,166 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk
[2010.04.01 10:25:34 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
[2010.03.30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.03.30 00:45:56 | 000,024,664 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.03.26 12:16:12 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.03.26 12:06:55 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\EOS Utility.lnk
[2010.03.26 12:06:23 | 000,001,344 | ---- | M] () -- C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2010.03.23 22:25:28 | 005,952,044 | ---- | M] () -- C:\Users\Hurvajz\Desktop\VR23-03-2010_211913.wav
[2010.03.23 16:16:07 | 000,001,894 | ---- | M] () -- C:\Windows\Helicon Debug Window.ini
========== Files Created - No Company Name ========== [2010.06.12 15:19:07 | 000,000,340 | ---- | C] () -- C:\Users\Hurvajz\Desktop\fixme.reg
[2010.06.12 12:57:35 | 000,824,681 | ---- | C] () -- C:\Users\Hurvajz\Desktop\RSIT.exe
[2010.06.11 21:07:05 | 003,072,590 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\CooLWPC Wallpaper.bmp
[2010.06.11 07:54:45 | 000,011,382 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Metriorrhynchini.docx
[2010.06.09 10:51:53 | 000,000,162 | -H-- | C] () -- C:\Users\Hurvajz\Desktop\~$ll (2002)Cenozoic geological and plate tectonic evolution of SE Asia.doc
[2010.06.09 09:18:25 | 011,701,697 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Hall (2002)Cenozoic geological and plate tectonic evolution of SE Asia.doc
[2010.06.08 15:54:58 | 000,000,162 | -H-- | C] () -- C:\Users\Hurvajz\Desktop\~$SuawesiJun06bPAUP5th.doc
[2010.06.07 11:26:40 | 000,000,977 | ---- | C] () -- C:\Users\Hurvajz\Desktop\FeedReader.lnk
[2010.06.03 12:15:34 | 000,000,162 | -H-- | C] () -- C:\Users\Hurvajz\Desktop\~$nosová posudek BP.doc
[2010.06.03 07:36:13 | 000,000,416 | ---- | C] () -- C:\Users\Hurvajz\Documents\Petr Macek.html
[2010.06.01 11:57:31 | 000,001,216 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Autopano Giga 2.lnk
[2010.05.18 15:45:30 | 000,561,307 | ---- | C] () -- C:\Users\Hurvajz\Desktop\csd_certifikat_2010_11148.pdf
[2010.05.17 22:07:05 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.05.10 19:10:33 | 000,000,162 | -H-- | C] () -- C:\Users\Hurvajz\Desktop\~$licon Focus registration.rtf
[2010.05.10 19:09:10 | 000,003,045 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Helicon Focus registration.rtf
[2010.05.07 15:53:29 | 000,004,608 | ---- | C] () -- C:\Users\Hurvajz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.07 12:34:23 | 000,002,063 | ---- | C] () -- C:\Users\Public\Desktop\Nokia Ovi Suite.lnk
[2010.05.06 18:59:32 | 000,034,304 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Zápočtový list 2010.xls
[2010.05.04 11:21:38 | 000,001,160 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Helicon 3D Viewer.lnk
[2010.05.04 11:21:38 | 000,001,150 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Helicon Remote.lnk
[2010.05.04 11:21:38 | 000,001,145 | ---- | C] () -- C:\Users\Hurvajz\Desktop\Helicon Focus.lnk
[2010.04.28 18:39:59 | 000,000,162 | -H-- | C] () -- C:\Users\Hurvajz\Desktop\~$ologická exkurze.doc
[2010.04.27 08:47:24 | 000,001,954 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010.04.26 11:45:34 | 000,001,858 | ---- | C] () -- C:\Users\Public\Desktop\AVG 9.0.lnk
[2010.04.26 11:45:22 | 060,960,208 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010.04.26 11:45:22 | 006,061,540 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\avi7.avg
[2010.04.26 11:45:22 | 000,492,629 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\miniavi.avg
[2010.04.26 11:45:22 | 000,142,495 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\microavi.avg
[2010.04.26 11:45:22 | 000,113,461 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010.04.16 12:20:34 | 000,001,013 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.04.16 08:49:12 | 000,001,065 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk
[2010.04.16 08:49:12 | 000,000,643 | ---- | C] () -- C:\Windows\uninstallstickies.bat
[2010.04.08 16:16:24 | 000,000,010 | ---- | C] () -- C:\Windows\WININIT.INI
[2010.04.07 11:28:35 | 000,002,121 | ---- | C] () -- C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk
[2010.04.01 14:01:03 | 000,001,166 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk
[2010.04.01 10:25:34 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Acrobat 9 Pro.lnk
[2010.03.30 08:23:03 | 000,009,194 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bko
[2010.03.28 10:18:39 | 000,009,194 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bk!
