Logfile of random's system information tool 1.06 (written by random/random)
Run by merlp at 2010-04-30 11:14:52
Microsoft Windows 7 Ultimate  
System drive C: has 15 GB (49%) free of 30 GB
Total RAM: 2046 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:15:00, on 30.4.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\rthdvcpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\StickyNotes\SNTBHider.exe
C:\Windows\System32\StikyNot.exe
D:\!!!!!!!!!       Martinova Slozka           !!!!!!!!!!!!!!\E-mail\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\merlp\Desktop\RSIT.exe
C:\Program Files\trend micro\merlp.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - Startup: Sticky Notes Taskbar Hider.lnk = C:\Program Files\StickyNotes\SNTBHider.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo WinOptimizer 6\Dfsdks.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Tweak7SystemService - Totalidea Software - C:\Windows\system32\Tweak7SystemService.exe

--
End of file - 3721 bytes

======Scheduled tasks folder======

C:\Windows\tasks\PDVD9Serv.EXE_20100420_170148_0336.job
C:\Windows\tasks\PDVD9Serv.EXE_20100420_171404_0721.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2010-04-23 321312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-23 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-02-08 8505888]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-05-14 2029640]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

C:\Users\merlp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sticky Notes Taskbar Hider.lnk - C:\Program Files\StickyNotes\SNTBHider.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"undockwithoutlogon"=1
"ShutdownWithoutLogon"=1
"EnableLUA"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=
"NoFileAssociate"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-04-30 11:12:38 ----D---- C:\rsit
2010-04-30 11:12:38 ----D---- C:\Program Files\trend micro
2010-04-30 11:07:54 ----D---- C:\Program Files\CCleaner
2010-04-29 19:40:04 ----D---- C:\Windows\temp
2010-04-29 19:36:33 ----D---- C:\$RECYCLE.BIN
2010-04-29 19:20:22 ----A---- C:\Windows\system32\cmd.execf
2010-04-29 16:42:24 ----D---- C:\Windows\ERDNT
2010-04-29 16:31:57 ----A---- C:\Windows\system32\shell32.dll
2010-04-29 16:31:56 ----A---- C:\Windows\system32\lsasrv.dll
2010-04-27 16:01:25 ----A---- C:\Windows\system32\BASSMOD.dll
2010-04-27 15:59:16 ----D---- C:\Program Files\Imagenomic
2010-04-27 15:01:50 ----D---- C:\Windows\MSSecurityNS
2010-04-27 15:01:50 ----D---- C:\Windows\MSSecurityNi
2010-04-23 21:18:19 ----D---- C:\Users\merlp\AppData\Roaming\Malwarebytes
2010-04-23 21:16:57 ----D---- C:\ProgramData\Malwarebytes
2010-04-23 21:16:55 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-23 21:02:46 ----A---- C:\Windows\system32\tmp.txt
2010-04-23 20:53:21 ----A---- C:\Windows\system32\MSSTDFMT.DLL
2010-04-23 14:39:41 ----A---- C:\Windows\system32\javaws.exe
2010-04-23 14:39:41 ----A---- C:\Windows\system32\javaw.exe
2010-04-23 14:39:41 ----A---- C:\Windows\system32\java.exe
2010-04-23 14:34:28 ----D---- C:\Windows\Sun
2010-04-23 14:32:40 ----D---- C:\ProgramData\Sun
2010-04-23 14:32:39 ----D---- C:\Program Files\Common Files\Java
2010-04-23 14:32:20 ----A---- C:\Windows\system32\deploytk.dll
