Hijack.WindowsUpdates a zadrhávání Firefox

Zpráva

Vee1 · #1 Příspěvek od **Vee1** » 08 zář 2011 09:06

Malwarebytes odhalil 2 x Hijack.WindowsUpdates, tato havěť se stále objevuje znovu. Zadrhává se Firefox i ostatní prohlížeče - Chrome, IE. Občas samovolný restart počítače, pouze při prohlížení webu. Přikládám log a děkuji předem za pomoc!

Logfile of random's system information tool 1.09 (written by random/random)
Run by MrVee at 2011-09-08 09:54:14
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 44 GB (15%) free of 286 GB
Total RAM: 3071 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:54:20, on 8.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\WINDOWS\system32\DeltaIITray.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVG\AVG10\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Documents and Settings\MrVee\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\MrVee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\system32\DeltaIITray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\MrVee\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: Služba inteligentního přenosu na pozadí (BITS) (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Automatické aktualizace (wuauserv) - Unknown owner - C:\WINDOWS\

--
End of file - 8412 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1383384898-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1383384898-682003330-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\MrVee\Data aplikací\Mozilla\Firefox\Profiles\ngxngetl.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429, avg@igeared:6.010.006.004, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://www.webhledani.cz/results.aspx?i=39&tp=ab&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"avg@igeared"=C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG10\Firefox4\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0]
"Description"=DivX® Content Upload Plugin
"Path"=C:\Program Files\DivX\DivX Content Uploader\npUpload.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npLegitCheckPlugin.dll
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
avg_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-08-05 2274144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2007-04-04 1822720]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-12-03 2213160]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-15 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-04 1603152]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-08 305440]
"ISUSPM Startup"=C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2007-12-11 307200]
"M-Audio Taskbar Icon"=C:\WINDOWS\system32\DeltaIITray.exe [2009-07-27 236040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-04-18 2334560]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2007-12-29 486856]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-06-09 2363392]
"fsm"= []
"Google Update"=C:\Documents and Settings\MrVee\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-08-24 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-03-10 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
avgrsstx.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\totalcmd6\TOTALCMD.EXE"="C:\totalcmd6\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Clear FTP 2006\clearftp.exe"="C:\Program Files\Clear FTP 2006\clearftp.exe:*:Enabled:clearftp"
"C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Disabled:Nero Home"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Nvu\nvu.exe"="C:\Program Files\Nvu\nvu.exe:*:Enabled:Nvu"
"C:\Program Files\AVG\AVG8\avgtray.exe"="C:\Program Files\AVG\AVG8\avgtray.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\DeltaIITray.exe"="C:\WINDOWS\system32\DeltaIITray.exe:*:Enabled:ENABLE"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ENABLE"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE"="C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE:*:Enabled:ENABLE"
"C:\Program Files\Syncrosoft\POS\H2O\cledx.exe"="C:\Program Files\Syncrosoft\POS\H2O\cledx.exe:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe"="C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe:*:Enabled:ENABLE"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Steinberg\Nuendo 3\Nuendo3.exe"="C:\Program Files\Steinberg\Nuendo 3\Nuendo3.exe:*:Disabled:Nuendo"
"C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\AVG\AVG10\avgnsx.exe"="C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG10\avgemcx.exe"="C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Obecná kontrola pošty"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.I420"=msh263.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-08-25 00:21:31 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2011-08-24 23:47:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-08-24 23:44:39 ----D---- C:\Program Files\AMD APP
2011-08-24 23:40:38 ----D---- C:\Program Files\ATI Technologies
2011-08-24 23:40:34 ----D---- C:\Program Files\ATI
2011-08-24 20:26:28 ----HDC---- C:\WINDOWS\ie8
2011-08-24 20:02:56 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2011-08-24 20:02:51 ----RA---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\ativva6x.dat
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\ativva5x.dat
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\atiicdxx.dat
2011-08-24 20:02:14 ----RA---- C:\WINDOWS\system32\drivers\AtihdXP3.sys
2011-08-24 19:49:27 ----D---- C:\WINDOWS\system32\Adobe
2011-08-24 19:29:17 ----D---- C:\Documents and Settings\MrVee\Data aplikací\AVG10
2011-08-24 19:27:35 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-24 19:27:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG10
2011-08-24 19:22:32 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-08-24 19:22:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-08-24 19:04:43 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-08-24 19:04:43 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2011-08-24 19:04:42 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-08-24 19:04:42 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2dvaa.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-08-24 14:16:04 ----R---- C:\WINDOWS\Alcmtr.exe
2011-08-24 11:59:01 ----D---- C:\NVIDIA
2011-08-24 11:06:31 ----A---- C:\WINDOWS\WININIT.INI
2011-08-23 19:59:40 ----D---- C:\Program Files\ASUS
2011-08-23 19:52:55 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-17 13:15:50 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys

======List of files/folders modified in the last 1 month======

2011-09-08 09:54:19 ----D---- C:\Program Files\trend micro
2011-09-08 09:54:17 ----D---- C:\WINDOWS\Prefetch
2011-09-08 09:52:13 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-08 09:51:32 ----D---- C:\WINDOWS\system32
2011-09-08 09:51:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-08 09:48:25 ----D---- C:\WINDOWS\temp
2011-09-08 09:47:22 ----D---- C:\WINDOWS
2011-09-08 09:33:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-08 08:48:09 ----A---- C:\WINDOWS\WINCMD.INI
2011-09-08 08:43:58 ----D---- C:\WINDOWS\system32\config
2011-09-07 21:57:00 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-09-07 12:23:09 ----D---- C:\WINDOWS\Minidump
2011-09-07 09:32:12 ----A---- C:\WINDOWS\system32\msvcsv60.dll
2011-09-07 01:56:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-07 01:55:24 ----D---- C:\WINDOWS\system32\drivers
2011-09-06 23:04:23 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-06 21:59:47 ----D---- C:\Program Files\Mozilla Firefox
2011-09-05 14:50:35 ----D---- C:\Kamera nova
2011-08-31 11:48:57 ----D---- C:\DATA
2011-08-28 17:11:26 ----D---- C:\Program Files\Waves
2011-08-25 09:50:53 ----D---- C:\WINDOWS\Debug
2011-08-24 23:47:33 ----D---- C:\Documents and Settings\MrVee\Data aplikací\ATI
2011-08-24 23:44:44 ----SHD---- C:\WINDOWS\Installer
2011-08-24 23:44:39 ----RD---- C:\Program Files
2011-08-24 23:43:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-24 23:42:59 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-24 23:42:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-24 21:17:46 ----HD---- C:\WINDOWS\inf
2011-08-24 20:29:22 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-24 20:29:22 ----D---- C:\WINDOWS\Media
2011-08-24 20:29:22 ----D---- C:\WINDOWS\Help
2011-08-24 20:29:22 ----D---- C:\Program Files\Internet Explorer
2011-08-24 20:19:28 ----D---- C:\WINDOWS\ie8updates
2011-08-24 19:49:40 ----D---- C:\WINDOWS\WinSxS
2011-08-24 19:39:56 ----SD---- C:\WINDOWS\Tasks
2011-08-24 19:26:48 ----D---- C:\Program Files\AVG
2011-08-24 19:18:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg8
2011-08-24 19:18:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2011-08-24 19:18:26 ----D---- C:\Documents and Settings\MrVee\Data aplikací\AVGTOOLBAR
2011-08-24 19:15:00 ----D---- C:\Documents and Settings
2011-08-24 19:05:38 ----D---- C:\Program Files\mozilla.org
2011-08-24 19:05:30 ----D---- C:\Program Files\Common Files
2011-08-24 19:04:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-24 19:02:02 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-24 19:01:57 ----D---- C:\Program Files\Lavasoft
2011-08-24 14:16:29 ----D---- C:\WINDOWS\system32\RTCOM
2011-08-24 14:16:04 ----D---- C:\Program Files\Realtek
2011-08-24 13:55:39 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-24 12:00:10 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-23 23:01:31 ----D---- C:\WINDOWS\network diagnostic

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-07-31 10368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-03-10 715248]
R0 TPkd;TPkd; C:\WINDOWS\system32\drivers\TPkd.sys [2008-09-08 93232]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R2 CLBUDFR;CyberLink UDF Filesystem; C:\WINDOWS\system32\drivers\CLBUDFR.sys [2006-07-31 180352]
R2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2007-11-15 34064]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [2007-03-16 38656]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-03-10 6574592]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2010-11-17 101904]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2007-12-11 33792]
R3 DELTAII;Service for M-Audio Delta Driver (WDM); C:\WINDOWS\system32\DRIVERS\MAudioDelta.sys [2009-07-27 302472]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-14 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-02-05 47360]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 9bdea3ca;9bdea3ca; C:\WINDOWS\System32\drivers\9bdea3ca.sys []
S1 cb725c12;cb725c12; C:\WINDOWS\System32\drivers\cb725c12.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 AVCSTRM;AVC Streaming Filter Driver; C:\WINDOWS\system32\DRIVERS\avcstrm.sys [2008-04-13 13696]
S3 aw2nzgiq;aw2nzgiq; C:\WINDOWS\system32\drivers\aw2nzgiq.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\MrVee\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTAPE;Microsoft AV/C Tape Subunit Device; C:\WINDOWS\system32\DRIVERS\mstape.sys [2008-04-13 49024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-03-28 9933952]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-03-10 643072]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-04-18 7398752]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 gearsec;gearsec; C:\WINDOWS\system32\gearsec.exe [2003-12-02 53248]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 71096]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-09-08 545568]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 08 zář 2011 09:15

Zdravim a pekny den preji

Muzete mi sem prosim dat vypis z MBAM z kontrol - zalozka "Slozka Protokolu"

Vee1 · #3 Příspěvek od **Vee1** » 08 zář 2011 09:24

Díky a vkládám:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 7666

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

7.9.2011 12:28:24
mbam-log-2011-09-07 (12-28-24).txt

Typ kontroly: Rychlý test
Testované objekty: 182618
Uplynulý čas: 2 minut, 31 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 2
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS\ImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemRoot%\system32\svchost.exe -k netsvcs) Good: (%SystemRoot%\System32\svchost.exe -k netsvcs) -> Delete on reboot.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv\ImagePath (Hijack.WindowsUpdates) -> Bad: (%fystemroot%\system32\svchost.exe -k netsvcs) Good: (%SystemRoot%\System32\svchost.exe -k netsvcs) -> Delete on reboot.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

#4 Příspěvek od **vyosek** » 08 zář 2011 09:26

Jsou tam poskozene sluzby pro automaticke aktualizace

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Vee1 · #5 Příspěvek od **Vee1** » 08 zář 2011 10:13

Hotovo, má to ale moc znaků, rozdělím to na 2 soubory:

ComboFix 11-09-08.01 - MrVee 08.09.2011 10:44:30.17.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3071.2426 [GMT 2:00]
Spuštěný z: c:\documents and settings\MrVee\Plocha\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2011 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\MrVee\WINDOWS
c:\program files\WinPCap
c:\program files\WinPCap\rpcapd.exe
c:\windows\ehome\medctrro.exe
c:\windows\iun6002.exe
c:\windows\system\Color
c:\windows\system\Color\HPDESK.ICM
c:\windows\system32\CF14607.exe
c:\windows\system32\CF21897.exe
c:\windows\system32\drivers\npf.sys
c:\windows\system32\msvcsv60.dll
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-08 do 2011-09-08 )))))))))))))))))))))))))))))))
.
.
2011-08-24 21:47 . 2011-08-24 21:47 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2011-08-24 21:44 . 2011-08-24 21:44 -------- d-----w- c:\program files\AMD APP
2011-08-24 21:40 . 2011-08-24 21:44 -------- d-----w- c:\program files\ATI Technologies
2011-08-24 21:40 . 2011-08-24 21:40 -------- d-----w- c:\program files\ATI
2011-08-24 18:26 . 2011-08-24 18:27 -------- dc-h--w- c:\windows\ie8
2011-08-24 18:02 . 2011-08-24 18:02 0 ----a-w- c:\windows\ativpsrm.bin
2011-08-24 18:02 . 2011-03-10 03:27 311296 ----a-r- c:\windows\system32\atiiiexx.dll
2011-08-24 18:02 . 2011-03-10 02:50 462848 ----a-r- c:\windows\system32\ATIDEMGX.dll
2011-08-24 18:02 . 2010-11-17 12:03 101904 ----a-r- c:\windows\system32\drivers\AtihdXP3.sys
2011-08-24 17:49 . 2011-08-24 17:49 -------- d-----w- c:\windows\system32\Adobe
2011-08-24 17:39 . 2011-08-24 17:40 -------- d-----w- c:\documents and settings\MrVee\Local Settings\Data aplikací\Google
2011-08-24 17:29 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\MrVee\Data aplikací\AVG10
2011-08-24 17:27 . 2011-09-08 06:44 -------- d-----w- c:\windows\system32\drivers\AVG
2011-08-24 17:27 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVG10
2011-08-24 17:22 . 2011-08-24 17:22 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2011-08-24 17:22 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2011-08-24 12:16 . 2005-05-03 16:43 69632 ------r- c:\windows\Alcmtr.exe
2011-08-24 09:59 . 2011-08-24 09:59 -------- d-----w- C:\NVIDIA
2011-08-23 21:33 . 2011-08-12 03:15 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-08-23 21:32 . 2011-08-12 03:15 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-08-23 17:59 . 2011-08-23 17:59 -------- d-----w- c:\program files\ASUS
2011-08-23 17:52 . 2011-08-24 18:07 -------- d-----w- c:\program files\NVIDIA Corporation
2011-08-17 11:15 . 2008-04-14 01:29 14592 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-08-17 11:15 . 2008-04-14 01:29 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-23 18:11 . 2011-08-23 18:11 540140 ----a-w- c:\windows\P5B-SE-ASUS-1001.zip
2004-10-04 07:56 . 2004-10-06 11:39 28676096 ----a-w- c:\program files\StylusRMX.dll
2011-08-12 03:15 . 2011-05-01 06:59 126976 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2009-04-22_19.21.44 )))))))))))))))))))))))))))))))))))))))))
.
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wups2.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wups.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wucltui.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wuaueng.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wuauclt.exe
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\wuapi.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\SelfUpdate\Default\cdm.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
+ 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80KOR.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80JPN.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ITA.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHT.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHS.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80FRA.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ESP.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ENU.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80DEU.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 95744 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2011-07-28 07:29 . 2007-04-04 16:53 81768 c:\windows\system32\xinput1_3.dll
+ 2011-07-28 07:30 . 2010-06-02 02:55 74072 c:\windows\system32\XAPOFX1_5.dll
+ 2011-07-28 07:30 . 2010-02-04 08:01 74072 c:\windows\system32\XAPOFX1_4.dll
+ 2011-07-28 07:29 . 2009-09-04 15:44 69464 c:\windows\system32\XAPOFX1_3.dll
+ 2011-07-28 07:29 . 2008-10-27 08:04 70992 c:\windows\system32\XAPOFX1_2.dll
+ 2011-07-28 07:29 . 2008-07-31 08:41 68616 c:\windows\system32\XAPOFX1_1.dll
+ 2011-07-28 07:29 . 2008-05-30 12:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2011-07-28 07:29 . 2010-02-04 08:01 22360 c:\windows\system32\X3DAudio1_7.dll
+ 2011-07-28 07:29 . 2009-03-16 12:18 22360 c:\windows\system32\X3DAudio1_6.dll
+ 2011-07-28 07:29 . 2008-10-27 08:04 23376 c:\windows\system32\X3DAudio1_5.dll
+ 2011-07-28 07:29 . 2008-05-30 12:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2011-07-28 07:29 . 2008-03-05 14:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2011-07-28 07:29 . 2007-10-22 01:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2011-07-28 07:29 . 2007-03-05 10:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2007-12-01 20:14 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2004-08-17 15:49 . 2008-04-14 02:22 23552 c:\windows\system32\wdmaud.drv
- 2004-08-17 15:49 . 2008-04-14 03:22 23552 c:\windows\system32\wdmaud.drv
+ 2008-01-21 09:27 . 2005-11-03 15:14 45056 c:\windows\system32\Synsopos.exe
- 2008-01-21 09:27 . 2005-11-03 16:14 45056 c:\windows\system32\Synsopos.exe
+ 2007-12-08 14:17 . 2009-01-07 16:20 26144 c:\windows\system32\spupdsvc.exe
+ 2008-04-14 23:29 . 2009-01-07 16:20 17952 c:\windows\system32\spmsg.dll
+ 2011-08-24 21:42 . 2008-04-14 02:22 23552 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\wdmaud.drv
+ 2011-08-24 21:42 . 2008-04-13 17:45 49408 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\stream.sys
+ 2011-08-24 21:42 . 2008-04-13 17:45 60160 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\drmk.sys
+ 2011-08-24 21:42 . 2001-11-09 16:01 24064 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ativcoxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:22 17408 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atitvo32.dll
+ 2011-08-24 21:42 . 2009-06-22 16:34 45056 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ATIODCLI.exe
+ 2011-08-24 21:42 . 2011-03-10 02:16 64512 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atimpc32.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 53248 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ATIDDC.DLL
+ 2011-08-24 21:42 . 2011-03-10 03:11 57344 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\aticalrt.dll
+ 2011-08-24 21:42 . 2011-03-10 03:11 53248 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\aticalcl.dll
+ 2011-08-24 21:42 . 2011-03-10 02:31 26112 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\Ati2mdxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:15 53248 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2erec.dll
+ 2011-08-24 21:42 . 2011-03-10 02:31 43520 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2edxx.dll
+ 2011-08-24 10:01 . 2011-05-10 09:41 26216 c:\windows\system32\ReinstallBackups\0024\DriverFiles\nvhdap32.dll
+ 2011-08-24 10:01 . 2008-04-14 02:22 23552 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\wdmaud.drv
+ 2011-08-24 10:01 . 2008-04-13 17:45 49408 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\stream.sys
+ 2011-08-24 10:01 . 2008-04-13 17:45 60160 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\drmk.sys
+ 2011-08-24 10:01 . 2011-05-10 09:41 26216 c:\windows\system32\ReinstallBackups\0023\DriverFiles\nvhdap32.dll
+ 2011-08-24 10:01 . 2008-04-14 02:22 23552 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\wdmaud.drv
+ 2011-08-24 10:01 . 2008-04-13 17:45 49408 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\stream.sys
+ 2011-08-24 10:01 . 2008-04-13 17:45 60160 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\drmk.sys
+ 2011-08-24 10:01 . 2011-05-10 09:41 26216 c:\windows\system32\ReinstallBackups\0022\DriverFiles\nvhdap32.dll
+ 2011-08-24 10:01 . 2008-04-14 02:22 23552 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\wdmaud.drv
+ 2011-08-24 10:01 . 2008-04-13 17:45 49408 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\stream.sys
+ 2011-08-24 10:01 . 2008-04-13 17:45 60160 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\drmk.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 26216 c:\windows\system32\ReinstallBackups\0021\DriverFiles\nvhdap32.dll
+ 2011-08-24 10:01 . 2008-04-14 02:22 23552 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\wdmaud.drv
+ 2011-08-24 10:01 . 2008-04-13 17:45 49408 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\stream.sys
+ 2011-08-24 10:01 . 2008-04-13 17:45 60160 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\drmk.sys
+ 2011-08-24 10:00 . 2011-03-28 10:27 61440 c:\windows\system32\ReinstallBackups\0020\DriverFiles\OpenCL.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 87040 c:\windows\system32\ra32sipr.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 87040 c:\windows\system32\ra32sipr.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 21504 c:\windows\system32\ra32dnet.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 21504 c:\windows\system32\ra32dnet.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 72704 c:\windows\system32\ra3228_8.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 72704 c:\windows\system32\ra3228_8.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 81920 c:\windows\system32\ra3214_4.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 81920 c:\windows\system32\ra3214_4.dll
+ 2004-08-17 14:49 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll
- 2001-10-25 12:00 . 2009-04-19 05:46 68544 c:\windows\system32\perfc009.dat
+ 2001-10-25 12:00 . 2011-09-08 07:51 68544 c:\windows\system32\perfc009.dat
- 2001-10-25 12:00 . 2009-04-19 05:46 79534 c:\windows\system32\perfc005.dat
+ 2001-10-25 12:00 . 2011-09-08 07:51 79534 c:\windows\system32\perfc005.dat
+ 2011-03-09 20:59 . 2011-03-09 20:59 59904 c:\windows\system32\OVDecode.dll
+ 2011-03-09 20:59 . 2011-03-09 20:59 51712 c:\windows\system32\OpenCL.dll
+ 2006-06-29 07:05 . 2009-01-07 16:20 23552 c:\windows\system32\normaliz.dll
- 2006-06-29 07:05 . 2006-06-29 07:05 23552 c:\windows\system32\normaliz.dll
- 2006-06-28 16:59 . 2006-06-28 16:59 24576 c:\windows\system32\nlsdl.dll
+ 2006-06-28 16:59 . 2009-01-07 16:20 24576 c:\windows\system32\nlsdl.dll
+ 2009-06-09 23:25 . 2007-09-19 14:18 61440 c:\windows\system32\NI_DFD_1_5.dll
+ 2004-08-17 14:49 . 2008-05-19 04:33 18944 c:\windows\system32\msisip.dll
+ 2004-08-17 14:49 . 2008-05-18 23:57 95744 c:\windows\system32\msiexec.exe
+ 2004-08-17 14:48 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll
- 2004-08-17 14:48 . 2007-08-13 17:01 48128 c:\windows\system32\mshtmler.dll
+ 2004-08-17 14:49 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
- 2004-08-17 14:49 . 2007-08-13 17:32 45568 c:\windows\system32\mshta.exe
+ 2004-08-17 14:49 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe
+ 2007-08-13 17:36 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe
+ 2007-08-13 17:54 . 2009-03-08 02:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2007-12-01 20:13 . 2001-10-25 12:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
+ 2009-07-27 11:44 . 2009-07-27 11:44 25096 c:\windows\system32\MAudioDeltaAsio.dll
+ 2004-08-17 14:49 . 2009-03-08 02:34 43008 c:\windows\system32\licmgr10.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 25600 c:\windows\system32\jsproxy.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll
+ 2004-08-17 14:49 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe
+ 2004-08-17 14:49 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll
+ 2006-06-29 07:05 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll
- 2006-06-29 07:05 . 2006-06-29 07:05 26112 c:\windows\system32\idndl.dll
+ 2007-08-13 17:36 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll
+ 2007-12-08 14:17 . 2006-08-01 13:02 49152 c:\windows\system32\ChCfg.exe
- 2007-12-08 14:17 . 2006-08-03 15:02 49152 c:\windows\system32\ChCfg.exe
+ 2010-01-31 15:33 . 2008-04-14 03:21 21504 c:\windows\system32\hidserv.dll
+ 2006-10-26 13:10 . 2006-10-26 13:10 33088 c:\windows\system32\FM20ENU.DLL
- 2008-01-21 09:29 . 2007-12-08 23:32 85504 c:\windows\system32\encdnet.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 85504 c:\windows\system32\encdnet.dll
+ 2009-09-30 15:25 . 2009-08-28 17:42 40448 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys
+ 2010-06-21 21:36 . 2009-06-26 12:36 23696 c:\windows\system32\DRVSTORE\synasusb_9734A53CB716DCDDF215754500120D58E09F22E4\synasusb.sys
+ 2009-09-30 15:25 . 2009-08-28 17:42 17408 c:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\netaapl.sys
+ 2010-05-19 22:08 . 2010-05-19 22:08 54256 c:\windows\system32\DRVSTORE\iLokDrvr_0ACA8D06F62C15DF07257624EBC2174E17CBFCF4\iLokDrvr.sys
+ 2009-09-30 15:30 . 2009-05-18 12:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
+ 2011-08-24 21:42 . 2011-03-10 02:31 81690 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\oemdspif.dll
+ 2011-08-24 21:42 . 2001-11-09 16:01 12614 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ativcoxx.dll
+ 2011-08-24 21:42 . 2010-08-27 19:32 81222 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiode.exe
+ 2011-08-24 21:42 . 2009-06-22 16:34 25130 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiodcli.exe
+ 2011-08-24 21:42 . 2011-03-10 02:16 41421 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atimpc32.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 28699 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiddc.dll
+ 2011-08-24 21:42 . 2011-03-10 03:11 29984 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\aticalrt.dll
+ 2011-08-24 21:42 . 2011-03-10 03:11 29021 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\aticalcl.dll
+ 2011-08-24 21:42 . 2009-05-11 22:35 71662 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atibtmon.exe
+ 2011-08-24 21:42 . 2011-03-10 02:28 56061 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiapfxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:31 16307 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2mdxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:15 13650 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2erec.dll
+ 2011-08-24 21:42 . 2011-03-10 02:31 28845 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2edxx.dll
+ 2009-09-30 15:25 . 2009-08-28 17:42 40448 c:\windows\system32\drivers\usbaapl.sys
+ 2008-09-08 11:04 . 2008-09-08 11:04 93232 c:\windows\system32\drivers\TPkd.sys
- 2008-01-21 09:27 . 2005-11-03 11:17 16896 c:\windows\system32\drivers\synasUSB.sys
+ 2010-06-22 08:49 . 2005-11-03 10:17 16896 c:\windows\system32\drivers\synasUSB.sys
- 2004-08-03 23:08 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
+ 2004-08-03 23:08 . 2008-04-13 17:45 49408 c:\windows\system32\drivers\stream.sys
+ 2009-05-04 14:21 . 2008-04-13 17:46 61696 c:\windows\system32\drivers\ohci1394.sys
+ 2010-05-31 14:47 . 2008-04-13 17:46 49024 c:\windows\system32\drivers\mstape.sys
+ 2009-05-04 14:25 . 2008-04-13 17:46 51200 c:\windows\system32\drivers\msdv.sys
+ 2010-01-31 15:33 . 2001-10-24 10:54 12160 c:\windows\system32\drivers\mouhid.sys
+ 2009-05-06 11:22 . 2010-12-20 16:09 38224 c:\windows\system32\drivers\mbamswissarmy.sys
+ 2009-05-06 11:22 . 2010-12-20 16:08 20952 c:\windows\system32\drivers\mbam.sys
+ 2008-09-08 11:05 . 2008-09-08 11:05 54256 c:\windows\system32\drivers\iLokDrvr.sys
+ 2010-01-31 15:33 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
+ 2008-01-29 10:01 . 2009-05-18 12:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
- 2007-12-08 14:17 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
+ 2007-12-08 14:17 . 2008-04-13 17:45 60160 c:\windows\system32\drivers\drmk.sys
+ 2008-01-21 09:27 . 2007-12-11 02:59 33792 c:\windows\system32\drivers\cledx.sys
- 2008-01-21 09:27 . 2005-05-09 19:08 33792 c:\windows\system32\drivers\cledx.sys
+ 2011-07-28 07:30 . 2006-07-31 17:45 10368 c:\windows\system32\drivers\CLBStor.sys
+ 2011-03-16 14:03 . 2011-03-16 14:03 32592 c:\windows\system32\drivers\avgrkx86.sys
+ 2011-03-01 12:25 . 2011-03-01 12:25 34896 c:\windows\system32\drivers\avgmfx86.sys
+ 2011-02-10 05:53 . 2011-02-10 05:53 27216 c:\windows\system32\drivers\AVGIDSShim.sys
+ 2011-02-10 05:53 . 2011-02-10 05:53 24144 c:\windows\system32\drivers\AVGIDSFilter.sys
+ 2011-02-22 06:13 . 2011-02-22 06:13 22992 c:\windows\system32\drivers\AVGIDSEH.sys
+ 2010-05-31 14:47 . 2008-04-13 17:46 13696 c:\windows\system32\drivers\avcstrm.sys