[2010.03.28 09:55:39 | 000,009,194 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.bak
[2010.03.27 20:04:51 | 000,009,194 | ---- | C] () -- C:\Users\Hurvajz\AppData\Roaming\PStrip.ini
[2010.03.27 19:20:29 | 000,013,008 | ---- | C] () -- C:\Windows\SysNative\drivers\pstrip64.sys
[2010.03.26 14:32:29 | 000,164,864 | ---- | C] () -- C:\Windows\SysWow64\UNWISE.EXE
[2010.03.26 14:32:29 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\hdduinst.exe
[2010.03.26 12:16:12 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010.03.26 12:06:55 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\EOS Utility.lnk
[2010.03.26 12:06:23 | 000,001,344 | ---- | C] () -- C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2010.03.23 22:25:28 | 005,952,044 | ---- | C] () -- C:\Users\Hurvajz\Desktop\VR23-03-2010_211913.wav
[2010.02.11 10:06:17 | 000,000,286 | ---- | C] () -- C:\Windows\game.ini
[2009.11.08 17:27:04 | 001,603,560 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.11.04 13:21:24 | 000,001,894 | ---- | C] () -- C:\Windows\Helicon Debug Window.ini
[2009.11.01 22:59:04 | 000,000,033 | ---- | C] () -- C:\Windows\WTRDCTM.INI
[2009.11.01 22:58:35 | 000,002,753 | ---- | C] () -- C:\Windows\UN32P.INI
[2009.11.01 22:58:05 | 000,001,779 | ---- | C] () -- C:\Windows\MAILTRAN.INI
[2009.11.01 22:58:04 | 000,002,840 | ---- | C] () -- C:\Windows\TRNCOM.INI
[2009.11.01 22:57:56 | 000,004,580 | ---- | C] () -- C:\Windows\WTRAN32.INI
[2009.11.01 22:57:56 | 000,003,075 | ---- | C] () -- C:\Windows\WDICT32.INI
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
========== LOP Check ========== [2010.06.12 15:20:16 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\.purple
[2010.04.28 18:31:29 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\AVG9
[2010.02.19 08:00:47 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Canneverbe_Limited
[2009.11.02 22:55:34 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\com.cbs.himym.desktop.E9E67C1457924EABBA27327D1BAF79E9B78ADD40.1
[2010.02.11 09:50:27 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\DAEMON Tools Lite
[2010.06.07 11:37:36 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Feedreader
[2010.06.09 10:15:24 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\FileZilla
[2010.03.31 10:11:49 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\GetRightToGo
[2009.10.30 00:12:57 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\GHISLER
[2010.06.03 07:36:27 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\gtk-2.0
[2010.02.19 10:10:15 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\JAlbum
[2010.05.07 19:42:52 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Nokia
[2010.03.30 15:22:48 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\OLYMPUS
[2009.10.30 02:37:49 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Opera
[2009.11.03 22:48:04 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\PC Suite
[2009.11.10 00:21:18 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Publish Providers
[2009.11.09 01:10:27 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Sony
[2010.06.12 15:23:03 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\stickies
[2010.04.01 21:57:59 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\TeamViewer
[2009.10.30 12:55:31 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\TuneUp Software
[2010.01.08 12:39:27 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\WinBatch
[2009.10.31 20:38:54 | 000,000,000 | ---D | M] -- C:\Users\Hurvajz\AppData\Roaming\Zoner
[2010.03.20 19:03:45 | 000,032,638 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2009.07.14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
[2009.10.29 23:39:44 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2009.10.29 23:55:27 | 000,008,192 | ---- | M] () -- C:\bootsect.lxe.bak
[2010.06.12 07:24:21 | 000,001,784 | ---- | M] () -- C:\egd.txt
[2009.10.29 23:55:26 | 000,383,592 | RHS- | M] () -- C:\gdrop
[2010.06.12 15:27:43 | 1609,076,736 | -HS- | M] () -- C:\hiberfil.sys
[2005.09.23 01:39:38 | 000,894,976 | ---- | M] (Microsoft Corporation) -- C:\msdia80.dll
[2010.06.12 15:27:47 | 2145,435,648 | -HS- | M] () -- C:\pagefile.sys
[2009.10.29 23:55:26 | 000,171,136 | RHS- | M] () -- C:\xeldr
< %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\drivers\*.sys /90 >[2010.03.30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWOW64\drivers\mbamswissarmy.sys
========== Alternate Data Streams ========== @Alternate Data Stream - 400 bytes -> C:\Users\Hurvajz\AppData\Local\desktop.ini:5c43de08f544da0e2ebf87ecd84498e6
@Alternate Data Stream - 400 bytes -> C:\Users\Hurvajz\AppData\Local\desktop.ini:3e07d7c0320e1040da5b895ad8a55486
@Alternate Data Stream - 400 bytes -> C:\Users\Hurvajz\AppData\Local\desktop.ini:3a96398c0f384e4adf5faa1736aeaf96
@Alternate Data Stream - 400 bytes -> C:\Users\Hurvajz\AppData\Local\desktop.ini:11797fbfcf3cb424fc7643a177c92a31
< End of report >
