Prosím o kontrolu logu - nejde internet, antivir sw poškozen

Zpráva

paja · #1 Příspěvek od **paja** » 07 zář 2011 17:31

Dobrý den,

moc prosím o pomoc. Do notebooku se mi dostala potvora, která spolehlivě zastaví Norton i Avast pokud se pokusím o scan. Webové prohlížeče (Chrome i Firefox se nedostanou na internet, skype taky ne, přesto, že ping na servery jako idnes.cz normálně běží včetně překladu adres). V nouzovém režimu prohlížeče fungují. K zablokování internetu došlo poté co jsem spustil scan Avastem, který po chvilce běhu havaroval a pak hlásil, že je zastaven.
Hijack sice proběhne ale nevytvoří žádný log, při dalším pokusu o spuštění Hijack.exe to hlásí "Error executing program". Ve správci úloh windows běží proces s názvem 2715451111:411116894.exe, který má to všechno asi na svědomí, ale nelze ničím zastavit (ani správcem úloh z windows ani killboxem, jiné manažery se zase vůbec nespustí - ProcessManager a ProcessExplorer).

Zde je log z RSIT :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Pavel at 2011-09-07 17:54:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 112 GB (37%) free of 305 GB
Total RAM: 2043 MB (28% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-1085031214-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-854245398-1085031214-725345543-1003UA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\WINDOWS\tasks\SDMsgUpdate (TE).job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Pavel\Data aplikací\Mozilla\Firefox\Profiles\f4e8527q.default

prefs.js - "browser.startup.homepage" - "http://www.google.com"
prefs.js - "extensions.enabledItems" - "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1, 6, 2, 48, {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.4, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.1, toolbar@ask.com:3.9.1.14019, xmlfiller@software602.cz:3.16.2, {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.0.900, {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.0.900, bkmrksync@nokia.com:1.0.0.736, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://www.google.com/search?ie=UTF-8&o ... &gfns=1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"=C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn\
"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"=C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@bittorrent.com/BitTorrentDNA]
"Description"=Delivery Network Acceleration by BitTorrent™
"Path"=C:\Program Files\DNA\plugins\npbtdna.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]
"Description"=Garmin GPS Control for Firefox
"Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=602XML Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npbittorrent.dll
npdeployJava1.dll
NPOFF12.DLL
nppdf32.dll
np_gp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Pavel\Data aplikací\Mozilla\Firefox\Profiles\f4e8527q.default\extensions\
DTToolbar@toolbarnet.com
toolbar@ask.com
{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
{20a82645-c095-46ed-80e3-08825760534b}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{E2883E8F-472F-4fb0-9522-AC9BF37916A7}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll [2010-12-04 433080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL [2010-12-01 210360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-14 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-14 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-05-17 1490312]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-04-21 1000768]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-30 266240]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll [2010-12-04 433080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2008-07-09 94208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-07-09 1028096]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-12-08 13594624]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-12-08 86016]
"AzMixerSel"=C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe [2008-08-05 53248]
"ProfilerU"=C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [2007-07-12 233472]
"SaiMfd"=C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [2007-07-12 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-08-05 16862208]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-08-05 69632]
"EPSON Stylus DX4800 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE [2005-02-02 98304]
"DiscWizardMonitor.exe"=C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe [2007-09-10 1188152]
"AcronisTimounterMonitor"=C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe [2007-09-10 1962216]
"Acronis Scheduler2 Service"=C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe [2007-09-04 148760]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"DivX Download Manager"=C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]
"RCApp"=c:\Program Files\gigabyte\RCApp\U7000RCApp.exe [2010-01-26 634368]
"ChangeFilterMerit"=C:\Program Files\NewSoft\Presto! PVR\ChangeFilterMerit.exe [2007-06-08 51280]
"Presto! PVR Monitor"=C:\Program Files\NewSoft\Presto! PVR\Monitor.exe [2008-08-08 153424]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-05-17 395144]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"FUFAXSTM"=C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [2009-12-03 847872]
"EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2009-12-03 976320]
"MobileConnect"=C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2009-09-18 2412032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2009-12-07 323392]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-03-09 26100520]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"Google Update"=C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-08-02 136176]
"Epson Stylus Office BX620FWD(Síť)"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIGBU.EXE [2010-01-12 201216]
"FileHunter Check for updates"=C:\Documents and Settings\Pavel\Data aplikací\FileHunter\update.exe [2011-07-17 810096]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Documents and Settings\Pavel\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=181

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe"="C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe:*:Enabled:Microsoft Flight Simulator"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\wincmd\WINCMD32.EXE"="C:\wincmd\WINCMD32.EXE:*:Enabled:Windows Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Jalbum8.1\Jalbum.exe"="C:\Program Files\Jalbum8.1\Jalbum.exe:*:Enabled:Jalbum"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\setup\hpznui01.exe"="D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\Program Files\European Aeronautical Group\ToDc PILOT SEAGLE AIR B737\TODC PILOT.exe"="C:\Program Files\European Aeronautical Group\ToDc PILOT SEAGLE AIR B737\TODC PILOT.exe:*:Enabled:TODC PILOT"
"C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe"="C:\Program Files\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe:*:Enabled:EpsonNet Setup"
"C:\Program Files\Epson Software\Event Manager\EEventManager.exe"="C:\Program Files\Epson Software\Event Manager\EEventManager.exe:*:Enabled:EEventManager Application"
"C:\WINDOWS\twain_32\escndv\escndv.exe"="C:\WINDOWS\twain_32\escndv\escndv.exe:*:Enabled:EPSON Scan"
"C:\Program Files\Epson Software\Easy Photo Print\EPQuicker.exe"="C:\Program Files\Epson Software\Easy Photo Print\EPQuicker.exe:*:Enabled:Easy Photo Print"
"C:\Program Files\Epson Software\Easy Photo Print\DspReadMe.exe"="C:\Program Files\Epson Software\Easy Photo Print\DspReadMe.exe:*:Enabled:Easy Photo Print"
"C:\Documents and Settings\Pavel\Data aplikací\FileHunter\pumpa.exe"="C:\Documents and Settings\Pavel\Data aplikací\FileHunter\pumpa.exe:*:Disabled:pumpa"
"C:\Program Files\DivX\DivX Plus Player\DivX Plus Player.exe"="C:\Program Files\DivX\DivX Plus Player\DivX Plus Player.exe:*:Enabled:DivX Plus Player"
"C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe"="C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe:*:Enabled:Instalační program Google"
"C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\Pavel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe"="C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe:*:Enabled:Adobe Reader "
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe:*:Enabled:Adobe Reader and Acrobat Manager"
"C:\Program Files\McAfee Security Scan\2.0.181\mcuicnt.exe"="C:\Program Files\McAfee Security Scan\2.0.181\mcuicnt.exe:*:Disabled:McAfee HTML UI Container"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"
"C:\Program Files\Speed-O-Meter\netspeed.exe"="C:\Program Files\Speed-O-Meter\netspeed.exe:*:Enabled:netspeed"
"C:\Program Files\DivX\DivX Update\DivXUpdate.exe"="C:\Program Files\DivX\DivX Update\DivXUpdate.exe:*:Enabled:DivX Update"
"C:\Program Files\DAEMON Tools Lite\DTLite.exe"="C:\Program Files\DAEMON Tools Lite\DTLite.exe:*:Enabled:DAEMON Tools Lite"
"C:\Program Files\Epson Software\Event Manager\EProjManager.exe"="C:\Program Files\Epson Software\Event Manager\EProjManager.exe:*:Enabled:EProjManager Application"
"C:\Documents and Settings\Pavel\Data aplikací\FileHunter\update.exe"="C:\Documents and Settings\Pavel\Data aplikací\FileHunter\update.exe:*:Enabled:update"
"C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe:*:Enabled:Nokia Launch Application"
"C:\Program Files\Outlook Express\msimn.exe"="C:\Program Files\Outlook Express\msimn.exe:*:Enabled:Outlook Express"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe"="C:\Program Files\ESTsoft\ALUpdate\ALUpdate.exe:*:Disabled:ALTools Automatic Updater Program"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe:*:Enabled:ESET NOD32 Antivirus"
"C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SAG4ST.EXE"="C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SAG4ST.EXE:*:Enabled:Okno nastavení sledování sdílených tiskáren"
"C:\Program Files\Common Files\soft602\PrnPack.exe"="C:\Program Files\Common Files\soft602\PrnPack.exe:*:Enabled:PRINT PACK"
"C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe"="C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe:*:Enabled:eEBAgent"
"C:\Program Files\Common Files\Java\Java Update\jusched.exe"="C:\Program Files\Common Files\Java\Java Update\jusched.exe:*:Enabled:Java(TM) Update Scheduler"
"C:\Program Files\Norton Internet Security\Engine\18.5.0.125\hsplayer.exe"="C:\Program Files\Norton Internet Security\Engine\18.5.0.125\hsplayer.exe:*:Enabled:One Click Support Player"
"C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\2454B0AB\18.5.0.125\InstStub.exe"="C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\2454B0AB\18.5.0.125\InstStub.exe:*:Enabled:Norton Internet Security"
"C:\WINDOWS\system32\mstsc.exe"="C:\WINDOWS\system32\mstsc.exe:*:Enabled:Remote Desktop Connection"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"D:\setup\hpznui01.exe"="D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=Msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=L3codecp.acm
"MSVideo8"=VfWWDM32.dll
"vidc.3ivx"=3ivxVfWCodec.dll
"VIDC.AP41"=APmpg4v1.dll
"vidc.avrn"=AvidAVICodec.dll
"VIDC.mszh"=avimszh.dll
"vidc.zlib"=avizlib.dll
"vidc.div3"=DivXc32.dll
"vidc.div4"=DivXc32f.dll
"vidc.dvx4"=divx4.dll
"vidc.em2v"=ETXCodec.dll
"vidc.hfyu"=huffyuv.dll
"msacm.lameacm"=lameACM.acm
"msacm.lhacm"=lhacm.acm
"vidc.vp31"=vp31vfw.dll
"vidc.sjpg"=pmjpeg32.dll
"vidc.rud0"=rududu.dll
"vidc.tscc"=tsccvid.dll
"vidc.mkvc"=KMVIDC32.DLL
"vidc.vifp"=VFCodec.dll
"msacm.wrpr"=aviwrap.dll
"vidc.wrpr"=aviwrap.dll
"vidc.wnv1"=WNVPLAY1.DLL
"msacm.divxa32"=DivXa32.acm
"vidc.xvid"=xvidvfw.dll
"vidc.advs"=Dvc.dll
"vidc.aflc"=flccodec32.dll
"vidc.afli"=flccodec32.dll
"vidc.aasc"=Aasc32.dll
"vidc.asv1"=asusasv1.dll
"vidc.asv2"=asusasv2.dll
"vidc.vcr1"=ativcr1.dll
"vidc.vcr2"=ativcr2.dll
"vidc.yv12"=DivX.dll
"vidc.mwv1"=icmw_32.dll
"vidc.bt20"=btvvc32.drv
"vidc.y41p"=btvvc32.drv
"msacm.pcdv"=pcdv.acm
"vidc.cdvc"=CSCCDVC.DLL
"vidc.ddvc"=CSCdvsd.DLL
"vidc.dps0"=DpsAviCC.dll
"MSVideo"=DPSVidCap.drv
"vidc.frwu"=frwu.dll
"vidc.frwd"=frwd.dll
"vidc.frwt"=frwt.dll
"vidc.glzw"=GLZW.dll
"vidc.gpeg"=GPEG.dll
"msacm.imc"=IMC32.ACM
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.i263"=i263_32.drv
"vidc.iv41"=ir41_32.dll
"vidc.iv50"=ir50_32.dll
"vidc.ir21"=IR21_R.DLL
"vidc.rt21"=IR21_R.DLL
"vidc.lead"=LCODCCMP.DLL
"vidc.dvsd"=MCDVD_32.DLL
"vidc.dcmj"=MCMJPG32.DLL
"vidc.dv25"=DigiVCap.dll
"vidc.dv50"=DigiVCap.dll
"vidc.msmc"=DigiVCap.dll
"vidc.mmjp"=DigiVCap.dll
"vidc.mmes"=DigiVCap.dll
"vidc.mpg4"=Mpg4c32.dll
"vidc.mp42"=Mpg4c32.dll
"vidc.mp43"=Mpg4c32.dll
"vidc.vixl"=Miroxl32.dll
"vidc.mjpg"=m3jpeg32.dll
"vidc.dmb1"=m3jpeg32.dll
"vidc.mj2c"=M3JP2K32.dll
"vidc.tvmj"=MMTVMJ.dll
"vidc.fljp"=MMTVMJ.dll
"vidc.nt00"=NTCodec.dll
"msacm.vorbis"=vorbis.acm
"vidc.pdvc"=idvcodec.dll
"vidc.ipdv"=idvcodec.dll
"vidc.pvw2"=pvwv220.dll
"vidc.pimj"=pvljpg20.dll

======List of files/folders created in the last 1 month======

2011-09-07 17:54:30 ----D---- C:\rsit
2011-09-07 14:36:31 ----ASH---- C:\hiberfil.sys
2011-09-07 12:05:00 ----D---- C:\!KillBox
2011-09-07 10:49:43 ----D---- C:\Program Files\Trend Micro
2011-09-07 10:44:30 ----D---- C:\Program Files\HijackThis
2011-09-07 10:24:24 ----A---- C:\WINDOWS\system32\drivers\Lbd.sys
2011-09-07 10:24:14 ----D---- C:\Program Files\Lavasoft
2011-09-07 10:24:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2011-09-07 10:10:25 ----A---- C:\WINDOWS\wininit.ini
2011-09-07 09:37:21 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-09-07 09:37:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-07 02:56:15 ----D---- C:\Avenger
2011-09-07 02:56:14 ----A---- C:\avenger.txt
2011-09-07 02:16:10 ----N---- C:\WINDOWS\system32\6.tmp
2011-09-04 01:54:53 ----A---- C:\WINDOWS\system32\wsock32_orig_z_CD.dll
2011-09-04 01:54:53 ----A---- C:\WINDOWS\system32\wsock32.dll
2011-09-03 22:49:27 ----D---- C:\Program Files\CCleaner
2011-09-03 21:34:45 ----D---- C:\Program Files\Symantec
2011-09-03 21:34:45 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-09-03 21:34:45 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2011-09-03 21:34:45 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2011-09-03 21:34:06 ----D---- C:\WINDOWS\system32\drivers\NIS
2011-09-03 21:34:03 ----D---- C:\Program Files\Norton Internet Security
2011-09-03 21:30:37 ----D---- C:\Program Files\NortonInstaller
2011-09-03 19:41:34 ----D---- C:\Program Files\Sophos
2011-09-03 17:18:23 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2011-09-03 16:49:24 ----D---- C:\WINDOWS\pss
2011-09-03 15:51:10 ----ASH---- C:\pagefile.sys
2011-09-03 15:09:34 ----D---- C:\WINDOWS\tmp
2011-09-03 14:52:20 ----SHD---- C:\WINDOWS\CSC
2011-09-03 11:24:35 ----A---- C:\i8042prt.sys
2011-09-03 11:20:45 ----A---- C:\WINDOWS\system32\i8042prt.sys
2011-09-02 11:41:25 ----A---- C:\WINDOWS\trz5A.tmp
2011-09-02 11:21:52 ----D---- C:\Program Files\AVAST Software
2011-09-01 23:31:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-08-27 21:52:01 ----D---- C:\Documents and Settings\Pavel\Data aplikací\Tific
2011-08-27 21:47:23 ----D---- C:\Program Files\Windows Sidebar
2011-08-27 21:20:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-08-27 21:01:47 ----D---- C:\Program Files\Eset
2011-08-22 20:57:12 ----A---- C:\WINDOWS\ntbtlog.txt
2011-08-22 09:21:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-22 09:20:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-22 09:19:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-22 09:19:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-22 09:19:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-19 19:09:21 ----A---- C:\WINDOWS\EEventManager.INI
2011-08-17 22:50:12 ----D---- C:\Documents and Settings\Pavel\Data aplikací\FileHunter
2011-08-15 00:54:43 ----A---- C:\WINDOWS\system32\EEBUtil.dll
2011-08-15 00:54:43 ----A---- C:\WINDOWS\system32\EEBSDKIF.dll
2011-08-15 00:54:43 ----A---- C:\WINDOWS\system32\EEBDSCVR.dll
2011-08-15 00:54:43 ----A---- C:\WINDOWS\system32\EEBAPI.dll
2011-08-15 00:54:43 ----A---- C:\WINDOWS\system32\EBAPI.dll
2011-08-15 00:54:21 ----A---- C:\WINDOWS\system32\E_FLBGBU.DLL
2011-08-15 00:54:21 ----A---- C:\WINDOWS\system32\E_FD4BGBU.DLL
2011-08-15 00:36:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\UDL
2011-08-15 00:31:32 ----D---- C:\Program Files\Epson Software
2011-08-15 00:30:52 ----A---- C:\WINDOWS\system32\enspres.dll
2011-08-15 00:30:52 ----A---- C:\WINDOWS\system32\ensppui.dll
2011-08-15 00:30:52 ----A---- C:\WINDOWS\system32\ensppmon.dll
2011-08-15 00:30:51 ----A---- C:\WINDOWS\system32\enpres.dll
2011-08-15 00:30:51 ----A---- C:\WINDOWS\system32\enppui.dll
2011-08-15 00:30:51 ----A---- C:\WINDOWS\system32\enppmon.dll
2011-08-15 00:30:33 ----D---- C:\Program Files\Common Files\EPSON
2011-08-15 00:29:38 ----D---- C:\Program Files\EpsonNet
2011-08-15 00:28:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\EPSON
2011-08-15 00:27:42 ----A---- C:\WINDOWS\system32\eswiaud.dll
2011-08-15 00:27:42 ----A---- C:\WINDOWS\system32\esdevapp.exe
2011-08-15 00:27:42 ----A---- C:\WINDOWS\system32\escdev.dll

======List of files/folders modified in the last 1 month======

2011-09-07 17:50:21 ----A---- C:\WINDOWS\wincmd.ini
2011-09-07 17:48:24 ----D---- C:\Documents and Settings\Pavel\Data aplikací\DNA
2011-09-07 17:43:52 ----D---- C:\WINDOWS\Prefetch
2011-09-07 17:39:18 ----D---- C:\Documents and Settings\Pavel\Data aplikací\Skype
2011-09-07 14:39:14 ----D---- C:\WINDOWS\Temp
2011-09-07 14:39:14 ----D---- C:\WINDOWS\system32\ias
2011-09-07 14:39:11 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2011-09-07 14:38:03 ----D---- C:\Program Files\DNA
2011-09-07 14:36:46 ----D---- C:\WINDOWS
2011-09-07 12:13:44 ----SHD---- C:\RECYCLER
2011-09-07 11:54:20 ----D---- C:\wincmd
2011-09-07 11:45:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-07 11:13:20 ----D---- C:\WINDOWS\system32\drivers
2011-09-07 10:49:50 ----SHD---- C:\WINDOWS\Installer
2011-09-07 10:49:45 ----HD---- C:\Config.Msi
2011-09-07 10:49:43 ----RD---- C:\Program Files
2011-09-07 10:24:49 ----SD---- C:\WINDOWS\Tasks
2011-09-07 10:24:38 ----HD---- C:\WINDOWS\inf
2011-09-07 10:24:24 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-09-07 10:24:17 ----D---- C:\WINDOWS\WinSxS
2011-09-07 10:17:43 ----D---- C:\Install
2011-09-07 10:12:04 ----D---- C:\WINDOWS\system32
2011-09-07 10:02:52 ----RASH---- C:\boot.ini
2011-09-07 00:10:42 ----D---- C:\Program Files\Mozilla Firefox
2011-09-06 09:03:41 ----D---- C:\ 1Pavel
2011-09-04 01:48:39 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-09-04 00:08:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-09-03 23:54:41 ----D---- C:\WINDOWS\system32\config
2011-09-03 23:54:22 ----D---- C:\WINDOWS\system32\wbem
2011-09-03 23:54:21 ----D---- C:\WINDOWS\Registration
2011-09-03 23:51:30 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-03 21:34:50 ----SHD---- C:\System Volume Information
2011-09-03 21:34:45 ----D---- C:\Program Files\Common Files
2011-09-03 21:34:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-09-03 17:52:46 ----A---- C:\WINDOWS\win.ini
2011-09-03 17:52:46 ----A---- C:\WINDOWS\system.ini
2011-09-03 17:49:34 ----D---- C:\Documents and Settings\Pavel\Data aplikací\skypePM
2011-09-03 14:39:47 ----D---- C:\WINDOWS\system32\Restore
2011-09-03 14:39:40 ----D---- C:\Documents and Settings
2011-09-02 11:41:06 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-02 02:57:18 ----D---- C:\WINDOWS\security
2011-09-01 23:42:36 ----D---- C:\WINDOWS\Minidump
2011-09-01 23:37:32 ----A---- C:\WINDOWS\DUMP499b.tmp
2011-09-01 23:26:45 ----D---- C:\swinstall
2011-08-30 11:20:32 ----D---- C:\Posta2009
2011-08-28 03:28:22 ----D---- C:\WINDOWS\network diagnostic
2011-08-27 22:02:38 ----A---- C:\Log.txt
2011-08-27 21:44:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-08-25 08:15:28 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-25 08:05:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2011-08-24 21:24:15 ----D---- C:\Filmy
2011-08-24 16:55:28 ----D---- C:\Documents and Settings\Pavel\Data aplikací\BitTorrent
2011-08-23 08:30:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-22 09:54:07 ----RSD---- C:\WINDOWS\assembly
2011-08-22 09:53:38 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-22 09:21:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-22 09:20:35 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-22 09:20:17 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-22 09:20:17 ----D---- C:\Program Files\Internet Explorer
2011-08-22 09:19:35 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-22 00:14:58 ----RSD---- C:\WINDOWS\Fonts
2011-08-22 00:14:48 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-22 00:14:09 ----D---- C:\Program Files\Microsoft Works
2011-08-19 17:51:08 ----D---- C:\1Bety
2011-08-17 13:21:50 ----D---- C:\Documents and Settings\Pavel\Data aplikací\EPSON
2011-08-15 00:33:15 ----D---- C:\Program Files\EPSON