2010-04-23 14:32:09 ----D---- C:\Program Files\Java
2010-04-21 20:40:56 ----A---- C:\Windows\system32\vspell32.dll
2010-04-21 20:40:56 ----A---- C:\Windows\system32\Vb6stkit.dll
2010-04-21 20:40:54 ----A---- C:\Windows\system32\Ledit32.dll
2010-04-21 20:40:51 ----A---- C:\Windows\system32\ChilkatFtp2.dll
2010-04-21 20:40:51 ----A---- C:\Windows\system32\ChilkatCert.dll
2010-04-21 16:42:43 ----D---- C:\Program Files\Advanced Port Scanner
2010-04-20 18:01:32 ----D---- C:\ProgramData\Sticky Notes TB Hider
2010-04-20 18:01:31 ----D---- C:\Program Files\StickyNotes
2010-04-20 17:04:03 ----D---- C:\ProgramData\CyberLink
2010-04-20 16:59:22 ----D---- C:\Program Files\InstallShield Installation Information
2010-04-20 16:59:22 ----D---- C:\Program Files\Common Files\CyberLink
2010-04-20 16:58:40 ----D---- C:\Program Files\CyberLink
2010-04-20 16:58:25 ----A---- C:\Windows\system32\msxml3a.dll
2010-04-20 16:58:25 ----A---- C:\Windows\system32\msvcr71.dll
2010-04-20 16:58:25 ----A---- C:\Windows\system32\msvcp71.dll
2010-04-19 13:11:03 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-04-19 13:11:01 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-04-19 13:11:01 ----A---- C:\Windows\system32\pbsvc_bc2.exe
2010-04-19 13:00:26 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-04-19 13:00:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-04-19 13:00:26 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-04-19 13:00:26 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-04-19 13:00:25 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-04-19 13:00:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-04-19 13:00:23 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-04-19 13:00:22 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xinput1_3.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xinput1_2.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xinput1_1.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\d3dx10.dll
2010-04-19 13:00:21 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-04-19 13:00:17 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-04-19 13:00:17 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-04-19 13:00:17 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-04-19 13:00:16 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-04-19 13:00:16 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-04-19 13:00:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-04-19 13:00:16 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-04-19 12:00:05 ----D---- C:\Program Files\DAEMON Tools Lite
2010-04-18 16:23:17 ----D---- C:\Program Files\WinRAR
2010-04-16 21:25:30 ----A---- C:\Windows\iun6002.exe
2010-04-16 21:24:46 ----D---- C:\Program Files\WYSIWYG Web Builder 6
2010-04-16 20:10:49 ----D---- C:\Windows\Tweak-7
2010-04-16 20:10:49 ----D---- C:\Program Files\Tweak-7
2010-04-16 20:08:47 ----D---- C:\Program Files\Zmna MAC adresy
2010-04-13 21:08:02 ----D---- C:\Users\merlp\AppData\Roaming\Tweak-7
2010-04-13 20:54:25 ----A---- C:\Windows\system32\wintrust.dll
2010-04-13 20:54:24 ----A---- C:\Windows\system32\cabview.dll
2010-04-13 20:29:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-13 20:29:48 ----A---- C:\Windows\system32\vbscript.dll
