Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Samovolné vypínání noteboku

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#16 Příspěvek od motji »

Takže ted to vypadá jak? Bez restartu?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#17 Příspěvek od nom »

ano bez restartu
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#18 Příspěvek od nom »

rsit log po restartu nb (obnovil sem skužby po spuštění které sem vypnul v msconfig)


Logfile of random's system information tool 1.09 (written by random/random)
Run by HITTL ROMAN at 2012-01-06 10:16:17
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 56 GB (12%) free of 464 GB
Total RAM: 4091 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:16:42, on 6.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\HITTL ROMAN.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [Startup Protector] C:\Program Files (x86)\Startup Protector\StartupProtector.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.lnk
O4 - HKCU\..\Run: [WinArranger] "C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe"
O4 - HKCU\..\Run: [Wakoopa] C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BitComet] "I:\Anime\BitLord\BitLord.exe"
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12277 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
taskeng.exe {22F683D7-B8FA-40AE-B47A-55EE812119B1}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "202470992-2102956596-1211687451-128986513910142713641046307297-773989371-1402386327
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2620
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"taskhost.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Windows\PLFSetI.exe"
"C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
"C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe"
"C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" -quickstart
"C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe" "-quickstart" "-env:OOO_CWD=2C:\\Program Files (x86)\\OpenOffice.org 3\\program"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"GoogleDesktop.exe" /display
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-29844dcc-94d4-4615-8bad-b4c5e5130171 -SystemEventPortName:HostProcess-41d457e6-2e88-49d8-a401-f86b829724e3 -IoCancelEventPortName:HostProcess-c7a06148-efd3-47cf-a48c-135fdf522a3e -NonStateChangingEventPortName:HostProcess-a08cffd0-3fb1-468c-b41b-c0f006893c15 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:16d8e53e-a966-4887-9070-058089b189f7
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\sppsvc.exe
wmiadap.exe /F /T /R
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-01-02 79240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-11-20 206208]
"mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"FileHippo.com"=C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
"PCSpeedUp"=C:\Program Files (x86)\Zrychleni Pocitace\PCSpeedUp.lnk []
"WinArranger"=C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]
"Wakoopa"=C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"BitComet"=I:\Anime\BitLord\BitLord.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]
"Startup Protector"=C:\Program Files (x86)\Startup Protector\StartupProtector.exe [2007-07-22 1921024]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]
"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"Malwarebytes' Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
"Google Desktop Search"=C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
"EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
"EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]

C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2012-01-02 22:48:01 ----SHD---- C:\$RECYCLE.BIN
2012-01-02 22:24:50 ----A---- C:\TDSSKiller.2.6.25.0_02.01.2012_22.24.50_log.txt
2012-01-02 22:21:08 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaws.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaw.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\java.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\deployJava1.dll
2012-01-02 22:20:54 ----D---- C:\Program Files\Java
2012-01-02 22:18:47 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2012-01-02 22:17:05 ----D---- C:\Program Files (x86)\PANDORA.TV
2012-01-02 22:10:37 ----D---- C:\Program Files (x86)\FileHippo.com
2012-01-02 22:00:40 ----A---- C:\ComboFix.txt
2012-01-02 21:32:04 ----A---- C:\Windows\zip.exe
2012-01-02 21:32:04 ----A---- C:\Windows\SWSC.exe
2012-01-02 21:32:04 ----A---- C:\Windows\SWREG.exe
2012-01-02 21:32:04 ----A---- C:\Windows\sed.exe
2012-01-02 21:32:04 ----A---- C:\Windows\PEV.exe
2012-01-02 21:32:04 ----A---- C:\Windows\NIRCMD.exe
2012-01-02 21:32:04 ----A---- C:\Windows\MBR.exe
2012-01-02 21:32:04 ----A---- C:\Windows\grep.exe
2012-01-02 21:31:49 ----D---- C:\Windows\ERDNT
2012-01-02 21:28:11 ----D---- C:\Qoobox
2012-01-02 15:37:24 ----D---- C:\rsit
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys3.sys
2012-01-01 20:16:13 ----A---- C:\Windows\SYSWOW64\sys2.sys
2012-01-01 20:16:12 ----D---- C:\Program Files (x86)\Startup Protector
2012-01-01 20:16:12 ----A---- C:\Windows\SYSWOW64\killsp.bat
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 09:16:20 ----A---- C:\Windows\system32\drivers\97667536.sys
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-14 01:19:52 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-12-10 19:25:08 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-12-10 19:25:07 ----D---- C:\Program Files (x86)\Xvid
2011-12-10 19:25:07 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-12-10 19:24:54 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-12-10 19:24:52 ----D---- C:\Program Files (x86)\ffdshow
2011-12-10 19:24:29 ----D---- C:\Program Files (x86)\Haali
2011-12-10 19:24:18 ----A---- C:\Windows\SYSWOW64\CoreAAC-uninstall.exe
2011-12-10 19:24:03 ----D---- C:\Program Files (x86)\AC3Filter
2011-12-10 19:23:33 ----D---- C:\Program Files (x86)\AviSynth 2.5
2011-12-10 19:22:48 ----D---- C:\Program Files (x86)\Avi2Dvd
2011-12-10 19:06:42 ----D---- C:\ProgramData\DVD Shrink
2011-12-10 19:06:41 ----D---- C:\Program Files (x86)\DVD Shrink