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2011-08-18 64512]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2009-03-24 120992]
R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\NIS\1205000.07D\SYMDS.SYS [2010-10-21 340016]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\NIS\1205000.07D\SYMEFA.SYS [2010-11-18 652336]
R0 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-07-09 220640]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2009-03-24 400864]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 BHDrvx86;BHDrvx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20101123.003\BHDrvx86.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-04-30 218688]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\WINDOWS\system32\drivers\NIS\1205000.07D\SRTSPX.SYS [2010-11-23 50168]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\NIS\1205000.07D\Ironx86.SYS [2010-11-16 136312]
R1 SYMTDI;Symantec Network Dispatch Driver; C:\WINDOWS\system32\drivers\NIS\1205000.07D\SYMTDI.SYS [2010-12-01 368248]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-07-09 12672]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-15 34064]
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2009-03-24 32768]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2008-07-09 146944]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-03-19 175104]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-07-09 539072]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-07-09 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-07-09 876384]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2008-07-09 985472]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2008-07-09 210560]
R3 IDSxpx86;IDSxpx86; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20101201.001\IDSxpx86.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-08-05 4739072]
R3 JMCR;JMCR; C:\WINDOWS\system32\DRIVERS\jmcr.sys [2008-04-08 81296]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-09-25 3634688]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-12-08 6179744]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2008-07-09 39072]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-01-26 47360]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 SaiMini;SaiMini; C:\WINDOWS\system32\DRIVERS\SaiMini.sys [2007-07-13 14080]
R3 SaiNtBus;SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [2007-07-13 35072]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [2008-07-09 1769984]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2008-07-09 731264]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-07-09 149123]
S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2008-07-09 55352]
S3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2008-07-09 37280]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-07-09 67960]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 e77edaa1;e77edaa1; C:\WINDOWS\2715451111:411116894.exe []
S3 grmnusb;Garmin USB Driver; C:\WINDOWS\system32\drivers\grmnusb.sys [2009-04-17 9344]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2009-09-10 102528]
S3 hwusbdev;Huawei DataCard USB PNP Device; C:\WINDOWS\system32\DRIVERS\ewusbdev.sys [2009-10-12 100736]
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\6.tmp []
S3 mod7700;DiBcom based TV tuner device; C:\WINDOWS\system32\DRIVERS\mod7700.sys [2007-07-13 543232]
S3 MODRC;DiBcom Infrared Receiver; C:\WINDOWS\system32\DRIVERS\modrc.sys [2007-07-11 13824]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NAVENG;NAVENG; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20101201.025\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\Documents and Settings\All Users\Data aplikací\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20101201.025\NAVEX15.SYS []
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PCASp50.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rkhdrv40;Rootkit Unhooker Driver; C:\WINDOWS\system32\drivers\rkhdrv40.sys []
S3 SaiH0BAC;SaiH0BAC; C:\WINDOWS\system32\DRIVERS\SaiH0BAC.sys [2007-07-13 135168]
S3 SaiH0C2D;SaiH0C2D; C:\WINDOWS\system32\DRIVERS\SaiH0C2D.sys [2007-07-13 135168]
S3 sdbus;sdbus; C:\WINDOWS\System32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 Ser2pl;ATEN USB to Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2003-07-16 43264]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SRTSP;Symantec Real Time Storage Protection; C:\WINDOWS\system32\drivers\NIS\1205000.07D\SRTSP.SYS [2010-11-23 509560]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tj2knd5;Terayon Cable Modem (NDIS); C:\WINDOWS\system32\DRIVERS\tj2knd5.sys [2002-10-14 17616]
S3 tj2kunic;Terayon Cable Modem (WDM); C:\WINDOWS\system32\DRIVERS\tj2kunic.sys [2002-10-14 69680]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service; C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe [2007-09-24 566560]
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe [2007-09-04 410904]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-04-01 273256]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-12-08 168004]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 630784]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2011-08-18 2151640]
S2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
S2 NIS;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe [2010-11-24 130000]
S2 VMCService;Vodafone Mobile Connect Service; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2009-09-18 10752]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2011-01-17 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 07 zář 2011 17:46

Zdravím!
1. Odinstalujte AskBar.
2. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

paja · #3 Příspěvek od **paja** » 07 zář 2011 18:23

Sorry, že mi to tak trvá...

AskBar jsem od instaloval a pro jistotu i Norton, abych měl jistotu, že nebude překážet.

ComboFix mi ale hlásí, že Norton má zapnuté bezp. štíty, ten je ale odinstalován a Notebook restartován...

Nicméně pustil jsem to dál ComboFix hlásí, že jsem napaden Rootkitem ZeroAcces , a požaduje restart počítače, protože došlo k jeho aktivitě - dal jsem souhlas - restart asi vytuhl, ještě chvíli počkám jestli se to nezvetí pak to resetnu....

#4 Příspěvek od **Rudy** » 07 zář 2011 19:06

Jj. V případě, že byste nenašel log (měl by být v C:\combofix.txt), spusťte znovu, ale v nouz. režimu.

paja · #5 Příspěvek od **paja** » 07 zář 2011 19:46

Tak nakonec to úspěšně proběhlo, prvnímu restartu jsem nakonec musel pomoct resetem, po něm Combofix už normálně pokračoval bez problémů. Běželo to přes 20 min. - asi se u mně Combofix dost nadřel

Log je moc dlouhý, takže ho musím odeslat na třikrát.

1část:

ComboFix 11-09-07.04 - Pavel 07.09.2011 19:57:42.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2043.1677 [GMT 2:00]
Spuštěný z: c:\documents and settings\Pavel\Plocha\ComboFix.exe
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Pavel\System
c:\documents and settings\Pavel\System\win_qs8.jqx
c:\documents and settings\Pavel\WINDOWS
c:\program files\messenger\msmsgsin.exe
c:\windows\$NtUninstallKB49696$\3274328752
c:\windows\$NtUninstallKB49696$\3883850401\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
c:\windows\$NtUninstallKB49696$\3883850401\click.tlb
c:\windows\$NtUninstallKB49696$\3883850401\L\fimuayyy
c:\windows\$NtUninstallKB49696$\3883850401\loader.tlb
c:\windows\$NtUninstallKB49696$\3883850401\U\@00000001
c:\windows\$NtUninstallKB49696$\3883850401\U\@000000c0
c:\windows\$NtUninstallKB49696$\3883850401\U\@000000cb
c:\windows\$NtUninstallKB49696$\3883850401\U\@000000cf
c:\windows\$NtUninstallKB49696$\3883850401\U\@80000000
c:\windows\$NtUninstallKB49696$\3883850401\U\@800000c0
c:\windows\$NtUninstallKB49696$\3883850401\U\@800000cb
c:\windows\$NtUninstallKB49696$\3883850401\U\@800000cf
c:\windows\d.ini
c:\windows\ehome\medctrro.exe
c:\windows\iun6002.exe
c:\windows\system\MCPLCD36.FON
c:\windows\system\MHELVETN.FON
c:\windows\system\MCHICAGO.FON
c:\windows\system\MPALTINO.FON
c:\windows\system\OCRBBOLD.FON
c:\windows\system32\c_42322.nls
c:\windows\system32\drivers\npf.sys
c:\windows\system32\E_FBCBADE.DLL
c:\windows\system32\Packet.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll
c:\windows\$NtUninstallKB49696$ . . . . nemohl být smazán
.
Nakažená kopie c:\windows\system32\drivers\cdrom.sys byla nalezena a vyléčena.
Obnovena kopie z - The cat found it

Nakažená kopie c:\windows\system32\wuauclt.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\system32\dllcache\wuauclt.exe
.
Nakažená kopie c:\program files\Common Files\soft602\602updsvc\602updsvc.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072265.exe
.
Nakažená kopie c:\program files\ABBYY FineReader 9.0\NetworkLicenseServer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072264.exe
.
Nakažená kopie c:\program files\Common Files\Seagate\Schedule2\schedul2.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072263.exe
.
Nakažená kopie c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072267.exe
.
Nakažená kopie c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072266.exe
.
Nakažená kopie c:\program files\Java\jre6\bin\jqs.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072261.exe
.
Nakažená kopie c:\program files\CDBurnerXP\NMSAccessU.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072260.exe
.
Nakažená kopie c:\windows\system32\nvsvc32.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072259.exe
.
Nakažená kopie c:\program files\PC Connectivity Solution\ServiceLayer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072257.exe
.
Nakažená kopie c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072258.exe
.
Nakažená kopie c:\program files\Common Files\soft602\602updsvc\602updsvc.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072265.exe
Nakažená kopie c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072266.exe
Nakažená kopie c:\windows\system32\nvsvc32.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072259.exe
Nakažená kopie c:\program files\PC Connectivity Solution\ServiceLayer.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072257.exe
Nakažená kopie c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP711\A0072258.exe
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_e77edaa1
-------\Service_npf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-07 do 2011-09-07 )))))))))))))))))))))))))))))))
.
.
2011-09-07 15:54 . 2011-09-07 15:54 -------- d-----w- C:\rsit
2011-09-07 10:05 . 2011-09-07 10:05 -------- d-----w- C:\!KillBox
2011-09-07 08:49 . 2011-09-07 08:49 388096 ----a-r- c:\documents and settings\Pavel\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-09-07 08:49 . 2011-09-07 08:49 -------- d-----w- c:\program files\Trend Micro
2011-09-07 08:24 . 2011-09-07 08:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Lavasoft
2011-09-07 07:37 . 2011-09-07 17:11 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-09-07 07:37 . 2011-09-07 17:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-07 00:16 . 2011-05-12 12:03 6144 ------w- c:\windows\system32\6.tmp
2011-09-03 23:54 . 2008-04-14 03:22 24576 ----a-w- c:\windows\system32\wsock32.dll
2011-09-03 23:54 . 2001-10-24 10:25 23552 ----a-w- c:\windows\system32\wsock32_orig_z_CD.dll
2011-09-03 21:54 . 2011-09-03 21:54 -------- d-----w- c:\windows\system32\wbem\Repository
2011-09-03 20:49 . 2011-09-03 20:49 -------- d-----w- c:\program files\CCleaner
2011-09-03 17:41 . 2011-09-07 17:08 -------- d-----w- c:\program files\Sophos
2011-09-03 15:18 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2011-09-03 13:09 . 2011-09-03 13:22 -------- d-----w- c:\windows\tmp
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2011-09-03 09:24 . 2002-09-20 17:35 50688 ----a-w- C:\i8042prt.sys
2011-09-03 09:20 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\i8042prt.sys
2011-09-02 09:41 . 2011-09-02 09:41 816 ----a-w- c:\windows\trz5A.tmp
2011-09-02 09:21 . 2011-09-02 09:21 -------- d-----w- c:\program files\AVAST Software
2011-09-01 21:31 . 2011-09-03 19:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\Tific
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Local Settings\Data aplikací\Symantec
2011-08-27 19:47 . 2011-08-27 19:47 -------- d-----w- c:\program files\Windows Sidebar
2011-08-27 19:20 . 2011-08-27 19:20 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ESET
2011-08-27 19:01 . 2011-08-27 19:23 -------- d-----w- c:\program files\Eset
2011-08-22 07:28 . 2011-09-02 09:52 43408 --sha-w- c:\windows\system32\c_42322.nl_
2011-08-22 07:16 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2011-08-22 07:16 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2011-08-19 04:24 . 2011-08-19 04:24 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\McAfee
2011-08-17 20:50 . 2011-08-17 20:50 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\FileHunter
2011-08-14 22:54 . 2007-09-07 15:33 135168 ----a-w- c:\windows\system32\EEBAPI.dll
2011-08-14 22:54 . 2007-03-28 16:26 65536 ----a-w- c:\windows\system32\EEBUtil.dll
2011-08-14 22:54 . 2006-12-19 16:31 110592 ----a-w- c:\windows\system32\EEBDSCVR.dll
2011-08-14 22:29 . 2011-08-14 22:30 -------- d-----w- c:\program files\EpsonNet
2011-08-14 22:28 . 2011-08-14 23:02 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EPSON
2011-08-14 22:27 . 2009-09-16 22:00 342016 ----a-w- c:\windows\system32\eswiaud.dll
2011-08-14 22:27 . 2009-04-30 22:00 15872 ----a-w- c:\windows\system32\escdev.dll
2011-08-14 22:27 . 2009-04-30 22:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-01 21:37 . 2008-09-21 01:49 90112 ----a-w- c:\windows\DUMP499b.tmp
2011-08-02 15:27 . 2011-06-03 01:51 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2002-08-29 01:59 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2001-10-25 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2008-12-30 00:08 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2002-09-20 18:05 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2002-09-20 18:05 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2008-12-30 01:39 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2001-10-25 12:00 17408 ------w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2008-12-30 01:39 389120 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2002-09-20 18:05 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-08-29 06:29 . 2011-03-25 21:35 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
.
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
.
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
.
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
.
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
.
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
.
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
.
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
.
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
.
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
.
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2004-08-17 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll
.
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
[-] 2004-08-17 14:49 . B44F68274AB7B8A54E9AD74AFF0EFAAC . 806912 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
.
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
.
[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2004-08-17 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
.
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
.
[-] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB2347290$\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2004-08-17 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
.
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2010-08-23 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\$NtUninstallKB2296011$\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . D7B7AE36A2EBA312AC4B53862019B3F5 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2004-08-17 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-17 . F76B3003366A205E05AFC0D034C7D3E9 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2002-09-20 . D12F83B2037A01BB97A97F3EA54DD71F . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
[-] 2001-10-25 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
.
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
.
[-] 2008-07-07 20:32 . 398314DF0B21338C4996B469101750D1 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:19 . 3440C414044935B124B5821C0994B37F . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-17 14:49 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll
.
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
.
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-17 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
.
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2004-08-17 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
.
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
.
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\mshtml.dll
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2011-07-22 . 985518A3361129FD7CACBB9611E13504 . 3615744 . . [7.00.6000.21305] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtml.dll
[-] 2011-04-25 . D6546C0AE29DF915DD99BB9193229D97 . 3608576 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\mshtml.dll
[-] 2011-04-25 . DEE9BFCEF3C4807F79FE2498E34EC4F0 . 3610624 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mshtml.dll
[-] 2011-02-17 . 459804329509317CB91E2424DCE1316A . 3607040 . . [7.00.6000.17097] . . c:\windows\ie7updates\KB2530548-IE7\mshtml.dll
[-] 2011-02-17 . A89508E7A9396EA9B82AD8D0E5C248C5 . 3609600 . . [7.00.6000.21299] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mshtml.dll
[-] 2010-11-06 . 3AC8AB55B47DB51B07454A1D2246E7F7 . 3604480 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\mshtml.dll
[-] 2010-11-06 . 839FFC69550E07EF43A94C932E49E520 . 3607040 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mshtml.dll
[-] 2010-09-09 . CA15720E7B3B8FD2E7F12C8A635A6308 . 3601920 . . [7.00.6000.17092] . . c:\windows\ie7updates\KB2416400-IE7\mshtml.dll
[-] 2010-09-09 . C5BC248010B1B6346314AE420D7ED454 . 3605504 . . [7.00.6000.21294] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mshtml.dll
[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\mshtml.dll
[-] 2010-06-24 . 8A1385BF9CD3B394F266C8C5ACFEC5E0 . 3603968 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtml.dll
[-] 2010-05-04 . 313C9A62085098043B441652B7491665 . 3600384 . . [7.00.6000.17063] . . c:\windows\ie7updates\KB2183461-IE7\mshtml.dll
[-] 2010-05-04 . A85A3A10CA88BD7861D1859183559ED5 . 3603456 . . [7.00.6000.21264] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\mshtml.dll
[-] 2010-03-11 . 233FE995790E850D3D4B1AAD02CE3220 . 3599872 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\mshtml.dll
[-] 2010-03-11 . C8969C224E767DFFF5F2E2607E484810 . 3602944 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
[-] 2010-01-05 . D563E48DB8B998E44400C9C9BE2D6ECD . 3599360 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\mshtml.dll
[-] 2010-01-05 . 5DA02EE50F8FC661964857F21A2AE606 . 3602944 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtml.dll
[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtml.dll
[-] 2009-10-21 . 80B95B28B9E587AFFC7EB33DCF9F9E1F . 3598336 . . [7.00.6000.16939] . . c:\windows\ie7updates\KB976325-IE7\mshtml.dll
[-] 2009-10-21 . 442FC9D0BC1F64557B5106E0E7293B20 . 3602432 . . [7.00.6000.21142] . . c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . 7CE28B79DBBCECFD442F85000292DFB9 . 3598336 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 52809FB433B19A60DB827C690447AD6C . 3600384 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2009-07-19 . 6EDDB6AE1F6B387EEA08F013A2FD6463 . 3597824 . . [7.00.6000.16890] . . c:\windows\ie7updates\KB974455-IE7\mshtml.dll
[-] 2009-07-19 . 347FBA88D4C2C0D4FD4AA2EDCD300270 . 3600384 . . [7.00.6000.21089] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
[-] 2009-04-29 . 8B27B2CC3C6376C67586E3A0DD7732CC . 3596288 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\mshtml.dll
[-] 2009-04-29 . 46C3D119A366232907CD32A609A276B2 . 3598336 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-02-21 . 920B2B7C54C6B102A98EE54C56134CEC . 3596800 . . [7.00.6000.21015] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . DB1BCEDF3C640170A9E78E199516A8C9 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-16 . 95E1214DBB029B3D37076999B53407D6 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . D049549814B44670C88C0C3777D24FFA . 3596288 . . [7.00.6000.20996] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . A3F482D8B827DDFBDA3F47B922DF5020 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . E32432E44F926075122F5B17E224ABF5 . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-12-12 . 75D4E9856CAC441006C11AB529C1C288 . 3081216 . . [6.00.2900.3492] . . c:\windows\ie7\mshtml.dll
[-] 2008-12-12 . 74EB9C0ECFBF18B78E2A1EA73AADB13C . 3088384 . . [6.00.2900.3492] . . c:\windows\$hf_mig$\KB960714\SP2QFE\mshtml.dll
[-] 2008-12-12 . 0E5ED45F7D6CBBCC973C92247FBE9F30 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . 96AD32D5C30A1F79F487A99BC1D5AFE9 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3GDR\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\mshtml.dll
[-] 2008-10-16 . 6FE6816E7E6677FF4E47E5FC470C42CC . 3088384 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\mshtml.dll
[-] 2008-10-16 . 2A9F87DE02E61CFB762121C160E87F6A . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-10-16 . 793E26EF8767C58436A3B40A0899B180 . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2007-08-13 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB960714$\mshtml.dll
.
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-17 . AB47015B67531572BE46C0C08222C84C . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
[-] 2002-08-29 . 1B2C477D8847E4123DD8761D2E9008F7 . 323072 . . [7.0.2600.1106] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll
[-] 2001-10-25 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
.
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$NtUninstallKB2509553$\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . A6E79B60AC73241E5721AB6A573D2B24 . 247296 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 37BABA5DBD9027837FDC27E5D6EF33E1 . 247296 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-17 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll
.
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
.
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
.
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
.
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
.
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
.
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2004-08-17 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
.
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2004-08-17 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\user32.dll
.
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
.
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\wininet.dll
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\dllcache\wininet.dll
[-] 2011-06-21 . 923CCA1F768308928E2CD58D10D964DA . 841216 . . [7.00.6000.21302] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\wininet.dll
[-] 2011-04-25 . 541D6B55FAC20DD4A8E578109878D6C1 . 832512 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\wininet.dll
[-] 2011-04-25 . DF61EDDB3EA1571C99D8C60B300817E2 . 841216 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\wininet.dll
[-] 2011-02-17 . 01F315784610D7CAD81478C091F57696 . 832512 . . [7.00.6000.17096] . . c:\windows\ie7updates\KB2530548-IE7\wininet.dll
[-] 2011-02-17 . 260B22FCC9582A5C360A309EC2C3D8D2 . 841216 . . [7.00.6000.21298] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\wininet.dll
[-] 2010-11-06 . 43A169D0367A4105491A76C2AAE6A1FD . 832512 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\wininet.dll
[-] 2010-11-06 . 2BB8C340B7D1293B88587D2C4B72506F . 841216 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\wininet.dll
[-] 2010-09-09 . 41DD413E4546E25E0D0C5B8B7DEE1967 . 832512 . . [7.00.6000.17091] . . c:\windows\ie7updates\KB2416400-IE7\wininet.dll
[-] 2010-09-09 . 40B58A838D691766E19FA3C21B16EC41 . 841216 . . [7.00.6000.21293] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\wininet.dll
[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\wininet.dll
[-] 2010-06-24 . 5A2EC6E4AE30B8CAF53389A286E39C23 . 841216 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\wininet.dll
[-] 2010-05-04 . 1497FB3C1BC993A5F263FB57E0AD63D3 . 832512 . . [7.00.6000.17055] . . c:\windows\ie7updates\KB2183461-IE7\wininet.dll
[-] 2010-05-04 . 3D4713D326A245AAE068E7148C08AA77 . 841216 . . [7.00.6000.21256] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\wininet.dll
[-] 2010-03-11 . 366F583DBB53049DDFB04D6F7BF2795C . 832512 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\wininet.dll
[-] 2010-03-11 . 894D1910F23ABB82A19F4E2F1966271E . 841216 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
[-] 2010-01-05 . 9BD776679C4656E0CEA5E8BFB9CFD33B . 832512 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\wininet.dll
[-] 2010-01-05 . 0D90D150ED0DD4C673C627C52D3F7149 . 841216 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll
[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\wininet.dll
[-] 2009-08-29 . 422C96661C35C7D6DAC7A58A1D6BB145 . 832512 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976325-IE7\wininet.dll
[-] 2009-08-29 . 7CA27BB855E6B8CC4725582501197E39 . 840704 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 155CEA8BCA8349B1DB7B8142BA95F6AE . 828928 . . [7.00.6000.21073] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 4121C2AFFC37600A4710F63AD8017CF9 . 827392 . . [7.00.6000.16876] . . c:\windows\ie7updates\KB974455-IE7\wininet.dll
[-] 2009-04-29 . D8B3732B92CF879ADE65CCE9361D36FB . 827392 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\wininet.dll
[-] 2009-04-29 . C6D7F3DF74C49ED8E01CB18272EA0CCA . 828928 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . 3D7B87D8102C41BABBE5922B5275AA7C . 828416 . . [7.00.6000.21020] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . BA2611F55D9AE29554008ADBC49D7664 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2008-12-20 . A039CE5F34BF98760F877B29E5A1D4CD . 827904 . . [7.00.6000.20978] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . 793DA751C812EFC3C6786BBD3B8489A8 . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\wininet.dll
[-] 2008-10-16 . 20275EA77612128219308D1BFAC3F7AB . 660480 . . [6.00.2900.3462] . . c:\windows\ie7\wininet.dll
[-] 2008-10-16 . DC068C9C851B3F601D91BFA93E053993 . 668672 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\wininet.dll
[-] 2008-10-16 . 370940E124256D20DE4CA7E51377335C . 668160 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 8E7DE90524F7DD5DB33CC38AD9A1B0B4 . 667136 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2007-08-13 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB958215$\wininet.dll
.
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
.
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
.
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-17 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
.
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\regedit.exe
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
[-] 2004-08-17 . CB5A91928D94224E7E30EE277B45E8A3 . 147968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
.
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\ole32.dll
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\dllcache\ole32.dll
[-] 2010-07-16 . C85BE0CF9C91EB64CECA1D639D71D4CC . 1288704 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB979687$\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2004-08-17 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ole32.dll
.
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
[-] 2010-04-16 . 6BE004F9FCEECA6536385D5CB59BFD37 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\$NtUninstallKB981322$\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
[-] 2004-08-17 . E28340F6CB7BAC3EACDA9C74A0BE42BE . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
.
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
[-] 2004-08-17 . FC727882241CD48E243868DD8401AB60 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
.
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
.
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
.
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
.
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2004-08-17 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
.
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
.
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
.
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
.
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
[-] 2004-08-17 . FAABA83BE47C5B15F620FAA53267A9B8 . 345088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
.
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
.
[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
.
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
.
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
[-] 2004-08-03 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys
.
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
.
[-] 2010-09-18 07:18 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\$NtUninstallKB2387149$\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2001-10-25 12:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
.
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
.
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\ServicePackFiles\i386\mspmsnsv.dll
.
[-] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-04-28 . F7648719DB795F098BA7F2AE67150182 . 2026496 . . [5.1.2600.5973] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . D46E1BB887F3340430D10DA536FE79E1 . 2026496 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . B2CEA3C57AA8230C7BCC0B2AF35EC55A . 2025984 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . C50A3A3C9724135FFBD9CB31355F9341 . 2025984 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
[-] 2009-02-09 . 6DD6966FA0FF770A3E5545875557C7F1 . 2025984 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 7FFD251BA8F8DAD189C2C6B6C1552319 . 2017792 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2008-08-14 . 6BB160864CAABEEA24D6BA9EDE18B641 . 2065152 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
[-] 2008-08-14 . 09CD607918C3F5600D8A111155F62CA6 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
[-] 2008-08-14 . 6045C7424106CCA4C9970C7230BD6253 . 2025984 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-14 . 9F12E026DC0B0C43F521114EFB3A3ACC . 2025984 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2004-08-17 . 7715EDDD01EDFEF9EF335D29C6DFE212 . 2017280 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntkrnlpa.exe
.
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-17 14:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
.
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2004-08-17 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
.
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
.
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
.
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
.
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-17 14:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
.
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[-] 2004-08-17 . E472BDA53A4DCD2142143AF9FD25C99A . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-04-28 . 431278D0EF7518BA499720122F4ED86F . 2148352 . . [5.1.2600.5973] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-16 . CD79AD67BF88021BB60B2602D1947FB3 . 2148352 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 07A58A2A4460A4B7A58E0920F4CFA729 . 2147328 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-08-04 . 3742270B8C90A97A0BDD25DED1201AA9 . 2147328 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 . 6499BF91CF62B4319D6ED7E99D0B6998 . 2147328 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 0634DC30949A2E1ACC1D810CEC245D17 . 2138112 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2008-08-14 . C45C335F78C90DC75C05D5260B6888C7 . 2188160 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
[-] 2008-08-14 . 91F18AB1E9ACBF6E27A5545A8F57C89B . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
[-] 2008-08-14 . FFEB7726951F6D2859DF12FBC51F0188 . 2147328 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2008-04-14 . 27C7A7AED8A477F6A0C7D3AD00AB9419 . 2147328 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2004-08-17 . 84FEF6BE553ACC66729F5D4113F53310 . 2150400 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntoskrnl.exe
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
[-] 2004-08-17 . 2CEEBB402187AE56B585701F3D191FB3 . 176128 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
.
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
[-] 2004-08-17 . 0645CCDDDD27F96EEA3534C1DEF736D9 . 333824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
.
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
[-] 2004-08-17 . B356DD67178B22A8C2FBD47316CCB43B . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
.
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
[-] 2004-08-17 . 630A1012AF129918D2E2D70727D69351 . 8192 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-12-07 323392]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"FileHunter Check for updates"="c:\documents and settings\Pavel\Data aplikací\FileHunter\update.exe" [2011-07-17 810096]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-09 94208]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-09 1028096]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-08 13594624]
"nwiz"="nwiz.exe" [2008-12-08 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-08 86016]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2008-08-05 53248]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2007-07-12 233472]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2007-07-12 131072]
"RTHDCPL"="RTHDCPL.EXE" [2008-08-05 16862208]
"EPSON Stylus DX4800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"DiscWizardMonitor.exe"="c:\program files\Seagate\DiscWizard\DiscWizardMonitor.exe" [2007-09-10 1188152]
"AcronisTimounterMonitor"="c:\program files\Seagate\DiscWizard\TimounterMonitor.exe" [2007-09-10 1962216]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Seagate\Schedule2\schedhlp.exe" [2007-09-04 148760]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"RCApp"="c:\program files\gigabyte\RCApp\U7000RCApp.exe" [2010-01-26 634368]
"ChangeFilterMerit"="c:\program files\NewSoft\Presto! PVR\ChangeFilterMerit.exe" [2007-06-08 51280]
"Presto! PVR Monitor"="c:\program files\NewSoft\Presto! PVR\Monitor.exe" [2008-08-08 153424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"FUFAXSTM"="c:\program files\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-12-02 847872]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-09-18 2412032]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Pavel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Jalbum8.1\\Jalbum.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"c:\\Program Files\\European Aeronautical Group\\ToDc PILOT SEAGLE AIR B737\\TODC PILOT.exe"=
"c:\\Program Files\\EpsonNet\\EpsonNet Setup\\tool10\\ENEasyApp.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\WINDOWS\\twain_32\\escndv\\escndv.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\EPQuicker.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\DspReadMe.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\pumpa.exe"=
"c:\\Program Files\\DivX\\DivX Plus Player\\DivX Plus Player.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Update\\GoogleUpdate.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Speed-O-Meter\\netspeed.exe"=
"c:\\Program Files\\DivX\\DivX Update\\DivXUpdate.exe"=
"c:\\Program Files\\DAEMON Tools Lite\\DTLite.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EProjManager.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\update.exe"=
"c:\\Program Files\\Nokia\\Nokia PC Suite 7\\PCSuite.exe"=
"c:\\Program Files\\Outlook Express\\msimn.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\ESTsoft\\ALUpdate\\ALUpdate.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\egui.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\E_SAG4ST.EXE"=
"c:\\Program Files\\Common Files\\soft602\\PrnPack.exe"=
"c:\\Program Files\\Common Files\\EPSON\\EBAPI\\eEBAgent.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\WINDOWS\\system32\\mstsc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundTimestampRequest"= 1 (0x1)
"AllowInboundMaskRequest"= 1 (0x1)
"AllowInboundRouterRequest"= 1 (0x1)
"AllowOutboundDestinationUnreachable"= 1 (0x1)
"AllowOutboundSourceQuench"= 1 (0x1)
"AllowOutboundParameterProblem"= 1 (0x1)
"AllowOutboundTimeExceeded"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
"AllowOutboundPacketTooBig"= 1 (0x1)
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [30.4.2011 21:59 218688]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [21.12.2010 15:04 115008]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [21.12.2010 13:47 94872]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 10:28 73728]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service;c:\program files\ABBYY FineReader 9.0\NetworkLicenseServer.exe [24.9.2007 20:11 566560]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [18.9.2009 17:48 9216]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [30.12.2008 5:30 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [9.7.2008 11:56 39072]
S2 ekrn;ESET Service;c:\program files\Eset\ESET NOD32 Antivirus\ekrn.exe [12.1.2011 16:41 810144]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [13.10.2010 22:21 100736]
S3 MEMSWEEP2;MEMSWEEP2;c:\windows\system32\6.tmp [7.9.2011 2:16 6144]
S3 MODRC;DiBcom Infrared Receiver;c:\windows\system32\drivers\modrc.sys [11.7.2007 11:06 13824]
S3 rkhdrv40;Rootkit Unhooker Driver; [x]
S3 SaiH0BAC;SaiH0BAC;c:\windows\system32\drivers\SaiH0BAC.sys [1.1.2009 21:26 135168]
S3 SaiH0C2D;SaiH0C2D;c:\windows\system32\drivers\SaiH0C2D.sys [1.1.2009 21:26 135168]
S3 tj2knd5;Terayon Cable Modem (NDIS);c:\windows\system32\drivers\tj2knd5.sys [28.7.2011 21:37 17616]
S3 tj2kunic;Terayon Cable Modem (WDM);c:\windows\system32\drivers\tj2kunic.sys [28.7.2011 21:37 69680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-07 c:\windows\Tasks\SDMsgUpdate (TE).job
- c:\progra~1\SMARTD~1\Messages\SDNotify.exe [2009-01-01 05:29]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 4.00\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.00\MediaManager\grab.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {7B43048F-DA7A-458F-AF35-D825BDBB6816} - hxxp://88.103.46.101:8001/NetVideoOCX.cab
FF - ProfilePath - c:\documents and settings\Pavel\Data aplikací\Mozilla\Firefox\Profiles\f4e8527q.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8 ... &gfns=1&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Cool's_Codec_pack_4.12 - c:\windows\iun6002.exe
.
.
.
**************************************************************************