+ 2009-05-04 14:25 . 2008-04-13 17:46 38912 c:\windows\system32\drivers\avc.sys
+ 2011-03-10 02:15 . 2011-03-10 02:15 53248 c:\windows\system32\drivers\ati2erec.dll
+ 2009-05-04 14:25 . 2008-04-13 17:46 48128 c:\windows\system32\drivers\61883.sys
+ 2009-05-04 14:21 . 2008-04-13 17:46 53376 c:\windows\system32\drivers\1394bus.sys
- 2007-07-24 13:17 . 2007-07-24 13:17 61440 c:\windows\system32\dnssd.dll
+ 2008-12-12 09:11 . 2008-12-12 09:11 61440 c:\windows\system32\dnssd.dll
+ 2008-12-12 09:18 . 2008-12-12 09:18 87336 c:\windows\system32\dns-sd.exe
+ 2009-06-09 19:49 . 2009-04-30 21:16 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2007-12-01 20:14 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2004-08-17 15:49 . 2008-04-14 02:22 23552 c:\windows\system32\dllcache\wdmaud.drv
+ 2004-08-03 23:08 . 2008-04-13 17:45 49408 c:\windows\system32\dllcache\stream.sys
+ 2007-08-13 17:36 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll
+ 2009-05-04 14:21 . 2008-04-13 17:46 61696 c:\windows\system32\dllcache\ohci1394.sys
+ 2010-05-31 14:47 . 2008-04-13 17:46 49024 c:\windows\system32\dllcache\mstape.sys
+ 2008-05-19 04:33 . 2008-05-19 04:33 18944 c:\windows\system32\dllcache\msisip.dll
+ 2008-05-18 23:57 . 2008-05-18 23:57 95744 c:\windows\system32\dllcache\msiexec.exe
- 2007-08-13 17:01 . 2007-08-13 17:01 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 17:01 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 17:54 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-08-13 17:32 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe
- 2007-08-13 17:32 . 2007-08-13 17:32 45568 c:\windows\system32\dllcache\mshta.exe
+ 2009-01-18 17:02 . 2009-03-08 02:31 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-05-04 14:25 . 2008-04-13 17:46 51200 c:\windows\system32\dllcache\msdv.sys
+ 2010-01-31 15:33 . 2001-10-24 10:54 12160 c:\windows\system32\dllcache\mouhid.sys
+ 2007-08-13 17:44 . 2009-03-08 02:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-08-13 17:54 . 2009-03-08 02:33 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 17:36 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2009-01-18 17:02 . 2009-03-08 02:31 59904 c:\windows\system32\dllcache\icardie.dll
+ 2007-08-13 17:18 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2010-01-31 15:33 . 2008-04-13 18:45 10368 c:\windows\system32\dllcache\hidusb.sys
+ 2010-01-31 15:33 . 2008-04-14 03:21 21504 c:\windows\system32\dllcache\hidserv.dll
+ 2007-12-08 14:17 . 2008-04-13 17:45 60160 c:\windows\system32\dllcache\drmk.sys
+ 2007-08-13 17:42 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-17 14:49 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2010-05-31 14:47 . 2008-04-13 17:46 13696 c:\windows\system32\dllcache\avcstrm.sys
+ 2009-05-04 14:25 . 2008-04-13 17:46 38912 c:\windows\system32\dllcache\avc.sys
+ 2011-08-24 17:04 . 2008-04-14 02:21 32768 c:\windows\system32\dllcache\ativtmxx.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll
+ 2009-05-04 14:25 . 2008-04-13 17:46 48128 c:\windows\system32\dllcache\61883.sys
+ 2009-05-04 14:21 . 2008-04-13 17:46 53376 c:\windows\system32\dllcache\1394bus.sys
- 2008-01-20 16:06 . 2007-12-03 10:21 21000 c:\windows\system32\DeltaIIpnl.dll
+ 2009-07-27 11:44 . 2009-07-27 11:44 21000 c:\windows\system32\DeltaIIpnl.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 61952 c:\windows\system32\decdnet.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 61952 c:\windows\system32\decdnet.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll
+ 2004-08-17 14:49 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
+ 2011-08-24 17:04 . 2008-04-14 02:21 32768 c:\windows\system32\ativtmxx.dll
- 2008-04-14 03:21 . 2008-04-14 03:21 32768 c:\windows\system32\ativtmxx.dll
+ 2001-11-09 16:01 . 2001-11-09 16:01 24064 c:\windows\system32\ativcoxx.dll
- 2001-11-09 03:01 . 2001-11-09 03:01 24064 c:\windows\system32\ativcoxx.dll
+ 2011-03-10 02:22 . 2011-03-10 02:22 17408 c:\windows\system32\atitvo32.dll
- 2006-08-02 09:40 . 2006-08-02 09:40 17408 c:\windows\system32\atitvo32.dll
+ 2009-06-22 16:34 . 2009-06-22 16:34 45056 c:\windows\system32\ATIODCLI.exe
+ 2011-03-10 02:16 . 2011-03-10 02:16 64512 c:\windows\system32\atimpc32.dll
- 2006-08-02 10:00 . 2006-08-02 10:00 53248 c:\windows\system32\ATIDDC.DLL
+ 2011-03-10 02:29 . 2011-03-10 02:29 53248 c:\windows\system32\ATIDDC.DLL
+ 2011-03-10 03:11 . 2011-03-10 03:11 57344 c:\windows\system32\aticalrt.dll
+ 2011-03-10 03:11 . 2011-03-10 03:11 53248 c:\windows\system32\aticalcl.dll
- 2006-08-02 10:02 . 2006-08-02 10:02 26112 c:\windows\system32\Ati2mdxx.exe
+ 2011-03-10 02:31 . 2011-03-10 02:31 26112 c:\windows\system32\Ati2mdxx.exe
+ 2011-03-10 02:31 . 2011-03-10 02:31 43520 c:\windows\system32\ati2edxx.dll
+ 2011-03-10 02:16 . 2011-03-10 02:16 64512 c:\windows\system32\amdpcom32.dll
+ 2011-08-24 17:49 . 2011-08-24 17:49 87940 c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
+ 2011-08-16 10:27 . 2011-08-16 10:27 86016 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2011-07-15 11:39 . 2011-07-15 11:39 73408 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
+ 2011-07-15 11:39 . 2011-07-15 11:39 64512 c:\windows\system32\Adobe\Shockwave 11\gcapi_dll.dll
+ 2011-08-16 10:29 . 2011-08-16 10:29 12800 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll
- 2007-12-08 14:17 . 2006-07-23 16:14 86016 c:\windows\SoundMan.exe
+ 2007-12-08 14:17 . 2006-07-21 14:14 86016 c:\windows\SoundMan.exe
+ 2009-08-06 17:24 . 2009-08-06 17:24 44768 c:\windows\SoftwareDistribution\WebSetup\wups2.dll
+ 2009-08-06 17:24 . 2009-08-06 17:24 35552 c:\windows\SoftwareDistribution\WebSetup\wups.dll
+ 2009-08-06 17:24 . 2009-08-06 17:24 53472 c:\windows\SoftwareDistribution\WebSetup\wuauclt.exe
+ 2009-08-06 17:24 . 2009-08-06 17:24 96480 c:\windows\SoftwareDistribution\WebSetup\cdm.dll
+ 2008-09-26 15:30 . 2008-09-26 15:30 30208 c:\windows\Installer\285f349.msp
+ 2009-02-26 21:22 . 2009-02-26 21:22 81920 c:\windows\Installer\285f331.msi
+ 2008-07-29 20:07 . 2008-07-29 20:07 23040 c:\windows\Installer\280963b.msp
+ 2009-02-26 21:14 . 2009-02-26 21:14 88576 c:\windows\Installer\27ca49b.msi
+ 2010-03-25 03:35 . 2010-03-25 03:35 48128 c:\windows\Installer\126bd20d.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{F4B86506-8EE2-BD24-DD5D-488506BA0A1F}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{EA2AFCCE-FE05-841D-D591-98228D23742D}\ARPPRODUCTICON.exe
+ 2011-08-24 21:44 . 2011-08-24 21:44 44758 c:\windows\Installer\{DBCF78BF-2A2C-DEB0-6C6E-ACFEB25C2056}\NewShortcut11_EAB9635D261D49BE88DDE71A7C809B2D.exe
+ 2011-08-24 21:44 . 2011-08-24 21:44 10134 c:\windows\Installer\{DBCF78BF-2A2C-DEB0-6C6E-ACFEB25C2056}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{D9DA6049-2E2A-C482-49D0-F6BCA46C5D87}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{D78A67E2-8ABE-E46C-0C3C-2AB8911C0C1D}\ARPPRODUCTICON.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 77542 c:\windows\Installer\{D486D519-A0C2-1BFB-BE2A-BC3F76A59657}\NewShortcut5_4DEA5338A7B840A3B51CDC742625BF49.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 77542 c:\windows\Installer\{D486D519-A0C2-1BFB-BE2A-BC3F76A59657}\NewShortcut4_4DEA5338A7B840A3B51CDC742625BF49.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 77542 c:\windows\Installer\{D486D519-A0C2-1BFB-BE2A-BC3F76A59657}\NewShortcut3_4DEA5338A7B840A3B51CDC742625BF49.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 77542 c:\windows\Installer\{D486D519-A0C2-1BFB-BE2A-BC3F76A59657}\NewShortcut2_4DEA5338A7B840A3B51CDC742625BF49.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 77542 c:\windows\Installer\{D486D519-A0C2-1BFB-BE2A-BC3F76A59657}\ARPPRODUCTICON.exe
+ 2011-08-24 21:41 . 2011-08-24 21:41 10134 c:\windows\Installer\{D368C31C-93E4-4936-076A-8187504C8361}\ARPPRODUCTICON.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{CCF7074B-BE72-44E1-9CAC-3FFAC582C692}\ARPPRODUCTICON.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_3082.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_2052.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1053.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1046.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1043.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1042.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1041.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1040.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1036.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1031.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe_1028.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 34304 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{C94E45B0-6AA6-4FB9-9AAE-22085F631880}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{C90EF99D-13A8-45AA-4CA6-D22D688BF720}\ARPPRODUCTICON.exe
+ 2011-08-24 21:44 . 2011-08-24 21:44 77542 c:\windows\Installer\{C05339AF-CF6E-56D6-B5CA-EEE98ABE1B6E}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{BC8BEB91-D36D-F08A-1933-8A92F0D14345}\ARPPRODUCTICON.exe
+ 2011-08-24 21:44 . 2011-08-24 21:44 10134 c:\windows\Installer\{A25FF1C0-80B6-4B8B-A551-DC525697A408}\ARPPRODUCTICON.exe
+ 2010-03-25 03:37 . 2010-03-25 03:37 35088 c:\windows\Installer\{90120000-0026-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-03-25 03:37 . 2010-03-25 03:37 18704 c:\windows\Installer\{90120000-0026-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-03-25 03:37 . 2010-03-25 03:37 20240 c:\windows\Installer\{90120000-0026-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{8FB302F4-3977-F1FF-5BEA-360B69E0D8B6}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{8B95503B-5941-48C0-0E0F-D7883DB8FEE7}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{85598656-6D57-8A93-5206-8D91F2CFCFFB}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{7F6CF811-D2B7-0396-1EC5-5A924E68FF8B}\ARPPRODUCTICON.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut8.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut5.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut4.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut2.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut1.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 22758 c:\windows\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{77DAE234-DB07-5416-E462-BFD829662B54}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{6D8452DC-EA5D-7D96-F8A9-42159D9DCE74}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{6A0055E4-4105-8A9F-7645-9A00DF3F61BC}\ARPPRODUCTICON.exe
+ 2009-09-30 15:26 . 2009-09-30 15:26 27136 c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2011-08-24 17:49 . 2011-08-24 17:49 10134 c:\windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{585BFB5B-C36F-FBAD-FCCE-C0109468F674}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{57860603-6E06-9933-8F7A-6157AD56540D}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{54A83A21-5CB8-4BB0-664F-BFEEE1F91656}\ARPPRODUCTICON.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut92_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut912.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut911.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9101.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9100.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut910.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut91.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut902.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut901.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9001.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9000.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut900.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut90.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 45056 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut9_1.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 65536 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{48D46B28-A01B-491D-C5A8-20524A287A0D}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{30AFA147-50F6-DE4F-389C-A22E169C38F6}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{2E6D95F3-61D7-2B05-C8B8-F3E30FCB3A27}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{29D80F0D-E581-B1E8-DF27-17DC432F725E}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{2208D13E-79C5-6760-B155-B9CC63D16945}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{1E63AF83-C747-7F80-0FDC-EC1464A28991}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{19A492A0-888F-44A0-9B21-D91700763F62}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{17AA1909-47F9-8CCB-088F-CD4B0FC3FD65}\ARPPRODUCTICON.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{147ACC6C-F715-BD83-F820-138663837BC0}\ARPPRODUCTICON.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 71016 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_ReadMe.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 54632 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_Check3D.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 50536 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_Help_HH.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 75112 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_ContentTransfer.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 46440 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_AMCap.exe
+ 2011-08-24 21:43 . 2011-08-24 21:43 10134 c:\windows\Installer\{07D0DCB6-D1B3-D3AA-24AD-36983326523B}\ARPPRODUCTICON.exe
+ 2009-09-30 15:29 . 2009-09-30 15:29 86016 c:\windows\Installer\{07287123-B8AC-41CE-8346-3D777245C35B}\PrntWzrdIco.exe
+ 2010-09-23 02:47 . 2010-09-23 02:47 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\reader_sl.exe
+ 2010-09-23 01:03 . 2010-09-23 01:03 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\eula.exe
+ 2010-09-20 21:07 . 2010-09-20 21:07 70584 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\adobeextractfiles.dll
+ 2010-09-23 00:52 . 2010-09-23 00:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\acrotextextractor.exe
+ 2010-09-22 16:12 . 2010-09-22 16:12 15800 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AcroRd32Info.exe
+ 2011-08-24 18:27 . 2009-03-08 14:57 58448 c:\windows\ie8\spuninst\iecustom.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 44544 c:\windows\ie8\pngfilt.dll
+ 2011-08-24 18:26 . 2007-08-13 17:01 48128 c:\windows\ie8\mshtmler.dll
+ 2011-08-24 18:26 . 2007-08-13 17:32 45568 c:\windows\ie8\mshta.exe
+ 2011-08-24 18:26 . 2007-08-13 17:36 12288 c:\windows\ie8\msfeedssync.exe
+ 2011-08-24 18:26 . 2009-02-20 17:13 52224 c:\windows\ie8\msfeedsbs.dll
+ 2011-08-24 18:26 . 2007-08-13 17:44 40960 c:\windows\ie8\licmgr10.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 27648 c:\windows\ie8\jsproxy.dll
+ 2011-08-24 18:26 . 2007-08-13 17:39 92672 c:\windows\ie8\inseng.dll
+ 2011-08-24 18:26 . 2007-08-13 17:36 36352 c:\windows\ie8\imgutil.dll
+ 2011-08-24 18:26 . 2007-08-13 17:39 55296 c:\windows\ie8\iesetup.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 44544 c:\windows\ie8\iernonce.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 78336 c:\windows\ie8\ieencode.dll
+ 2011-08-24 18:26 . 2009-02-20 10:20 70656 c:\windows\ie8\ie4uinit.exe
+ 2011-08-24 18:26 . 2009-02-20 17:13 63488 c:\windows\ie8\icardie.dll
+ 2011-08-24 18:26 . 2007-08-13 17:18 60416 c:\windows\ie8\hmmapi.dll
+ 2011-08-24 18:26 . 2007-08-13 17:42 17408 c:\windows\ie8\corpol.dll
+ 2011-08-24 18:26 . 2007-08-13 17:39 71680 c:\windows\ie8\admparse.dll
+ 2010-03-25 03:37 . 2010-03-25 03:37 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\ec83ec80653eb20ccc6ed42075c90aee\Microsoft.VisualC.ni.dll
+ 2010-03-25 03:35 . 2010-03-25 03:35 53248 c:\windows\assembly\GAC_32\WebDev.WebHost\8.0.0.0__b03f5f7f11d50a3a\WebDev.WebHost.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 11544 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 12080 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 64288 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
+ 2010-03-25 03:35 . 2010-03-25 03:35 80696 c:\windows\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2011-07-28 07:33 . 2008-04-14 03:21 15360 c:\windows\$NtUninstallKB942288-v3$\msisip.dll
+ 2011-07-28 07:33 . 2008-04-14 03:22 78848 c:\windows\$NtUninstallKB942288-v3$\msiexec.exe
+ 2009-06-04 07:23 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB971180-IE8\update\spcustom.dll
+ 2009-06-04 07:23 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB971180-IE8\spmsg.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB970238\update\spcustom.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB970238\spmsg.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969898\update\spcustom.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB969898\spmsg.dll
+ 2009-06-10 01:03 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB969897-IE8\update\spcustom.dll