======List of files/folders modified in the last 1 month======

2012-01-06 10:16:36 ----D---- C:\Windows\Temp
2012-01-06 10:16:22 ----D---- C:\Program Files\trend micro
2012-01-06 10:15:55 ----D---- C:\Windows\system32\config
2012-01-06 10:09:11 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2012-01-06 10:09:04 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-05 18:30:06 ----D---- C:\Windows\System32
2012-01-05 18:30:06 ----D---- C:\Windows\inf
2012-01-05 18:30:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-04 02:25:57 ----SHD---- C:\System Volume Information
2012-01-03 00:12:25 ----RSD---- C:\Windows\assembly
2012-01-03 00:12:25 ----D---- C:\Windows\Microsoft.NET
2012-01-02 23:06:09 ----D---- C:\Windows\winsxs
2012-01-02 23:05:45 ----SHD---- C:\Windows\Installer
2012-01-02 23:05:44 ----D---- C:\Config.Msi
2012-01-02 23:05:08 ----RASHD---- C:\Windows\SysWOW64
2012-01-02 23:05:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-02 22:51:20 ----D---- C:\Windows\system32\catroot
2012-01-02 22:51:18 ----D---- C:\Windows\system32\catroot2
2012-01-02 22:24:55 ----D---- C:\Windows\system32\drivers
2012-01-02 22:22:19 ----D---- C:\Windows\system32\Tasks
2012-01-02 22:22:16 ----D---- C:\Windows\Tasks
2012-01-02 22:20:54 ----RD---- C:\Program Files
2012-01-02 22:18:47 ----RD---- C:\Program Files (x86)
2012-01-02 22:18:03 ----D---- C:\Program Files (x86)\The KMPlayer
2012-01-02 22:16:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2012-01-02 21:54:45 ----D---- C:\Windows
2012-01-02 21:54:45 ----A---- C:\Windows\system.ini
2012-01-02 21:54:40 ----D---- C:\Windows\system32\drivers\etc
2012-01-02 21:52:41 ----D---- C:\ProgramData
2012-01-02 21:42:49 ----D---- C:\Windows\SYSWOW64\drivers
2012-01-02 21:42:49 ----D---- C:\Windows\AppPatch
2012-01-02 21:42:46 ----D---- C:\Program Files\Common Files
2012-01-02 21:42:46 ----D---- C:\Program Files (x86)\Common Files
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-26 21:08:09 ----D---- C:\Windows\system32\NDF
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:26:37 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-18 13:40:23 ----RSD---- C:\Windows\Fonts
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:39:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----D---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-14 09:11:27 ----D---- C:\ProgramData\boost_interprocess
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 97667536;97667536; C:\Windows\system32\DRIVERS\97667536.sys [2011-12-19 460888]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-01-03 578776]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#19 Příspěvek od motji »

Dočistíme :)

:arrow: Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

File::
C:\Windows\system32\drivers\97667536.sys
C:\TDSSKiller.2.6.25.0_02.01.2012_22.24.50_log.txt