paja · #6 Příspěvek od **paja** » 07 zář 2011 19:49

2 část:

.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-07 20:14
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
c:\docume~1\Pavel\LOCALS~1\Temp\FTP7DC.tmp 495 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Italian.bin 27421 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-23.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\iTJUUbLu.html.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ1274867538656974269Swap.tmp 194229 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ1682398148154101836Swap.tmp 200719 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ1779914660645256213Swap.tmp 163869 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ2055208176624507682Swap.tmp 208534 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ2439164797935140327Swap.tmp 197736 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ2719522456664025054Swap.tmp 193739 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ2728209918788072998Swap.tmp 218020 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ274107538621882452Swap.tmp 287107 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ3064473130361789621Swap.tmp 228422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ3518151362828839090Swap.tmp 192217 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ388209874924311395Swap.tmp 181341 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\GSDFlashMsg.htm 1313 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\GUR53.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r1760.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r32EE.tmp 83 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r32EF.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r6D0E.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r81C.tmp 3185 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2r823.tmp 3185 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2rC22.tmp 207 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\h2rC23.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52989 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e89 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48700 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48701 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48702 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48703 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48704 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48705 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48706 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48707 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48708 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d48709 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52980 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52981 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52982 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52983 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52984 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52985 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52986 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52987 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d52988 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df80 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df81 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df82 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df83 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df84 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df85 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df86 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df87 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df88 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d5df89 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e80 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e81 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e82 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e83 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e84 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e85 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e86 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e87 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15d66e88 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d80 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d81 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d82 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d83 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d84 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d85 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d86 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d87 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d88 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15df8d89 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae00 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae01 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae02 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae03 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae04 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae05 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae06 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae07 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb.19420\15e1ae08 622080 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hb_encode_log.dat 7325 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Hebrew.bin 19564 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\History
c:\docume~1\Pavel\LOCALS~1\Temp\History\History.IE5
c:\docume~1\Pavel\LOCALS~1\Temp\History\History.IE5\desktop.ini 145 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\History\History.IE5\index.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Skype.msi 18803200 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SkypeSetup.exe 19440640 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\SkypeToolbars.msi 2430976 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Spanish.bin 27764 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SpOrder.dll 8464 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\SWEDISH.bin 24093 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\symbos.txt 240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SymCCIS_CheckCriteria.txt 828 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SYMEVENT.LOG 30297 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SystemRequirementsLabx.exe 382536 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\desktop.ini 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\index.dat 32768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\PTCOERB4
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\PTCOERB4\desktop.ini 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RI7539NW
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\RI7539NW\desktop.ini 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\UHQGMMH2
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\UHQGMMH2\desktop.ini 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\VWV6XSW9
c:\docume~1\Pavel\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\VWV6XSW9\desktop.ini 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TempRips
c:\docume~1\Pavel\LOCALS~1\Temp\IH24E0.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH24EB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH24F3.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH25BD.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2604.tmp 9778 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH264D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH266F.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090228-2_MCZB.html 7656 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3129F5BC.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\493c_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\9ya60D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\acbc_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AD4A770.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17C.tmp 814 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A4.tmp 625 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2B0.tmp 2758 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceCmdLock 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceCmdResponseEvent 24 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceCmdResponseMutex 12 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceCmdSerializeLock 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceCmdShared 65536 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\boost_interprocess\DDM0serviceLock 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\c5l3D5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\div1C.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2F.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div41.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div54.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\divC.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\English.bin 21944 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_94HPzd4cHforIJj32wgU 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_mNchJWz8thgvK3ZUAxzl 24600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\fbed_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP11D8.tmp 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{692EA370-D25B-4E00-8FDA-E165056EC986}
c:\docume~1\Pavel\LOCALS~1\Temp\{692EA370-D25B-4E00-8FDA-E165056EC986}\{1BC2ACA9-65FA-4B3B-8CF7-E1DC3428F102}
c:\docume~1\Pavel\LOCALS~1\Temp\{709438AF-7099-40AE-8E9F-137F21195AAA}
c:\docume~1\Pavel\LOCALS~1\Temp\{709438AF-7099-40AE-8E9F-137F21195AAA}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}
c:\docume~1\Pavel\LOCALS~1\Temp\{709438AF-7099-40AE-8E9F-137F21195AAA}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}\TestWrite.txt 6 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{7876EE3B-BB89-46B9-8C15-7A1F84744882}
c:\docume~1\Pavel\LOCALS~1\Temp\{7876EE3B-BB89-46B9-8C15-7A1F84744882}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{7876EE3B-BB89-46B9-8C15-7A1F84744882}\setup.isn 256664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{7876EE3B-BB89-46B9-8C15-7A1F84744882}\_isdel.ini 553 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{84DBB815-B766-4022-98DA-7DE7F8FB1B34}
c:\docume~1\Pavel\LOCALS~1\Temp\{84DBB815-B766-4022-98DA-7DE7F8FB1B34}\ISSetup.dll 492164 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{84DBB815-B766-4022-98DA-7DE7F8FB1B34}\_Setup.dll 385968 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{8851A326-93F5-4684-8B00-7E4D8A53076A}
c:\docume~1\Pavel\LOCALS~1\Temp\{8851A326-93F5-4684-8B00-7E4D8A53076A}\setup.exe 393216 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{89D9540A-3B34-44CE-8B12-4F6D4F2BEC99}
c:\docume~1\Pavel\LOCALS~1\Temp\{89D9540A-3B34-44CE-8B12-4F6D4F2BEC99}\{1BC2ACA9-65FA-4B3B-8CF7-E1DC3428F102}
c:\docume~1\Pavel\LOCALS~1\Temp\{8A6C40EB-CD43-4929-AE97-EF38491FE9F3}
c:\docume~1\Pavel\LOCALS~1\Temp\{8A6C40EB-CD43-4929-AE97-EF38491FE9F3}\setup.isn 256664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{AE091A8A-9CE1-4597-917E-42E8EFE7481C}
c:\docume~1\Pavel\LOCALS~1\Temp\{AE091A8A-9CE1-4597-917E-42E8EFE7481C}\{153F839F-0A63-41D8-890F-7324C0E13743}
c:\docume~1\Pavel\LOCALS~1\Temp\{AE091A8A-9CE1-4597-917E-42E8EFE7481C}\{153F839F-0A63-41D8-890F-7324C0E13743}\InstallHelper.dll 114688 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{AEA3B1B4-E253-4228-AEB1-4A2598FE7C70}
c:\docume~1\Pavel\LOCALS~1\Temp\{AEA3B1B4-E253-4228-AEB1-4A2598FE7C70}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{BE6259EC-42C8-48A2-914C-3089B9B707E8}
c:\docume~1\Pavel\LOCALS~1\Temp\{BE6259EC-42C8-48A2-914C-3089B9B707E8}\{1BC2ACA9-65FA-4B3B-8CF7-E1DC3428F102}
c:\docume~1\Pavel\LOCALS~1\Temp\{C3ABBA32-FC7F-4BF0-8BE0-D22FB2DEF202}
c:\docume~1\Pavel\LOCALS~1\Temp\{C3ABBA32-FC7F-4BF0-8BE0-D22FB2DEF202}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{C4AE03AD-D732-4259-BC5C-1D0A9C1E520E}
c:\docume~1\Pavel\LOCALS~1\Temp\{C4AE03AD-D732-4259-BC5C-1D0A9C1E520E}\{1BC2ACA9-65FA-4B3B-8CF7-E1DC3428F102}
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistMSI0090.txt 524376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistMSI205C.txt 519876 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistMSI418E.txt 519918 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistMSI67BD.txt 547978 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistMSI7EB5.txt 524936 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistUI0090.txt 11832 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistUI205C.txt 14268 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistUI418E.txt 11528 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistUI67BD.txt 26248 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_vcredistUI7EB5.txt 11458 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\decision_ED_2003_12_RM.doc 1648128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\DETemp384Gd78Sjke78Jks75.dat 93326608 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\div1.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div10.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div11.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div12.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div13.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div14.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div15.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div16.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div17.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div18.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div19.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div1A.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div1B.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\EpsonScanIO
c:\docume~1\Pavel\LOCALS~1\Temp\pkb4IRn2.html.part 12818 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AUCHECK_PARSER.txt 218 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Av-test.txt 72 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\b7ad_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BAULvypis052009001.pdf 1161912 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BB1qYFxE.flv.part 18728304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH58B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH590.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH592.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH594.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH595.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH596.tmp 84116296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH5CA.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH5CB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH5E2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH646.tmp 281319 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A5.tmp 1308 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A6.tmp 1200 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A7.tmp 1562 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A8.tmp 2366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A9.tmp 1355 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AA.tmp 3486 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AB.tmp 2973 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AC.tmp 814 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AD.tmp 3727 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AE.tmp 1081 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2AF.tmp 155 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2B.tmp 2475 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BinFiles602
c:\docume~1\Pavel\LOCALS~1\Temp\BinFiles602\RZP_380701_2010_19408_1(YqU8r2).pdf 94747 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP11E0.tmp 645 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1313.tmp 516 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1359.tmp 126 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP13A9.tmp 1551 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP15A5.tmp 924 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP15A8.tmp 924 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP15A9.tmp 794 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP15AA.tmp 67 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP15AB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1A4.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1A5.tmp 714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1AA.tmp 495 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP204C.tmp 497 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP22C.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP26F.tmp 2064 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP271.tmp 4431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP28E.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP28F.tmp 924 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP2A4.tmp 794 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP2B8.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP2B9.tmp 645 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP2BB.tmp 495 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP3C8D.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP3DDA.tmp 4514 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP5846.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP58F6.tmp 4601 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP668.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP669.tmp 4431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP66A.tmp 2431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP66D.tmp 846 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP7D9.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP7DA.tmp 645 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-20
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-20\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-21
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-22
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-22\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-23
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-23\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-24
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-24\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-25
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-25\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-26
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-26\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-27
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-27\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-28
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-28\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-29
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-29\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-3
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-30
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-30\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-31
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-31\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-32
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-32\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-33
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-33\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-34
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-35
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-36
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-37
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_na5Nar3njoyGc0N 229404 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_NUqjLULqANp4Cbkp2yJd 1024 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_QVhBCEwfhi09M2R18FWE 1024 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_QVhBCEwfhi09M2R18FWE-journal 1544 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_TnI9VD3bOsWuJ3RB5mZq 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_UeOqEOE6prK9cB3PUMMd 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_wREP6JXtQdpvepKGI3BI 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_ykkHmBrATWIIxlTby9Ws 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_zdBNimmDAIvZZGVPXmxK 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Excel8.0
c:\docume~1\Pavel\LOCALS~1\Temp\Excel8.0\MSForms.exd 225912 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\E_S313.tmp 232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\f7em30mf.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\F9.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17D.tmp 3727 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17E.tmp 1081 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17F.tmp 155 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG18.tmp 1562 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG180.tmp 2758 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG19.tmp 2366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1A.tmp 1355 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1B.tmp 3486 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1C.tmp 2973 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1D.tmp 814 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1E.tmp 3727 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG1F.tmp 1081 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG20.tmp 155 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG21.tmp 2758 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG29.tmp 375 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A.tmp 375 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A2.tmp 36049 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG2A3.tmp 1747 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF3469.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF357E.tmp 98304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF3E16.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF405B.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF4144.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF4455.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF48E.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF51D.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF6064.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF6181.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF6C2A.tmp 98304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF6DE6.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF717D.tmp 32768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF7933.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-40.xls 2137600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-41.xls 2147840 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-42.xls 2151424 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-43.xls 2151936 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-44.xls 2175488 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-45.xls 2177024 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-46.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-47.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-48.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-49.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-5.xls 359424 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-50.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-51.xls 2189824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-52.xls 1045504 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-53.xls 1046016 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-54.xls 1047552 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-55.xls 1047552 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-56.xls 1048064 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-57.xls 1048064 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-58.xls 1049088 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-59.xls 1047552 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-6.xls 359424 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-60.xls 1935872 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-61.xls 1936896 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-62.xls 1955328 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Twain001.Mtx 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Twunk001.MTX 156 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Twunk002.MTX 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\T__ma_13-1.ppt 153088 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\T__ma_13.ppt 153088 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\uf4qKNfu.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\UILib8_MFCDll.dll.1.log 1239 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ukEk4I0s.lnk 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt2E62.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt2E63.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt2E63.tmp.bat 69 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt2EB9.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt2EB9.tmp.exe 667848 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\utt7.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\utt8.tmp.bat 69 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MITAS_AIRCRAFT_04-1.PDF 308543 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MITAS_AIRCRAFT_04.PDF 308543 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MMCULog2.txt 2 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod12E.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod13.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod1AD0.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod1AD2.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod4.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmplog00.sqm 1600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmplog01.sqm 1416 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmplog02.sqm 1384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmplog03.sqm 1416 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmplog04.sqm 1416 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmsetup.log 13025 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Word8.0
c:\docume~1\Pavel\LOCALS~1\Temp\Word8.0\MSForms.exd 166708 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WPDNSE
c:\docume~1\Pavel\LOCALS~1\Temp\x2wYEONp.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\X8FBLwob.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Y6Q1mBAZ.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A0A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A0B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A0C.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A0D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A0F.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A11.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A12.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A13.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A16.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A4C.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3B2.tmp 319180 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3BD8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3C55.tmp 345699 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3D8.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DF.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21E0.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT25.xml 2240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT26.xml 2240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT27.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT28.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT29.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT2A.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT2B.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT2C.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT2F.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT30.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT31.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT34.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT35.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT36.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT69A.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT69B.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT69C.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT7C.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT7D.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT7E.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT82.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT83.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT84.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12AB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12C9.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12CC.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12CF.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12D0.tmp 58135178 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12D3.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12D8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12DB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12E0.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12E5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12EA.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12F1.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH12F4.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1300.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1307.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH131D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1321.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1328.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1331.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PN-GR-003-TVS-Overdue-Aircraft-Programme.pdf 190378 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Polish.bin 24232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pornstarxs_3150-1-1.mpg 2226180 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Portuguese(Brazil).bin 25082 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Portuguese.bin 26271 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ppt3.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ppt4.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ppt6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Pracovni-neschopnost--piloti-pruvodni-dopis1.doc 29696 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\preinstlog.txt 126258 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Print2PDF
c:\docume~1\Pavel\LOCALS~1\Temp\ProformaFA001.pdf 170275 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pzpPSnGq.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\r2h175F.tmp 343 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\r2h6D0D.tmp 1812 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\31FA.tmp 328864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\31FD.tmp 328864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\34D6A847.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\34f3_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3535.tmp 328864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\364-3-089585-A741CD-1.pdf 105444 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\364-3-089585-A741CD.pdf 105444 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3869C216.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3877.tmp 328864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\38A.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\39AAA74.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3DEB055.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\3sqhmwJO.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\415A13B8.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\415CFA9.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\430d_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\456.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\490ec81.mst 3584 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-11.xls 484864 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-12.xls 776192 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-13.xls 776192 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-14.xls 809984 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-15.xls 1199104 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-16.xls 1199104 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-17.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-18.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-19.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-2.xls 349696 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-20.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-21.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-22.xls 1221632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHE7A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHF42.tmp 9763 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHF54.tmp 369576 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHFFE.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ImageDebug
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21D5.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21D6.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21D7.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21D8.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21D9.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DA.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DB.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DC.xml 422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DD.xml 809216 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\tmp2FD.tmp 698843 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_is465B.exe 460248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\_is465E.exe 460248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\_is4660.exe 460248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\_is5010.exe 460248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\_pcsuitecheck_new.xml 125868 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AC.gif 382 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AD.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AE.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AF.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AG.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AI.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AL.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AM.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AN.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AO.gif 302 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AR.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AS.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AT.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AU.gif 378 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AW.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\AZ.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BA.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BB.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BD.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BE.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BF.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BG.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BH.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BI.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BJ.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BM.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BN.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KZ.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LA.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LB.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LC.gif 379 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LI.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LK.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LR.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LS.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LT.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LU.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LV.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\LY.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MA.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MC.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MD.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ME.gif 330 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MG.gif 372 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MH.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MK.gif 382 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ML.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MM.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MN.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MO.gif 378 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MP.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MQ.gif 379 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MR.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MS.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MT.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MU.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MV.gif 372 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SE.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SG.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SH.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SI.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SK.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SL.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SM.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SN.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SO.gif 376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SR.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ST.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SV.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SY.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SZ.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TC.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TD.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TG.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TH.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TJ.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TK.gif 372 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TL.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TM.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TN.gif 375 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DJ.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DK.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DM.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DO.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DZ.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\EC.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\EE.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\EG.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ER.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ES.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ET.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FI.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FJ.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FK.gif 372 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FM.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FO.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\FR.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GA.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GB.gif 382 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GD.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GE.gif 379 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GF.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GH.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GI.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GM.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GN.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GP.gif 357 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GQ.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GR.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GT.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GU.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GW.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GY.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\HK.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\HN.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\HR.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\HT.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\HU.gif 357 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ID.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IE.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IL.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IN.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IQ.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IR.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IS.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\IT.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\JM.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\JO.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\JP.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KE.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KG.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KH.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KI.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KM.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KN.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KP.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KR.gif 385 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KW.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BO.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DG.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\GL.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\KY.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MW.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SD.gif 355 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TO.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MX.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MY.gif 375 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\MZ.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NA.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NC.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NE.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NG.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NI.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NL.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NO.gif 376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NP.gif 302 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NR.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NU.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\NZ.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\OM.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PA.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PE.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PF.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PG.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PH.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PK.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PL.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PM.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PR.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PS.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PT.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PW.gif 374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\PY.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\QA.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\RE.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\RO.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\RS.gif 336 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\RU.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\RW.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SA.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SB.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\SC.gif 357 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BR.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BS.gif 351 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BT.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BW.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BY.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\BZ.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CA.gif 376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CD.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CF.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CG.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CH.gif 332 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CI.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CK.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CL.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CM.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CN.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CO.gif 353 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CR.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CU.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CV.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CY.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\CZ.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\DE.gif 362 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TR.gif 371 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TT.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TV.gif 361 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TW.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\TZ.gif 366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\UA.gif 360 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\UG.gif 359 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\US.gif 367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\UY.gif 373 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\UZ.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VA.gif 369 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VC.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VE.gif 364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VG.gif 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VI.gif 376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VN.gif 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\VU.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\WF.gif 377 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\WS.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\YE.gif 356 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\YT.gif 382 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ZA.gif 363 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ZM.gif 358 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\__SkypeDialog_Cache\ZW.gif 365 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{0C0E9F11-2086-461A-998C-14606314CB0E}
c:\docume~1\Pavel\LOCALS~1\Temp\{0C0E9F11-2086-461A-998C-14606314CB0E}\ISSetup.dll 492164 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{0C0E9F11-2086-461A-998C-14606314CB0E}\_Setup.dll 164784 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{0E492D42-6D1F-40D7-A72A-39B5EA74D863}
c:\docume~1\Pavel\LOCALS~1\Temp\{0E492D42-6D1F-40D7-A72A-39B5EA74D863}\ISSetup.dll 492164 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{0E492D42-6D1F-40D7-A72A-39B5EA74D863}\_Setup.dll 164784 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{0F94D1DE-4BA9-4BD6-B223-8D9E2ADD3E13}
c:\docume~1\Pavel\LOCALS~1\Temp\{0F94D1DE-4BA9-4BD6-B223-8D9E2ADD3E13}\ISSetup.dll 492032 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{0F94D1DE-4BA9-4BD6-B223-8D9E2ADD3E13}\_Setup.dll 164784 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{163E7C6F-DAAB-4DB2-B362-98B0302EB539}
c:\docume~1\Pavel\LOCALS~1\Temp\{163E7C6F-DAAB-4DB2-B362-98B0302EB539}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}
c:\docume~1\Pavel\LOCALS~1\Temp\{163E7C6F-DAAB-4DB2-B362-98B0302EB539}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}\TestWrite.txt 6 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{164A33D9-4DB2-4B27-B18E-73770579D951}
c:\docume~1\Pavel\LOCALS~1\Temp\{164A33D9-4DB2-4B27-B18E-73770579D951}\{BA7C71A8-D4A4-476F-AF22-79F6D50DD550}
c:\docume~1\Pavel\LOCALS~1\Temp\{1969DDE8-9499-4C39-9B97-F6DE42E338B7}
c:\docume~1\Pavel\LOCALS~1\Temp\{1969DDE8-9499-4C39-9B97-F6DE42E338B7}\{CF9BA69F-3882-4DD6-B74A-19B2933A59A4}
c:\docume~1\Pavel\LOCALS~1\Temp\{236BB7C4-4419-42FD-0409-1E257A25E34D}
c:\docume~1\Pavel\LOCALS~1\Temp\IH415.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH453.tmp 299581 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH47.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH48.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4B5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4C1.tmp 887544 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4DD.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4E5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4E6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4E7.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4E8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4E9.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH4EA.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH502.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH505.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH52C3.tmp 608898 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH53A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1594451792375945316.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3937524988230913025.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6164985840355283078.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8015497335227419984.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache933537932721414129.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jre-6u13-windows-i586-p-iftw_13974002.exe 607640 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\lby551.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod74C.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\msohtml1
c:\docume~1\Pavel\LOCALS~1\Temp\msohtml1\01
c:\docume~1\Pavel\LOCALS~1\Temp\ocd
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\accel.cfg 2186 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\chrome
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\chrome\chrome.rdf 3059 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\chrome\userChrome.css 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\chrome\userContent.css 567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\cookies.txt 162 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\cookperm.txt 150 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\history.txt 123 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\localstore.rdf 4945 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\macros.cfg 44 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\menus.cfg 9 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\mimeTypes.rdf 2069 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\prefs.js 5229 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\default\2dn1xgbj.slt\user.js 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\pluginreg.dat 1600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ocd\profiles.dat 1157 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CF5.tmp 91786 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_6c0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_bb8.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\data1.cab 561525 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\data1.hdr 19440 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\data2.cab 1756644 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\ikernel.ex_ 339565 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\layout.bin 417 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\Setup.exe 165888 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\Setup.ini 89 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft3~tmp\Disk1\Setup.inx 156998 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-10.xls 484864 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP7F5.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP7F8.tmp 4431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Garmin Communicator Plug-In
c:\docume~1\Pavel\LOCALS~1\Temp\Garmin Communicator Plug-In\2.9.3
c:\docume~1\Pavel\LOCALS~1\Temp\German.bin 25764 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\GLB33E.tmp 71680 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\gllrzr.exe 61440 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\GoogleUpdateSetup.exe1354fc6 600728 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\IH684.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH685.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH686.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH687.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH688.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH689.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH68A.tmp 7076 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH68B.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH68C.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH68D.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH6B9.tmp 414278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH701.tmp 3680469 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH70A.tmp 235186 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH758.tmp 968740 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH7AF.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH832.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHB2.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-8.xls 432128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-9.xls 479232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual.xls 348672 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-1.xls 759296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-2.xls 759296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-3.xls 1015296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-4.xls 1044480 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-5.xls 1044480 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-6.xls 1044992 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new-7.xls 2460672 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_new.xls 280064 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090331-3_MCZB.html 5817 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090430-4_MCZB.html 7104 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090531-5_MCZB.html 5882 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090630-6_MCZB.html 9768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\22E18352.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\230b8aaa.mst 1412608 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\2346e3.mst 129536 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\255413859.cvr 3824 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\255413906.od 134 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\A0.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\A23283.WAV 8813 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\A2819.WAV 5727 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\a30b_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\A7B7758.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\a8f2QMD8.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AAWInstallerTemp
c:\docume~1\Pavel\LOCALS~1\Temp\AAWInstallerTemp\v9.5.0
c:\docume~1\Pavel\LOCALS~1\Temp\AAWInstallerTemp\v9.5.0\Ad-Aware.msi 13717504 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ABBYY Licensing Install.log 11318 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ABBYY-Licensing-FineReader-Professional-9.0.rollback 292 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AbbyyMsiLog.txt 668 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ac5f_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Zadost_LPR-1.doc 105984 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Zadost_LPR.doc 105984 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Zadost_VLP1.doc 101376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Zidle 1001.pdf 780609 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ZZ-0311.pdf 1276808 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_add_ds.log 562 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_avast_
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP0_
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP0_\Exec
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP0_\Exec\Beskyd air.doc 63488 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP1_
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP1_\Exec
c:\docume~1\Pavel\LOCALS~1\Temp\_AZTMP1_\Exec\590746.pdf 42632 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_data_USR_047_DEFAULT_20_1_._1_.doc.doc 48640 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_is1.exe 455600 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\_is166.tmp 7258466 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\IH1352.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1353.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1357.tmp 75382 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1358.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH135B.tmp 6843 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH135C.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH135D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH135F.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1364.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1365.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1366.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1367.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH136D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1374.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1379.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH137E.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1385.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-24.xls 1232896 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-25.xls 1247232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-26.xls 1247232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-27.xls 1811968 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-28.xls 1735168 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-29.xls 780288 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-3.xls 359424 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-30.xls 794624 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-31.xls 795136 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-32.xls 799232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-33.xls 799232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-34.xls 799232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-35.xls 793600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-36.xls 793600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-37.xls 793600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-38.xls 2088960 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-39.xls 2088960 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\fc41_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FD-06-2011.pdf 316949 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FD-07-2011.pdf 329431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\fi9414.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FileHunter-Win32.exe 1485353 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Finnish.bin 22868 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\fla454.tmp 998915 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\flashdance_CzDab.avi 121127146 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\formular_a_zadost_o_udeleni_individualniho_opravneni_07_2008.doc 94208 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Formular_G_udaje_o_radiovem_zarizeni_letecke_pohyblive_sluzby-1.doc 60416 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Formular_G_udaje_o_radiovem_zarizeni_letecke_pohyblive_sluzby.doc 60416 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1391.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13AB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13C2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13C5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13C6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13C9.tmp 6969783 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13CC.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13D1.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH13DE.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH151.tmp 1028936 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1729.tmp 309381 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1837.tmp 431173 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1981.tmp 674758 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1B7B.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CE4.tmp 32475228 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CF3.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CF4.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CF9.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CFC.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D06.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D0B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D0C.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D11.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D16.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D1A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D25.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D2A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D3D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D42.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1D49.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1DE0.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1DE1.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2026.tmp 5984517 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH209.tmp 2920 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2146.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2152.tmp 29001746 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH221C.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH22F9.tmp 33152 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH22FB.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH23DC.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH241.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH242.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH243.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH244.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH245.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH246.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH247.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH248.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH249.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH29EE.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH29F5.tmp 9780490 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2A7.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2A77.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2A97.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2B66.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2BE.tmp 200108 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2CFD.tmp 2920 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2D88.tmp 1599399 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2D89.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2D8C.tmp 5530740 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2D91.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DB1.tmp 1748273 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DB2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DB5.tmp 6265429 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DB6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DB8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DBE.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2DBF.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3086.tmp 28672 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH31E.tmp 292582 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH323E.tmp 1568241 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH324.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3855.tmp 145591 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH386E.tmp 41048 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3871.tmp 5255 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3872.tmp 13535 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-39
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-39\plugin-ShowPage.aspx 97025 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-4
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-40
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-41
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-42
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-42\plugin-ShowPage.aspx 46677 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-43
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-43\plugin-ShowPage.aspx 45786 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-44
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-45
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-46
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-46\plugin-ShowPage-1.aspx 47395 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-47
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-47\plugin-cfe21c3e-b7ee-4abe-858f-51fcd0de0bda.swf 23786 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-47\plugin-ShowPage.aspx 87182 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-48
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-48\plugin-ShowPage.aspx 87182 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-49
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-5
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-50
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-51
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-52
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-53
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-54
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-55
c:\docume~1\Pavel\LOCALS~1\Temp\offcln10.log 33815 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\offcln11.log 49262 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\OIS
c:\docume~1\Pavel\LOCALS~1\Temp\OIS\cacheFiles
c:\docume~1\Pavel\LOCALS~1\Temp\OIS\temp
c:\docume~1\Pavel\LOCALS~1\Temp\olr12007.pdf 80364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\olr22007.pdf 94546 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\olr32007.pdf 64556 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\olr42007.pdf 62830 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\OpenCandy
c:\docume~1\Pavel\LOCALS~1\Temp\OpenCandy\OCSetupHlp.dll 417280 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\OpenCandy\OpenCandy_Why_Is_This_Here.txt 2258 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\OR_BeskydAir001.pdf 325791 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Outlook 2002 Setup(0001).txt 3335 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Outlook 2002 Setup(0001)_Task(0001).txt 4913834 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Outlook 2002 Setup(0002).txt 3207 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Outlook 2002 Setup(0002)_Task(0001).txt 3690836 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jre-6u26-windows-i586-iftw-rv.exe 909088 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\jusched.log 521839 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JV8PUa6T.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jxCg+hdw.zip.part 2026 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\kbpki
c:\docume~1\Pavel\LOCALS~1\Temp\kbpki\69828532dbebb243ee91.dll 65864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\kbxhkc.exe 61440 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Korean.bin 20145 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\kW2iGq_v.xpi.part 524099 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\LA2_2009.pdf 822691 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\LA3_2009.pdf 499330 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\LA6_070416.pdf 1263687 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\lbsf1.m3u 33 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\VBE
c:\docume~1\Pavel\LOCALS~1\Temp\VBE\MSForms.exd 147268 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\vTn0kgNu.flv.part 18728304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Vydavani_ARC_CAMO.pdf 113335 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\vyjimka-ucl-ar.pdf 26860 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WCESCOMM.LOG 375 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WCESLog.log 1021318 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WCESMgr.log 394681 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WcesView.log 8948 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\autorun.inf 66 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\Home.htm 3093 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\acrobat.jpg 24631 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\avanquest_galet.ico 139142 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\background.jpg 76957 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\earth.jpg 24195 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\icon_trans.jpg 24650 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\install.jpg 24923 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\logo_avq.jpg 31871 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\logo_webeasy.ico 26694 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\manual.jpg 24269 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\TransfertMy.jpg 140376 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\images\web_easy.jpg 139313 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\loader.css 1607 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\CDBrowser\loader.js 2158 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Data
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Data\ENG
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Data\ENG\WE71-Pry.exe 25614336 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Data\Guide
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Data\Guide\Guide.pdf 57005 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\Start.exe 255488 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\WebEasy Express\start.ini 163 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER029c.dir00
c:\docume~1\Pavel\LOCALS~1\Temp\WER029c.dir00\manifest.txt 1316 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER029c.dir00\Mini090211-09.dmp 90112 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER029c.dir00\sysdata.xml 260366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER0865.dir00
c:\docume~1\Pavel\LOCALS~1\Temp\WER0865.dir00\manifest.txt 1316 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER0865.dir00\Mini090211-09.dmp 90112 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER0865.dir00\sysdata.xml 260366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER86ba.dir00
c:\docume~1\Pavel\LOCALS~1\Temp\WER86ba.dir00\hsplayer.exe.hdmp 105802035 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WER86ba.dir00\hsplayer.exe.mdmp 49938 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WERe826.dir00
c:\docume~1\Pavel\LOCALS~1\Temp\WERe826.dir00\manifest.txt 1316 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WERe826.dir00\Mini090211-09.dmp 90112 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WERe826.dir00\sysdata.xml 260366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\WizzAir_pilot_starting_data_sheet.doc 118272 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmgsdisc.log 10762 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHC5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHC6.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHCD5.tmp 845547 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHDA1.tmp 627081 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8016617609129565487.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache816274601128754832.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8179478309390896465.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8407165408703018960.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8410326169029808469.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8448495264262072637.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8507482837891820203.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8547845579774700485.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8551371102632274576.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8581587473164753907.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8610485968188910415.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8638684514540647135.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache8670621900747126787.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1729096433536282011.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1782233803604587548.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1869173570821948251.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1897941305723481063.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1923879741896795976.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2165289046690037464.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2201382877609343881.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2227147353435700556.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache258920577926281462.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2612326017210018403.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2620835673987961525.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2626258960133525992.tmp 36130 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2642975371465031940.tmp 49126 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2658105626217778986.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2670915006784576415.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2694908870118310912.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache2914136572714662692.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3193956353564042895.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3299728519033894349.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3359985424573073991.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache341789971327957760.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3423606688735306428.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3550065227232947569.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3690659179850966427.tmp 279 bytes

paja · #7 Příspěvek od **paja** » 07 zář 2011 20:00

3. část:

c:\docume~1\Pavel\LOCALS~1\Temp\~DFD708.tmp 32768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFDDA2.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFE285.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFE5D6.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFEB23.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFF9D8.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFFA42.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~e5d141.tmp 46080 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\~N2502A.tmp 12316 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRC2912.tmp 76288 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRD1993.doc 2558 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRD3206.doc 2558 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRD3832.doc 717 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0000.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0001.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0002.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0003.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0004.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0078.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0166.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0241.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0337.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0886.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF0930.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1011.tmp 65536 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAA-F-ST-177-0-09.xls 67072 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAA-F-ST-193-n-09.doc 253952 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAA-ST-098-n-09.pdf 554935 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009-1.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009-2.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009-3.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009-4.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009-5.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-178-009.doc 356352 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CAAF-ST-179-009.doc 427008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CalendarViewLog.txt 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\catchme.dll 53248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Cessna_525-Rev1-1.pdf 60732 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Cessna_525-Rev1-2.pdf 60732 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Cessna_525-Rev1.pdf 60732 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CFG1004.tmp 123 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CFG1007.tmp 123 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\checks and licences validity B737B.xlsm 157044 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache3998387967762731212.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4121655474019689550.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache428239291515565422.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4309130570220537069.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4378300631168630690.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4560642034405538843.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4587161998296144637.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4770791135137333994.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache4867589017480170064.tmp 31143 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5183553916772200508.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5342879102565972409.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5344797326256471158.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5411912804645326505.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5455541280734811878.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5473483582340786396.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5588637854183419045.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5816448039262259614.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache5865483867165993932.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6060343626114486007.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6073393807225605070.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\tmpD9E.tmp 325 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TradChin.bin 16962 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\traE08.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Travel-Service-GOM---rev3.pdf 5362979 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Turkish.bin 22263 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TVEPZWOt.lnk 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TVS-OM-part-Arev25--010411.pdf 7732913 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ7608890482515420009Swap.tmp 174813 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ8215324156461035766Swap.tmp 152074 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ8244421624573529969Swap.tmp 287770 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ8663630857092459853Swap.tmp 200446 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ8830601129811308851Swap.tmp 218560 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ3941694506422050432Swap.tmp 193139 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ3950023865581740995Swap.tmp 203721 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ4189982944237332227Swap.tmp 163128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ4315424690965123378Swap.tmp 196145 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ4389845801876371276Swap.tmp 164321 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ464254607577831385Swap.tmp 225497 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ4650596755599053749Swap.tmp 190331 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ5430481645517382546Swap.tmp 195204 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ5546932165283143211Swap.tmp 212811 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ6289243012093858124Swap.tmp 275529 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ6487084027444891980Swap.tmp 186344 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ6727290462268406511Swap.tmp 193288 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IUJ7509077364331906340Swap.tmp 214853 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_FA_actual.xls 598528 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_FA_new.xls 1068544 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-1.xls 348672 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-4.xls 359424 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PLAN2009_piloti_actual-7.xls 422400 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-110
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-2
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-38
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-56
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-74
c:\docume~1\Pavel\LOCALS~1\Temp\RtkBtMnt.exe 212992 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\SimChin.bin 16420 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Thai.bin 21987 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\tmp302.tmp 698843 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TWAIN.LOG 1293 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\v013BD3.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\wmp11AU.cab 803998 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\_is2.exe 455600 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{23FD760A-901F-4B8D-8226-6C745DE9D65B}
c:\docume~1\Pavel\LOCALS~1\Temp\{23FD760A-901F-4B8D-8226-6C745DE9D65B}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{23FD760A-901F-4B8D-8226-6C745DE9D65B}\setup.isn 256664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{CA8F32DA-B496-4010-ADEF-C2FD6B05B7ED}
c:\docume~1\Pavel\LOCALS~1\Temp\{CA8F32DA-B496-4010-ADEF-C2FD6B05B7ED}\setup.isn 256664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF3316.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF7A1D.tmp 32768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFCF85.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1047.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6185069067685153093.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6218097067553729068.tmp 65864 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6239527491390291239.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6256048497818517966.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6257252491927341502.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6315774620161349545.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6404932391138724410.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6541216801637119817.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6563835174773904734.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache676384762892530592.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache690214921461215961.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6920625885261553395.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache695810074232096089.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache6984575289149474930.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7015183754652015765.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7130895342937559988.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7202562856614944938.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7214434548258679199.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7397816840444342184.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7594741403314524890.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7777548363558483818.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7828347727310437143.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7921765730375983484.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache7951416550073855594.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JAlbumDateDiffTester7141.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Japanese.bin 24340 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1050417480197163125.tmp 279 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1074423022937289594.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1223980815552694192.tmp 40367 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1388198872006922713.tmp 13 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jar_cache1583822753657813059.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1363.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1407.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1488.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF1561.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF2556.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF2914.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3229.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3236.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3247.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3328.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3373.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3393.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3459.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3563.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3579.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF3716.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRF4080.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS1761.tmp 8704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS2060.tmp 148234 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS2155.tmp 16060 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS2492.tmp 13842 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS2677.tmp 4612 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS3306.tmp 3832668 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS3605.tmp 246374 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~WRS3890.tmp 2207268 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-57
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-58
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-58\plugin-com.honeywell.aes.utility.PDFDownLoadServlet 297012 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-59
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-6
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-60
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-61
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-62
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-63
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-63\plugin-pap.swf 1401 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-64
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-65
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-66
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-67
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-68
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-69
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-7
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-7\plugin-plConf.phtml 739 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-7\plugin-recommendations2.phtml 2281 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-70
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-71
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-71\plugin-crossdomain-1.xml 102 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-71\plugin-crossdomain-2.xml 102 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-71\plugin-crossdomain.xml 298 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-72
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-73
c:\docume~1\Pavel\LOCALS~1\Temp\chrome_installer.log 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\control.xml 12818 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Cookies
c:\docume~1\Pavel\LOCALS~1\Temp\Cookies\index.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CopyFileList
c:\docume~1\Pavel\LOCALS~1\Temp\Corel Paint Shop Pro X Temp Files
c:\docume~1\Pavel\LOCALS~1\Temp\cpJpzyGD.avi.part 1053858 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CR_CAE3D.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\CR_CAE3D.tmp\SETUP_PATCH.PACKED.7Z 1057 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Czech.bin 24321 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\CZ_Advanced_CZ.doc 67584 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\d98a_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\d99b_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\DA.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\DA8BA99.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Danish.bin 22794 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dB21Lxll.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_clwireg.txt 73345 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_netfx20MSI39D7.txt 5069942 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dd_netfx20UI39D7.txt 16180 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JAUReg.log 290 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\java_install.log 49576 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\java_install_reg.log 88989 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\java_install_sp.log 2447 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JeppView_1115___FliteStar.6586057.TPB-1.torrent 18791 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JeppView_1115___FliteStar.6586057.TPB.torrent 18791 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JeppView_1115_____FliteStar.6582814.TPB.torrent 18737 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF88F0.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF96A7.tmp 131072 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF9997.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF9D9A.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFA6D3.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFA9A7.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFAA2B.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFAE0.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFB982.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFC055.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFC59D.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFC86F.tmp 32768 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFC9E4.tmp 65536 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFCAF1.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
c:\docume~1\Pavel\LOCALS~1\Temp\~DFCE8E.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DFCEEF.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\6447_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\6B9.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\6zpE75.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\706f_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\71fc88d.mst 129536 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\72f3_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\730e_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\7c0d_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\8.dir
c:\docume~1\Pavel\LOCALS~1\Temp\8.dir\InstallFlashPlayer.exe 2832544 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\8014_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\8234_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\84f7a48.mst 15630848 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\8b52_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\9913_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\9A.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\9C1D928.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG13.tmp 36049 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG14.tmp 1747 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG15.tmp 625 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG16.tmp 1308 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17.tmp 1200 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG172.tmp 36049 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG173.tmp 1747 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG174.tmp 625 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG175.tmp 1308 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG176.tmp 1200 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG177.tmp 1562 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG178.tmp 2366 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG179.tmp 1355 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17A.tmp 3486 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BCG17B.tmp 2973 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Greek.bin 25093 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzchk002.log 7289 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpsc001.log 2163 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzset002.log 1828 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzstu000.log 2112 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH124E.tmp 302381 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1340.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH138C.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1CFD.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH207D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH24A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2688.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH2E1.tmp 355498 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3885.tmp 12155 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3A88.tmp 440972 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH3FD.tmp 299581 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH55A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH67E.tmp 9776 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHB2D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IHE5A.tmp 307901 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT21DE.xml 2008 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT9172.xml 2240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\OVTthBY9.flv.part 18728304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF3AC9.tmp 44063 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9C24.tmp 46932 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9C2A.tmp 55099 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9C9D.tmp 75861 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CAE.tmp 95735 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CB6.tmp 549849 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CDC.tmp 22920 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CDF.tmp 623128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CE3.tmp 549849 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CE8.tmp 155616 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CEE.tmp 42852 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CF1.tmp 65027 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\1f8e_appcompat.txt 28412 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\2062BEA.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\212274345_20090131-1_MCZB.html 5869 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-75
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-76
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-76\plugin-cj4_article.pdf 2681 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-77
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-77\plugin-com.honeywell.aes.utility.PDFDownLoadServlet 194682 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-78
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-79
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-8
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-8\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-80
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-81
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-82
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-83
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-84
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-85
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-86
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-86\plugin-elegant_V6_spec_120_600.xml 1414 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-87
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-88
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-89
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-9
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-9\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-90
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-91
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-92
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-93
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-94
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-95
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-96
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-97
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-97\plugin-akcniletenky.asp 94353 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-97\plugin-banerXML.asp 1901 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-98
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-99
c:\docume~1\Pavel\LOCALS~1\Temp\msohtmlclip
c:\docume~1\Pavel\LOCALS~1\Temp\msohtmlclip1
c:\docume~1\Pavel\LOCALS~1\Temp\msohtmlclip1\01
c:\docume~1\Pavel\LOCALS~1\Temp\msohtmlclip1\01\clip_colorschememapping.xml 314 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\msohtmlclip1\01\clip_themedata.thmx 3099 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\n0y621.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\n6SE1qds.rar.part 14185520 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NccTemp
c:\docume~1\Pavel\LOCALS~1\Temp\NccTemp\ncc0000.tmp 143840 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NccTemp\ncc0001.tmp 214508 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NclRegPermissions(1).log 2217 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NclRegPermissions(2).log 7978 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NclRegPermissions(3).log 19933 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Sans Wide Bold v3.1.ttf 160428 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Sans Wide BolIta v3.1.ttf 156520 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Sans Wide Italic v3.1.ttf 157296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Sans Wide v3.1.ttf 143840 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Standard Multi Bold v2.1.ttf 216212 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nCommsTempNokia\Nokia Standard Multi v2.1.ttf 214508 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Nero Setup (100126 160417).log 130582 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\ipclog.exe 124200 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\setup.xml 396074 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\setupx.exe 6071592 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90B.cab 38380175 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90LDEU.cab 805759 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90LESP.cab 797567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90LFRA.cab 805759 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90LITA.cab 797567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\ST90LPTB.cab 797567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\stubinfo.cab 3662441 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\unit.msi 3620864 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_15\unit.xml 24863 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_30
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_30\PI90B.cab 11484336 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_30\stubinfo.cab 2017125 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_30\unit.msi 4103680 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_30\unit.xml 8304 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_61
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_61\LC90B.cab 19505911 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_61\unit.msi 48128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_61\unit.xml 8390 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_63
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_63\CC90B.cab 10445481 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_63\stubinfo.cab 2641265 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_63\unit.msi 3600384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_63\unit.xml 7114 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbardeu.png 10725 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbareng.png 10668 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarenu.png 10668 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbaresp.png 10782 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarfra.png 10069 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarita.png 11272 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarnld.png 10893 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarptb.png 10677 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\AskToolbarrus.png 10622 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\Toolbar.exe 2313096 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_75\unit.xml 3542 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_76
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_76\NOU90B.cab 701994 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_76\stubinfo.cab 3000777 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_76\unit.msi 3600384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_app_76\unit.xml 7845 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_msxml-4
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_msxml-4\neroxml.msi 1411584 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_msxml-4\unit.xml 2612 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_NeroProductPatcher_85531
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_NeroProductPatcher_85531\Nero_Product_Patcher_TT85531.msi 7769600 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_NeroProductPatcher_85531\unit.xml 2784 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_vcredist-x86-2005_KB973544
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_vcredist-x86-2005_KB973544\unit.xml 3411 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_vcredist-x86-2005_KB973544\vcredis1.cab 253450 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NERO1005614\unit_tpi_vcredist-x86-2005_KB973544\vcredist.msi 2736640 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FP_PL_PFS_INSTALLER-1.exe 1925560 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\FP_PL_PFS_INSTALLER.exe 1925560 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\French.bin 27246 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\7769540a-10bd-4cac-997c-05026212f48e
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\7769540a-10bd-4cac-997c-05026212f48e\Windows Commander 454
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\7769540a-10bd-4cac-997c-05026212f48e\Windows Commander 454\crack
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\7769540a-10bd-4cac-997c-05026212f48e\Windows Commander 454\crack\WinCmd454_Key.exe 177155 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\7769540a-10bd-4cac-997c-05026212f48e\Windows Commander 454\wc32v454.exe 1362318 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\d0e913ce-8d05-4608-be87-86e8dd3d91f8
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\d0e913ce-8d05-4608-be87-86e8dd3d91f8\DiscWiyard
c:\docume~1\Pavel\LOCALS~1\Temp\FromRemovableMedia\d0e913ce-8d05-4608-be87-86e8dd3d91f8\DiscWiyard\DiscWizardSetup.cs.exe 110423424 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1107.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1132.tmp 148 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1133.tmp 4431 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1134.tmp 128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1137.tmp 9501 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP1138.tmp 864 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP116C.tmp 141 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\FTP116D.tmp 2439 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Russian.bin 26136 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\samples.sar 154974 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SAOWCQw0.xls.part 120251 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\sarscan.log 19701 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SCCLog.txt 2638 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SecurityScan_Release.exe 3598224 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\ServiceConfiguration.log 60 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Set1.tmp 121064 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\set13D.tmp 121064 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\set233C.tmp 118736 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Set2352.tmp 118736 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Set36A4.tmp 118736 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Set5.tmp 121064 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Setup - ToDc PILOT Seagle Air B737 ver 1.0_1.0.zip 4328547 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Setup0000.log 2991 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\setup0001.log 2935 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SetupExe(2010112812540210E0).log 219722 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SetupExe(201011281256521788).log 173204 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\setup_wm.exe 774144 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Silverlight0.log 3738 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SilverlightMSI.log 1021350 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\SilverStreakLog
c:\docume~1\Pavel\LOCALS~1\Temp\lgav-1.m3u 30 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\lgav-2.m3u 34 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\lgav.m3u 30 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\LGAV.pdf 2446882 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\lilo.5292
c:\docume~1\Pavel\LOCALS~1\Temp\ltg14A7.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MaglevExpressTemp
c:\docume~1\Pavel\LOCALS~1\Temp\manual_tl_3000_sirius_cz.doc 3721728 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mbtnqr.exe 61440 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\menc_err2 790412 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\addonscheck.xml 396 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T10.tmp 245760 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T11.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T12.tmp 4096 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T2.tmp 4 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T3.tmp 4 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T4.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T7.tmp 775172 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T8.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\10.0\T9.tmp 4096 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobe\Acrobat\7.0
c:\docume~1\Pavel\LOCALS~1\Temp\AdobeARM.log 329778 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AdobeARM_NotLocked.log 803 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001 59964 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0001
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0001\~efe2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0002
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0002\~efe2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0003
c:\docume~1\Pavel\LOCALS~1\Temp\Adobelm_Cleanup.0001.dir.0003\~efe2.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AdobeSFX.log 1676 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\afd9_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ActiveSync.log 608268 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plf1.tmp 4438 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plf11.tmp 5248 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp\plugin-crossdomain.xml 102 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-1
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-10
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-10\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-100
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-101
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-102
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-103
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-104
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-105
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-106
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-107
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-108
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-108\plugin-click_to_play_with_component_spec_300_250.xml 722 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-109
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-11
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-11\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzwis000.log 1509 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzwrp000.log 2038 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzwrp001.log 1975 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzwrp002.log 2274 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzwup000.log 3179 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hsperfdata_Pavel