+ 2009-06-10 01:03 . 2007-11-30 12:39 18296 c:\windows\$hf_mig$\KB969897-IE8\spmsg.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 12800 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\xpshims.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 25600 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\jsproxy.dll
+ 2009-06-10 01:00 . 2008-07-09 07:36 26488 c:\windows\$hf_mig$\KB968537\update\spcustom.dll
+ 2009-06-10 01:00 . 2008-07-09 07:36 18296 c:\windows\$hf_mig$\KB968537\spmsg.dll
+ 2009-06-10 01:02 . 2008-07-09 07:36 26488 c:\windows\$hf_mig$\KB961501\update\spcustom.dll
+ 2009-06-10 01:02 . 2008-07-09 07:36 18296 c:\windows\$hf_mig$\KB961501\spmsg.dll
+ 2011-08-24 21:42 . 2008-04-14 02:21 4096 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\ksuser.dll
+ 2011-08-24 10:01 . 2008-04-14 02:21 4096 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\ksuser.dll
+ 2011-08-24 10:01 . 2008-04-14 02:21 4096 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\ksuser.dll
+ 2011-08-24 10:01 . 2008-04-14 02:21 4096 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\ksuser.dll
+ 2011-08-24 10:01 . 2008-04-14 02:21 4096 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\ksuser.dll
+ 2004-08-17 14:48 . 2008-04-16 23:43 2560 c:\windows\system32\msimsg.dll
- 2007-12-08 14:17 . 2008-04-14 03:21 4096 c:\windows\system32\ksuser.dll
+ 2007-12-08 14:17 . 2008-04-14 02:21 4096 c:\windows\system32\ksuser.dll
+ 2011-08-24 21:42 . 2011-03-10 02:22 8348 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atitvo32.dll
+ 2009-05-04 14:21 . 2001-08-17 19:46 6400 c:\windows\system32\drivers\enum1394.sys
+ 2008-04-16 23:43 . 2008-04-16 23:43 2560 c:\windows\system32\dllcache\msimsg.dll
+ 2007-12-08 14:17 . 2008-04-14 02:21 4096 c:\windows\system32\dllcache\ksuser.dll
+ 2009-05-04 14:21 . 2001-08-17 19:46 6400 c:\windows\system32\dllcache\enum1394.sys
+ 2010-06-21 21:37 . 2010-06-21 21:37 2892 c:\windows\system32\audcon.sys
+ 2008-01-18 15:13 . 2008-01-18 15:13 2247 c:\windows\ServicePackFiles\i386\tscdsbl.bat
+ 2008-01-18 15:13 . 2008-01-18 15:13 2247 c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
+ 2011-08-24 21:43 . 2011-08-24 21:43 9158 c:\windows\Installer\{010D621D-4FDB-CC22-1622-9BD43A61060A}\ARPPRODUCTICON.exe
+ 2010-03-25 03:36 . 2010-03-25 03:36 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2008-07-29 06:05 . 2008-07-29 06:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
+ 2008-07-29 06:05 . 2008-07-29 06:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
+ 2008-07-29 01:54 . 2008-07-29 01:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2011-05-01 22:08 . 1997-01-18 08:40 299520 c:\windows\uninst.exe
+ 2008-04-14 03:22 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll
- 2008-04-14 03:22 . 2008-04-14 03:22 121856 c:\windows\system32\xmllite.dll
+ 2011-07-28 07:30 . 2010-06-02 02:55 527192 c:\windows\system32\XAudio2_7.dll
+ 2011-07-28 07:30 . 2010-02-04 08:01 528216 c:\windows\system32\XAudio2_6.dll
+ 2011-07-28 07:29 . 2009-09-04 15:44 515416 c:\windows\system32\XAudio2_5.dll
+ 2011-07-28 07:29 . 2009-03-16 12:18 517448 c:\windows\system32\XAudio2_4.dll
+ 2011-07-28 07:29 . 2008-10-27 08:04 514384 c:\windows\system32\XAudio2_3.dll
+ 2011-07-28 07:29 . 2008-07-31 08:40 509448 c:\windows\system32\XAudio2_2.dll
+ 2011-07-28 07:29 . 2008-05-30 12:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2011-07-28 07:29 . 2008-03-05 14:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2011-07-28 07:30 . 2010-06-02 02:55 239960 c:\windows\system32\xactengine3_7.dll
+ 2011-07-28 07:29 . 2010-02-04 08:01 238936 c:\windows\system32\xactengine3_6.dll
+ 2011-07-28 07:29 . 2009-09-04 15:44 238936 c:\windows\system32\xactengine3_5.dll
+ 2011-07-28 07:29 . 2009-03-16 12:18 235352 c:\windows\system32\xactengine3_4.dll
+ 2011-07-28 07:29 . 2008-10-27 08:04 235856 c:\windows\system32\xactengine3_3.dll
+ 2011-07-28 07:29 . 2008-07-31 08:41 238088 c:\windows\system32\xactengine3_2.dll
+ 2011-07-28 07:29 . 2008-05-30 12:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2011-07-28 07:29 . 2008-03-05 14:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2011-07-28 07:29 . 2007-07-19 22:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2011-07-28 07:29 . 2007-06-20 18:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2011-07-28 07:29 . 2007-04-04 16:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2011-07-28 07:29 . 2007-01-24 13:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2011-07-28 07:29 . 2006-12-08 10:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2011-07-28 07:29 . 2006-09-28 14:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2011-07-28 07:29 . 2007-10-22 01:39 267272 c:\windows\system32\xactengine2_10.dll
+ 2007-12-01 20:14 . 2009-08-06 17:23 209624 c:\windows\system32\wuweb.dll
+ 2007-12-01 20:14 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2007-12-01 20:14 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2006-10-26 12:45 . 2006-10-26 12:45 293376 c:\windows\system32\WISPTIS.EXE
+ 2004-08-17 14:49 . 2009-03-08 02:34 914944 c:\windows\system32\wininet.dll
+ 2007-08-13 17:45 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe
+ 2004-08-17 14:49 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 420352 c:\windows\system32\vbscript.dll
- 2004-08-17 14:49 . 2009-02-20 17:13 105984 c:\windows\system32\url.dll
+ 2004-08-17 14:49 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll
- 2008-01-21 09:27 . 2005-11-08 10:20 147456 c:\windows\system32\SynsoLChk.dll
+ 2008-01-21 09:27 . 2005-11-08 09:20 147456 c:\windows\system32\SynsoLChk.dll
+ 2007-12-08 14:16 . 2007-03-07 12:59 131072 c:\windows\system32\RTCOM\RtlCPAPI.dll
- 2007-12-08 14:16 . 2007-03-09 14:59 131072 c:\windows\system32\RTCOM\RtlCPAPI.dll
- 2007-12-08 14:16 . 2007-03-17 14:39 262144 c:\windows\system32\RTCOM\RTCOMDLL.dll
+ 2007-12-08 14:16 . 2007-03-15 12:39 262144 c:\windows\system32\RTCOM\RTCOMDLL.dll
+ 2004-08-17 14:49 . 2009-04-15 14:54 585216 c:\windows\system32\rpcrt4.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 487936 c:\windows\system32\rmbe3260.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 487936 c:\windows\system32\rmbe3260.dll
+ 2011-08-24 21:42 . 2008-04-13 18:19 146048 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\portcls.sys
+ 2011-08-24 21:42 . 2008-04-13 18:16 141056 c:\windows\system32\ReinstallBackups\0026\DriverFiles\i386\ks.sys
+ 2011-08-24 21:42 . 2010-11-17 12:03 101904 c:\windows\system32\ReinstallBackups\0026\DriverFiles\AtihdXP3.sys
+ 2011-08-24 21:42 . 2011-03-10 02:31 155648 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\Oemdspif.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 887724 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ativva6x.dat
+ 2011-08-24 21:42 . 2011-03-10 02:31 212992 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atipdlxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:22 491520 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atiok3x2.dll
+ 2011-08-24 21:42 . 2010-08-27 19:32 294912 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ATIODE.exe
+ 2011-08-24 21:42 . 2011-03-10 02:24 651264 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atikvmag.dll
+ 2011-08-24 21:42 . 2011-03-10 03:27 311296 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atiiiexx.dll
+ 2011-08-24 21:42 . 2011-02-16 18:18 231925 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atiicdxx.dat
+ 2011-08-24 21:42 . 2011-03-10 02:50 462848 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ATIDEMGX.dll
+ 2011-08-24 21:42 . 2009-05-11 22:35 118784 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atibtmon.exe
+ 2011-08-24 21:42 . 2011-03-10 02:28 147456 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atiapfxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:23 200704 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atiadlxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:30 643072 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2evxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:31 188416 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2evxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:49 302080 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2dvag.dll
+ 2011-08-24 21:42 . 2011-03-10 02:18 851968 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2cqag.dll
+ 2011-08-24 10:01 . 2011-05-10 09:41 119528 c:\windows\system32\ReinstallBackups\0024\DriverFiles\nvhda32.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 837224 c:\windows\system32\ReinstallBackups\0024\DriverFiles\nvgenco32.dll
+ 2011-08-24 10:01 . 2008-04-13 18:19 146048 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\portcls.sys
+ 2011-08-24 10:01 . 2008-04-13 18:16 141056 c:\windows\system32\ReinstallBackups\0024\DriverFiles\i386\ks.sys
+ 2011-08-24 10:01 . 2011-05-10 09:41 119528 c:\windows\system32\ReinstallBackups\0023\DriverFiles\nvhda32.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 837224 c:\windows\system32\ReinstallBackups\0023\DriverFiles\nvgenco32.dll
+ 2011-08-24 10:01 . 2008-04-13 18:19 146048 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\portcls.sys
+ 2011-08-24 10:01 . 2008-04-13 18:16 141056 c:\windows\system32\ReinstallBackups\0023\DriverFiles\i386\ks.sys
+ 2011-08-24 10:01 . 2011-05-10 09:41 119528 c:\windows\system32\ReinstallBackups\0022\DriverFiles\nvhda32.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 837224 c:\windows\system32\ReinstallBackups\0022\DriverFiles\nvgenco32.dll
+ 2011-08-24 10:01 . 2008-04-13 18:19 146048 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\portcls.sys
+ 2011-08-24 10:01 . 2008-04-13 18:16 141056 c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\ks.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 119272 c:\windows\system32\ReinstallBackups\0021\DriverFiles\nvhda32.sys
+ 2011-08-24 10:01 . 2011-03-03 15:59 837224 c:\windows\system32\ReinstallBackups\0021\DriverFiles\nvgenco32.dll
+ 2011-08-24 10:01 . 2008-04-13 18:19 146048 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\portcls.sys
+ 2011-08-24 10:01 . 2008-04-13 18:16 141056 c:\windows\system32\ReinstallBackups\0021\DriverFiles\i386\ks.sys
+ 2011-08-24 10:00 . 2011-03-28 10:27 837736 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvgenco32.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 257280 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvdrsdb.bin
+ 2011-08-24 10:00 . 2011-03-28 10:27 941160 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvdispco32.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 145920 c:\windows\system32\ReinstallBackups\0020\DriverFiles\dbInstaller.exe
- 2008-01-21 09:29 . 2007-12-08 23:32 352768 c:\windows\system32\pngu3263.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 352768 c:\windows\system32\pngu3263.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 131072 c:\windows\system32\pneng50.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 131072 c:\windows\system32\pneng50.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 273408 c:\windows\system32\pncrt.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 273408 c:\windows\system32\pncrt.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 130560 c:\windows\system32\pnc3250.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 130560 c:\windows\system32\pnc3250.dll
+ 2001-10-25 12:00 . 2011-09-08 07:51 435840 c:\windows\system32\perfh009.dat
- 2001-10-25 12:00 . 2009-04-19 05:46 435840 c:\windows\system32\perfh009.dat
+ 2001-10-25 12:00 . 2011-09-08 07:51 432880 c:\windows\system32\perfh005.dat
- 2001-10-25 12:00 . 2009-04-19 05:46 432880 c:\windows\system32\perfh005.dat
+ 2011-03-10 02:31 . 2011-03-10 02:31 155648 c:\windows\system32\Oemdspif.dll
+ 2004-08-17 14:49 . 2009-03-08 02:34 109568 c:\windows\system32\occache.dll
+ 2009-06-09 23:25 . 2007-09-19 14:18 393216 c:\windows\system32\NI_IRC_1_2.dll
- 2007-12-08 16:08 . 2007-12-08 16:08 348160 c:\windows\system32\msvcr71.dll
+ 2007-12-08 16:08 . 2007-02-14 17:05 348160 c:\windows\system32\msvcr71.dll
+ 2003-04-29 11:41 . 2007-12-08 22:32 344064 c:\windows\system32\msvcr70.dll
- 2003-04-29 11:41 . 2007-12-08 23:32 344064 c:\windows\system32\msvcr70.dll
+ 2007-12-08 16:08 . 2007-02-14 17:05 499712 c:\windows\system32\msvcp71.dll
- 2007-12-08 16:08 . 2007-12-08 16:08 499712 c:\windows\system32\msvcp71.dll
+ 2008-01-21 09:29 . 2007-12-08 22:32 487424 c:\windows\system32\msvcp70.dll
- 2008-01-21 09:29 . 2007-12-08 23:32 487424 c:\windows\system32\msvcp70.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
+ 2004-08-17 14:49 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll
+ 2001-10-25 12:00 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll
- 2001-10-25 12:00 . 2007-08-13 17:54 156160 c:\windows\system32\msls31.dll
+ 2004-08-17 14:49 . 2008-05-19 04:33 332800 c:\windows\system32\msihnd.dll
+ 2007-08-13 17:54 . 2009-03-08 02:32 594432 c:\windows\system32\msfeeds.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll
+ 2011-04-29 06:59 . 2011-04-29 06:59 235168 c:\windows\system32\Macromed\Flash\FlashUtil10p_Plugin.exe
+ 2009-07-27 11:44 . 2009-07-27 11:44 743944 c:\windows\system32\M-AudioDeltaControlPanel.exe
+ 2004-08-17 14:49 . 2009-05-07 15:33 346624 c:\windows\system32\localspl.dll
+ 2010-06-02 20:45 . 2010-06-02 20:45 547000 c:\windows\system32\libguide40.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 726528 c:\windows\system32\jscript.dll
+ 2006-10-26 12:45 . 2006-10-26 12:45 207360 c:\windows\system32\INKED.DLL
+ 2007-08-13 17:54 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll
+ 2004-08-17 14:49 . 2009-03-08 02:31 183808 c:\windows\system32\iepeers.dll
+ 2004-08-17 14:49 . 2009-03-08 12:09 391536 c:\windows\system32\iedkcs32.dll
+ 2007-07-11 11:27 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll
+ 2001-10-25 12:00 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll
+ 2004-08-17 14:49 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 173056 c:\windows\system32\ie4uinit.exe
+ 2008-01-29 10:02 . 2008-04-17 11:12 107368 c:\windows\system32\GEARAspi.dll
- 2008-01-29 10:02 . 2008-01-29 10:02 107368 c:\windows\system32\GEARAspi.dll
+ 2007-12-02 04:03 . 2010-06-24 07:46 350584 c:\windows\system32\FNTCACHE.DAT
+ 2004-08-17 14:49 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll
+ 2004-08-17 14:49 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll
- 2009-02-24 13:56 . 2006-12-04 09:36 203264 c:\windows\system32\DRVSTORE\PCLEBend_751CCE8DB684339E3B7C1F674E51E7966E991B50\bender.sys
+ 2011-07-28 07:52 . 2006-12-04 07:36 203264 c:\windows\system32\DRVSTORE\PCLEBend_751CCE8DB684339E3B7C1F674E51E7966E991B50\bender.sys
+ 2010-10-11 17:10 . 2009-07-27 11:44 302472 c:\windows\system32\DRVSTORE\MAudioDelt_C62DF34B2A974BD71D4CEF14F2291520F7ADD37D\MAudioDelta.sys
+ 2011-07-28 07:51 . 2005-09-23 20:18 171520 c:\windows\system32\DRVSTORE\MarvinBus_D2243026170F338889EB365780A159A73F977997\MarvinBus.sys
- 2009-02-24 13:56 . 2005-09-23 22:18 171520 c:\windows\system32\DRVSTORE\MarvinBus_D2243026170F338889EB365780A159A73F977997\MarvinBus.sys
+ 2009-09-30 15:30 . 2008-04-17 11:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
+ 2011-08-24 21:42 . 2011-03-10 02:37 562468 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ativvamv.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 887724 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ativva6x.dat
+ 2011-08-24 21:42 . 2011-03-10 02:31 110216 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atipdlxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:22 231457 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiok3x2.dll
+ 2011-08-24 21:42 . 2011-03-10 02:24 334445 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atikvmag.dll
+ 2011-08-24 21:42 . 2011-03-10 03:27 311296 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiiiexx.dll
+ 2011-08-24 21:42 . 2011-02-16 18:18 231925 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiicdxx.dat
+ 2011-08-24 21:42 . 2011-03-10 02:50 462848 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atidemgx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:23 108966 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atiadlxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:30 344873 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2evxx.exe
+ 2011-08-24 21:42 . 2011-03-10 02:31 102783 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2evxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:49 189920 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2dvag.dll
+ 2011-08-24 21:42 . 2011-03-10 02:18 423961 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2cqag.dll
+ 2011-08-24 21:42 . 2010-11-17 12:03 101904 c:\windows\system32\DRVSTORE\AtihdXP3_DC0FB942A9EE9E726CCEF081CE6597F68A619343\AtihdXP3.sys