2010-04-13 20:29:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-13 19:34:56 ----D---- C:\ProgramData\Adobe Systems
2010-04-13 19:28:25 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2010-04-13 18:41:13 ----A---- C:\Windows\NeroDigital.ini
2010-04-13 15:29:13 ----D---- C:\Program Files\Xvid
2010-04-13 15:28:30 ----D---- C:\Program Files\VDGPRS NetMeter
2010-04-13 15:28:30 ----D---- C:\Program Files\VDGPRS Client NetMeter
2010-04-13 15:28:30 ----A---- C:\Windows\system32\ScrrnIT.dll
2010-04-13 15:28:29 ----D---- C:\Program Files\VDGPRS Client Manager
2010-04-13 15:27:59 ----D---- C:\Program Files\VDGPRS CLIENT 2
2010-04-10 17:48:23 ----A---- C:\Windows\system32\DfSdkBt.exe
2010-04-10 17:48:23 ----A---- C:\Windows\is-MADLI.exe
2010-04-10 17:46:47 ----A---- C:\Windows\system32\DfSdkBt64.exe
2010-04-10 17:46:39 ----D---- C:\Program Files\Ashampoo WinOptimizer 6
2010-04-10 17:44:34 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2010-04-10 17:44:32 ----D---- C:\Program Files\Hewlett-Packard
2010-04-10 10:31:49 ----D---- C:\Program Files\Common Files\Borland Shared
2010-04-10 10:31:49 ----D---- C:\Avaris
2010-04-10 10:31:34 ----A---- C:\Windows\uninst.exe
2010-04-10 10:29:52 ----D---- C:\Users\merlp\AppData\Roaming\TrueCrypt
2010-04-09 19:05:17 ----A---- C:\Windows\wininit.ini
2010-04-09 18:21:37 ----D---- C:\ProgramData\ESET
2010-04-09 18:21:37 ----D---- C:\Program Files\ESET
2010-04-09 18:18:30 ----D---- C:\ProgramData\Adobe
2010-04-09 18:18:27 ----D---- C:\Program Files\Common Files\Adobe
2010-04-09 17:51:43 ----A---- C:\Windows\system32\psisdecd.dll
2010-04-09 17:51:43 ----A---- C:\Windows\system32\msdri.dll
2010-04-09 17:51:43 ----A---- C:\Windows\system32\CPFilters.dll
2010-04-09 17:51:26 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-04-09 17:51:26 ----A---- C:\Windows\system32\secproc_isv.dll
2010-04-09 17:51:26 ----A---- C:\Windows\system32\secproc.dll
2010-04-09 17:51:26 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-04-09 17:51:26 ----A---- C:\Windows\system32\RMActivate.exe
2010-04-09 17:51:25 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-04-09 17:51:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-04-09 17:51:25 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-04-09 17:02:15 ----AD---- C:\ProgramData\TEMP
2010-04-09 17:02:13 ----D---- C:\Program Files\Classic Menu for Office
2010-04-09 17:01:42 ----D---- C:\Program Files\MSECache
2010-04-09 17:00:18 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-09 17:00:16 ----D---- C:\Windows\PCHEALTH
2010-04-09 17:00:16 ----D---- C:\Program Files\Microsoft.NET
2010-04-09 16:59:21 ----D---- C:\ProgramData\Microsoft Help
2010-04-09 16:59:21 ----D---- C:\Program Files\Microsoft Office
2010-04-09 16:57:41 ----RD---- C:\MSOCache
2010-04-09 16:22:06 ----D---- C:\Users\merlp\AppData\Roaming\Nero
2010-04-09 16:09:31 ----A---- C:\Windows\system32\MsiExec.exe.log
2010-04-09 16:09:05 ----D---- C:\ProgramData\Nero
2010-04-09 16:09:05 ----D---- C:\Program Files\Nero
2010-04-09 16:09:05 ----D---- C:\Program Files\Common Files\Nero
2010-04-09 16:07:45 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-04-09 16:07:45 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-04-09 15:44:18 ----D---- C:\Program Files\AusLogics Registry Defrag