c:\docume~1\Pavel\LOCALS~1\Temp\Hungarian.bin 26094 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IEC30.tmp 346602 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\iFlQDl1W.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH10B.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH10B6.tmp 484178 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1176.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH118A.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH118B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH11B0.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH11EE.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1206.tmp 813778 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1207.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1216.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1223.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IH1238.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzdui000.log 4067 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzfwx000.log 1905 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzfwx001.log 4783 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzhsg000.log 3263 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzmsi000.log 2622 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzmsi001.log 3153 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzmsi002.log 12338 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzmsi003.log 1777 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzmsi004.log 1777 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznop000.log 1475 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznop001.log 1521 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznop002.log 1778 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznop003.log 1772 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznop004.log 2287 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzrcv000.log 2194 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzrcv001.log 1893 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzrcv002.log 2347 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzrcv003.log 1893 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzrei000.log 4783 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCBPD0000.log 716 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCBPD0001.log 716 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCBPD0002.log 716 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCNOP0000.log 785 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCNOP0001.log 785 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCNOP0002.log 785 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpqbhp000.log 1496 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWDR00000.log 6635 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000000.log 703 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000001.log 704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000002.log 704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000003.log 704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000004.log 703 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000005.log 704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000006.log 1060 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPQNWT000007.log 704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPSLPSVC0000.log 777 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpznui000.log 22959 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpnp000.log 1397 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpnp001.log 1944 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpnp002.log 1944 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpnp003.log 2237 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl000.log 2248 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl001.log 2281 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl002.log 2927 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl003.log 2292 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl004.log 2297 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl005.log 2249 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl006.log 2245 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzprl007.log 2252 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzpsc000.log 2067 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl000.log 1858 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl001.log 1610 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl002.log 1598 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl003.log 2007 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl004.log 199729 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl005.log 1596 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl006.log 1610 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl007.log 1598 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl008.log 3417 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl009.log 1605 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzshl010.log 1748 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSHIM000.log 705 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSHIM001.log 705 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSHIM002.log 705 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSK00000.log 714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSK00001.log 714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSK00002.log 714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSNMP000.log 713 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSNMP001.log 713 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCSNMP002.log 713 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0000.log 786 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0001.log 735 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0002.log 954 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0003.log 735 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0004.log 954 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\HPZSCUSW0005.log 714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzset000.log 36201 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzset001.log 1828 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwmin000.log 1770 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwMSI_CIOUM32.log 186 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwNetwork.log 186 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwScan.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwToolbox.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwWebReg.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzarp000.log 2486 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzcdl000.log 1850 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzchk000.log 7339 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpzchk001.log 7289 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpw4500G510gm.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpw4500G510gm_Software_Min.log 186 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpw4500_G510gm_Help.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\hpwBufferChm.log 278 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 1 REV10.doc 219648 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 2 REV10-1.doc 117760 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 2 REV10-2.doc 117760 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 2 REV10.doc 117760 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 3 REV10-1.doc 2668032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 3 REV10-2.doc 2668032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 3 REV10-3.doc 2668032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 3 REV10-4.doc 2668032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 3 REV10.doc 2668032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 4 REV10.doc 1362944 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\TGL26 section 5 REV10.doc 244224 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NEW7533.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NEW7533.tmp.exe 2048168 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\NGLALog.txt 9478 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NGLATempNokia
c:\docume~1\Pavel\LOCALS~1\Temp\NGLATempNokia\Nokia Sans Wide Bold v3.1.ttf 160428 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NGLATempNokia\Nokia Sans Wide BolIta v3.1.ttf 156520 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NGLATempNokia\Nokia Sans Wide Italic v3.1.ttf 157296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\NGLATempNokia\Nokia Sans Wide v3.1.ttf 143840 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nodtmpb
c:\docume~1\Pavel\LOCALS~1\Temp\nodtmpb\pr_amon.dll 35896 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\nodtmpb\pr_nod32.dll 23608 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Nokia Communication Centre - Messages
c:\docume~1\Pavel\LOCALS~1\Temp\Norwegian.bin 21975 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nro.log
c:\docume~1\Pavel\LOCALS~1\Temp\nro.log\log
c:\docume~1\Pavel\LOCALS~1\Temp\nro.log\log\npi2_100126_160410.log 3436 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nro.log\log\npi2_100126_160417.log 47681 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nro.log\log\ShellManager_Log.txt 14076 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\nsq2ED3.tmp 2 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\oaLewRBO.EXE.part 3261044 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\divCF.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\divD.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\divE.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\divF.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\DivXSetup.exe 913248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Dočasný adresář 1 pro Audio_Realtek_v5.10.0.5618.zip
c:\docume~1\Pavel\LOCALS~1\Temp\DrNakup4Q2008001.pdf 233273 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2446704_20110414_060010453-Msi0.txt 12424436 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2446704_20110414_060010453.html 496800 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2478658_20110730_150047062-Msi0.txt 12377422 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2478658_20110730_150047062.html 498998 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2518864_20110730_150737234-Msi0.txt 12468872 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2518864_20110730_150737234.html 500512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2539631_20110822_072122562-Msi0.txt 12436298 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft .NET Framework 2.0-KB2539631_20110822_072122562.html 497240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0001).txt 9853 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0001)_Task(0001).txt 403280 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0002).txt 9903 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0002)_Task(0001).txt 304534 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0003).txt 9870 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0003)_Task(0001).txt 117232 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0004).txt 9903 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Microsoft Office 2003 Setup(0004)_Task(0001).txt 323828 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\div1D.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div1E.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div1F.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div20.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div21.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div22.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div23.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div24.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div25.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div26.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div27.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div28.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div29.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2A.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2B.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2C.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2D.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div2E.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_20c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_2d4.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_324.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_33c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_36c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BO_01_2007.doc 33792 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\BTN%Copy%1
c:\docume~1\Pavel\LOCALS~1\Temp\BTN%Copy%1\BTN%Copy%2
c:\docume~1\Pavel\LOCALS~1\Temp\btwinlog.txt 24537 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\bull1.pdf 138331 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\bye68C.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\bye68C.tmp\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\bYSe61kN.htm.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\C164314D.DIR
c:\docume~1\Pavel\LOCALS~1\Temp\C167E58C.DIR
c:\docume~1\Pavel\LOCALS~1\Temp\C16A8FEE.DIR
c:\docume~1\Pavel\LOCALS~1\Temp\C16C0417.DIR
c:\docume~1\Pavel\LOCALS~1\Temp\C16E6075.DIR
c:\docume~1\Pavel\LOCALS~1\Temp\c504_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT9196.xml 2240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\IMT9265.xml 2240 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Autorun.exe 54512 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Autorun.ico 25214 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Autorun.inf 238 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\cs
c:\docume~1\Pavel\LOCALS~1\Temp\Install\cs\setup.exe 843576 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\DataCard_Setup32.exe 143360 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\DataCard_Setup64.exe 206336 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\devsetup2k.exe 258048 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\devsetup32.exe 258048 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\devsetup64.exe 344576 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\uninst.bat 451 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewdcsc.cat 31991 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewdcsc.inf 3889 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewdcsc.sys 23424 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewmdm2k.cat 25039 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewmdm2k.inf 52621 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewnet.inf 13441 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewser2k.cat 25039 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewser2k.inf 12951 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbdev.cat 25054 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbdev.inf 1563 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbdev.sys 101120 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbmdm.sys 102912 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbnet.cat 11980 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win7\ewusbnet.sys 198656 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewdcsc.cat 32064 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewdcsc.inf 3898 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewdcsc.sys 29696 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewmdm2k.cat 25099 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewmdm2k.inf 52621 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewnet.inf 13441 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewser2k.cat 25099 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewser2k.inf 12898 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbdev.cat 25101 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbdev.inf 1567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbdev.sys 114304 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbmdm.sys 117248 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbnet.cat 12004 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\Win764\ewusbnet.sys 243200 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewdcsc.cat 32110 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewdcsc.inf 3889 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewdcsc.sys 23424 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewmdm2k.cat 29653 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewmdm2k.inf 52621 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewnet.inf 12309 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewser2k.cat 29653 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewser2k.inf 12951 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbdev.cat 29668 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbdev.inf 1563 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbdev.sys 101120 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbmdm.sys 102912 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbnet.cat 29662 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista\ewusbnet.sys 112640 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewdcsc.cat 32170 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewdcsc.inf 3898 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewdcsc.sys 29696 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewmdm2k.cat 29713 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewmdm2k.inf 52639 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewnet.inf 12309 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewser2k.cat 29713 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewser2k.inf 12898 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbdev.cat 29728 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbdev.inf 1567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbdev.sys 114304 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbmdm.sys 117120 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbnet.cat 29709 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinVista64\ewusbnet.sys 133632 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewdcsc.cat 32091 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewdcsc.inf 3889 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewdcsc.sys 24448 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewmdm2k.cat 29647 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewmdm2k.inf 52621 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewnet.inf 12309 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewser2k.cat 29647 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewser2k.inf 12951 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbdev.cat 29649 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbdev.inf 1563 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbdev.sys 100736 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbmdm.sys 102528 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbnet.cat 29656 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install\Drivers\WinXp\ewusbnet.sys 113280 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\Install\en
c:\docume~1\Pavel\LOCALS~1\Temp\Install\en\setup.exe 828888 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\install.cfg 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\install_log.log 104 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Install_log.txt 9356 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\InstTemp0
c:\docume~1\Pavel\LOCALS~1\Temp\InstTemp0\userinstall.dll 188416 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\inx1F6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\inx217.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\inx6.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\isp141.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp141.tmp\_Setup.dll 380928 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\isp2340.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp2340.tmp\_Setup.dll 380928 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\isp2356.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp2356.tmp\_Setup.dll 380928 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\isp36A8.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp36A8.tmp\_Setup.dll 380928 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\isp5.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp5.tmp\_Setup.dll 368640 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\isp9.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\isp9.tmp\_Setup.dll 368640 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\4A36B7E.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4aed_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4aJ0omHM.zip.part 1437633 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4BF5368C.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4c80_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4hr52B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\4iv9wdji.bmp 238054 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\5486_appcompat.txt 54364 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\589hehnn.bmp 48454 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\5e5720.mst 12800 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\615f_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-111
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-112
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-113
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-114
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-115
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-116
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-117
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-118
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-119
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-12
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-12\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-120
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-121
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-122
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-123
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-124
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-125
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-126
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-127
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-128
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-129
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-13
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-13\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-130
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-131
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-14
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-14\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-15
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-15\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-16
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-16\plugin-dynamic.php 368 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-17
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-17\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-18
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-18\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-19
c:\docume~1\Pavel\LOCALS~1\Temp\plugtmp-19\plugin-dynamic.php 370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_bYnu6doFaC8X9gp7vCjd 28704 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_dN0188haUU0cf0H 229404 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_dZKMyDfg9sSB4rayxPll 1544 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_e3IEDHefMWoEl3N1MeXt 1024 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_e3IEDHefMWoEl3N1MeXt-journal 1544 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_feEd4BSK4oFGLrYsKKk2 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_fZk8LYtbs6KIhvrzTg2G 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_gccTHwLchkopXV98bmNr 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_Iyo6TtO7NJ2YenUYg2FH 28700 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\etilqs_MA8kCWTVeGS2TUJmxiPc 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{28F7E0AA-AE63-45E4-B99C-702B1457F451}
c:\docume~1\Pavel\LOCALS~1\Temp\{28F7E0AA-AE63-45E4-B99C-702B1457F451}\{153F839F-0A63-41D8-890F-7324C0E13743}
c:\docume~1\Pavel\LOCALS~1\Temp\{28F7E0AA-AE63-45E4-B99C-702B1457F451}\{153F839F-0A63-41D8-890F-7324C0E13743}\InstallHelper.dll 114688 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{2D70A2E4-7765-4905-88BB-8D31439EAD9F}
c:\docume~1\Pavel\LOCALS~1\Temp\{2D70A2E4-7765-4905-88BB-8D31439EAD9F}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}\{32C74893-0243-4235-A6F3-201F0E5D2C03}
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}\{32C74893-0243-4235-A6F3-201F0E5D2C03}\wc.dll 532480 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}\{32C74893-0243-4235-A6F3-201F0E5D2C03}\wc.dlln 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}\{32C74893-0243-4235-A6F3-201F0E5D2C03}\wc.dllo 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{2F99725F-B76B-4B16-B29E-A966654DBE88}\{32C74893-0243-4235-A6F3-201F0E5D2C03}\wcs.dll 73728 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{36A5B311-754E-4817-97F4-EB9E7566FB35}
c:\docume~1\Pavel\LOCALS~1\Temp\{36A5B311-754E-4817-97F4-EB9E7566FB35}\ISSetup.dll 492032 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{36A5B311-754E-4817-97F4-EB9E7566FB35}\_Setup.dll 164784 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{397E31AA-0D78-4649-A01C-339D73A2ED35}_NSS_31864.exe 773064 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{405C6494-CD3A-4892-A520-712324AF0D99}
c:\docume~1\Pavel\LOCALS~1\Temp\{405C6494-CD3A-4892-A520-712324AF0D99}\{1BC2ACA9-65FA-4B3B-8CF7-E1DC3428F102}
c:\docume~1\Pavel\LOCALS~1\Temp\{5D532E73-1A8B-4B9E-8E99-288C725908C4}
c:\docume~1\Pavel\LOCALS~1\Temp\{5D532E73-1A8B-4B9E-8E99-288C725908C4}\Setup.exe 379424 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{5F17C2D9-22C8-4517-B99C-1E3AACCEA9D9}
c:\docume~1\Pavel\LOCALS~1\Temp\{5F17C2D9-22C8-4517-B99C-1E3AACCEA9D9}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{D0504542-5A56-4CC6-B13B-9E8681D4D3CE}
c:\docume~1\Pavel\LOCALS~1\Temp\{D0504542-5A56-4CC6-B13B-9E8681D4D3CE}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}
c:\docume~1\Pavel\LOCALS~1\Temp\{D0504542-5A56-4CC6-B13B-9E8681D4D3CE}\{401E3FE3-0ADA-4FCD-A4FE-8CA46E17F02D}\TestWrite.txt 6 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{D9DA9C17-699B-48EA-8AF4-DADAD1A20948}
c:\docume~1\Pavel\LOCALS~1\Temp\{D9DA9C17-699B-48EA-8AF4-DADAD1A20948}\_Setup.dll 333120 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{DDD04543-76E0-4F56-9C16-28380201621A}
c:\docume~1\Pavel\LOCALS~1\Temp\{DDD04543-76E0-4F56-9C16-28380201621A}\{6E0D150E-E486-4D20-BB7F-E091032C34D9}
c:\docume~1\Pavel\LOCALS~1\Temp\{E30FF504-D3BA-4BFE-B270-6DA9DAF65B39}
c:\docume~1\Pavel\LOCALS~1\Temp\{E30FF504-D3BA-4BFE-B270-6DA9DAF65B39}\ISSetup.dll 492164 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{E30FF504-D3BA-4BFE-B270-6DA9DAF65B39}\_Setup.dll 164784 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\{E4177F0C-9C8B-4FAA-8BFB-EBE14D34D233}
c:\docume~1\Pavel\LOCALS~1\Temp\{E4177F0C-9C8B-4FAA-8BFB-EBE14D34D233}\Disk1
c:\docume~1\Pavel\LOCALS~1\Temp\{E9C1E0AC-C9B2-4c85-94DE-9C1518918D02}.tlb 3596 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\{FD89A1E8-04E1-421E-B670-327CC1F7F84E}
c:\docume~1\Pavel\LOCALS~1\Temp\{FD89A1E8-04E1-421E-B670-327CC1F7F84E}\MsiStub
c:\docume~1\Pavel\LOCALS~1\Temp\{FF3713E1-EF74-4011-8718-5136EFFB849E}
c:\docume~1\Pavel\LOCALS~1\Temp\{FF3713E1-EF74-4011-8718-5136EFFB849E}\{CF9BA69F-3882-4DD6-B74A-19B2933A59A4}
c:\docume~1\Pavel\LOCALS~1\Temp\~566.tmp 3567 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF1401.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF18EA.tmp 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF1C97.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\~DF2CD9.tmp 512 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CF9.tmp 54693 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CFC.tmp 623128 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9CFF.tmp 549849 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9D17.tmp 42852 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9D1A.tmp 54693 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9D1D.tmp 65027 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9D34.tmp 1410248 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDF9EA0.tmp 1122904 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\PDFAA01.tmp 38453 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET158D.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET257F.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET34F1.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET3D11.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET58B5.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET6215.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET6A89.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET71DA.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET7797.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JET7E44.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JETB74B.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\JETD14E.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jinstall.cfg 1305 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\jinstaller142_19.exe 1074472 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\JjWOU4JU.html.part 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\div3.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div30.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div31.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div32.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div33.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div34.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div35.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div36.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div36.tmp\div37.tmp 1607536 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\div36.tmp\div3C.tmp 917856 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\div37.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div38.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div39.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3A.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3B.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3C.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3D.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3E.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div3E.tmp\div3F.tmp 1607536 bytes executable
c:\docume~1\Pavel\LOCALS~1\Temp\div3F.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div40.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_bbc.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_c5c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_c8.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_c80.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_ce0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_d54.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_db4.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_e3c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_e4c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_f1c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_f78.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_f84.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_f88.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\pft13.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\DSP85.tmp 3444 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Dutch.bin 25758 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\dw.log 529 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\E24FE5D.dmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ea9a2a06699e81d1eebbb389740c6bfe-1.PDF 3541606 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ea9a2a06699e81d1eebbb389740c6bfe.PDF 143714 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Easy Photo Print2EPQuicker.log 154 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\eecb_appcompat.txt 52664 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\amline_data.xml 38481 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\amline_settings.xml 2032 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\APNLogs
c:\docume~1\Pavel\LOCALS~1\Temp\APNLogs\ci.log 659346 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\APNLogs\iw.log 7848 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\aqBuH0IY.torrent.part 10842 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Arabic.bin 20991 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ARC_Guide.pdf 127056 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\AskSearch
c:\docume~1\Pavel\LOCALS~1\Temp\AskSearch\partnercobranding.dat 27 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASKSUTBLOG 573370 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASPNETSetup_00000.log 4562 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASPNETSetup_00001.log 5158 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASPNETSetup_00002.log 5158 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASPNETSetup_00003.log 5158 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ASPNETSetup_00004.log 5158 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod74E.tmp 14688 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod754.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mod915F.tmp 5 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\mozilla-media-cache
c:\docume~1\Pavel\LOCALS~1\Temp\MPC9A.tmp 8728 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ms4658.tmp 9500 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ms4706.tmp 9500 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\ms4917.tmp 0 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSI248f7.LOG 296 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSI3c5a8.LOG 526 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSI3fd32.LOG 480 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSI4aa9f.LOG 12270 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSI4d09f.LOG 480 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSIad774.LOG 1892 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSIb7bb6.LOG 454 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\MSIfbc5a.LOG 960 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\msohtml
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_76c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_784.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_834.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_86c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_884.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_88c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_8a0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_8a4.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_8c0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_8e8.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_918.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_974.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_9a0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_a64.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_ab0.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_b2c.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_b34.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\Perflib_Perfdata_bac.dat 16384 bytes
c:\docume~1\Pavel\LOCALS~1\Temp\div42.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div43.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div44.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div45.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div46.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div47.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div48.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div49.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4A.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4B.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4C.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4D.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4E.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div4F.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div5.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div50.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div51.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div52.tmp
c:\docume~1\Pavel\LOCALS~1\Temp\div53.tmp
.
sken byl úspešně dokončen
skryté soubory: 2255
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\6.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-854245398-1085031214-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Param2"=""
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:00000013
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2608)
c:\windows\system32\btmmhook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\netdde.exe
c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files\Common Files\Seagate\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\windows\System32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\MICROS~4\rapimgr.exe
c:\docume~1\Pavel\LOCALS~1\Temp\RtkBtMnt.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
.
**************************************************************************
.
Celkový čas: 2011-09-07 20:26:36 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-07 18:26
.
Před spuštěním: Volných bajtů: 120 918 016 000
Po spuštění: Volných bajtů: 122 401 243 136
.
- - End Of File - - 098EFD78D35BCCC65C59948C50BA9CA8