Vee1 · #6 Příspěvek od **Vee1** » 08 zář 2011 10:15

Část 2:
+ 2004-03-16 09:58 . 2008-04-13 18:19 146048 c:\windows\system32\drivers\portcls.sys
- 2004-03-16 09:58 . 2008-04-13 19:19 146048 c:\windows\system32\drivers\portcls.sys
+ 2010-10-11 17:04 . 2009-07-27 11:44 302472 c:\windows\system32\drivers\MAudioDelta.sys
+ 2009-02-24 13:56 . 2005-09-23 20:18 171520 c:\windows\system32\drivers\MarvinBus.sys
- 2009-02-24 13:56 . 2005-09-23 22:18 171520 c:\windows\system32\drivers\MarvinBus.sys
- 2004-08-03 23:15 . 2008-04-13 19:16 141056 c:\windows\system32\drivers\ks.sys
+ 2004-08-03 23:15 . 2008-04-13 18:16 141056 c:\windows\system32\drivers\ks.sys
+ 2011-07-28 07:30 . 2006-07-31 17:45 180352 c:\windows\system32\drivers\CLBUDFR.sys
+ 2011-04-04 22:59 . 2011-04-04 22:59 297168 c:\windows\system32\drivers\avgtdix.sys
+ 2011-01-07 04:41 . 2011-01-07 04:41 248656 c:\windows\system32\drivers\avgldx86.sys
+ 2011-04-14 19:28 . 2011-04-14 19:28 134480 c:\windows\system32\drivers\AVGIDSDriver.sys
+ 2007-12-01 20:14 . 2009-08-06 17:23 209624 c:\windows\system32\dllcache\wuweb.dll
+ 2007-12-01 20:14 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2007-12-01 20:14 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2008-04-21 06:45 . 2009-03-08 02:34 914944 c:\windows\system32\dllcache\wininet.dll
+ 2007-08-13 17:54 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll
+ 2007-08-13 17:54 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2008-05-09 10:56 . 2009-03-08 02:33 420352 c:\windows\system32\dllcache\vbscript.dll
- 2007-08-13 17:44 . 2009-02-20 17:13 105984 c:\windows\system32\dllcache\url.dll
+ 2007-08-13 17:44 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
+ 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll
+ 2009-04-15 14:54 . 2009-04-15 14:54 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2004-03-16 09:58 . 2008-04-13 18:19 146048 c:\windows\system32\dllcache\portcls.sys
+ 2007-08-13 17:44 . 2009-03-08 02:34 109568 c:\windows\system32\dllcache\occache.dll
+ 2007-08-13 17:54 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2007-08-13 17:44 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll
+ 2001-10-25 12:00 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll
- 2001-10-25 12:00 . 2007-08-13 17:54 156160 c:\windows\system32\dllcache\msls31.dll
+ 2008-05-19 04:33 . 2008-05-19 04:33 332800 c:\windows\system32\dllcache\msihnd.dll
+ 2009-01-18 17:02 . 2009-03-08 02:32 594432 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-05-07 15:33 . 2009-05-07 15:33 346624 c:\windows\system32\dllcache\localspl.dll
+ 2004-08-03 23:15 . 2008-04-13 18:16 141056 c:\windows\system32\dllcache\ks.sys
+ 2008-05-09 10:56 . 2009-03-08 02:33 726528 c:\windows\system32\dllcache\jscript.dll
+ 2007-08-13 17:43 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2009-06-09 19:49 . 2009-04-30 21:16 246272 c:\windows\system32\dllcache\ieproxy.dll
+ 2007-08-13 17:54 . 2009-03-08 02:31 183808 c:\windows\system32\dllcache\iepeers.dll
+ 2007-08-13 17:39 . 2009-03-08 12:09 391536 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-06-04 07:23 . 2009-05-12 05:11 102912 c:\windows\system32\dllcache\iecompat.dll
+ 2009-01-18 17:02 . 2009-03-08 02:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
+ 2001-10-25 12:00 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll
+ 2007-08-13 17:39 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-08-13 17:39 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-08-13 17:35 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll
+ 2007-08-13 17:35 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-08-17 14:49 . 2008-04-14 03:21 640000 c:\windows\system32\dllcache\dbghelp.dll
+ 2011-08-24 17:04 . 2008-04-14 02:21 870784 c:\windows\system32\dllcache\ati3d1ag.dll
+ 2011-08-24 17:04 . 2011-03-10 02:49 302080 c:\windows\system32\dllcache\ati2dvag.dll
+ 2011-08-24 17:04 . 2008-04-14 02:21 377984 c:\windows\system32\dllcache\ati2dvaa.dll
+ 2011-08-24 17:04 . 2011-03-10 02:18 851968 c:\windows\system32\dllcache\ati2cqag.dll
+ 2007-08-13 17:39 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll
+ 2009-07-27 11:44 . 2009-07-27 11:44 236040 c:\windows\system32\DeltaIITray.exe
- 2008-01-20 16:06 . 2007-12-03 10:21 236040 c:\windows\system32\DeltaIITray.exe
+ 2011-07-28 07:30 . 2010-05-26 09:41 248672 c:\windows\system32\d3dx11_43.dll
+ 2011-07-28 07:29 . 2009-09-04 15:29 235344 c:\windows\system32\d3dx11_42.dll
+ 2011-07-28 07:30 . 2010-05-26 09:41 470880 c:\windows\system32\d3dx10_43.dll
+ 2011-07-28 07:29 . 2009-09-04 15:29 453456 c:\windows\system32\d3dx10_42.dll
+ 2011-07-28 07:29 . 2009-03-09 13:27 453456 c:\windows\system32\d3dx10_41.dll
+ 2011-07-28 07:29 . 2008-10-15 04:22 452440 c:\windows\system32\d3dx10_40.dll
+ 2011-07-28 07:29 . 2008-07-10 09:01 467984 c:\windows\system32\d3dx10_39.dll
+ 2011-07-28 07:29 . 2008-05-30 12:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2011-07-28 07:29 . 2008-02-05 21:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2011-07-28 07:29 . 2007-10-02 07:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2011-07-28 07:29 . 2007-07-19 16:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2011-07-28 07:29 . 2007-05-16 14:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2011-07-28 07:29 . 2007-03-15 14:57 443752 c:\windows\system32\d3dx10_33.dll
+ 2011-08-24 18:02 . 2011-03-10 02:29 887724 c:\windows\system32\ativva6x.dat
+ 2011-03-10 02:31 . 2011-03-10 02:31 212992 c:\windows\system32\atipdlxx.dll
+ 2011-03-10 02:22 . 2011-03-10 02:22 491520 c:\windows\system32\atiok3x2.dll
+ 2010-08-27 19:32 . 2010-08-27 19:32 294912 c:\windows\system32\ATIODE.exe
+ 2011-03-10 02:24 . 2011-03-10 02:24 651264 c:\windows\system32\atikvmag.dll
+ 2011-08-24 18:02 . 2011-02-16 18:18 231925 c:\windows\system32\atiicdxx.dat
+ 2009-05-11 22:35 . 2009-05-11 22:35 118784 c:\windows\system32\atibtmon.exe
+ 2011-03-10 02:28 . 2011-03-10 02:28 147456 c:\windows\system32\atiapfxx.exe
+ 2011-03-10 02:23 . 2011-03-10 02:23 200704 c:\windows\system32\atiadlxx.dll
- 2008-04-14 03:21 . 2008-04-14 03:21 870784 c:\windows\system32\ati3d1ag.dll
+ 2011-08-24 17:04 . 2008-04-14 02:21 870784 c:\windows\system32\ati3d1ag.dll
+ 2011-03-10 02:30 . 2011-03-10 02:30 643072 c:\windows\system32\ati2evxx.exe
+ 2011-03-10 02:31 . 2011-03-10 02:31 188416 c:\windows\system32\ati2evxx.dll
+ 2011-08-24 17:04 . 2011-03-10 02:49 302080 c:\windows\system32\ati2dvag.dll
+ 2011-08-24 17:04 . 2008-04-14 02:21 377984 c:\windows\system32\ati2dvaa.dll
- 2008-04-14 03:21 . 2008-04-14 03:21 377984 c:\windows\system32\ati2dvaa.dll
+ 2011-08-24 17:04 . 2011-03-10 02:18 851968 c:\windows\system32\ati2cqag.dll
+ 2004-08-17 14:49 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll
+ 2011-07-15 11:39 . 2011-07-15 11:39 279992 c:\windows\system32\Adobe\Shockwave 11\SymCCIS.dll
+ 2011-08-16 10:27 . 2011-08-16 10:27 114176 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
+ 2011-08-16 10:29 . 2011-08-16 10:29 434176 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
+ 2011-08-16 10:27 . 2011-08-16 10:27 365056 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
+ 2011-08-16 10:16 . 2011-08-16 10:16 990208 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2011-08-16 10:29 . 2011-08-16 10:29 892416 c:\windows\system32\Adobe\Shockwave 11\gi.dll
+ 2011-08-16 10:27 . 2011-08-16 10:27 542720 c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2011-08-16 10:35 . 2011-08-16 10:35 112568 c:\windows\system32\Adobe\Director\SWDNLD.EXE
+ 2011-08-16 10:34 . 2011-08-16 10:34 279480 c:\windows\system32\Adobe\Director\SwDir.dll
+ 2011-08-16 10:28 . 2011-08-16 10:28 145920 c:\windows\system32\Adobe\Director\np32dsw.dll
+ 2009-08-06 17:24 . 2009-08-06 17:24 327896 c:\windows\SoftwareDistribution\WebSetup\wucltui.dll
+ 2009-08-06 17:23 . 2009-08-06 17:23 575704 c:\windows\SoftwareDistribution\WebSetup\wuapi.dll
+ 2011-08-24 18:16 . 2011-08-24 07:01 183346 c:\windows\pchealth\helpctr\Config\Cache\Professional_32_1029.dat
+ 2009-02-26 21:17 . 2009-02-26 21:17 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-09-26 16:46 . 2008-09-26 16:46 442880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\vs_setup.msi
+ 2006-10-26 12:45 . 2006-10-26 12:45 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\WebDev.WebServer.EXE
+ 2009-11-16 16:42 . 2009-11-16 16:42 531968 c:\windows\Installer\fbff263.msi
+ 2007-12-08 14:32 . 2007-12-08 14:32 774144 c:\windows\Installer\a7d99.msi
+ 2008-01-21 15:18 . 2008-01-21 15:18 431104 c:\windows\Installer\97f7f4.msi
+ 2011-07-07 07:27 . 2011-07-07 07:27 676352 c:\windows\Installer\8d5043.msi
+ 2011-08-24 21:44 . 2011-08-24 21:44 843264 c:\windows\Installer\852973.msi
+ 2011-08-24 21:44 . 2011-08-24 21:44 996864 c:\windows\Installer\85296d.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 188416 c:\windows\Installer\85295f.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 406528 c:\windows\Installer\852959.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 248832 c:\windows\Installer\852953.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 248832 c:\windows\Installer\85294d.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852947.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852941.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\85293b.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852935.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\85292f.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852929.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852923.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\85291d.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 248320 c:\windows\Installer\852917.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 248832 c:\windows\Installer\852911.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 248832 c:\windows\Installer\85290b.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\852905.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 249344 c:\windows\Installer\8528ff.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\8528f9.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 249344 c:\windows\Installer\8528f3.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 252416 c:\windows\Installer\8528ed.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251904 c:\windows\Installer\8528e7.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 249344 c:\windows\Installer\8528e1.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251904 c:\windows\Installer\8528db.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 251392 c:\windows\Installer\8528d5.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 252928 c:\windows\Installer\8528ce.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 323584 c:\windows\Installer\8528c8.msi
+ 2011-08-24 21:43 . 2011-08-24 21:43 907776 c:\windows\Installer\8528c2.msi
+ 2011-08-24 21:41 . 2011-08-24 21:41 428544 c:\windows\Installer\8528b4.msi
+ 2008-11-13 08:15 . 2008-11-13 08:15 432640 c:\windows\Installer\804898.msi
+ 2011-08-24 17:26 . 2011-08-24 17:26 219648 c:\windows\Installer\65df4.msi
+ 2008-12-05 15:50 . 2008-12-05 15:50 337408 c:\windows\Installer\6144a.msi
+ 2011-08-24 17:49 . 2011-08-24 17:49 430592 c:\windows\Installer\456eb.msi
+ 2007-12-01 20:23 . 2007-12-01 20:23 265216 c:\windows\Installer\45312.msi
+ 2008-07-12 11:12 . 2008-07-12 11:12 532992 c:\windows\Installer\2e6c1.msi
+ 2009-02-26 21:22 . 2009-02-26 21:22 438784 c:\windows\Installer\285f352.msi
+ 2008-09-26 15:09 . 2008-09-26 15:09 122368 c:\windows\Installer\285f34c.msp
+ 2008-09-26 15:24 . 2008-09-26 15:24 182784 c:\windows\Installer\285f34b.msp
+ 2008-09-26 15:02 . 2008-09-26 15:02 875008 c:\windows\Installer\285f34a.msp
+ 2008-09-26 15:07 . 2008-09-26 15:07 184320 c:\windows\Installer\285f348.msp
+ 2008-09-26 15:18 . 2008-09-26 15:18 217088 c:\windows\Installer\285f347.msp
+ 2008-09-26 15:28 . 2008-09-26 15:28 105472 c:\windows\Installer\285f346.msp
+ 2009-02-26 21:22 . 2009-02-26 21:22 299008 c:\windows\Installer\285f345.msi
+ 2008-09-26 14:01 . 2008-09-26 14:01 257024 c:\windows\Installer\285f336.msp
+ 2008-09-26 14:05 . 2008-09-26 14:05 365056 c:\windows\Installer\285f335.msp
+ 2008-09-26 14:07 . 2008-09-26 14:07 513536 c:\windows\Installer\285f334.msp
+ 2008-09-26 14:04 . 2008-09-26 14:04 710656 c:\windows\Installer\285f333.msp
+ 2008-09-26 14:02 . 2008-09-26 14:02 366080 c:\windows\Installer\285f332.msp
+ 2008-12-13 08:58 . 2008-12-13 08:58 754688 c:\windows\Installer\28167ad.msp
+ 2009-02-26 21:17 . 2009-02-26 21:17 648192 c:\windows\Installer\281678a.msi
+ 2008-07-29 20:23 . 2008-07-29 20:23 250880 c:\windows\Installer\2809644.msp
+ 2008-07-29 20:28 . 2008-07-29 20:28 278016 c:\windows\Installer\2809642.msp
+ 2008-07-29 18:40 . 2008-07-29 18:40 291840 c:\windows\Installer\2809640.msp
+ 2009-02-26 21:17 . 2009-02-26 21:17 137728 c:\windows\Installer\280963a.msi
+ 2008-07-29 16:35 . 2008-07-29 16:35 553472 c:\windows\Installer\27ca4a0.msp
+ 2008-07-29 16:33 . 2008-07-29 16:33 506368 c:\windows\Installer\27ca49e.msp
+ 2008-07-29 16:37 . 2008-07-29 16:37 911360 c:\windows\Installer\27ca49d.msp
+ 2008-03-14 08:47 . 2008-03-14 08:47 100352 c:\windows\Installer\250e43f.msi
+ 2008-03-14 08:47 . 2008-03-14 08:47 557056 c:\windows\Installer\250e43a.msi
+ 2008-03-14 08:47 . 2008-03-14 08:47 269312 c:\windows\Installer\250e435.msi
+ 2009-09-30 15:26 . 2009-09-30 15:26 694272 c:\windows\Installer\1a16700c.msi
+ 2009-05-05 18:25 . 2009-05-05 18:25 717312 c:\windows\Installer\1838286.msi
+ 2008-03-07 16:50 . 2008-03-07 16:50 169984 c:\windows\Installer\1748b4.msi
+ 2010-03-25 03:35 . 2010-03-25 03:35 501248 c:\windows\Installer\126bd204.msi
+ 2010-03-25 03:34 . 2010-03-25 03:34 506880 c:\windows\Installer\126bd1ff.msi
+ 2010-03-25 03:34 . 2010-03-25 03:34 516608 c:\windows\Installer\126bd1f8.msi
+ 2010-03-25 03:34 . 2010-03-25 03:34 513024 c:\windows\Installer\126bd1f2.msi
+ 2010-03-25 03:34 . 2010-03-25 03:34 501248 c:\windows\Installer\126bd1ed.msi
+ 2010-05-19 22:08 . 2010-05-19 22:08 779264 c:\windows\Installer\10aa98d0.msi
+ 2010-05-19 22:08 . 2010-05-19 22:08 704512 c:\windows\Installer\10aa98cb.msi
+ 2011-07-28 08:01 . 2011-07-28 08:01 234856 c:\windows\Installer\{FC030CB5-46A6-4229-AD6E-0AC869F509C8}\ARPPRODUCTICON.exe
+ 2009-09-30 15:31 . 2009-09-30 15:31 102400 c:\windows\Installer\{EC2A8F27-4FBF-4E41-B27B-FE822511B761}\iTunesIco.exe
+ 2011-07-28 07:54 . 2011-07-28 07:54 234856 c:\windows\Installer\{BC7BED89-618B-4E89-8ADF-75D47F276223}\ARPPRODUCTICON.exe
+ 2010-03-25 03:34 . 2010-03-25 03:34 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2010-03-25 03:37 . 2010-03-25 03:37 217864 c:\windows\Installer\{90120000-0026-0000-0000-0000000FF1CE}\misc.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 528384 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut93_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 528384 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut913_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 528384 c:\windows\Installer\{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}\NewShortcut903_CC5820041A9C446BB9018F9ECF582DD1.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 234856 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\Studio.exe
+ 2011-07-28 07:49 . 2011-07-28 07:49 439656 c:\windows\Installer\{1362E602-9625-42D3-B57F-CDA9D26F9DA8}\SC_GuidedTour.exe
+ 2010-09-20 21:07 . 2010-09-20 21:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\readerupdater.exe
+ 2010-09-22 16:10 . 2010-09-22 16:10 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\nppdf32.dll
+ 2010-09-10 16:17 . 2010-09-10 16:17 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\JP2KLib.dll
+ 2010-09-22 18:41 . 2010-09-22 18:41 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AdobeCollabSync.exe
+ 2010-09-20 21:07 . 2010-09-20 21:07 932288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\adobearm.exe
+ 2010-09-23 02:47 . 2010-09-23 02:47 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AcroRd32.exe
+ 2010-09-22 16:04 . 2010-09-22 16:04 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AcroPDF.dll
+ 2010-09-22 17:39 . 2010-09-22 17:39 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\acrobroker.exe
+ 2010-09-20 21:07 . 2010-09-20 21:07 338856 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\acrobatupdater.exe
+ 2010-09-22 16:50 . 2010-09-22 16:50 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\a3dutility.exe
+ 2011-08-24 18:26 . 2009-03-03 00:14 826368 c:\windows\ie8\wininet.dll
+ 2011-08-24 18:26 . 2007-08-13 17:45 206336 c:\windows\ie8\winfxdocobj.exe
+ 2011-08-24 18:26 . 2009-02-20 17:13 233472 c:\windows\ie8\webcheck.dll
+ 2011-08-24 18:26 . 2008-05-27 17:26 765952 c:\windows\ie8\vgx.dll
+ 2011-08-24 18:26 . 2008-05-09 10:56 430080 c:\windows\ie8\vbscript.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 105984 c:\windows\ie8\url.dll
+ 2011-08-24 18:27 . 2009-01-07 16:20 390688 c:\windows\ie8\spuninst\updspapi.dll
+ 2011-08-24 18:27 . 2009-01-07 16:20 234016 c:\windows\ie8\spuninst\spuninst.exe
+ 2011-08-24 18:26 . 2006-09-06 16:42 215776 c:\windows\ie8\spuninst.exe
+ 2011-08-24 18:26 . 2009-02-20 17:13 102912 c:\windows\ie8\occache.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 671232 c:\windows\ie8\mstime.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 193024 c:\windows\ie8\msrating.dll
+ 2011-08-24 18:26 . 2007-08-13 17:54 156160 c:\windows\ie8\msls31.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 477696 c:\windows\ie8\mshtmled.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 459264 c:\windows\ie8\msfeeds.dll
+ 2011-08-24 18:26 . 2008-05-09 10:56 512000 c:\windows\ie8\jscript.dll
+ 2011-08-24 18:26 . 2009-02-28 04:54 636072 c:\windows\ie8\iexplore.exe
+ 2011-08-24 18:26 . 2007-08-13 17:54 180736 c:\windows\ie8\ieui.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 268288 c:\windows\ie8\iertutil.dll
+ 2011-08-24 18:26 . 2007-08-13 17:54 287744 c:\windows\ie8\ieproxy.dll
+ 2011-08-24 18:26 . 2007-08-13 17:54 191488 c:\windows\ie8\iepeers.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 385024 c:\windows\ie8\iedkcs32.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 383488 c:\windows\ie8\ieapfltr.dll
+ 2011-08-24 18:26 . 2009-02-20 05:14 161792 c:\windows\ie8\ieakui.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 230400 c:\windows\ie8\ieaksie.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 153088 c:\windows\ie8\ieakeng.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 214528 c:\windows\ie8\dxtrans.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 347136 c:\windows\ie8\dxtmsft.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 124928 c:\windows\ie8\advpack.dll
+ 2005-08-11 15:30 . 2005-08-11 15:30 417792 c:\windows\Downloaded Program Files\isusweb.dll
+ 2010-03-25 03:37 . 2010-03-25 03:37 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2abd876a3c8a6b088fa6d8d39d901e3c\System.Runtime.Remoting.ni.dll
+ 2010-03-25 03:37 . 2010-03-25 03:37 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\f48e3419fb2cb012fd160ae801600ae7\System.Messaging.ni.dll
+ 2010-03-25 03:37 . 2010-03-25 03:37 863744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Web.Autho#\9fd2f14a0c45a7e57624c55e17cfd329\Microsoft.Web.Authoring.ni.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 416544 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2010-03-25 03:36 . 2010-03-25 03:36 371496 c:\windows\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 183104 c:\windows\assembly\GAC\Microsoft.Expression.Interop.WebDesigner\12.0.0.0__71e9bce111e9429c\Microsoft.Expression.Interop.WebDesigner.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 391032 c:\windows\$NtUninstallKB970238$\spuninst\updspapi.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 233848 c:\windows\$NtUninstallKB970238$\spuninst\spuninst.exe
+ 2009-06-10 01:00 . 2008-04-14 03:21 584704 c:\windows\$NtUninstallKB970238$\rpcrt4.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 391032 c:\windows\$NtUninstallKB969898$\spuninst\updspapi.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 233848 c:\windows\$NtUninstallKB969898$\spuninst\spuninst.exe
+ 2009-06-10 01:00 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB968537$\spuninst\updspapi.dll
+ 2009-06-10 01:00 . 2008-07-09 07:36 233848 c:\windows\$NtUninstallKB968537$\spuninst\spuninst.exe
+ 2009-06-10 01:02 . 2008-07-09 07:36 391032 c:\windows\$NtUninstallKB961501$\spuninst\updspapi.dll
+ 2009-06-10 01:02 . 2008-07-09 07:36 233848 c:\windows\$NtUninstallKB961501$\spuninst\spuninst.exe
+ 2009-06-10 01:02 . 2008-04-14 03:21 344064 c:\windows\$NtUninstallKB961501$\localspl.dll
+ 2011-07-28 07:33 . 2007-11-30 03:39 391032 c:\windows\$NtUninstallKB942288-v3$\spuninst\updspapi.dll
+ 2011-07-28 07:33 . 2007-11-30 03:39 233848 c:\windows\$NtUninstallKB942288-v3$\spuninst\spuninst.exe
+ 2011-07-28 07:33 . 2008-04-13 15:39 884736 c:\windows\$NtUninstallKB942288-v3$\msimsg.dll
+ 2011-07-28 07:33 . 2008-04-14 03:21 271360 c:\windows\$NtUninstallKB942288-v3$\msihnd.dll
+ 2009-06-04 07:23 . 2007-11-30 12:39 391032 c:\windows\$hf_mig$\KB971180-IE8\update\updspapi.dll
+ 2009-06-04 07:23 . 2007-11-30 12:39 759160 c:\windows\$hf_mig$\KB971180-IE8\update\update.exe
+ 2009-06-04 07:23 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB971180-IE8\spuninst.exe
+ 2009-06-04 07:23 . 2009-05-12 05:11 102912 c:\windows\$hf_mig$\KB971180-IE8\SP3QFE\iecompat.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 391032 c:\windows\$hf_mig$\KB970238\update\updspapi.dll
+ 2009-06-10 01:00 . 2007-11-30 12:39 759160 c:\windows\$hf_mig$\KB970238\update\update.exe
+ 2009-06-10 01:00 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB970238\spuninst.exe
+ 2009-04-15 15:25 . 2009-04-15 15:25 585216 c:\windows\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 391032 c:\windows\$hf_mig$\KB969898\update\updspapi.dll
+ 2009-06-10 01:02 . 2007-11-30 12:39 759160 c:\windows\$hf_mig$\KB969898\update\update.exe
+ 2009-06-10 01:02 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB969898\spuninst.exe
+ 2009-06-10 01:03 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB969897-IE8\update\updspapi.dll
+ 2009-06-10 01:03 . 2007-11-30 11:18 759160 c:\windows\$hf_mig$\KB969897-IE8\update\update.exe