2010-04-09 15:43:19 ----D---- C:\Program Files\PoiEdit2007
2010-04-09 15:43:00 ----D---- C:\Program Files\TomTom HOME 2
2010-04-09 15:42:43 ----D---- C:\Program Files\Regino v5.0
2010-04-09 15:42:21 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-04-09 15:41:58 ----D---- C:\Program Files\ConvertX
2010-04-09 15:41:09 ----D---- C:\Program Files\DVD Shrink
2010-04-09 15:40:33 ----D---- C:\Program Files\MP3Gain
2010-04-09 15:39:52 ----D---- C:\Program Files\Mozilla Firefox
2010-04-09 14:56:46 ----D---- C:\Users\merlp\AppData\Roaming\Thinstall
2010-04-09 14:49:48 ----A---- C:\Windows\system32\msv1_0.dll
2010-04-09 14:48:19 ----A---- C:\Windows\system32\MRT.exe
2010-04-09 14:48:13 ----A---- C:\Windows\system32\browserchoice.exe
2010-04-09 14:47:10 ----A---- C:\Windows\system32\winlogon.exe
2010-04-09 14:47:10 ----A---- C:\Windows\explorer.exe
2010-04-09 14:47:09 ----A---- C:\Windows\system32\mshtml.dll
2010-04-09 14:47:08 ----A---- C:\Windows\system32\ieframe.dll
2010-04-09 14:47:07 ----A---- C:\Windows\system32\wininet.dll
2010-04-09 14:47:07 ----A---- C:\Windows\system32\urlmon.dll
2010-04-09 14:47:07 ----A---- C:\Windows\system32\mstime.dll
2010-04-09 14:47:07 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-04-09 14:47:07 ----A---- C:\Windows\system32\iedkcs32.dll
2010-04-09 14:47:03 ----A---- C:\Windows\system32\wmp.dll
2010-04-09 14:47:02 ----A---- C:\Windows\system32\winresume.exe
2010-04-09 14:47:02 ----A---- C:\Windows\system32\winload.exe
2010-04-09 14:47:02 ----A---- C:\Windows\system32\CertEnroll.dll
2010-04-09 14:47:01 ----A---- C:\Windows\system32\wmploc.DLL
2010-04-09 14:46:59 ----A---- C:\Windows\system32\kernel32.dll
2010-04-09 14:46:59 ----A---- C:\Windows\system32\apphelp.dll
2010-04-09 14:46:58 ----A---- C:\Windows\system32\jscript.dll
2010-04-09 14:46:55 ----A---- C:\Windows\system32\quartz.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\tsbyuv.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\msyuv.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\msvidc32.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\msrle32.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\mciavi32.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\iyuv_32.dll
2010-04-09 14:46:54 ----A---- C:\Windows\system32\avifil32.dll
2010-04-09 14:46:34 ----A---- C:\Windows\system32\t2embed.dll
2010-04-09 14:46:34 ----A---- C:\Windows\system32\fontsub.dll
2010-04-09 14:46:34 ----A---- C:\Windows\system32\atmfd.dll
2010-04-09 14:45:56 ----A---- C:\Windows\system32\tzres.dll
2010-04-09 14:45:44 ----A---- C:\Windows\system32\msasn1.dll
2010-04-08 20:46:15 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-04-08 20:44:22 ----A---- C:\Windows\system32\yv12vfw.dll
2010-04-08 20:44:22 ----A---- C:\Windows\system32\xvidvfw.dll
2010-04-08 20:44:22 ----A---- C:\Windows\system32\xvidcore.dll
2010-04-08 20:44:22 ----A---- C:\Windows\system32\unrar.dll
2010-04-08 20:44:22 ----A---- C:\Windows\avisplitter.ini
2010-04-08 20:44:21 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-04-08 20:44:21 ----A---- C:\Windows\system32\ff_vfw.dll
2010-04-08 20:44:20 ----D---- C:\Program Files\K-Lite Codec Pack
2010-04-08 20:42:22 ----D---- C:\Users\merlp\AppData\Roaming\TomTom
2010-04-08 20:38:41 ----D---- C:\Program Files\Yamicsoft