Driver::
97667536
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek


-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#20 Příspěvek od nom »

Tak vše se provedlo až na to že combofix nevyplivnul žádnej log
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#21 Příspěvek od motji »

Poprosím o nový log ze rsitu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#22 Příspěvek od nom »

Opět se dvakrát samovolně vypnul během posledních 50-ti minut
Zde přikládám požadovaný log
Logfile of random's system information tool 1.09 (written by random/random)
Run by HITTL ROMAN at 2012-01-07 22:29:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 148 GB (32%) free of 464 GB
Total RAM: 4091 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:29:36, on 7.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\HITTL ROMAN.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
O4 - HKCU\..\Run: [WinArranger] "C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10381 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
taskeng.exe {4F5E730C-8900-477C-9F0C-86231C24EBC7}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "56515588313500448311232624309-12553184191613150128-2087799020-8915680441000708134
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
WLIDSvcM.exe 2628
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e1f2d19e-7c43-47f0-9cef-c84ce657e8b5 -SystemEventPortName:HostProcess-208d89fa-e297-4cc6-a3c2-6751b1c0ef60 -IoCancelEventPortName:HostProcess-b2ec8752-9cab-4d2e-8e24-67b8fda37f84 -NonStateChangingEventPortName:HostProcess-3bf046a1-d89c-4406-8409-d013ee7196f4 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:42f89cbf-2928-48da-b4d0-ed7f35e2fd63
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\PLFSetI.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-01-02 79240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-11-20 206208]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]
"combofix"=C:\ComboFix\CF17404.3XE [2010-11-20 345088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"FileHippo.com"=C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
"WinArranger"=C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
I:\Anime\BitLord\BitLord.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wakoopa]
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^HITTL ROMAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.inf - open - %SystemRoot%\SysWow64\NOTEPAD.EXE %1
.inf - install - %SystemRoot%\SysWow64\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1
.vbs - open - %SystemRoot%\SysWow64\WScript.exe "%1" %*
.cpl - cplopen - %SystemRoot%\SysWow64\control.exe "%1",%*

======List of files/folders created in the last 1 month======

2012-01-07 10:10:20 ----D---- C:\$RECYCLE.BIN
2012-01-07 09:41:33 ----A---- C:\Windows\NIRCMD.exe
2012-01-07 09:41:26 ----D---- C:\ComboFix
2012-01-02 22:21:08 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaws.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaw.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\deployJava1.dll
2012-01-02 22:20:54 ----D---- C:\Program Files\Java
2012-01-02 22:18:47 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2012-01-02 22:17:05 ----D---- C:\Program Files (x86)\PANDORA.TV
2012-01-02 22:10:37 ----D---- C:\Program Files (x86)\FileHippo.com
2012-01-02 21:32:04 ----A---- C:\Windows\zip.exe
2012-01-02 21:32:04 ----A---- C:\Windows\SWSC.exe
2012-01-02 21:32:04 ----A---- C:\Windows\SWREG.exe
2012-01-02 21:32:04 ----A---- C:\Windows\sed.exe
2012-01-02 21:32:04 ----A---- C:\Windows\PEV.exe
2012-01-02 21:32:04 ----A---- C:\Windows\MBR.exe
2012-01-02 21:32:04 ----A---- C:\Windows\grep.exe
2012-01-02 21:31:49 ----D---- C:\Windows\ERDNT
2012-01-02 21:28:11 ----D---- C:\Qoobox
2012-01-02 15:37:24 ----D---- C:\rsit
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-21 01:02:26 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll
2011-12-10 19:25:08 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2011-12-10 19:25:07 ----D---- C:\Program Files (x86)\Xvid
2011-12-10 19:25:07 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2011-12-10 19:24:54 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2011-12-10 19:24:52 ----D---- C:\Program Files (x86)\ffdshow
2011-12-10 19:24:29 ----D---- C:\Program Files (x86)\Haali
2011-12-10 19:24:18 ----A---- C:\Windows\SYSWOW64\CoreAAC-uninstall.exe
2011-12-10 19:24:03 ----D---- C:\Program Files (x86)\AC3Filter
2011-12-10 19:23:33 ----D---- C:\Program Files (x86)\AviSynth 2.5
2011-12-10 19:22:48 ----D---- C:\Program Files (x86)\Avi2Dvd
2011-12-10 19:06:42 ----D---- C:\ProgramData\DVD Shrink
2011-12-10 19:06:41 ----D---- C:\Program Files (x86)\DVD Shrink