Ten šílený nezabitelný proces už neběží, Firefox i Chrome už můžou na web a skype taky , to vypadá, že je na světě zas o jednoho bacila míň

, ale předpokládám, že to ještě není všechno... Od netu jsem to radši hned odpojil, není tam teď žádný antivir a i firewall windows je vypnutý...

#8 Příspěvek od **Rudy** » 07 zář 2011 20:12

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Collect::
c:\windows\system32\6.tmp
c:\windows\trz5A.tmp
c:\windows\system32\c_42322.nl_

Folder::
c:\docume~1\Pavel\LOCALS~1\Temp

Dirlook::
c:\windows\tmp

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

paja · #9 Příspěvek od **paja** » 07 zář 2011 20:33

Provedeno, combofix se spustil a vypadá to, že to zase celý projede, je to tak správně ?

#10 Příspěvek od **Rudy** » 07 zář 2011 20:37

paja píše:Provedeno, combofix se spustil a vypadá to, že to zase celý projede, je to tak správně ?

Jistě. Ale bude mazat jen to, co má ve skriptu.

paja · #11 Příspěvek od **paja** » 07 zář 2011 20:59

Provedeno. Zde je log, jen mně trochu znepokojuje, že počítač pořád hlásí, že soubor nebo adresář C:\document and settings\pavel\local settings\temp je poškozen a je nečitelný.