2010-04-08 20:35:21 ----A---- C:\Windows\system32\QyIyh-xP0_.exe
2010-04-08 20:19:14 ----D---- C:\Users\merlp\AppData\Roaming\PHP Designer 2007
2010-04-08 20:18:46 ----D---- C:\Program Files\PHP Designer 2007 - Personal
2010-04-08 20:17:03 ----D---- C:\ProgramData\DVD Shrink
2010-04-08 20:15:14 ----D---- C:\Users\merlp\AppData\Roaming\Vso
2010-04-08 20:13:52 ----HD---- C:\Program Files\CanonBJ
2010-04-08 20:13:43 ----D---- C:\Program Files\Canon
2010-04-08 20:13:22 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-04-08 19:55:39 ----D---- C:\ProgramData\ATI
2010-04-08 19:42:55 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-04-08 19:41:57 ----SHD---- C:\Windows\Installer
2010-04-08 19:41:53 ----D---- C:\Program Files\ATI Technologies
2010-04-08 19:41:51 ----D---- C:\Program Files\ATI
2010-04-08 19:34:58 ----D---- C:\Windows\Minidump
2010-04-08 19:12:11 ----D---- C:\Users\merlp\AppData\Roaming\Thunderbird
2010-04-08 19:06:38 ----N---- C:\Windows\system32\MpSigStub.exe
2010-04-08 19:05:38 ----D---- C:\Users\merlp\AppData\Roaming\Leadertech
2010-04-08 19:05:38 ----D---- C:\Users\merlp\AppData\Roaming\Imagenomic
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\ESET
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\DAEMON Tools Lite
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\DAEMON Tools
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\CyberLink
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\CD-LabelPrint
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\Auslogics
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\atitray
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\ATI
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\Ahead
2010-04-08 19:05:36 ----D---- C:\Users\merlp\AppData\Roaming\AdobeUM
2010-04-08 18:55:01 ----D---- C:\Users\merlp\AppData\Roaming\Macromedia
2010-04-08 18:55:01 ----D---- C:\Users\merlp\AppData\Roaming\Adobe
2010-04-08 18:55:00 ----D---- C:\Windows\system32\Macromed
2010-04-08 18:51:49 ----D---- C:\Users\merlp\AppData\Roaming\Mozilla
2010-04-08 18:49:39 ----D---- C:\Program Files\Adobe
2010-04-08 18:46:56 ----D---- C:\Windows\system32\RTCOM
2010-04-08 18:46:56 ----D---- C:\Program Files\Realtek
2010-04-08 18:43:12 ----A---- C:\Windows\system32\XCEEDZIP.DLL
2010-04-08 18:43:12 ----A---- C:\Windows\system32\XceedCry.dll
2010-04-08 18:43:11 ----D---- C:\Program Files\Driver Magician
2010-04-08 18:41:33 ----D---- C:\Program Files\totalcmd
2010-04-08 18:39:37 ----D---- C:\Users\merlp\AppData\Roaming\GHISLER
2010-04-08 18:37:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-08 18:32:58 ----D---- C:\Users\merlp\AppData\Roaming\Identities
2010-04-08 18:32:40 ----D---- C:\Users\merlp\AppData\Roaming\Media Center Programs
2010-04-08 18:32:39 ----SD---- C:\Users\merlp\AppData\Roaming\Microsoft
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\ablony
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\Plocha
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\Oblben poloky
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\Nabdka Start
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\Dokumenty
2010-04-08 18:31:24 ----SHD---- C:\ProgramData\Data aplikac
2010-04-08 15:34:53 ----D---- C:\Windows\Panther