======List of files/folders modified in the last 1 month======

2012-01-07 22:29:37 ----D---- C:\Windows\Temp
2012-01-07 22:29:18 ----D---- C:\Program Files\trend micro
2012-01-07 22:23:43 ----D---- C:\Windows\system32\config
2012-01-07 22:19:17 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-07 20:01:53 ----SHD---- C:\System Volume Information
2012-01-07 18:30:30 ----D---- C:\Windows\System32
2012-01-07 18:30:30 ----D---- C:\Windows\inf
2012-01-07 18:30:30 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-07 17:31:25 ----D---- C:\ProgramData\boost_interprocess
2012-01-07 17:23:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2012-01-07 13:06:25 ----RSD---- C:\Windows\Fonts
2012-01-07 10:11:02 ----D---- C:\Windows
2012-01-07 10:11:02 ----A---- C:\Windows\system.ini
2012-01-07 10:09:57 ----D---- C:\Windows\system32\drivers\etc
2012-01-07 09:54:30 ----D---- C:\Windows\system32\drivers
2012-01-07 09:49:35 ----RASHD---- C:\Windows\SysWOW64
2012-01-07 09:49:35 ----D---- C:\Windows\SYSWOW64\drivers
2012-01-07 09:49:35 ----D---- C:\Windows\AppPatch
2012-01-07 09:49:32 ----D---- C:\Program Files\Common Files
2012-01-07 09:49:32 ----D---- C:\Program Files (x86)\Common Files
2012-01-06 23:37:59 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2012-01-06 10:41:51 ----D---- C:\Windows\winsxs
2012-01-06 10:31:58 ----SHD---- C:\Windows\Installer
2012-01-06 10:31:58 ----D---- C:\Program Files (x86)\SolidWorks
2012-01-06 10:31:58 ----D---- C:\Config.Msi
2012-01-06 10:31:39 ----RD---- C:\Program Files (x86)
2012-01-06 10:31:39 ----D---- C:\ProgramData
2012-01-06 10:31:30 ----D---- C:\Program Files (x86)\Microsoft Office
2012-01-06 10:29:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-06 10:29:49 ----D---- C:\Program Files (x86)\Surfware
2012-01-06 10:29:01 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2012-01-06 10:24:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2012-01-03 00:12:25 ----RSD---- C:\Windows\assembly
2012-01-03 00:12:25 ----D---- C:\Windows\Microsoft.NET
2012-01-02 23:05:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-02 22:51:20 ----D---- C:\Windows\system32\catroot
2012-01-02 22:51:18 ----D---- C:\Windows\system32\catroot2
2012-01-02 22:22:19 ----D---- C:\Windows\system32\Tasks
2012-01-02 22:22:16 ----D---- C:\Windows\Tasks
2012-01-02 22:20:54 ----RD---- C:\Program Files
2012-01-02 22:18:03 ----D---- C:\Program Files (x86)\The KMPlayer
2012-01-02 22:16:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-26 21:08:09 ----D---- C:\Windows\system32\NDF
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----D---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-01-03 578776]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#23 Příspěvek od motji »

Spustte combofix ještě jednou, bez skriptu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#24 Příspěvek od nom »