+ 2009-06-10 01:03 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB969897-IE8\spuninst.exe
+ 2009-06-09 19:49 . 2009-05-13 05:09 915456 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 246272 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieproxy.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 385536 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iedkcs32.dll
+ 2009-06-09 19:49 . 2009-04-30 10:46 173056 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ie4uinit.exe
+ 2009-06-10 01:00 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB968537\update\updspapi.dll
+ 2009-06-10 01:00 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB968537\update\update.exe
+ 2009-06-10 01:00 . 2008-07-09 07:36 233848 c:\windows\$hf_mig$\KB968537\spuninst.exe
+ 2009-06-10 01:02 . 2008-07-09 07:36 391032 c:\windows\$hf_mig$\KB961501\update\updspapi.dll
+ 2009-06-10 01:02 . 2008-07-09 07:36 759160 c:\windows\$hf_mig$\KB961501\update\update.exe
+ 2009-06-10 01:02 . 2008-07-09 07:36 233848 c:\windows\$hf_mig$\KB961501\spuninst.exe
+ 2009-05-07 15:16 . 2009-05-07 15:16 347136 c:\windows\$hf_mig$\KB961501\SP3QFE\localspl.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-06 23:19 . 2007-11-06 23:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 1079808 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
+ 2006-10-26 12:40 . 2006-10-26 12:40 1093632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
+ 2007-12-01 20:14 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
+ 2003-06-23 00:44 . 2003-06-23 00:44 1415680 c:\windows\system32\wmv9vcm.dll
+ 2004-08-17 14:44 . 2009-04-19 19:52 1847168 c:\windows\system32\win32k.sys
+ 2004-07-17 10:35 . 2004-07-17 10:35 1356800 c:\windows\system32\webfldrs.msi
+ 2009-09-30 15:25 . 2009-08-28 17:42 2065696 c:\windows\system32\usbaaplrc.dll
+ 2004-08-17 14:49 . 2009-03-08 02:34 1206784 c:\windows\system32\urlmon.dll
+ 2008-01-21 09:27 . 2009-09-17 14:20 1261568 c:\windows\system32\SYNSOACC.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 2841472 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ativvaxx.dll
+ 2011-08-24 21:42 . 2011-03-10 02:37 1112576 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ativvamv.dll
+ 2011-08-24 21:42 . 2011-03-10 03:06 5169152 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\aticaldd.dll
+ 2011-08-24 21:42 . 2011-03-10 02:44 4097280 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati3duag.dll
+ 2011-08-24 21:42 . 2011-03-10 03:30 6574592 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\ati2mtag.sys
+ 2011-08-24 10:00 . 2011-03-28 10:27 2294198 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvdata.bin
+ 2011-08-24 10:00 . 2011-03-28 10:27 2918504 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvcuvid.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 2252904 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvcuvenc.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 4984832 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvcuda.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 1978368 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvapi.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 9933952 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nv4_mini.sys
+ 2011-08-24 10:00 . 2011-03-28 10:27 6407936 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nv4_disp.dll
+ 2009-07-27 11:44 . 2009-07-27 11:44 2515587 c:\windows\system32\pcifmdio.dll
+ 2008-04-14 03:21 . 2011-03-28 16:27 6407936 c:\windows\system32\nv4_disp.dll
+ 2004-08-17 14:49 . 2008-05-19 04:33 4445184 c:\windows\system32\msi.dll
+ 2004-08-17 14:49 . 2009-03-08 02:41 5937152 c:\windows\system32\mshtml.dll
+ 2003-03-18 20:20 . 2007-09-28 09:10 1060864 c:\windows\system32\mfc71.dll
- 2003-03-18 20:20 . 2003-03-18 20:20 1060864 c:\windows\system32\mfc71.dll
+ 2009-07-18 03:21 . 2011-04-29 06:59 6053536 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2010-06-02 20:45 . 2010-06-02 20:45 3590328 c:\windows\system32\libmmd.dll
+ 2007-08-13 17:34 . 2009-03-08 02:32 1985024 c:\windows\system32\iertutil.dll
+ 2007-02-12 15:10 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat
+ 2006-10-26 13:10 . 2006-10-26 13:10 1190688 c:\windows\system32\FM20.DLL
+ 2009-09-30 15:25 . 2009-08-28 17:42 2065696 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
+ 2009-09-30 15:25 . 2009-08-28 17:42 1417504 c:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\wdfcoinstaller01005.dll
+ 2011-08-24 21:42 . 2011-03-10 02:29 1358288 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ativvaxx.dll
+ 2011-08-24 21:42 . 2011-03-10 03:03 7670675 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\atioglxx.dll
+ 2011-08-24 21:42 . 2011-03-10 03:06 2438101 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\aticaldd.dll
+ 2011-08-24 21:42 . 2011-03-10 02:44 2179376 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati3duag.dll
+ 2011-08-24 21:42 . 2011-03-10 03:30 4347269 c:\windows\system32\DRVSTORE\CX115038_DBEBE0B33355EA0BB37DE88BF537C82872FFB471\B114977\ati2mtag.sys
+ 2007-12-08 14:16 . 2007-04-10 17:04 4397568 c:\windows\system32\drivers\RtkHDAud.sys
- 2007-12-08 14:16 . 2007-04-12 19:04 4397568 c:\windows\system32\drivers\RtkHDAud.sys
+ 2008-10-14 04:13 . 2011-03-28 16:27 9933952 c:\windows\system32\drivers\nv4_mini.sys
+ 2006-08-02 10:07 . 2011-03-10 03:30 6574592 c:\windows\system32\drivers\ati2mtag.sys
+ 2007-12-01 20:14 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-16 07:47 . 2009-04-19 19:52 1847168 c:\windows\system32\dllcache\win32k.sys
+ 2008-06-26 08:14 . 2009-03-08 02:34 1206784 c:\windows\system32\dllcache\urlmon.dll
+ 2008-10-14 04:13 . 2011-03-28 16:27 9933952 c:\windows\system32\dllcache\nv4_mini.sys
+ 2008-04-14 03:21 . 2011-03-28 16:27 6407936 c:\windows\system32\dllcache\nv4_disp.dll
+ 2008-05-19 04:33 . 2008-05-19 04:33 4445184 c:\windows\system32\dllcache\msi.dll
+ 2008-04-21 06:45 . 2009-03-08 02:41 5937152 c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-18 17:02 . 2009-03-08 02:32 1985024 c:\windows\system32\dllcache\iertutil.dll
+ 2009-01-18 17:02 . 2009-02-06 19:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
+ 2011-08-24 17:04 . 2011-03-10 02:29 2841472 c:\windows\system32\dllcache\ativvaxx.dll
+ 2011-08-24 17:04 . 2011-03-10 02:44 4097280 c:\windows\system32\dllcache\ati3duag.dll
+ 2006-08-02 10:07 . 2011-03-10 03:30 6574592 c:\windows\system32\dllcache\ati2mtag.sys
+ 2011-07-28 07:30 . 2010-05-26 09:41 1998168 c:\windows\system32\D3DX9_43.dll
+ 2011-07-28 07:29 . 2009-09-04 15:29 1892184 c:\windows\system32\D3DX9_42.dll
+ 2011-07-28 07:29 . 2009-03-09 13:27 4178264 c:\windows\system32\D3DX9_41.dll
+ 2011-07-28 07:29 . 2008-10-15 04:22 4379984 c:\windows\system32\D3DX9_40.dll
+ 2011-07-28 07:29 . 2008-07-10 09:00 3851784 c:\windows\system32\D3DX9_39.dll
+ 2011-07-28 07:29 . 2008-05-30 12:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2011-07-28 07:29 . 2008-03-05 13:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2011-07-28 07:29 . 2007-10-12 13:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2011-07-28 07:29 . 2007-07-19 16:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2011-07-28 07:29 . 2007-05-16 14:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2011-07-28 07:29 . 2007-03-12 14:42 3495784 c:\windows\system32\d3dx9_33.dll
+ 2011-07-28 07:29 . 2006-11-29 11:06 3426072 c:\windows\system32\d3dx9_32.dll
+ 2011-07-28 07:29 . 2006-09-28 14:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2011-07-28 07:30 . 2010-05-26 09:41 1868128 c:\windows\system32\d3dcsx_43.dll
+ 2011-07-28 07:29 . 2009-09-04 15:29 5501792 c:\windows\system32\d3dcsx_42.dll
+ 2011-07-28 07:30 . 2010-05-26 09:41 2106216 c:\windows\system32\D3DCompiler_43.dll
+ 2011-07-28 07:29 . 2009-09-04 15:29 1974616 c:\windows\system32\D3DCompiler_42.dll
+ 2011-07-28 07:29 . 2009-03-09 13:27 1846632 c:\windows\system32\D3DCompiler_41.dll
+ 2011-07-28 07:29 . 2008-10-15 04:22 2036576 c:\windows\system32\D3DCompiler_40.dll
+ 2011-07-28 07:29 . 2008-07-10 09:00 1493528 c:\windows\system32\D3DCompiler_39.dll
+ 2011-07-28 07:29 . 2008-05-30 12:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2011-07-28 07:29 . 2008-03-05 13:56 1420824 c:\windows\system32\D3DCompiler_37.dll
+ 2011-07-28 07:29 . 2007-10-12 13:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2011-07-28 07:29 . 2007-07-19 16:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2011-07-28 07:29 . 2007-05-16 14:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2011-07-28 07:29 . 2007-03-12 14:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2011-08-24 17:04 . 2011-03-10 02:29 2841472 c:\windows\system32\ativvaxx.dll
+ 2011-03-10 02:37 . 2011-03-10 02:37 1112576 c:\windows\system32\ativvamv.dll
+ 2011-03-10 03:06 . 2011-03-10 03:06 5169152 c:\windows\system32\aticaldd.dll
+ 2011-08-24 17:04 . 2011-03-10 02:44 4097280 c:\windows\system32\ati3duag.dll
+ 2011-08-16 10:34 . 2011-08-16 10:34 1040824 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1161629.exe
+ 2011-07-29 09:40 . 2011-07-29 09:40 2376368 c:\windows\system32\Adobe\Shockwave 11\gt.exe
+ 2011-08-16 10:17 . 2011-08-16 10:17 1740800 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
+ 2009-08-06 17:23 . 2009-08-06 17:23 1929952 c:\windows\SoftwareDistribution\WebSetup\wuaueng.dll
- 2007-12-08 14:17 . 2007-04-06 17:22 1822720 c:\windows\SkyTel.exe
+ 2007-12-08 14:17 . 2007-04-04 15:22 1822720 c:\windows\SkyTel.exe
+ 2008-10-14 04:13 . 2004-07-17 10:35 1356800 c:\windows\ServicePackFiles\i386\webfldrs.msi
+ 2007-12-08 14:16 . 2007-01-16 08:39 1191936 c:\windows\RtlUpd.exe
- 2007-12-08 14:16 . 2007-01-18 10:39 1191936 c:\windows\RtlUpd.exe
+ 2007-12-08 14:16 . 2007-03-23 17:19 9715200 c:\windows\RTLCPL.exe
- 2007-12-08 14:16 . 2007-03-25 19:19 9715200 c:\windows\RTLCPL.exe
+ 2007-12-08 14:16 . 2006-10-11 15:42 2157568 c:\windows\MicCal.exe
- 2007-12-08 14:16 . 2006-10-13 17:42 2157568 c:\windows\MicCal.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 6139392 c:\windows\Installer\fbff259.msi
+ 2009-11-16 16:42 . 2009-11-16 16:42 4583936 c:\windows\Installer\fbff254.msi
+ 2009-11-16 16:42 . 2009-11-16 16:42 4633600 c:\windows\Installer\fbff242.msi
+ 2008-04-23 09:58 . 2008-04-23 09:58 5623808 c:\windows\Installer\ef7e210.msi
+ 2008-03-14 08:56 . 2008-03-14 08:56 7882752 c:\windows\Installer\d4fd.msi
+ 2007-12-08 14:35 . 2007-12-08 14:35 6912000 c:\windows\Installer\a7db0.msi
+ 2008-01-21 12:08 . 2008-01-21 12:08 1068544 c:\windows\Installer\8fd925.msi
+ 2008-01-20 15:49 . 2008-01-20 15:49 9943552 c:\windows\Installer\89e7b.msi
+ 2008-01-20 15:39 . 2008-01-20 15:39 5788160 c:\windows\Installer\89e2a.msi
+ 2011-08-24 21:44 . 2011-08-24 21:44 1120768 c:\windows\Installer\852966.msi
+ 2011-08-24 21:41 . 2011-08-24 21:41 1597440 c:\windows\Installer\8528bb.msi
+ 2011-08-24 17:28 . 2011-08-24 17:28 3489280 c:\windows\Installer\65dfc.msi
+ 2011-08-24 17:26 . 2011-08-24 17:26 1611776 c:\windows\Installer\65df8.msi
+ 2011-04-14 06:56 . 2011-04-14 06:56 3946496 c:\windows\Installer\52d2a5e.msi
+ 2011-07-28 07:51 . 2011-07-28 07:51 8116736 c:\windows\Installer\4490e.msi
+ 2008-07-28 15:40 . 2008-07-28 15:40 1759744 c:\windows\Installer\2f1d7.msi
+ 2010-10-11 17:11 . 2010-10-11 17:11 1385472 c:\windows\Installer\2b8ca.msi
+ 2008-12-13 08:57 . 2008-12-13 08:57 8397824 c:\windows\Installer\2816798.msp
+ 2008-07-29 18:26 . 2008-07-29 18:26 1043456 c:\windows\Installer\2809643.msp
+ 2008-07-29 19:37 . 2008-07-29 19:37 2679808 c:\windows\Installer\2809641.msp
+ 2008-07-29 20:15 . 2008-07-29 20:15 3697664 c:\windows\Installer\280963f.msp
+ 2008-07-29 18:34 . 2008-07-29 18:34 1448448 c:\windows\Installer\280963e.msp
+ 2008-07-29 19:22 . 2008-07-29 19:22 4137984 c:\windows\Installer\280963d.msp
+ 2008-07-29 18:18 . 2008-07-29 18:18 3376640 c:\windows\Installer\280963c.msp
+ 2008-07-29 16:45 . 2008-07-29 16:45 2543616 c:\windows\Installer\27ca4a4.msp
+ 2008-07-29 16:29 . 2008-07-29 16:29 2926080 c:\windows\Installer\27ca4a3.msp
+ 2008-07-29 16:41 . 2008-07-29 16:41 6487040 c:\windows\Installer\27ca4a2.msp
+ 2008-07-29 16:39 . 2008-07-29 16:39 3403264 c:\windows\Installer\27ca4a1.msp
+ 2008-07-29 16:43 . 2008-07-29 16:43 1013248 c:\windows\Installer\27ca49f.msp
+ 2008-07-29 16:31 . 2008-07-29 16:31 6083072 c:\windows\Installer\27ca49c.msp
+ 2008-01-20 22:40 . 2008-01-20 22:40 5210112 c:\windows\Installer\1dab1a.msi
+ 2009-09-30 15:31 . 2009-09-30 15:31 4597248 c:\windows\Installer\1a1672bb.msi
+ 2009-09-30 15:29 . 2009-09-30 15:29 1659392 c:\windows\Installer\1a1672b7.msi
+ 2009-09-30 15:27 . 2009-09-30 15:27 9013760 c:\windows\Installer\1a1672aa.msi
+ 2009-09-30 15:26 . 2009-09-30 15:26 1549312 c:\windows\Installer\1a167007.msi
+ 2009-09-30 15:25 . 2009-09-30 15:25 3310592 c:\windows\Installer\1a167002.msi
+ 2010-03-25 03:37 . 2010-03-25 03:37 5974528 c:\windows\Installer\126bd23b.msi
+ 2010-03-25 03:35 . 2010-03-25 03:35 1737216 c:\windows\Installer\126bd213.msi
+ 2010-03-25 03:34 . 2010-03-25 03:34 2397184 c:\windows\Installer\126bd1e8.msi
+ 2010-09-22 16:05 . 2010-09-22 16:05 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\rt3d.dll
+ 2010-09-16 01:08 . 2010-09-16 01:08 6210560 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\authplay.dll
+ 2010-06-19 15:51 . 2010-06-19 15:51 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AGM.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 1160192 c:\windows\ie8\urlmon.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 3595264 c:\windows\ie8\mshtml.dll
+ 2011-08-24 18:26 . 2009-02-20 17:13 6066176 c:\windows\ie8\ieframe.dll
+ 2011-08-24 18:26 . 2008-07-09 14:25 2455488 c:\windows\ie8\ieapfltr.dat
+ 2010-03-25 03:37 . 2010-03-25 03:37 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\283ecfbaa6a6fab76c8b544a4a89d5ce\System.Data.OracleClient.ni.dll
+ 2010-03-25 03:37 . 2010-03-25 03:37 1602048 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Web.Desig#\f0c5d7198158003e3b581c5c489fdcca\Microsoft.Web.Design.Client.ni.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
+ 2010-03-25 03:36 . 2010-03-25 03:36 1989448 c:\windows\assembly\GAC\Microsoft.Expression.Interop.WebDesignerPage\12.0.0.0__71e9bce111e9429c\Microsoft.Expression.Interop.WebDesignerPage.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-08 14:32 . 2007-12-08 14:32 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-28 07:29 . 2011-07-28 07:29 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2007-12-08 14:16 . 2006-05-04 14:26 2808832 c:\windows\alcwzrd.exe
- 2007-12-08 14:16 . 2006-05-06 16:26 2808832 c:\windows\alcwzrd.exe
+ 2009-06-10 01:00 . 2009-02-09 14:07 1846784 c:\windows\$NtUninstallKB968537$\win32k.sys
+ 2011-07-28 07:33 . 2008-04-14 03:21 2843136 c:\windows\$NtUninstallKB942288-v3$\msi.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 1207808 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\urlmon.dll
+ 2009-06-09 19:49 . 2009-05-13 05:09 5936128 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
+ 2009-06-09 19:49 . 2009-04-30 21:19 1985024 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\iertutil.dll
+ 2009-04-19 19:44 . 2009-04-19 19:44 1847808 c:\windows\$hf_mig$\KB968537\SP3QFE\win32k.sys
+ 2011-08-24 21:42 . 2011-03-10 03:03 17510400 c:\windows\system32\ReinstallBackups\0025\DriverFiles\B114977\atioglxx.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 14680064 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvoglnt.dll
+ 2011-08-24 10:00 . 2011-03-28 10:27 13004800 c:\windows\system32\ReinstallBackups\0020\DriverFiles\nvcompiler.dll
+ 2008-01-20 15:47 . 2009-06-01 16:51 23635392 c:\windows\system32\MRT.exe
+ 2007-08-13 17:54 . 2009-03-08 02:39 11063808 c:\windows\system32\ieframe.dll
+ 2009-01-18 17:02 . 2009-03-08 02:39 11063808 c:\windows\system32\dllcache\ieframe.dll
+ 2011-03-10 03:03 . 2011-03-10 03:03 17510400 c:\windows\system32\atioglxx.dll
+ 2011-03-09 20:58 . 2011-03-09 20:58 12380672 c:\windows\system32\amdocl.dll
+ 2007-12-08 14:16 . 2007-04-10 13:28 16126464 c:\windows\RTHDCPL.exe
- 2007-12-08 14:16 . 2007-04-12 15:28 16126464 c:\windows\RTHDCPL.exe
+ 2009-11-16 16:42 . 2009-11-16 16:42 29208576 c:\windows\Installer\fbff23d.msi
+ 2009-02-24 13:58 . 2009-02-24 13:58 14654976 c:\windows\Installer\54aa39.msi
+ 2011-07-28 08:01 . 2011-07-28 08:01 19420160 c:\windows\Installer\44920.msi
+ 2011-07-28 07:54 . 2011-07-28 07:54 11393024 c:\windows\Installer\44914.msi
+ 2011-07-28 07:49 . 2011-07-28 07:49 26549248 c:\windows\Installer\448ee.msi
+ 2008-12-13 09:21 . 2008-12-13 09:21 10473472 c:\windows\Installer\28167a2.msp
+ 2011-04-14 07:03 . 2011-04-14 07:03 11135488 c:\windows\Installer\22507.msp
+ 2011-04-14 07:03 . 2011-04-14 07:03 15139328 c:\windows\Installer\22506.msp
+ 2011-08-17 11:15 . 2011-08-17 11:15 19798016 c:\windows\Installer\21e3a.msp
+ 2010-09-23 01:03 . 2010-09-23 01:03 20460984 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B7449A0400000010\9.4.0\AcroRd32.dll
+ 2009-05-01 13:19 . 2009-05-01 13:19 11064832 c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2007-12-29 486856]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2007-04-04 1822720]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-08 305440]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-08-11 249856]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-08-11 81920]
"H2O"="c:\program files\SyncroSoft\Pos\H2O\cledx.exe" [2007-12-11 307200]
"M-Audio Taskbar Icon"="c:\windows\system32\DeltaIITray.exe" [2009-07-27 236040]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-10 16126464]
"AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2011-04-18 2334560]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-09 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\totalcmd6\\TOTALCMD.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Clear FTP 2006\\clearftp.exe"=
"c:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"c:\\Program Files\\Nvu\\nvu.exe"=
"c:\\WINDOWS\\system32\\DeltaIITray.exe"=
"c:\\WINDOWS\\RTHDCPL.EXE"=
"c:\\Program Files\\Canon\\MyPrinter\\BJMYPRT.EXE"=
"c:\\Program Files\\Syncrosoft\\POS\\H2O\\cledx.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Steinberg\\Nuendo 3\\Nuendo3.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\umi.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgmfapx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgemcx.exe"=
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [22.2.2011 8:13 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [16.3.2011 16:03 32592]
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver;c:\windows\system32\drivers\CLBStor.sys [28.7.2011 9:30 10368]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10.3.2008 19:08 715248]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7.1.2011 6:41 248656]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [5.4.2011 0:59 297168]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [18.4.2011 17:39 7398752]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [8.2.2011 5:33 269520]
R2 CLBUDFR;CyberLink UDF Filesystem;c:\windows\system32\drivers\CLBUDFR.sys [28.7.2011 9:30 180352]
R2 gearsec;gearsec;c:\windows\system32\gearsec.exe [2.12.2003 9:49 53248]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\atl01_xp.sys [8.12.2007 16:24 38656]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [24.8.2011 20:02 101904]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [14.4.2011 21:28 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [10.2.2011 7:53 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [10.2.2011 7:53 27216]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [21.1.2008 11:27 33792]
R3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\drivers\MAudioDelta.sys [11.10.2010 19:04 302472]
S1 9bdea3ca;9bdea3ca;c:\windows\system32\drivers\9bdea3ca.sys --> c:\windows\system32\drivers\9bdea3ca.sys [?]
S1 cb725c12;cb725c12;c:\windows\system32\drivers\cb725c12.sys --> c:\windows\system32\drivers\cb725c12.sys [?]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys --> c:\windows\system32\drivers\nvhda32.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 08:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\documents and settings\MrVee\Data aplikací\Mozilla\Firefox\Profiles\ngxngetl.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
FF - prefs.js: network.proxy.ftp - 125.39.57.180
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.gopher - 125.39.57.180
FF - prefs.js: network.proxy.gopher_port - 8080
FF - prefs.js: network.proxy.http - 125.39.57.180
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - 125.39.57.180
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - 125.39.57.180
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-fsm - (no file)
Notify-avgrsstarter - avgrsstx.dll
AddRemove-BlueVoda_Website_Builder_1.0 - c:\windows\iun6002.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-08 10:55
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGCommandManager]
"CommandsWithoutImages"=hex:00,00
"MenuUserImages"=hex:00,00
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGControlBarVersion]
"Major"=dword:00000008
"Minor"=dword:0000003c
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGToolbarParameters]
"Tooltips"=dword:00000001
"ShortcutKeys"=dword:00000001
"LargeIcons"=dword:00000001
"MenuAnimation"=dword:00000000
"RecentlyUsedMenus"=dword:00000001
"MenuShadows"=dword:00000001
"ShowAllMenusAfterDelay"=dword:00000001
"Look2000"=dword:00000001
"CommandsUsage"=hex:37,04,00,00,00,00
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(936)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(2004)
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG10\avgchsvx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\AVG\AVG10\avgnsx.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\system32\wscntfy.exe
c:\progra~1\AVG\AVG10\avgrsx.exe
c:\program files\AVG\AVG10\avgcsrvx.exe
.
**************************************************************************
.
Celkový čas: 2011-09-08 11:00:18 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-08 09:00
ComboFix2.txt 2009-05-07 13:48
ComboFix3.txt 2009-05-06 18:38
ComboFix4.txt 2009-05-06 13:00
ComboFix5.txt 2009-05-07 13:55
.
Před spuštěním: Volných bajtů: 45 847 752 704
Po spuštění: Volných bajtů: 45 877 698 560
.
- - End Of File - - D7CF26908EAE342BC77933703E0BB2A9