2010-04-08 14:38:36 ----D---- C:\Windows\SoftwareDistribution
2010-04-08 14:35:53 ----D---- C:\Windows\Prefetch

======List of files/folders modified in the last 1 months======

2010-04-30 11:14:18 ----D---- C:\Windows\system32\config
2010-04-30 11:12:38 ----RD---- C:\Program Files
2010-04-30 11:09:52 ----D---- C:\Windows
2010-04-30 11:07:23 ----D---- C:\Windows\System32
2010-04-30 11:07:22 ----D---- C:\Windows\inf
2010-04-30 10:36:42 ----D---- C:\Windows\system32\catroot2
2010-04-29 20:37:11 ----SHD---- C:\System Volume Information
2010-04-29 19:40:04 ----D---- C:\Windows\system32\drivers
2010-04-29 19:36:36 ----A---- C:\Windows\system.ini
2010-04-29 19:35:19 ----D---- C:\Boot
2010-04-29 19:33:27 ----D---- C:\Windows\AppPatch
2010-04-29 19:33:27 ----D---- C:\Program Files\Common Files
2010-04-29 17:36:14 ----D---- C:\Windows\Branding
2010-04-29 17:28:58 ----D---- C:\Windows\system32\wfp
2010-04-29 17:28:57 ----D---- C:\Windows\system32\wbem
2010-04-29 17:28:56 ----D---- C:\Windows\registration
2010-04-29 16:35:16 ----D---- C:\Windows\winsxs
2010-04-29 08:07:00 ----D---- C:\Windows\system32\DriverStore
2010-04-29 08:06:59 ----D---- C:\Windows\system32\CodeIntegrity
2010-04-28 11:54:02 ----D---- C:\Windows\system32\catroot
2010-04-27 16:01:11 ----D---- C:\Config.Msi
2010-04-24 08:17:17 ----D---- C:\Windows\system32\NDF
2010-04-24 08:16:09 ----D---- C:\Windows\IME
2010-04-23 23:45:55 ----D---- C:\Windows\Globalization
2010-04-23 21:16:57 ----D---- C:\ProgramData
2010-04-23 18:44:44 ----D---- C:\Windows\LiveKernelReports
2010-04-21 20:42:48 ----D---- C:\Program Files\Common Files\microsoft shared
2010-04-20 17:14:04 ----D---- C:\Windows\Tasks
2010-04-19 13:55:03 ----SD---- C:\ProgramData\Microsoft
2010-04-19 13:10:59 ----D---- C:\Windows\system32\LogFiles
2010-04-19 13:00:20 ----RSD---- C:\Windows\assembly
2010-04-19 13:00:18 ----D---- C:\Windows\Microsoft.NET
2010-04-19 12:59:49 ----D---- C:\Windows\Logs
2010-04-13 20:30:50 ----D---- C:\Windows\debug
2010-04-10 18:03:23 ----D---- C:\Windows\system32\wdi
2010-04-10 17:44:34 ----D---- C:\Windows\twain_32
2010-04-10 17:44:28 ----A---- C:\Windows\win.ini
2010-04-10 12:55:59 ----D---- C:\Windows\system32\oobe
2010-04-09 20:38:25 ----D---- C:\Program Files\Internet Explorer
2010-04-09 19:22:45 ----D---- C:\Windows\system32\Tasks
2010-04-09 19:05:17 ----D---- C:\Windows\rescache
2010-04-09 17:53:19 ----D---- C:\Windows\system32\cs-CZ
2010-04-09 17:52:16 ----D---- C:\Windows\ehome
2010-04-09 17:00:17 ----RSD---- C:\Windows\Fonts
2010-04-09 16:59:34 ----D---- C:\Windows\ShellNew
2010-04-09 16:09:05 ----D---- C:\Windows\Cursors
2010-04-09 14:50:51 ----D---- C:\Windows\system32\Boot
2010-04-09 14:50:51 ----D---- C:\Program Files\Windows Media Player
2010-04-09 14:42:21 ----D---- C:\Windows\Downloaded Program Files
2010-04-08 18:45:07 ----D---- C:\Windows\system32\restore
2010-04-08 18:32:48 ----D---- C:\Windows\system32\Recovery
2010-04-08 18:32:48 ----D---- C:\Recovery
2010-04-08 18:32:38 ----RD---- C:\Users
2010-04-08 18:31:24 ----D---- C:\Program Files\Windows NT
2010-04-08 15:34:41 ----RASH---- C:\BOOTSECT.BAK
2010-04-08 15:34:25 ----D---- C:\Windows\Setup
2010-04-08 14:38:43 ----D---- C:\Windows\system32\sysprep
2010-04-08 14:36:23 ----D---- C:\Windows\CSC
2010-04-03 11:55:56 ----D---- C:\BESLMZDY