ComboFix 12-01-09.03 - HITTL ROMAN 09.01.2012 18:50:23.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4091.2745 [GMT 1:00]
Spuštěný z: c:\users\HITTL ROMAN\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
C:\TDSSKiller.2.6.25.0_02.01.2012_22.24.50_log.txt
c:\windows\system32\drivers\97667536.sys
c:\windows\system32\java.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_97667536
-------\Service_97667536
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-09 do 2012-01-09 )))))))))))))))))))))))))))))))
.
.
2012-01-09 18:12 . 2012-01-09 18:12 -------- d-----w- c:\users\Guest\AppData\Local\temp
2012-01-09 18:12 . 2012-01-09 18:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-08 16:48 . 2012-01-09 16:02 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B209D322-60E3-491A-A25C-C84D2F846A98}\offreg.dll
2012-01-06 11:16 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B209D322-60E3-491A-A25C-C84D2F846A98}\mpengine.dll
2012-01-02 21:21 . 2012-01-02 21:20 750488 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-01-02 21:21 . 2012-01-02 21:20 660368 ----a-w- c:\windows\system32\deployJava1.dll
2012-01-02 21:20 . 2012-01-02 21:20 -------- d-----w- c:\program files\Java
2012-01-02 21:18 . 2012-01-02 21:48 -------- d-----w- c:\program files (x86)\Zrychleni Pocitace
2012-01-02 21:17 . 2012-01-02 21:17 -------- d-----w- c:\program files (x86)\PANDORA.TV
2012-01-02 21:10 . 2012-01-02 21:10 -------- d-----w- c:\program files (x86)\FileHippo.com
2012-01-02 14:37 . 2012-01-02 14:37 -------- d-----w- C:\rsit
2012-01-01 19:10 . 2004-03-08 23:00 124688 ----a-w- c:\windows\SysWow64\mswinsck.ocx
2012-01-01 11:06 . 2012-01-01 11:06 -------- d-----w- c:\programdata\Friends Games
2011-12-29 13:51 . 2011-12-29 13:51 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 21:55 . 2011-12-28 21:55 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 21:55 . 2011-12-28 21:55 -------- d-----w- c:\programdata\Anvsoft
2011-12-28 21:53 . 2011-12-28 21:53 -------- d-----w- c:\program files (x86)\AnvSoft
2011-12-28 21:41 . 2011-12-28 21:41 -------- d-----w- c:\program files\AnvSoft
2011-12-28 21:11 . 2011-12-29 13:39 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 21:11 . 2011-12-29 13:39 82816 ----a-w- c:\users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 20:54 . 2011-12-28 20:54 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-25 14:14 . 2011-12-21 07:39 121816 ----a-w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2011-12-25 14:14 . 2011-12-21 07:39 97240 ----a-w- c:\program files (x86)\Mozilla Firefox\libEGL.dll
2011-12-25 14:14 . 2011-12-21 07:39 814040 ----a-w- c:\program files (x86)\Mozilla Firefox\mozsqlite3.dll
2011-12-25 14:14 . 2011-12-21 07:39 486360 ----a-w- c:\program files (x86)\Mozilla Firefox\libGLESv2.dll
2011-12-25 14:14 . 2011-12-21 07:39 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
2011-12-25 14:14 . 2011-12-21 07:39 2124760 ----a-w- c:\program files (x86)\Mozilla Firefox\mozjs.dll
2011-12-25 14:14 . 2011-12-21 07:39 15832 ----a-w- c:\program files (x86)\Mozilla Firefox\mozalloc.dll
2011-12-25 14:14 . 2011-12-21 04:29 2106216 ----a-w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-12-25 14:14 . 2011-12-21 04:29 1998168 ----a-w- c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-12-25 14:14 . 2011-12-21 04:29 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2011-12-25 14:14 . 2011-12-21 04:29 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2011-12-25 14:14 . 2011-12-21 04:29 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2011-12-23 08:40 . 2011-12-23 08:40 -------- d-----w- c:\users\HITTL ROMAN\yBook
2011-12-21 19:42 . 1998-05-11 19:01 240944 ----a-w- c:\windows\SysWow64\RICHED.DLL
2011-12-21 00:02 . 2011-12-21 00:02 4448256 ----a-w- c:\windows\SysWow64\GPhotos.scr
2011-12-19 23:42 . 2011-12-19 23:42 119808 ----a-w- c:\windows\system32\dfboottime.exe
2011-12-19 23:25 . 2011-12-19 23:39 -------- d-----w- c:\program files\Speccy
2011-12-19 23:23 . 2011-12-19 23:23 -------- d-----w- c:\program files\Recuva
2011-12-19 05:45 . 2011-12-19 05:45 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 05:45 . 2011-12-19 05:45 -------- d-----w- c:\programdata\Malwarebytes
2011-12-19 05:45 . 2011-12-31 15:17 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-12-19 05:45 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-12-18 06:49 . 2011-12-18 06:49 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2011-12-17 17:00 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2011-12-17 17:00 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-12-17 14:38 . 2011-12-17 14:39 -------- d-----w- c:\program files (x86)\Sifrovani