ComboFix 11-09-07.04 - Pavel 07.09.2011 21:32:58.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2043.1316 [GMT 2:00]
Spuštěný z: c:\documents and settings\Pavel\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Pavel\Plocha\CFScript.txt
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
file zipped: c:\windows\system32\6.tmp
file zipped: c:\windows\system32\c_42322.nl_
file zipped: c:\windows\trz5A.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\6.tmp
c:\windows\system32\c_42322.nl_
c:\windows\trz5A.tmp
c:\docume~1\Pavel\LOCALS~1\Temp . . . . nemohl být smazán
.
c:\windows\system32\drivers\cdrom.sys . . . je infikován!! . . .Failed to restore. Attempting to replace on reboot
.
Nakažená kopie c:\windows\system32\drivers\cdrom.sys byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP748\A0116334.sys
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MEMSWEEP2
-------\Service_MEMSWEEP2
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-07 do 2011-09-07 )))))))))))))))))))))))))))))))
.
.
2011-09-07 15:54 . 2011-09-07 15:54 -------- d-----w- C:\rsit
2011-09-07 10:05 . 2011-09-07 10:05 -------- d-----w- C:\!KillBox
2011-09-07 08:49 . 2011-09-07 08:49 388096 ----a-r- c:\documents and settings\Pavel\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-09-07 08:49 . 2011-09-07 08:49 -------- d-----w- c:\program files\Trend Micro
2011-09-07 08:24 . 2011-09-07 08:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Lavasoft
2011-09-07 07:37 . 2011-09-07 17:11 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-09-07 07:37 . 2011-09-07 17:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-03 23:54 . 2008-04-14 03:22 24576 ----a-w- c:\windows\system32\wsock32.dll
2011-09-03 23:54 . 2001-10-24 10:25 23552 ----a-w- c:\windows\system32\wsock32_orig_z_CD.dll
2011-09-03 21:54 . 2011-09-03 21:54 -------- d-----w- c:\windows\system32\wbem\Repository
2011-09-03 20:49 . 2011-09-03 20:49 -------- d-----w- c:\program files\CCleaner
2011-09-03 17:41 . 2011-09-07 17:08 -------- d-----w- c:\program files\Sophos
2011-09-03 15:18 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2011-09-03 13:09 . 2011-09-03 13:22 -------- d-----w- c:\windows\tmp
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2011-09-03 09:24 . 2002-09-20 17:35 50688 ----a-w- C:\i8042prt.sys
2011-09-03 09:20 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\i8042prt.sys
2011-09-02 09:21 . 2011-09-02 09:21 -------- d-----w- c:\program files\AVAST Software
2011-09-01 21:31 . 2011-09-03 19:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\Tific
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Local Settings\Data aplikací\Symantec
2011-08-27 19:47 . 2011-08-27 19:47 -------- d-----w- c:\program files\Windows Sidebar
2011-08-27 19:20 . 2011-08-27 19:20 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ESET
2011-08-27 19:01 . 2011-08-27 19:23 -------- d-----w- c:\program files\Eset
2011-08-22 07:16 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2011-08-22 07:16 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2011-08-19 04:24 . 2011-08-19 04:24 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\McAfee
2011-08-17 20:50 . 2011-08-17 20:50 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\FileHunter
2011-08-14 22:54 . 2007-09-07 15:33 135168 ----a-w- c:\windows\system32\EEBAPI.dll
2011-08-14 22:54 . 2007-03-28 16:26 65536 ----a-w- c:\windows\system32\EEBUtil.dll
2011-08-14 22:54 . 2006-12-19 16:31 110592 ----a-w- c:\windows\system32\EEBDSCVR.dll
2011-08-14 22:29 . 2011-08-14 22:30 -------- d-----w- c:\program files\EpsonNet
2011-08-14 22:28 . 2011-08-14 23:02 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EPSON
2011-08-14 22:27 . 2009-09-16 22:00 342016 ----a-w- c:\windows\system32\eswiaud.dll
2011-08-14 22:27 . 2009-04-30 22:00 15872 ----a-w- c:\windows\system32\escdev.dll
2011-08-14 22:27 . 2009-04-30 22:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-01 21:37 . 2008-09-21 01:49 90112 ----a-w- c:\windows\DUMP499b.tmp
2011-08-02 15:27 . 2011-06-03 01:51 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2002-08-29 01:59 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2001-10-25 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2008-12-30 00:08 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2002-09-20 18:05 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2002-09-20 18:05 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2008-12-30 01:39 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2001-10-25 12:00 17408 ------w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2008-12-30 01:39 389120 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2002-09-20 18:05 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-08-29 06:29 . 2011-03-25 21:35 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\windows\tmp ----
.
2008-12-30 07:33 . 2011-09-03 13:09 262144 ----a-w- c:\windows\tmp\sam.bak
2008-12-30 07:33 . 2011-09-03 13:09 262144 ----a-w- c:\windows\tmp\security.bak
2008-12-30 07:32 . 2011-09-03 11:05 524288 ----a-w- c:\windows\tmp\default.bak
2008-12-30 07:32 . 2011-09-03 13:09 32505856 ----a-w- c:\windows\tmp\software.bak
2008-12-30 07:32 . 2011-09-03 13:09 15204352 ----a-w- c:\windows\tmp\system.bak
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
.
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
.
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
.
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
.
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
.
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
.
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
.
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
.
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
.
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
.
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2004-08-17 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll
.
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
[-] 2004-08-17 14:49 . B44F68274AB7B8A54E9AD74AFF0EFAAC . 806912 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
.
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
.
[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2004-08-17 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
.
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
.
[-] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB2347290$\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2004-08-17 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
.
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2010-08-23 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\$NtUninstallKB2296011$\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . D7B7AE36A2EBA312AC4B53862019B3F5 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2004-08-17 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-17 . F76B3003366A205E05AFC0D034C7D3E9 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2002-09-20 . D12F83B2037A01BB97A97F3EA54DD71F . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
[-] 2001-10-25 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
.
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
.
[-] 2008-07-07 20:32 . 398314DF0B21338C4996B469101750D1 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:19 . 3440C414044935B124B5821C0994B37F . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-17 14:49 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll
.
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
.
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-17 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
.
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2004-08-17 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
.
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
.
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\mshtml.dll
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2011-07-22 . 985518A3361129FD7CACBB9611E13504 . 3615744 . . [7.00.6000.21305] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtml.dll
[-] 2011-04-25 . D6546C0AE29DF915DD99BB9193229D97 . 3608576 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\mshtml.dll
[-] 2011-04-25 . DEE9BFCEF3C4807F79FE2498E34EC4F0 . 3610624 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mshtml.dll
[-] 2011-02-17 . 459804329509317CB91E2424DCE1316A . 3607040 . . [7.00.6000.17097] . . c:\windows\ie7updates\KB2530548-IE7\mshtml.dll
[-] 2011-02-17 . A89508E7A9396EA9B82AD8D0E5C248C5 . 3609600 . . [7.00.6000.21299] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mshtml.dll
[-] 2010-11-06 . 3AC8AB55B47DB51B07454A1D2246E7F7 . 3604480 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\mshtml.dll
[-] 2010-11-06 . 839FFC69550E07EF43A94C932E49E520 . 3607040 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mshtml.dll
[-] 2010-09-09 . CA15720E7B3B8FD2E7F12C8A635A6308 . 3601920 . . [7.00.6000.17092] . . c:\windows\ie7updates\KB2416400-IE7\mshtml.dll
[-] 2010-09-09 . C5BC248010B1B6346314AE420D7ED454 . 3605504 . . [7.00.6000.21294] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mshtml.dll
[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\mshtml.dll
[-] 2010-06-24 . 8A1385BF9CD3B394F266C8C5ACFEC5E0 . 3603968 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtml.dll
[-] 2010-05-04 . 313C9A62085098043B441652B7491665 . 3600384 . . [7.00.6000.17063] . . c:\windows\ie7updates\KB2183461-IE7\mshtml.dll
[-] 2010-05-04 . A85A3A10CA88BD7861D1859183559ED5 . 3603456 . . [7.00.6000.21264] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\mshtml.dll
[-] 2010-03-11 . 233FE995790E850D3D4B1AAD02CE3220 . 3599872 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\mshtml.dll
[-] 2010-03-11 . C8969C224E767DFFF5F2E2607E484810 . 3602944 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
[-] 2010-01-05 . D563E48DB8B998E44400C9C9BE2D6ECD . 3599360 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\mshtml.dll
[-] 2010-01-05 . 5DA02EE50F8FC661964857F21A2AE606 . 3602944 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtml.dll
[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtml.dll
[-] 2009-10-21 . 80B95B28B9E587AFFC7EB33DCF9F9E1F . 3598336 . . [7.00.6000.16939] . . c:\windows\ie7updates\KB976325-IE7\mshtml.dll
[-] 2009-10-21 . 442FC9D0BC1F64557B5106E0E7293B20 . 3602432 . . [7.00.6000.21142] . . c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . 7CE28B79DBBCECFD442F85000292DFB9 . 3598336 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 52809FB433B19A60DB827C690447AD6C . 3600384 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2009-07-19 . 6EDDB6AE1F6B387EEA08F013A2FD6463 . 3597824 . . [7.00.6000.16890] . . c:\windows\ie7updates\KB974455-IE7\mshtml.dll
[-] 2009-07-19 . 347FBA88D4C2C0D4FD4AA2EDCD300270 . 3600384 . . [7.00.6000.21089] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
[-] 2009-04-29 . 8B27B2CC3C6376C67586E3A0DD7732CC . 3596288 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\mshtml.dll
[-] 2009-04-29 . 46C3D119A366232907CD32A609A276B2 . 3598336 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-02-21 . 920B2B7C54C6B102A98EE54C56134CEC . 3596800 . . [7.00.6000.21015] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . DB1BCEDF3C640170A9E78E199516A8C9 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-16 . 95E1214DBB029B3D37076999B53407D6 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . D049549814B44670C88C0C3777D24FFA . 3596288 . . [7.00.6000.20996] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . A3F482D8B827DDFBDA3F47B922DF5020 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . E32432E44F926075122F5B17E224ABF5 . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-12-12 . 75D4E9856CAC441006C11AB529C1C288 . 3081216 . . [6.00.2900.3492] . . c:\windows\ie7\mshtml.dll
[-] 2008-12-12 . 74EB9C0ECFBF18B78E2A1EA73AADB13C . 3088384 . . [6.00.2900.3492] . . c:\windows\$hf_mig$\KB960714\SP2QFE\mshtml.dll
[-] 2008-12-12 . 0E5ED45F7D6CBBCC973C92247FBE9F30 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . 96AD32D5C30A1F79F487A99BC1D5AFE9 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3GDR\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\mshtml.dll
[-] 2008-10-16 . 6FE6816E7E6677FF4E47E5FC470C42CC . 3088384 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\mshtml.dll
[-] 2008-10-16 . 2A9F87DE02E61CFB762121C160E87F6A . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-10-16 . 793E26EF8767C58436A3B40A0899B180 . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2007-08-13 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB960714$\mshtml.dll
.
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-17 . AB47015B67531572BE46C0C08222C84C . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
[-] 2002-08-29 . 1B2C477D8847E4123DD8761D2E9008F7 . 323072 . . [7.0.2600.1106] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll
[-] 2001-10-25 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
.
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$NtUninstallKB2509553$\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . A6E79B60AC73241E5721AB6A573D2B24 . 247296 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 37BABA5DBD9027837FDC27E5D6EF33E1 . 247296 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-17 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll
.
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
.
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
.
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
.
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
.
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
.
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2004-08-17 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
.
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2004-08-17 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\user32.dll
.
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
.
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\wininet.dll
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\dllcache\wininet.dll
[-] 2011-06-21 . 923CCA1F768308928E2CD58D10D964DA . 841216 . . [7.00.6000.21302] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\wininet.dll
[-] 2011-04-25 . 541D6B55FAC20DD4A8E578109878D6C1 . 832512 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\wininet.dll
[-] 2011-04-25 . DF61EDDB3EA1571C99D8C60B300817E2 . 841216 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\wininet.dll
[-] 2011-02-17 . 01F315784610D7CAD81478C091F57696 . 832512 . . [7.00.6000.17096] . . c:\windows\ie7updates\KB2530548-IE7\wininet.dll
[-] 2011-02-17 . 260B22FCC9582A5C360A309EC2C3D8D2 . 841216 . . [7.00.6000.21298] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\wininet.dll
[-] 2010-11-06 . 43A169D0367A4105491A76C2AAE6A1FD . 832512 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\wininet.dll
[-] 2010-11-06 . 2BB8C340B7D1293B88587D2C4B72506F . 841216 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\wininet.dll
[-] 2010-09-09 . 41DD413E4546E25E0D0C5B8B7DEE1967 . 832512 . . [7.00.6000.17091] . . c:\windows\ie7updates\KB2416400-IE7\wininet.dll
[-] 2010-09-09 . 40B58A838D691766E19FA3C21B16EC41 . 841216 . . [7.00.6000.21293] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\wininet.dll
[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\wininet.dll
[-] 2010-06-24 . 5A2EC6E4AE30B8CAF53389A286E39C23 . 841216 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\wininet.dll
[-] 2010-05-04 . 1497FB3C1BC993A5F263FB57E0AD63D3 . 832512 . . [7.00.6000.17055] . . c:\windows\ie7updates\KB2183461-IE7\wininet.dll
[-] 2010-05-04 . 3D4713D326A245AAE068E7148C08AA77 . 841216 . . [7.00.6000.21256] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\wininet.dll
[-] 2010-03-11 . 366F583DBB53049DDFB04D6F7BF2795C . 832512 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\wininet.dll
[-] 2010-03-11 . 894D1910F23ABB82A19F4E2F1966271E . 841216 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
[-] 2010-01-05 . 9BD776679C4656E0CEA5E8BFB9CFD33B . 832512 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\wininet.dll
[-] 2010-01-05 . 0D90D150ED0DD4C673C627C52D3F7149 . 841216 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll
[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\wininet.dll
[-] 2009-08-29 . 422C96661C35C7D6DAC7A58A1D6BB145 . 832512 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976325-IE7\wininet.dll
[-] 2009-08-29 . 7CA27BB855E6B8CC4725582501197E39 . 840704 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 155CEA8BCA8349B1DB7B8142BA95F6AE . 828928 . . [7.00.6000.21073] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 4121C2AFFC37600A4710F63AD8017CF9 . 827392 . . [7.00.6000.16876] . . c:\windows\ie7updates\KB974455-IE7\wininet.dll
[-] 2009-04-29 . D8B3732B92CF879ADE65CCE9361D36FB . 827392 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\wininet.dll
[-] 2009-04-29 . C6D7F3DF74C49ED8E01CB18272EA0CCA . 828928 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . 3D7B87D8102C41BABBE5922B5275AA7C . 828416 . . [7.00.6000.21020] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . BA2611F55D9AE29554008ADBC49D7664 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2008-12-20 . A039CE5F34BF98760F877B29E5A1D4CD . 827904 . . [7.00.6000.20978] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . 793DA751C812EFC3C6786BBD3B8489A8 . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\wininet.dll
[-] 2008-10-16 . 20275EA77612128219308D1BFAC3F7AB . 660480 . . [6.00.2900.3462] . . c:\windows\ie7\wininet.dll
[-] 2008-10-16 . DC068C9C851B3F601D91BFA93E053993 . 668672 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\wininet.dll
[-] 2008-10-16 . 370940E124256D20DE4CA7E51377335C . 668160 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 8E7DE90524F7DD5DB33CC38AD9A1B0B4 . 667136 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2007-08-13 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB958215$\wininet.dll
.
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
.
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
.
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-17 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
.
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\regedit.exe
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
[-] 2004-08-17 . CB5A91928D94224E7E30EE277B45E8A3 . 147968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
.
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\ole32.dll
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\dllcache\ole32.dll
[-] 2010-07-16 . C85BE0CF9C91EB64CECA1D639D71D4CC . 1288704 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB979687$\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2004-08-17 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ole32.dll
.
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
[-] 2010-04-16 . 6BE004F9FCEECA6536385D5CB59BFD37 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\$NtUninstallKB981322$\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
[-] 2004-08-17 . E28340F6CB7BAC3EACDA9C74A0BE42BE . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
.
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
[-] 2004-08-17 . FC727882241CD48E243868DD8401AB60 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
.
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
.
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
.
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
.
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2004-08-17 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
.
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
.
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
.
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
.
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
[-] 2004-08-17 . FAABA83BE47C5B15F620FAA53267A9B8 . 345088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
.
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
.
[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
.
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
.
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
[-] 2004-08-03 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys
.
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
.
[-] 2010-09-18 07:18 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\$NtUninstallKB2387149$\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2001-10-25 12:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
.
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
.
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\ServicePackFiles\i386\mspmsnsv.dll
.
[-] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-04-28 . F7648719DB795F098BA7F2AE67150182 . 2026496 . . [5.1.2600.5973] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . D46E1BB887F3340430D10DA536FE79E1 . 2026496 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . B2CEA3C57AA8230C7BCC0B2AF35EC55A . 2025984 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . C50A3A3C9724135FFBD9CB31355F9341 . 2025984 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
[-] 2009-02-09 . 6DD6966FA0FF770A3E5545875557C7F1 . 2025984 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 7FFD251BA8F8DAD189C2C6B6C1552319 . 2017792 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2008-08-14 . 6BB160864CAABEEA24D6BA9EDE18B641 . 2065152 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
[-] 2008-08-14 . 09CD607918C3F5600D8A111155F62CA6 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
[-] 2008-08-14 . 6045C7424106CCA4C9970C7230BD6253 . 2025984 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-14 . 9F12E026DC0B0C43F521114EFB3A3ACC . 2025984 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2004-08-17 . 7715EDDD01EDFEF9EF335D29C6DFE212 . 2017280 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntkrnlpa.exe
.
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-17 14:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
.
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2004-08-17 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
.
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
.
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
.
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
.
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-17 14:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
.
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[-] 2004-08-17 . E472BDA53A4DCD2142143AF9FD25C99A . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-04-28 . 431278D0EF7518BA499720122F4ED86F . 2148352 . . [5.1.2600.5973] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-16 . CD79AD67BF88021BB60B2602D1947FB3 . 2148352 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 07A58A2A4460A4B7A58E0920F4CFA729 . 2147328 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-08-04 . 3742270B8C90A97A0BDD25DED1201AA9 . 2147328 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 . 6499BF91CF62B4319D6ED7E99D0B6998 . 2147328 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 0634DC30949A2E1ACC1D810CEC245D17 . 2138112 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2008-08-14 . C45C335F78C90DC75C05D5260B6888C7 . 2188160 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
[-] 2008-08-14 . 91F18AB1E9ACBF6E27A5545A8F57C89B . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
[-] 2008-08-14 . FFEB7726951F6D2859DF12FBC51F0188 . 2147328 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2008-04-14 . 27C7A7AED8A477F6A0C7D3AD00AB9419 . 2147328 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2004-08-17 . 84FEF6BE553ACC66729F5D4113F53310 . 2150400 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntoskrnl.exe
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
[-] 2004-08-17 . 2CEEBB402187AE56B585701F3D191FB3 . 176128 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
.
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
[-] 2004-08-17 . 0645CCDDDD27F96EEA3534C1DEF736D9 . 333824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
.
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
[-] 2004-08-17 . B356DD67178B22A8C2FBD47316CCB43B . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
.
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
[-] 2004-08-17 . 630A1012AF129918D2E2D70727D69351 . 8192 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-09-07_18.14.34 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-09-07 19:41 . 2011-09-07 19:41 16384 c:\windows\Temp\Perflib_Perfdata_65c.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-12-07 323392]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"FileHunter Check for updates"="c:\documents and settings\Pavel\Data aplikací\FileHunter\update.exe" [2011-07-17 810096]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-09 94208]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-09 1028096]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-08 13594624]
"nwiz"="nwiz.exe" [2008-12-08 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-08 86016]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2008-08-05 53248]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2007-07-12 233472]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2007-07-12 131072]
"RTHDCPL"="RTHDCPL.EXE" [2008-08-05 16862208]
"EPSON Stylus DX4800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"DiscWizardMonitor.exe"="c:\program files\Seagate\DiscWizard\DiscWizardMonitor.exe" [2007-09-10 1188152]
"AcronisTimounterMonitor"="c:\program files\Seagate\DiscWizard\TimounterMonitor.exe" [2007-09-10 1962216]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Seagate\Schedule2\schedhlp.exe" [2007-09-04 148760]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"RCApp"="c:\program files\gigabyte\RCApp\U7000RCApp.exe" [2010-01-26 634368]
"ChangeFilterMerit"="c:\program files\NewSoft\Presto! PVR\ChangeFilterMerit.exe" [2007-06-08 51280]
"Presto! PVR Monitor"="c:\program files\NewSoft\Presto! PVR\Monitor.exe" [2008-08-08 153424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"FUFAXSTM"="c:\program files\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-12-02 847872]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-09-18 2412032]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Pavel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Jalbum8.1\\Jalbum.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"c:\\Program Files\\European Aeronautical Group\\ToDc PILOT SEAGLE AIR B737\\TODC PILOT.exe"=
"c:\\Program Files\\EpsonNet\\EpsonNet Setup\\tool10\\ENEasyApp.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\WINDOWS\\twain_32\\escndv\\escndv.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\EPQuicker.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\DspReadMe.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\pumpa.exe"=
"c:\\Program Files\\DivX\\DivX Plus Player\\DivX Plus Player.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Update\\GoogleUpdate.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Speed-O-Meter\\netspeed.exe"=
"c:\\Program Files\\DivX\\DivX Update\\DivXUpdate.exe"=
"c:\\Program Files\\DAEMON Tools Lite\\DTLite.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EProjManager.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\update.exe"=
"c:\\Program Files\\Nokia\\Nokia PC Suite 7\\PCSuite.exe"=
"c:\\Program Files\\Outlook Express\\msimn.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\ESTsoft\\ALUpdate\\ALUpdate.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\egui.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\E_SAG4ST.EXE"=
"c:\\Program Files\\Common Files\\soft602\\PrnPack.exe"=
"c:\\Program Files\\Common Files\\EPSON\\EBAPI\\eEBAgent.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\WINDOWS\\system32\\mstsc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundTimestampRequest"= 1 (0x1)
"AllowInboundMaskRequest"= 1 (0x1)
"AllowInboundRouterRequest"= 1 (0x1)
"AllowOutboundDestinationUnreachable"= 1 (0x1)
"AllowOutboundSourceQuench"= 1 (0x1)
"AllowOutboundParameterProblem"= 1 (0x1)
"AllowOutboundTimeExceeded"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
"AllowOutboundPacketTooBig"= 1 (0x1)
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [30.4.2011 21:59 218688]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [21.12.2010 15:04 115008]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [21.12.2010 13:47 94872]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 10:28 73728]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service;c:\program files\ABBYY FineReader 9.0\NetworkLicenseServer.exe [24.9.2007 20:11 566560]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [18.9.2009 17:48 9216]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [30.12.2008 5:30 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [9.7.2008 11:56 39072]
S2 ekrn;ESET Service;c:\program files\Eset\ESET NOD32 Antivirus\ekrn.exe [12.1.2011 16:41 810144]
S3 CFcatchme;CFcatchme;\??\c:\docume~1\Pavel\LOCALS~1\Temp\CFcatchme.sys --> c:\docume~1\Pavel\LOCALS~1\Temp\CFcatchme.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [13.10.2010 22:21 100736]
S3 MODRC;DiBcom Infrared Receiver;c:\windows\system32\drivers\modrc.sys [11.7.2007 11:06 13824]
S3 rkhdrv40;Rootkit Unhooker Driver; [x]
S3 SaiH0BAC;SaiH0BAC;c:\windows\system32\drivers\SaiH0BAC.sys [1.1.2009 21:26 135168]
S3 SaiH0C2D;SaiH0C2D;c:\windows\system32\drivers\SaiH0C2D.sys [1.1.2009 21:26 135168]
S3 tj2knd5;Terayon Cable Modem (NDIS);c:\windows\system32\drivers\tj2knd5.sys [28.7.2011 21:37 17616]
S3 tj2kunic;Terayon Cable Modem (WDM);c:\windows\system32\drivers\tj2kunic.sys [28.7.2011 21:37 69680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-07 c:\windows\Tasks\SDMsgUpdate (TE).job
- c:\progra~1\SMARTD~1\Messages\SDNotify.exe [2009-01-01 05:29]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 4.00\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.00\MediaManager\grab.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {7B43048F-DA7A-458F-AF35-D825BDBB6816} - hxxp://88.103.46.101:8001/NetVideoOCX.cab
FF - ProfilePath - c:\documents and settings\Pavel\Data aplikací\Mozilla\Firefox\Profiles\f4e8527q.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8 ... &gfns=1&q=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-07 21:43
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-854245398-1085031214-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Param2"=""
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:00000013
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(676)
c:\windows\system32\btmmhook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\netdde.exe
c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files\Common Files\Seagate\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\windows\System32\wbem\wmiapsrv.exe
c:\windows\RTHDCPL.EXE
c:\progra~1\MICROS~4\rapimgr.exe
c:\docume~1\Pavel\LOCALS~1\Temp\RtkBtMnt.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
.
**************************************************************************
.
Celkový čas: 2011-09-07 21:53:21 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-07 19:53
ComboFix2.txt 2011-09-07 18:26
.
Před spuštěním: Volných bajtů: 122 420 252 672
Po spuštění: Volných bajtů: 122 391 916 544
.
- - End Of File - - 15D108A05AF2C120E318EF811A381070

#12 Příspěvek od **Rudy** » 07 zář 2011 21:08

Ještě jednou spusťte ComboFix tímto skriptem:

Folder::
c:\windows\tmp

paja · #13 Příspěvek od **paja** » 07 zář 2011 21:41

Hotovo, zde je log, hláška o poškozeném C:\document and settings\pavel\local settings\temp se objevuje pořád.