#7 Příspěvek od **vyosek** » 08 zář 2011 11:47

Pokud nemate, tak presunte Combofix na plochu

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

RegLockDel::
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGCommandManager]
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGControlBarVersion]
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGToolbarParameters]

Firefox::
FF - ProfilePath - c:\documents and settings\MrVee\Data aplikací\Mozilla\Firefox\Profiles\ngxngetl.default\
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
FF - prefs.js: network.proxy.ftp - 125.39.57.180
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.gopher - 125.39.57.180
FF - prefs.js: network.proxy.gopher_port - 8080
FF - prefs.js: network.proxy.http - 125.39.57.180
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - 125.39.57.180
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - 125.39.57.180
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0

Driver::
9bdea3ca
cb725c12
Nero BackItUp Scheduler 3
NMIndexingService

Rootkit::
c:\windows\system32\drivers\9bdea3ca.sys
c:\windows\system32\drivers\cb725c12.sys

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"NBKeyScan"=-
"QuickTime Task"=-
"iTunesHelper"=-
"ISUSPM Startup"=-
"ISUSScheduler"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS]
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6D,00,\
  72,00,6F,00,6F,00,74,00,25,00,5C,00,73,00,79,00,73,00,74,00,65,00,6D,00,\
  33,00,32,00,5C,00,73,00,76,00,63,00,68,00,6F,00,73,00,74,00,2E,00,65,00,\
  78,00,65,00,20,00,2D,00,6B,00,20,00,6E,00,65,00,74,00,73,00,76,00,63,00,\
  73,00,00,00
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wuauserv]
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6D,00,\
  72,00,6F,00,6F,00,74,00,25,00,5C,00,73,00,79,00,73,00,74,00,65,00,6D,00,\
  33,00,32,00,5C,00,73,00,76,00,63,00,68,00,6F,00,73,00,74,00,2E,00,65,00,\
  78,00,65,00,20,00,2D,00,6B,00,20,00,6E,00,65,00,74,00,73,00,76,00,63,00,\
  73,00,00,00
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001

File::
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1383384898-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1383384898-682003330-1003UA.job

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Vee1 · #8 Příspěvek od **Vee1** » 08 zář 2011 11:50

Teď jsem proskenoval mbam a nic to nenašlo. Jinak nic nedělám a čekám na další postup, pokud bude třeba. Díky moc!

Vee1 · #9 Příspěvek od **Vee1** » 08 zář 2011 11:51

Tak super, jdu na to.

#10 Příspěvek od **vyosek** » 08 zář 2011 11:57

Aplikujte skript pro ComboFix a nasledne mi sem vlozte log, ktery vypadne

Vee1 · #11 Příspěvek od **Vee1** » 08 zář 2011 13:12

Tady je log. Ještě popíšu průběh. Při aplikaci skriptu a následném skenu se sken zastavil na fázi 50. Potom to fakt dlouho nic nedělalo. Provedl jsem restart a spustil normál CF. Scan, restart a
log proběhlo již normálně (skript jsem již neaplikoval). Při přípravě logu se pouze spustilo AVG (vypnuto na 15 min.). Tak tady je ten log:
ComboFix 11-09-08.01 - MrVee 08.09.2011 13:45:42.19.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3071.2457 [GMT 2:00]
Spuštěný z: c:\documents and settings\MrVee\Plocha\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2011 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Nakažená kopie c:\windows\system32\d3d9.dll byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\ERDNT\cache\d3d9.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-08 do 2011-09-08 )))))))))))))))))))))))))))))))
.
.
2011-08-24 21:47 . 2011-08-24 21:47 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2011-08-24 21:44 . 2011-08-24 21:44 -------- d-----w- c:\program files\AMD APP
2011-08-24 21:40 . 2011-08-24 21:44 -------- d-----w- c:\program files\ATI Technologies
2011-08-24 21:40 . 2011-08-24 21:40 -------- d-----w- c:\program files\ATI
2011-08-24 18:26 . 2011-08-24 18:27 -------- dc-h--w- c:\windows\ie8
2011-08-24 18:02 . 2011-08-24 18:02 0 ----a-w- c:\windows\ativpsrm.bin
2011-08-24 18:02 . 2011-03-10 03:27 311296 ----a-r- c:\windows\system32\atiiiexx.dll
2011-08-24 18:02 . 2011-03-10 02:50 462848 ----a-r- c:\windows\system32\ATIDEMGX.dll
2011-08-24 18:02 . 2010-11-17 12:03 101904 ----a-r- c:\windows\system32\drivers\AtihdXP3.sys
2011-08-24 17:49 . 2011-08-24 17:49 -------- d-----w- c:\windows\system32\Adobe
2011-08-24 17:39 . 2011-08-24 17:40 -------- d-----w- c:\documents and settings\MrVee\Local Settings\Data aplikací\Google
2011-08-24 17:29 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\MrVee\Data aplikací\AVG10
2011-08-24 17:27 . 2011-09-08 06:44 -------- d-----w- c:\windows\system32\drivers\AVG
2011-08-24 17:27 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVG10
2011-08-24 17:22 . 2011-08-24 17:22 -------- d--h--w- c:\documents and settings\All Users\Data aplikací\Common Files
2011-08-24 17:22 . 2011-08-24 17:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2011-08-24 12:16 . 2005-05-03 16:43 69632 ------r- c:\windows\Alcmtr.exe
2011-08-24 09:59 . 2011-08-24 09:59 -------- d-----w- C:\NVIDIA
2011-08-23 21:33 . 2011-08-12 03:15 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-08-23 21:32 . 2011-08-12 03:15 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-08-23 17:59 . 2011-08-23 17:59 -------- d-----w- c:\program files\ASUS
2011-08-23 17:52 . 2011-08-24 18:07 -------- d-----w- c:\program files\NVIDIA Corporation
2011-08-17 11:15 . 2008-04-14 01:29 14592 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-08-17 11:15 . 2008-04-14 01:29 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-23 18:11 . 2011-08-23 18:11 540140 ----a-w- c:\windows\P5B-SE-ASUS-1001.zip
2004-10-04 07:56 . 2004-10-06 11:39 28676096 ----a-w- c:\program files\StylusRMX.dll
2011-08-12 03:15 . 2011-05-01 06:59 126976 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-09-08_08.54.53 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-07-30 18:19 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2007-12-01 20:14 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2011-09-08 08:58 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2011-09-08 08:58 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
- 2001-10-25 12:00 . 2011-09-08 07:51 68544 c:\windows\system32\perfc009.dat
+ 2001-10-25 12:00 . 2011-09-08 12:00 68544 c:\windows\system32\perfc009.dat
+ 2001-10-25 12:00 . 2011-09-08 12:00 79534 c:\windows\system32\perfc005.dat
- 2001-10-25 12:00 . 2011-09-08 07:51 79534 c:\windows\system32\perfc005.dat
+ 2007-12-01 20:14 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2001-10-25 12:00 . 2011-09-08 12:00 435840 c:\windows\system32\perfh009.dat
- 2001-10-25 12:00 . 2011-09-08 07:51 435840 c:\windows\system32\perfh009.dat
- 2001-10-25 12:00 . 2011-09-08 07:51 432880 c:\windows\system32\perfh005.dat
+ 2001-10-25 12:00 . 2011-09-08 12:00 432880 c:\windows\system32\perfh005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2007-04-04 1822720]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"H2O"="c:\program files\SyncroSoft\Pos\H2O\cledx.exe" [2007-12-11 307200]
"M-Audio Taskbar Icon"="c:\windows\system32\DeltaIITray.exe" [2009-07-27 236040]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-10 16126464]
"AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2011-04-18 2334560]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-09 98304]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\totalcmd6\\TOTALCMD.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Clear FTP 2006\\clearftp.exe"=
"c:\\Program Files\\Nero\\Nero8\\Nero Home\\NeroHome.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"c:\\Program Files\\Nvu\\nvu.exe"=
"c:\\WINDOWS\\system32\\DeltaIITray.exe"=
"c:\\WINDOWS\\RTHDCPL.EXE"=
"c:\\Program Files\\Canon\\MyPrinter\\BJMYPRT.EXE"=
"c:\\Program Files\\Syncrosoft\\POS\\H2O\\cledx.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Steinberg\\Nuendo 3\\Nuendo3.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 15\\Programs\\umi.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgnsx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgmfapx.exe"=
"c:\\Program Files\\AVG\\AVG10\\avgemcx.exe"=
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [22.2.2011 8:13 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [16.3.2011 16:03 32592]
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver;c:\windows\system32\drivers\CLBStor.sys [28.7.2011 9:30 10368]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10.3.2008 19:08 715248]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [7.1.2011 6:41 248656]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [5.4.2011 0:59 297168]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [18.4.2011 17:39 7398752]
R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [8.2.2011 5:33 269520]
R2 CLBUDFR;CyberLink UDF Filesystem;c:\windows\system32\drivers\CLBUDFR.sys [28.7.2011 9:30 180352]
R2 gearsec;gearsec;c:\windows\system32\gearsec.exe [2.12.2003 9:49 53248]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\atl01_xp.sys [8.12.2007 16:24 38656]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [24.8.2011 20:02 101904]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [14.4.2011 21:28 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [10.2.2011 7:53 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [10.2.2011 7:53 27216]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [21.1.2008 11:27 33792]
R3 DELTAII;Service for M-Audio Delta Driver (WDM);c:\windows\system32\drivers\MAudioDelta.sys [11.10.2010 19:04 302472]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys --> c:\windows\system32\drivers\nvhda32.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 08:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\documents and settings\MrVee\Data aplikací\Mozilla\Firefox\Profiles\ngxngetl.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-08 13:57
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGCommandManager]
"CommandsWithoutImages"=hex:00,00
"MenuUserImages"=hex:00,00
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGControlBarVersion]
"Major"=dword:00000008
"Minor"=dword:0000003c
.
[HKEY_USERS\S-1-5-21-2025429265-1383384898-682003330-1003\Software\%s (%s)\«Ů0x >:xz|8xn9xz|8xCStringList*đł/xß0x!A:xoŢ0xn9xz|8xCMapPtrToPtr\CSY_Settings\BCGToolbarParameters]
"Tooltips"=dword:00000001
"ShortcutKeys"=dword:00000001
"LargeIcons"=dword:00000001
"MenuAnimation"=dword:00000000
"RecentlyUsedMenus"=dword:00000001
"MenuShadows"=dword:00000001
"ShowAllMenusAfterDelay"=dword:00000001
"Look2000"=dword:00000001
"CommandsUsage"=hex:37,04,00,00,00,00
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(928)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(376)
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\progra~1\AVG\AVG10\avgchsvx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\RTHDCPL.EXE
c:\program files\AVG\AVG10\avgnsx.exe
c:\program files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\windows\system32\wscntfy.exe
c:\progra~1\AVG\AVG10\avgrsx.exe
c:\program files\AVG\AVG10\avgcsrvx.exe
.
**************************************************************************
.
Celkový čas: 2011-09-08 14:03:47 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-09-08 12:03
ComboFix2.txt 2011-09-08 09:00
ComboFix3.txt 2009-05-07 13:48
ComboFix4.txt 2009-05-06 18:38
ComboFix5.txt 2011-09-08 10:55
.
Před spuštěním: Volných bajtů: 45 558 337 536
Po spuštění: Volných bajtů: 45 423 951 872
.
- - End Of File - - E1898F98BCC4083E322B5923666CE59A