2011-12-16 16:20 . 2011-12-16 16:20 -------- d-----w- c:\users\Public\HittlWorkspace
2011-12-15 08:55 . 2012-01-09 16:00 -------- d-----w- c:\program files (x86)\TMbot
2011-12-14 21:33 . 2012-01-06 09:24 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2011-12-14 21:33 . 2011-12-14 21:39 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2011-12-14 21:15 . 2011-12-14 21:15 -------- d-----w- c:\users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 21:09 . 2011-12-14 21:09 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 21:05 . 2011-12-14 21:16 -------- d-----w- c:\programdata\TuneUp Software
2011-12-14 19:38 . 2011-12-14 20:49 -------- d-----r- C:\Backup
2011-12-14 19:34 . 2011-12-14 19:34 -------- d-----r- c:\program files (x86)\Skype
2011-12-14 12:24 . 2011-12-14 12:24 -------- d-----w- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 12:01 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-12-14 12:01 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2011-12-14 12:01 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2011-12-14 10:00 . 2011-12-14 19:15 -------- d-----w- C:\b5502a7e1fdc90134be248b8f06a
2011-12-13 20:17 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
2011-12-13 17:18 . 2011-12-13 17:18 -------- d-----w- c:\programdata\PreEmptive Solutions
2011-12-13 16:29 . 2011-12-13 16:29 -------- d-----w- c:\programdata\VS
2011-12-13 15:58 . 2011-09-22 20:06 109416 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 15:58 . 2011-09-22 16:18 73064 ----a-w- c:\windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 15:58 . 2011-09-22 20:07 105832 ----a-w- c:\windows\system32\SQSRVRES.DLL
2011-12-13 15:54 . 2011-12-13 15:54 -------- d-----w- c:\program files\Microsoft.NET
2011-12-10 18:25 . 2009-06-07 15:25 77824 ----a-w- c:\windows\SysWow64\xvid.ax
2011-12-10 18:25 . 2009-06-07 15:16 819200 ----a-w- c:\windows\SysWow64\xvidcore.dll
2011-12-10 18:25 . 2011-12-10 18:25 -------- d-----w- c:\program files (x86)\Xvid
2011-12-10 18:25 . 2009-06-07 15:24 180224 ----a-w- c:\windows\SysWow64\xvidvfw.dll
2011-12-10 18:24 . 2010-03-02 23:00 85504 ----a-w- c:\windows\SysWow64\ff_vfw.dll
2011-12-10 18:24 . 2010-03-02 23:00 50688 ----a-w- c:\windows\SysWow64\ff_acm.acm
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\ffdshow
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\Haali
2011-12-10 18:24 . 2011-12-10 18:24 33019 ----a-w- c:\windows\SysWow64\CoreAAC-uninstall.exe
2011-12-10 18:24 . 2009-08-11 20:22 580096 ----a-w- c:\windows\system32\ac3filter64.acm
2011-12-10 18:24 . 2009-08-11 20:18 497664 ----a-w- c:\windows\SysWow64\ac3filter.acm
2011-12-10 18:24 . 2011-12-10 18:24 -------- d-----w- c:\program files (x86)\AC3Filter
2011-12-10 18:23 . 2011-12-10 18:23 -------- d-----w- c:\program files (x86)\AviSynth 2.5
2011-12-10 18:22 . 2011-12-10 22:40 -------- d-----w- c:\program files (x86)\Avi2Dvd
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-18 06:51 . 2011-09-25 10:01 2480064 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2011-12-01 15:11 . 2011-05-14 07:47 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-25 20:52 . 2011-11-25 20:32 88480 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-11-25 20:52 . 2011-11-25 20:32 46400 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-11-20 16:10 . 2011-11-20 16:10 152904 ----a-w- c:\windows\SysWow64\vghd.scr
2011-11-15 13:29 . 2011-01-28 14:19 270720 ------w- c:\windows\system32\MpSigStub.exe
2007-09-10 09:22 . 2011-02-12 08:36 3200960 ----a-w- c:\program files (x86)\Common Files\vcredist_x64.exe
2007-09-10 09:22 . 2011-02-12 08:36 2723264 ----a-w- c:\program files (x86)\Common Files\vcredist_x86.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-02_20.54.45 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-09 15:53 . 2012-01-09 15:53 13372 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2012-01-02 20:17 . 2012-01-02 20:17 13372 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2011-01-15 20:36 . 2012-01-02 20:19 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2011-01-15 20:36 . 2012-01-09 15:55 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 04:54 . 2012-01-09 15:55 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-01-02 20:19 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-01-02 20:19 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-09 15:55 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-09 15:55 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-02 20:19 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 05:10 . 2012-01-09 15:59 43216 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-01-10 22:13 . 2012-01-09 15:59 22516 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1498072532-3510031312-3464764778-1000_UserData.bin