ComboFix 11-09-07.04 - Pavel 07.09.2011 22:15:19.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2043.1441 [GMT 2:00]
Spuštěný z: c:\documents and settings\Pavel\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Pavel\Plocha\CFScript.txt
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\tmp
c:\windows\tmp\default.bak
c:\windows\tmp\sam.bak
c:\windows\tmp\security.bak
c:\windows\tmp\software.bak
c:\windows\tmp\system.bak
.
c:\windows\system32\drivers\cdrom.sys . . . je infikován!! . . .Failed to restore. Attempting to replace on reboot
.
Nakažená kopie c:\windows\system32\drivers\cdrom.sys byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{D9A4B88D-191A-49E6-BCC3-ED782DEDB796}\RP748\A0117505.sys
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-07 do 2011-09-07 )))))))))))))))))))))))))))))))
.
.
2011-09-07 15:54 . 2011-09-07 15:54 -------- d-----w- C:\rsit
2011-09-07 10:05 . 2011-09-07 10:05 -------- d-----w- C:\!KillBox
2011-09-07 08:49 . 2011-09-07 08:49 388096 ----a-r- c:\documents and settings\Pavel\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-09-07 08:49 . 2011-09-07 08:49 -------- d-----w- c:\program files\Trend Micro
2011-09-07 08:24 . 2011-09-07 08:24 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Lavasoft
2011-09-07 07:37 . 2011-09-07 17:11 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-09-07 07:37 . 2011-09-07 17:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-09-03 23:54 . 2008-04-14 03:22 24576 ----a-w- c:\windows\system32\wsock32.dll
2011-09-03 23:54 . 2001-10-24 10:25 23552 ----a-w- c:\windows\system32\wsock32_orig_z_CD.dll
2011-09-03 21:54 . 2011-09-03 21:54 -------- d-----w- c:\windows\system32\wbem\Repository
2011-09-03 20:49 . 2011-09-03 20:49 -------- d-----w- c:\program files\CCleaner
2011-09-03 17:41 . 2011-09-07 17:08 -------- d-----w- c:\program files\Sophos
2011-09-03 15:18 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\drivers\i8042prt.sys
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2011-09-03 12:39 . 2011-09-03 12:39 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2011-09-03 09:24 . 2002-09-20 17:35 50688 ----a-w- C:\i8042prt.sys
2011-09-03 09:20 . 2002-09-20 17:35 50688 ----a-w- c:\windows\system32\i8042prt.sys
2011-09-02 09:21 . 2011-09-02 09:21 -------- d-----w- c:\program files\AVAST Software
2011-09-01 21:31 . 2011-09-03 19:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\Tific
2011-08-27 19:52 . 2011-08-27 19:52 -------- d-----w- c:\documents and settings\Pavel\Local Settings\Data aplikací\Symantec
2011-08-27 19:47 . 2011-08-27 19:47 -------- d-----w- c:\program files\Windows Sidebar
2011-08-27 19:20 . 2011-08-27 19:20 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ESET
2011-08-27 19:01 . 2011-08-27 19:23 -------- d-----w- c:\program files\Eset
2011-08-22 07:16 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys
2011-08-22 07:16 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
2011-08-19 04:24 . 2011-08-19 04:24 -------- d-----w- c:\documents and settings\LocalService\Data aplikací\McAfee
2011-08-17 20:50 . 2011-08-17 20:50 -------- d-----w- c:\documents and settings\Pavel\Data aplikací\FileHunter
2011-08-14 22:54 . 2007-09-07 15:33 135168 ----a-w- c:\windows\system32\EEBAPI.dll
2011-08-14 22:54 . 2007-03-28 16:26 65536 ----a-w- c:\windows\system32\EEBUtil.dll
2011-08-14 22:54 . 2006-12-19 16:31 110592 ----a-w- c:\windows\system32\EEBDSCVR.dll
2011-08-14 22:29 . 2011-08-14 22:30 -------- d-----w- c:\program files\EpsonNet
2011-08-14 22:28 . 2011-08-14 23:02 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EPSON
2011-08-14 22:27 . 2009-09-16 22:00 342016 ----a-w- c:\windows\system32\eswiaud.dll
2011-08-14 22:27 . 2009-04-30 22:00 15872 ----a-w- c:\windows\system32\escdev.dll
2011-08-14 22:27 . 2009-04-30 22:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-01 21:37 . 2008-09-21 01:49 90112 ----a-w- c:\windows\DUMP499b.tmp
2011-08-02 15:27 . 2011-06-03 01:51 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2002-08-29 01:59 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2001-10-25 12:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2008-12-30 00:08 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2002-09-20 18:05 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2002-09-20 18:05 1830912 ------w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2008-12-30 01:39 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2001-10-25 12:00 17408 ------w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2008-12-30 01:39 389120 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2002-09-20 18:05 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-08-29 06:29 . 2011-03-25 21:35 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys
[-] 2002-08-29 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106] . . c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
.
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
.
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
.
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
.
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
.
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
.
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
.
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
.
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
.
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
.
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2004-08-17 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll
.
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 03:21 . E7B375DFFB68A16659CA66474A280C47 . 806912 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
[-] 2004-08-17 14:49 . B44F68274AB7B8A54E9AD74AFF0EFAAC . 806912 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
.
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
.
[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2004-08-17 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
.
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
.
[-] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB2347290$\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2004-08-17 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
.
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2010-08-23 . E145ADD7DAEF759C4F5FB80A180A9C30 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2010-08-23 . 8A72A30FDC803DC06755D3B36D966F31 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\$NtUninstallKB2296011$\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . D7B7AE36A2EBA312AC4B53862019B3F5 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2004-08-17 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-17 . F76B3003366A205E05AFC0D034C7D3E9 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2002-09-20 . D12F83B2037A01BB97A97F3EA54DD71F . 921600 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
[-] 2001-10-25 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
.
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
.
[-] 2008-07-07 20:32 . 398314DF0B21338C4996B469101750D1 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:19 . 3440C414044935B124B5821C0994B37F . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-17 14:49 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll
.
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
.
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-17 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
.
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2004-08-17 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
.
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
.
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\mshtml.dll
[-] 2011-07-22 . 917219C0D291CDE891C80D8BA59A21E6 . 3613696 . . [7.00.6000.17102] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2011-07-22 . 985518A3361129FD7CACBB9611E13504 . 3615744 . . [7.00.6000.21305] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtml.dll
[-] 2011-04-25 . D6546C0AE29DF915DD99BB9193229D97 . 3608576 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\mshtml.dll
[-] 2011-04-25 . DEE9BFCEF3C4807F79FE2498E34EC4F0 . 3610624 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\mshtml.dll
[-] 2011-02-17 . 459804329509317CB91E2424DCE1316A . 3607040 . . [7.00.6000.17097] . . c:\windows\ie7updates\KB2530548-IE7\mshtml.dll
[-] 2011-02-17 . A89508E7A9396EA9B82AD8D0E5C248C5 . 3609600 . . [7.00.6000.21299] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\mshtml.dll
[-] 2010-11-06 . 3AC8AB55B47DB51B07454A1D2246E7F7 . 3604480 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\mshtml.dll
[-] 2010-11-06 . 839FFC69550E07EF43A94C932E49E520 . 3607040 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\mshtml.dll
[-] 2010-09-09 . CA15720E7B3B8FD2E7F12C8A635A6308 . 3601920 . . [7.00.6000.17092] . . c:\windows\ie7updates\KB2416400-IE7\mshtml.dll
[-] 2010-09-09 . C5BC248010B1B6346314AE420D7ED454 . 3605504 . . [7.00.6000.21294] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\mshtml.dll
[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\mshtml.dll
[-] 2010-06-24 . 8A1385BF9CD3B394F266C8C5ACFEC5E0 . 3603968 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtml.dll
[-] 2010-05-04 . 313C9A62085098043B441652B7491665 . 3600384 . . [7.00.6000.17063] . . c:\windows\ie7updates\KB2183461-IE7\mshtml.dll
[-] 2010-05-04 . A85A3A10CA88BD7861D1859183559ED5 . 3603456 . . [7.00.6000.21264] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\mshtml.dll
[-] 2010-03-11 . 233FE995790E850D3D4B1AAD02CE3220 . 3599872 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\mshtml.dll
[-] 2010-03-11 . C8969C224E767DFFF5F2E2607E484810 . 3602944 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
[-] 2010-01-05 . D563E48DB8B998E44400C9C9BE2D6ECD . 3599360 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\mshtml.dll
[-] 2010-01-05 . 5DA02EE50F8FC661964857F21A2AE606 . 3602944 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtml.dll
[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtml.dll
[-] 2009-10-21 . 80B95B28B9E587AFFC7EB33DCF9F9E1F . 3598336 . . [7.00.6000.16939] . . c:\windows\ie7updates\KB976325-IE7\mshtml.dll
[-] 2009-10-21 . 442FC9D0BC1F64557B5106E0E7293B20 . 3602432 . . [7.00.6000.21142] . . c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . 7CE28B79DBBCECFD442F85000292DFB9 . 3598336 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 52809FB433B19A60DB827C690447AD6C . 3600384 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2009-07-19 . 6EDDB6AE1F6B387EEA08F013A2FD6463 . 3597824 . . [7.00.6000.16890] . . c:\windows\ie7updates\KB974455-IE7\mshtml.dll
[-] 2009-07-19 . 347FBA88D4C2C0D4FD4AA2EDCD300270 . 3600384 . . [7.00.6000.21089] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
[-] 2009-04-29 . 8B27B2CC3C6376C67586E3A0DD7732CC . 3596288 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\mshtml.dll
[-] 2009-04-29 . 46C3D119A366232907CD32A609A276B2 . 3598336 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-02-21 . 920B2B7C54C6B102A98EE54C56134CEC . 3596800 . . [7.00.6000.21015] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . DB1BCEDF3C640170A9E78E199516A8C9 . 3595264 . . [7.00.6000.16825] . . c:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-16 . 95E1214DBB029B3D37076999B53407D6 . 3594752 . . [7.00.6000.16809] . . c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . D049549814B44670C88C0C3777D24FFA . 3596288 . . [7.00.6000.20996] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . A3F482D8B827DDFBDA3F47B922DF5020 . 3593216 . . [7.00.6000.16788] . . c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . E32432E44F926075122F5B17E224ABF5 . 3594752 . . [7.00.6000.20973] . . c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-12-12 . 75D4E9856CAC441006C11AB529C1C288 . 3081216 . . [6.00.2900.3492] . . c:\windows\ie7\mshtml.dll
[-] 2008-12-12 . 74EB9C0ECFBF18B78E2A1EA73AADB13C . 3088384 . . [6.00.2900.3492] . . c:\windows\$hf_mig$\KB960714\SP2QFE\mshtml.dll
[-] 2008-12-12 . 0E5ED45F7D6CBBCC973C92247FBE9F30 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . 96AD32D5C30A1F79F487A99BC1D5AFE9 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3GDR\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\mshtml.dll
[-] 2008-10-16 . 6FE6816E7E6677FF4E47E5FC470C42CC . 3088384 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\mshtml.dll
[-] 2008-10-16 . 2A9F87DE02E61CFB762121C160E87F6A . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-10-16 . 793E26EF8767C58436A3B40A0899B180 . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2007-08-13 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB960714$\mshtml.dll
.
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . EC8D5E09C6CA5F52858A5EB71F308FDF . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-17 . AB47015B67531572BE46C0C08222C84C . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
[-] 2002-08-29 . 1B2C477D8847E4123DD8761D2E9008F7 . 323072 . . [7.0.2600.1106] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll
[-] 2001-10-25 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
.
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$NtUninstallKB2509553$\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . A6E79B60AC73241E5721AB6A573D2B24 . 247296 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 37BABA5DBD9027837FDC27E5D6EF33E1 . 247296 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 39EE7C3BFBC64BA87CC8CF67386E814C . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-17 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll
.
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
.
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
.
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
.
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
.
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
.
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2004-08-17 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
.
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2004-08-17 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\user32.dll
.
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
.
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\wininet.dll
[-] 2011-06-21 . 62C2B47F17A3972798A4197E4AA5BEDE . 832512 . . [7.00.6000.17099] . . c:\windows\system32\dllcache\wininet.dll
[-] 2011-06-21 . 923CCA1F768308928E2CD58D10D964DA . 841216 . . [7.00.6000.21302] . . c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\wininet.dll
[-] 2011-04-25 . 541D6B55FAC20DD4A8E578109878D6C1 . 832512 . . [7.00.6000.17098] . . c:\windows\ie7updates\KB2559049-IE7\wininet.dll
[-] 2011-04-25 . DF61EDDB3EA1571C99D8C60B300817E2 . 841216 . . [7.00.6000.21300] . . c:\windows\$hf_mig$\KB2530548-IE7\SP3QFE\wininet.dll
[-] 2011-02-17 . 01F315784610D7CAD81478C091F57696 . 832512 . . [7.00.6000.17096] . . c:\windows\ie7updates\KB2530548-IE7\wininet.dll
[-] 2011-02-17 . 260B22FCC9582A5C360A309EC2C3D8D2 . 841216 . . [7.00.6000.21298] . . c:\windows\$hf_mig$\KB2497640-IE7\SP3QFE\wininet.dll
[-] 2010-11-06 . 43A169D0367A4105491A76C2AAE6A1FD . 832512 . . [7.00.6000.17093] . . c:\windows\ie7updates\KB2497640-IE7\wininet.dll
[-] 2010-11-06 . 2BB8C340B7D1293B88587D2C4B72506F . 841216 . . [7.00.6000.21295] . . c:\windows\$hf_mig$\KB2416400-IE7\SP3QFE\wininet.dll
[-] 2010-09-09 . 41DD413E4546E25E0D0C5B8B7DEE1967 . 832512 . . [7.00.6000.17091] . . c:\windows\ie7updates\KB2416400-IE7\wininet.dll
[-] 2010-09-09 . 40B58A838D691766E19FA3C21B16EC41 . 841216 . . [7.00.6000.21293] . . c:\windows\$hf_mig$\KB2360131-IE7\SP3QFE\wininet.dll
[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . c:\windows\ie7updates\KB2360131-IE7\wininet.dll
[-] 2010-06-24 . 5A2EC6E4AE30B8CAF53389A286E39C23 . 841216 . . [7.00.6000.21283] . . c:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\wininet.dll
[-] 2010-05-04 . 1497FB3C1BC993A5F263FB57E0AD63D3 . 832512 . . [7.00.6000.17055] . . c:\windows\ie7updates\KB2183461-IE7\wininet.dll
[-] 2010-05-04 . 3D4713D326A245AAE068E7148C08AA77 . 841216 . . [7.00.6000.21256] . . c:\windows\$hf_mig$\KB982381-IE7\SP3QFE\wininet.dll
[-] 2010-03-11 . 366F583DBB53049DDFB04D6F7BF2795C . 832512 . . [7.00.6000.17023] . . c:\windows\ie7updates\KB982381-IE7\wininet.dll
[-] 2010-03-11 . 894D1910F23ABB82A19F4E2F1966271E . 841216 . . [7.00.6000.21228] . . c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
[-] 2010-01-05 . 9BD776679C4656E0CEA5E8BFB9CFD33B . 832512 . . [7.00.6000.16981] . . c:\windows\ie7updates\KB980182-IE7\wininet.dll
[-] 2010-01-05 . 0D90D150ED0DD4C673C627C52D3F7149 . 841216 . . [7.00.6000.21183] . . c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll
[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . c:\windows\ie7updates\KB978207-IE7\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\wininet.dll
[-] 2009-08-29 . 422C96661C35C7D6DAC7A58A1D6BB145 . 832512 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976325-IE7\wininet.dll
[-] 2009-08-29 . 7CA27BB855E6B8CC4725582501197E39 . 840704 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 155CEA8BCA8349B1DB7B8142BA95F6AE . 828928 . . [7.00.6000.21073] . . c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 4121C2AFFC37600A4710F63AD8017CF9 . 827392 . . [7.00.6000.16876] . . c:\windows\ie7updates\KB974455-IE7\wininet.dll
[-] 2009-04-29 . D8B3732B92CF879ADE65CCE9361D36FB . 827392 . . [7.00.6000.16850] . . c:\windows\ie7updates\KB972260-IE7\wininet.dll
[-] 2009-04-29 . C6D7F3DF74C49ED8E01CB18272EA0CCA . 828928 . . [7.00.6000.21045] . . c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . 3D7B87D8102C41BABBE5922B5275AA7C . 828416 . . [7.00.6000.21020] . . c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . BA2611F55D9AE29554008ADBC49D7664 . 826368 . . [7.00.6000.16827] . . c:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2008-12-20 . A039CE5F34BF98760F877B29E5A1D4CD . 827904 . . [7.00.6000.20978] . . c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . 793DA751C812EFC3C6786BBD3B8489A8 . 826368 . . [7.00.6000.16791] . . c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2GDR\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . c:\windows\SoftwareDistribution\Download\2cf2d98cbc4be029ee9881f0a8b57a97\SP2QFE\wininet.dll
[-] 2008-10-16 . 20275EA77612128219308D1BFAC3F7AB . 660480 . . [6.00.2900.3462] . . c:\windows\ie7\wininet.dll
[-] 2008-10-16 . DC068C9C851B3F601D91BFA93E053993 . 668672 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\wininet.dll
[-] 2008-10-16 . 370940E124256D20DE4CA7E51377335C . 668160 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 8E7DE90524F7DD5DB33CC38AD9A1B0B4 . 667136 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2QFE\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . c:\windows\SoftwareDistribution\Download\b036fb87dc9cfdb88c64df1ddd121b4f\SP2GDR\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2007-08-13 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB958215$\wininet.dll
.
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
.
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
.
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-17 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
.
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\regedit.exe
[-] 2008-04-14 . FDEB1D02CAE38665CBF114F44E6B997E . 147968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
[-] 2004-08-17 . CB5A91928D94224E7E30EE277B45E8A3 . 147968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
.
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\ole32.dll
[-] 2010-07-16 . 6D1A3A355CA2AC64D2D5BAEC25C16427 . 1287680 . . [5.1.2600.6010] . . c:\windows\system32\dllcache\ole32.dll
[-] 2010-07-16 . C85BE0CF9C91EB64CECA1D639D71D4CC . 1288704 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB979687$\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2004-08-17 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ole32.dll
.
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
[-] 2010-04-16 . A0C90E01D288A618AE6B99E92B7E0115 . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
[-] 2010-04-16 . 6BE004F9FCEECA6536385D5CB59BFD37 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\$NtUninstallKB981322$\usp10.dll
[-] 2008-04-14 . F5B6A143739B894BF4F488CFFC3D3015 . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
[-] 2004-08-17 . E28340F6CB7BAC3EACDA9C74A0BE42BE . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
.
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
[-] 2008-04-14 . AF6A4BCDE2343E8562D3003A1740CC96 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
[-] 2004-08-17 . FC727882241CD48E243868DD8401AB60 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
.
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
.
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
.
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
.
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2004-08-17 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
.
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
.
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
.
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
.
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 . ED18ADEE4AA21EB26977260152D7241A . 345088 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
[-] 2004-08-17 . FAABA83BE47C5B15F620FAA53267A9B8 . 345088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
.
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
.
[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
.
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
.
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
[-] 2004-08-03 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys
.
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
.
[-] 2010-09-18 07:18 . 2BC3ED47ACB42F664D5D1D247F2553AA . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
[-] 2010-09-18 06:53 . 9BB005DF755C4EDE048221DFD4A28A87 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\$NtUninstallKB2387149$\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2001-10-25 12:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
.
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
.
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\ServicePackFiles\i386\mspmsnsv.dll
.
[-] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-04-28 . F7648719DB795F098BA7F2AE67150182 . 2026496 . . [5.1.2600.5973] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . D46E1BB887F3340430D10DA536FE79E1 . 2026496 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . B2CEA3C57AA8230C7BCC0B2AF35EC55A . 2025984 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . C50A3A3C9724135FFBD9CB31355F9341 . 2025984 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
[-] 2009-02-09 . 6DD6966FA0FF770A3E5545875557C7F1 . 2025984 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 7FFD251BA8F8DAD189C2C6B6C1552319 . 2017792 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2008-08-14 . 6BB160864CAABEEA24D6BA9EDE18B641 . 2065152 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
[-] 2008-08-14 . 09CD607918C3F5600D8A111155F62CA6 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
[-] 2008-08-14 . 6045C7424106CCA4C9970C7230BD6253 . 2025984 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-14 . 9F12E026DC0B0C43F521114EFB3A3ACC . 2025984 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2004-08-17 . 7715EDDD01EDFEF9EF335D29C6DFE212 . 2017280 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntkrnlpa.exe
.
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-17 14:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
.
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2004-08-17 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
.
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
.
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
.
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
.
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-17 14:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
.
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . 614F8186BDAB926E3B1D8927A4161B54 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[-] 2004-08-17 . E472BDA53A4DCD2142143AF9FD25C99A . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-04-28 . 431278D0EF7518BA499720122F4ED86F . 2148352 . . [5.1.2600.5973] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-16 . CD79AD67BF88021BB60B2602D1947FB3 . 2148352 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 07A58A2A4460A4B7A58E0920F4CFA729 . 2147328 . . [5.1.2600.5913] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-08-04 . 3742270B8C90A97A0BDD25DED1201AA9 . 2147328 . . [5.1.2600.5857] . . c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 . 6499BF91CF62B4319D6ED7E99D0B6998 . 2147328 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 0634DC30949A2E1ACC1D810CEC245D17 . 2138112 . . [5.1.2600.3427] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2008-08-14 . C45C335F78C90DC75C05D5260B6888C7 . 2188160 . . [5.1.2600.3427] . . c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
[-] 2008-08-14 . 91F18AB1E9ACBF6E27A5545A8F57C89B . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
[-] 2008-08-14 . FFEB7726951F6D2859DF12FBC51F0188 . 2147328 . . [5.1.2600.5657] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2008-04-14 . 27C7A7AED8A477F6A0C7D3AD00AB9419 . 2147328 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2004-08-17 . 84FEF6BE553ACC66729F5D4113F53310 . 2150400 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956841_0$\ntoskrnl.exe
.
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
[-] 2008-04-14 . FA4E1CDBA256787F2149F4AAD07BC91F . 176640 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
[-] 2004-08-17 . 2CEEBB402187AE56B585701F3D191FB3 . 176128 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
.
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
[-] 2008-04-14 . C1CDD9275F6A115BB0AE1D55D8D27BA6 . 334336 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
[-] 2004-08-17 . 0645CCDDDD27F96EEA3534C1DEF736D9 . 333824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
.
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
[-] 2008-04-14 . 160A1500DDBE42F8793E3AD341E4BEC4 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
[-] 2004-08-17 . B356DD67178B22A8C2FBD47316CCB43B . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
.
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
[-] 2008-04-14 . B26098F3DC08D841DE3D79C38ACCB807 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
[-] 2004-08-17 . 630A1012AF129918D2E2D70727D69351 . 8192 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-09-07_18.14.34 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-09-07 20:24 . 2011-09-07 20:24 16384 c:\windows\Temp\Perflib_Perfdata_664.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-12-07 323392]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"FileHunter Check for updates"="c:\documents and settings\Pavel\Data aplikací\FileHunter\update.exe" [2011-07-17 810096]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-09 94208]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-07-09 1028096]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-08 13594624]
"nwiz"="nwiz.exe" [2008-12-08 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-08 86016]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2008-08-05 53248]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2007-07-12 233472]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2007-07-12 131072]
"RTHDCPL"="RTHDCPL.EXE" [2008-08-05 16862208]
"EPSON Stylus DX4800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"DiscWizardMonitor.exe"="c:\program files\Seagate\DiscWizard\DiscWizardMonitor.exe" [2007-09-10 1188152]
"AcronisTimounterMonitor"="c:\program files\Seagate\DiscWizard\TimounterMonitor.exe" [2007-09-10 1962216]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Seagate\Schedule2\schedhlp.exe" [2007-09-04 148760]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"DivX Download Manager"="c:\program files\DivX\DivX Plus Web Player\DDmService.exe" [2010-12-08 63360]
"RCApp"="c:\program files\gigabyte\RCApp\U7000RCApp.exe" [2010-01-26 634368]
"ChangeFilterMerit"="c:\program files\NewSoft\Presto! PVR\ChangeFilterMerit.exe" [2007-06-08 51280]
"Presto! PVR Monitor"="c:\program files\NewSoft\Presto! PVR\Monitor.exe" [2008-08-08 153424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"FUFAXSTM"="c:\program files\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-12-02 847872]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-09-18 2412032]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Pavel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Jalbum8.1\\Jalbum.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"c:\\Program Files\\European Aeronautical Group\\ToDc PILOT SEAGLE AIR B737\\TODC PILOT.exe"=
"c:\\Program Files\\EpsonNet\\EpsonNet Setup\\tool10\\ENEasyApp.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\WINDOWS\\twain_32\\escndv\\escndv.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\EPQuicker.exe"=
"c:\\Program Files\\Epson Software\\Easy Photo Print\\DspReadMe.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\pumpa.exe"=
"c:\\Program Files\\DivX\\DivX Plus Player\\DivX Plus Player.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Update\\GoogleUpdate.exe"=
"c:\\Documents and Settings\\Pavel\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Program Files\\Adobe\\Reader 10.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Speed-O-Meter\\netspeed.exe"=
"c:\\Program Files\\DivX\\DivX Update\\DivXUpdate.exe"=
"c:\\Program Files\\DAEMON Tools Lite\\DTLite.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EProjManager.exe"=
"c:\\Documents and Settings\\Pavel\\Data aplikací\\FileHunter\\update.exe"=
"c:\\Program Files\\Nokia\\Nokia PC Suite 7\\PCSuite.exe"=
"c:\\Program Files\\Outlook Express\\msimn.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\ESTsoft\\ALUpdate\\ALUpdate.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\egui.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\E_SAG4ST.EXE"=
"c:\\Program Files\\Common Files\\soft602\\PrnPack.exe"=
"c:\\Program Files\\Common Files\\EPSON\\EBAPI\\eEBAgent.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\WINDOWS\\system32\\mstsc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundTimestampRequest"= 1 (0x1)
"AllowInboundMaskRequest"= 1 (0x1)
"AllowInboundRouterRequest"= 1 (0x1)
"AllowOutboundDestinationUnreachable"= 1 (0x1)
"AllowOutboundSourceQuench"= 1 (0x1)
"AllowOutboundParameterProblem"= 1 (0x1)
"AllowOutboundTimeExceeded"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
"AllowOutboundPacketTooBig"= 1 (0x1)
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [30.4.2011 21:59 218688]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [21.12.2010 15:04 115008]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [21.12.2010 13:47 94872]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 10:28 73728]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 Licensing Service;c:\program files\ABBYY FineReader 9.0\NetworkLicenseServer.exe [24.9.2007 20:11 566560]
R2 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [18.9.2009 17:48 9216]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [30.12.2008 5:30 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [9.7.2008 11:56 39072]
S2 ekrn;ESET Service;c:\program files\Eset\ESET NOD32 Antivirus\ekrn.exe [12.1.2011 16:41 810144]
S3 CFcatchme;CFcatchme;\??\c:\docume~1\Pavel\LOCALS~1\Temp\CFcatchme.sys --> c:\docume~1\Pavel\LOCALS~1\Temp\CFcatchme.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [13.10.2010 22:21 100736]
S3 MODRC;DiBcom Infrared Receiver;c:\windows\system32\drivers\modrc.sys [11.7.2007 11:06 13824]
S3 rkhdrv40;Rootkit Unhooker Driver; [x]
S3 SaiH0BAC;SaiH0BAC;c:\windows\system32\drivers\SaiH0BAC.sys [1.1.2009 21:26 135168]
S3 SaiH0C2D;SaiH0C2D;c:\windows\system32\drivers\SaiH0C2D.sys [1.1.2009 21:26 135168]
S3 tj2knd5;Terayon Cable Modem (NDIS);c:\windows\system32\drivers\tj2knd5.sys [28.7.2011 21:37 17616]
S3 tj2kunic;Terayon Cable Modem (WDM);c:\windows\system32\drivers\tj2kunic.sys [28.7.2011 21:37 69680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-07 c:\windows\Tasks\SDMsgUpdate (TE).job
- c:\progra~1\SMARTD~1\Messages\SDNotify.exe [2009-01-01 05:29]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 4.00\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.00\MediaManager\grab.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {7B43048F-DA7A-458F-AF35-D825BDBB6816} - hxxp://88.103.46.101:8001/NetVideoOCX.cab
FF - ProfilePath - c:\documents and settings\Pavel\Data aplikací\Mozilla\Firefox\Profiles\f4e8527q.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8 ... &gfns=1&q=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-07 22:25
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-854245398-1085031214-725345543-1003\Software\Microsoft\Windows Mobile Disc\W*i*n*d*o*w*s* *M*o*b*i*l*e*"!\CriticalAppInstall\Outlook]
"Name"="Outlook"
"DisplayName"="Microsoft Outlook"
"Param1"="Outlook"
"Param2"=""
"Type"="wellknown"
"Order"=dword:00000000
"State"=dword:00000013
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2908)
c:\windows\system32\btmmhook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\netdde.exe
c:\program files\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files\Common Files\Seagate\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\nvsvc32.exe
c:\windows\System32\wbem\wmiapsrv.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\RTHDCPL.EXE
c:\progra~1\MICROS~4\rapimgr.exe
c:\docume~1\Pavel\LOCALS~1\Temp\RtkBtMnt.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
.
**************************************************************************
.
Celkový čas: 2011-09-07 22:36:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-07 20:36
ComboFix2.txt 2011-09-07 19:53
ComboFix3.txt 2011-09-07 18:26
.
Před spuštěním: Volných bajtů: 122 411 560 960
Po spuštění: Volných bajtů: 122 383 060 992
.
- - End Of File - - 94D534523778A9C69C14C0EFEE9E02A1

#14 Příspěvek od **Rudy** » 07 zář 2011 21:57

Smazáno, log již vypadá OK. Zkuste obsah složky C:\document and settings\pavel\local settings\temp ručně kompletně smazat a restartujte PC.

paja · #15 Příspěvek od **paja** » 07 zář 2011 22:08

Složka TEMP se jeví jako prázdná (zobrazení skrytých a systémových souborů mám ve wincmd samozřejmě zapnuté) Samotný adresář TEMP smazat nejde, nejdřív to tvrdí, že není prázdný, když trvám na smazání napíše to, že to nejde smazat.

Po restartu windovs opět hlásí poškození ....\.....\local setings\TEMP

Jinak se počítač ale tváří jako znovzrozený

Díííííííííkyyy mooooooc.

VIRY.CZ

Prosím o kontrolu logu - nejde internet, antivir sw poškozen

Prosím o kontrolu logu - nejde internet, antivir sw poškozen

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk

Re: Prosím o kontrolu logu - nejde internet, antivir sw pošk