#12 Příspěvek od **vyosek** » 08 zář 2011 13:59

Stahnete SytemLook (viz muj podpis) a ulozte jej na plochu

Do okna vlozte skript nize

Kód: Vybrat vše

:reg
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ImagePath
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ImagePath

Kliknete na Look
Tlacitko Look se zmeni na Scanning a zsedne
Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

Vee1 · #13 Příspěvek od **Vee1** » 08 zář 2011 14:14

Tak jsem to provedl, ještě mi Windows stáhli 93! aktualizací. Možná jsem to udělal předčasně, ale před použitím System Look jcem CC cleanerem vyčistil registry.

SystemLook 30.07.11 by jpshortstuff
Log created at 15:11 on 08/09/2011 by MrVee
Administrator - Elevation successful

========== reg ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv\ImagePath]
(Unable to open key - key not found)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\ImagePath]
(Unable to open key - key not found)

-= EOF =-

#14 Příspěvek od **vyosek** » 08 zář 2011 14:16

To je dobre ze stahli, tim jsme overili ze jsou opet v provozu

Odinstalujte Combofix

Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
Napiste ComboFix /Uninstall
Stisknete Enter
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Nainstalujte aktulizace

Dejte novy log z RSIT a napiste co PC

Vee1 · #15 Příspěvek od **Vee1** » 08 zář 2011 14:46

Vše hotovo, tady je log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by MrVee at 2011-09-08 15:45:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 47 GB (16%) free of 286 GB
Total RAM: 3071 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:45:34, on 8.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\WINDOWS\system32\DeltaIITray.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\gearsec.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\MrVee\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\MrVee.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\system32\DeltaIITray.exe
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC273~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

--
End of file - 6560 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\MrVee\Data aplikací\Mozilla\Firefox\Profiles\ngxngetl.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429, avg@igeared:6.010.006.004, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"avg@igeared"=C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG10\Firefox4\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0]
"Description"=DivX® Content Upload Plugin
"Path"=C:\Program Files\DivX\DivX Content Uploader\npUpload.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npLegitCheckPlugin.dll
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
avg_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll [2011-08-05 2274144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2007-04-04 1822720]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-15 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-04 1603152]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2007-12-11 307200]
"M-Audio Taskbar Icon"=C:\WINDOWS\system32\DeltaIITray.exe [2009-07-27 236040]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"AVG_TRAY"=C:\Program Files\AVG\AVG10\avgtray.exe [2011-04-18 2334560]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-09 98304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-06-09 2363392]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-03-10 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\totalcmd6\TOTALCMD.EXE"="C:\totalcmd6\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Clear FTP 2006\clearftp.exe"="C:\Program Files\Clear FTP 2006\clearftp.exe:*:Enabled:clearftp"
"C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Disabled:Nero Home"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Nvu\nvu.exe"="C:\Program Files\Nvu\nvu.exe:*:Enabled:Nvu"
"C:\WINDOWS\system32\DeltaIITray.exe"="C:\WINDOWS\system32\DeltaIITray.exe:*:Enabled:ENABLE"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ENABLE"
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE"="C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE:*:Enabled:ENABLE"
"C:\Program Files\Syncrosoft\POS\H2O\cledx.exe"="C:\Program Files\Syncrosoft\POS\H2O\cledx.exe:*:Enabled:ENABLE"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Steinberg\Nuendo 3\Nuendo3.exe"="C:\Program Files\Steinberg\Nuendo 3\Nuendo3.exe:*:Disabled:Nuendo"
"C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 15\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\AVG\AVG10\avgnsx.exe"="C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG10\avgemcx.exe"="C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Obecná kontrola pošty"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"vidc.mjpg"=pvmjpg30.dll
"VIDC.I420"=msh263.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-08 15:45:29 ----D---- C:\rsit
2011-09-08 15:30:01 ----SHD---- C:\RECYCLER
2011-09-08 14:47:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-08 14:40:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-09-08 14:35:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-09-08 14:35:19 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-09-08 14:35:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-09-08 14:35:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-09-08 14:35:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-09-08 14:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-09-08 14:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-09-08 14:34:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-09-08 14:34:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-09-08 14:34:36 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-09-08 14:34:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-09-08 14:34:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-09-08 14:34:13 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-09-08 14:34:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-09-08 14:34:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-09-08 14:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-09-08 14:33:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-09-08 14:33:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-09-08 14:33:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-09-08 14:33:37 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-09-08 14:33:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-09-08 14:33:25 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-09-08 14:33:20 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-09-08 14:33:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-09-08 14:33:06 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-09-08 14:32:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-09-08 14:32:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-09-08 14:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-09-08 14:32:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2503665$
2011-09-08 14:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-09-08 14:32:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-09-08 14:32:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-09-08 14:31:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-09-08 14:31:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-09-08 14:30:05 ----SHD---- C:\Config.Msi
2011-09-08 14:29:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-09-08 14:28:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-09-08 14:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-09-08 14:28:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-09-08 14:28:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-09-08 14:28:25 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-09-08 14:28:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-09-08 14:28:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-09-08 14:28:05 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-09-08 14:27:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-09-08 14:27:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-09-08 14:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-09-08 14:25:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-09-08 14:25:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-09-08 14:25:17 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-09-08 14:25:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-09-08 14:25:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-09-08 14:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-09-08 14:24:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-09-08 14:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-09-08 14:24:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-09-08 14:24:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-09-08 14:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-09-08 14:22:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-09-08 14:22:15 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-09-08 14:21:51 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-09-08 14:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-09-08 14:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-09-08 14:21:34 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-09-08 14:21:26 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-09-08 14:21:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-09-08 14:21:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-09-08 14:18:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893$
2011-09-08 14:15:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-09-08 14:15:22 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-09-08 14:15:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-09-08 14:15:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-09-08 14:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-09-08 14:14:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-09-08 14:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-09-08 14:13:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-09-08 14:13:44 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-09-08 14:13:37 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-09-08 14:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-09-08 14:13:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-09-08 14:03:49 ----D---- C:\WINDOWS\temp
2011-09-08 11:14:16 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-08-25 00:21:31 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2011-08-24 23:47:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-08-24 23:44:39 ----D---- C:\Program Files\AMD APP
2011-08-24 23:40:38 ----D---- C:\Program Files\ATI Technologies
2011-08-24 23:40:34 ----D---- C:\Program Files\ATI
2011-08-24 20:26:28 ----HDC---- C:\WINDOWS\ie8
2011-08-24 20:02:56 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2011-08-24 20:02:51 ----RA---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\ativva6x.dat
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\ativva5x.dat
2011-08-24 20:02:44 ----RA---- C:\WINDOWS\system32\atiicdxx.dat
2011-08-24 20:02:14 ----RA---- C:\WINDOWS\system32\drivers\AtihdXP3.sys
2011-08-24 19:49:27 ----D---- C:\WINDOWS\system32\Adobe
2011-08-24 19:29:17 ----D---- C:\Documents and Settings\MrVee\Data aplikací\AVG10
2011-08-24 19:27:35 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-24 19:27:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG10
2011-08-24 19:22:32 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-08-24 19:22:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-08-24 19:04:43 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-08-24 19:04:43 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2011-08-24 19:04:42 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-08-24 19:04:42 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2dvaa.dll
2011-08-24 19:04:41 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-08-24 14:16:04 ----R---- C:\WINDOWS\Alcmtr.exe
2011-08-24 11:59:01 ----D---- C:\NVIDIA
2011-08-24 11:06:31 ----A---- C:\WINDOWS\WININIT.INI
2011-08-23 19:59:40 ----D---- C:\Program Files\ASUS
2011-08-23 19:52:55 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-17 13:15:50 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys

======List of files/folders modified in the last 1 month======

2011-09-08 15:45:34 ----D---- C:\Program Files\trend micro
2011-09-08 15:42:49 ----D---- C:\WINDOWS\system32
2011-09-08 15:42:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-08 15:42:10 ----D---- C:\WINDOWS\Debug
2011-09-08 15:42:10 ----D---- C:\WINDOWS
2011-09-08 15:39:13 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-08 15:36:47 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-09-08 15:29:36 ----D---- C:\Program Files\Mozilla Firefox
2011-09-08 15:28:54 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-08 15:25:21 ----D---- C:\WINDOWS\Minidump
2011-09-08 15:25:06 ----D---- C:\WINDOWS\Prefetch
2011-09-08 15:18:37 ----D---- C:\WINDOWS\system32\drivers
2011-09-08 14:47:55 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-08 14:47:54 ----HD---- C:\WINDOWS\inf
2011-09-08 14:45:28 ----RSD---- C:\WINDOWS\assembly
2011-09-08 14:42:16 ----D---- C:\WINDOWS\AppPatch
2011-09-08 14:40:56 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-08 14:40:18 ----SHD---- C:\WINDOWS\Installer
2011-09-08 14:39:45 ----D---- C:\WINDOWS\WinSxS
2011-09-08 14:21:53 ----D---- C:\Program Files\Outlook Express
2011-09-08 14:21:30 ----D---- C:\Program Files\Movie Maker
2011-09-08 14:15:37 ----D---- C:\WINDOWS\ie8updates
2011-09-08 14:14:17 ----D---- C:\Program Files\Internet Explorer
2011-09-08 13:56:29 ----A---- C:\WINDOWS\system.ini
2011-09-08 13:55:55 ----D---- C:\WINDOWS\system32\drivers\etc
2011-09-08 13:52:11 ----D---- C:\Program Files\Common Files
2011-09-08 10:59:13 ----SD---- C:\WINDOWS\Tasks
2011-09-08 10:58:26 ----D---- C:\WINDOWS\Help
2011-09-08 10:52:33 ----D---- C:\WINDOWS\system32\config
2011-09-08 10:52:00 ----RD---- C:\Program Files
2011-09-08 10:52:00 ----D---- C:\WINDOWS\system
2011-09-08 10:51:59 ----D---- C:\WINDOWS\ehome
2011-09-08 08:48:09 ----A---- C:\WINDOWS\WINCMD.INI
2011-09-07 21:57:00 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-09-07 01:56:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-06 23:04:23 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-05 14:50:35 ----D---- C:\Kamera nova
2011-09-03 12:17:22 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-08-31 11:48:57 ----D---- C:\DATA
2011-08-28 17:11:26 ----D---- C:\Program Files\Waves
2011-08-24 23:47:33 ----D---- C:\Documents and Settings\MrVee\Data aplikací\ATI
2011-08-24 23:42:59 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-24 23:42:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-24 20:29:22 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-24 20:29:22 ----D---- C:\WINDOWS\Media
2011-08-24 19:26:48 ----D---- C:\Program Files\AVG
2011-08-24 19:18:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg8
2011-08-24 19:18:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2011-08-24 19:18:26 ----D---- C:\Documents and Settings\MrVee\Data aplikací\AVGTOOLBAR
2011-08-24 19:15:00 ----D---- C:\Documents and Settings
2011-08-24 19:05:38 ----D---- C:\Program Files\mozilla.org
2011-08-24 19:04:32 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-24 19:02:02 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-24 19:01:57 ----D---- C:\Program Files\Lavasoft
2011-08-24 14:16:29 ----D---- C:\WINDOWS\system32\RTCOM
2011-08-24 14:16:04 ----D---- C:\Program Files\Realtek
2011-08-24 13:55:39 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-24 12:00:10 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-23 23:01:31 ----D---- C:\WINDOWS\network diagnostic

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 CLBStor;CyberLink InstantBurn UDF Reader Help Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-07-31 10368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2008-03-10 715248]
R0 TPkd;TPkd; C:\WINDOWS\system32\drivers\TPkd.sys [2008-09-08 93232]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R2 CLBUDFR;CyberLink UDF Filesystem; C:\WINDOWS\system32\drivers\CLBUDFR.sys [2006-07-31 180352]
R2 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [2007-03-16 38656]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-03-10 6574592]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2010-11-17 101904]
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2007-12-11 33792]
R3 DELTAII;Service for M-Audio Delta Driver (WDM); C:\WINDOWS\system32\DRIVERS\MAudioDelta.sys [2009-07-27 302472]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-14 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-02-05 47360]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 are3wo2d;are3wo2d; C:\WINDOWS\system32\drivers\are3wo2d.sys []
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 AVCSTRM;AVC Streaming Filter Driver; C:\WINDOWS\system32\DRIVERS\avcstrm.sys [2008-04-13 13696]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTAPE;Microsoft AV/C Tape Subunit Device; C:\WINDOWS\system32\DRIVERS\mstape.sys [2008-04-13 49024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-03-28 9933952]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-03-10 643072]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2011-04-18 7398752]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe [2011-02-08 269520]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 gearsec;gearsec; C:\WINDOWS\system32\gearsec.exe [2003-12-02 53248]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2007-10-12 71096]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-09-08 545568]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

VIRY.CZ

Hijack.WindowsUpdates a zadrhávání Firefox

Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox

Re: Hijack.WindowsUpdates a zadrhávání Firefox