- 2010-11-20 17:45 . 2012-01-02 07:55 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-11-20 17:45 . 2012-01-08 14:02 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-08-12 14:50 . 2012-01-08 14:02 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-08-12 14:50 . 2012-01-02 07:55 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-02 07:55 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-08 14:02 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2012-01-08 12:53 94000 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2010-11-20 17:30 . 2012-01-08 21:30 18551 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
+ 2011-12-26 04:18 . 2011-12-26 04:18 16656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
+ 2011-12-26 04:18 . 2011-12-26 04:18 41744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe
+ 2012-01-02 21:54 . 2011-12-25 20:40 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
+ 2011-12-26 02:54 . 2011-12-26 02:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
+ 2011-12-26 02:54 . 2011-12-26 02:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
+ 2012-01-02 21:54 . 2011-12-25 20:42 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2011-09-17 23:23 . 2011-09-17 23:23 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2011-09-17 23:23 . 2011-09-17 23:23 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2011-10-13 00:35 . 2011-10-13 00:35 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-01-02 22:03 . 2012-01-02 22:03 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-01-02 21:58 . 2012-01-02 21:58 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 00:34 . 2011-10-13 00:34 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-01-02 21:58 . 2012-01-02 21:58 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\53a04d67925ebd229e6b1abd7856b774\System.Xaml.Hosting.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\a9f5d739951335baf2cea57a4e54fd9c\System.Web.DynamicData.Design.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\5489f3d82b02843c58a4942afd3807e6\System.Xaml.Hosting.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\55b0452fe2e58293dfd0f6e76c69521f\System.Web.DynamicData.Design.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\6c13d7fb161ed4d7da730a70375b07c9\System.Web.DynamicData.Design.ni.dll
+ 2012-01-02 22:31 . 2012-01-02 22:31 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\SqlToolsMailUtiliti#\f35ded2582c931d5b9895aa8c512e3f3\SqlToolsMailUtilities.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\94787ab3efcc074396a60ff3d83edf78\System.Web.DynamicData.Design.ni.dll
+ 2011-01-14 23:14 . 2012-01-06 09:09 7218 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2011-06-11 20:42 . 2012-01-06 09:08 2890 c:\windows\system32\wdi\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
- 2012-01-02 20:19 . 2012-01-02 20:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-09 15:55 . 2012-01-09 15:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-09 15:55 . 2012-01-09 15:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-01-02 20:19 . 2012-01-02 20:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-01-11 00:06 . 2012-01-09 11:24 376838 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2011-01-19 16:10 . 2012-01-09 13:42 455708 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
+ 2009-07-14 02:36 . 2012-01-09 05:13 736036 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-12-31 20:13 736036 c:\windows\system32\perfh009.dat
+ 2010-11-20 17:51 . 2012-01-09 05:13 749854 c:\windows\system32\perfh005.dat
- 2010-11-20 17:51 . 2011-12-31 20:13 749854 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-01-09 05:13 154662 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-12-31 20:13 154662 c:\windows\system32\perfc009.dat
- 2010-11-20 17:51 . 2011-12-31 20:13 174848 c:\windows\system32\perfc005.dat
+ 2010-11-20 17:51 . 2012-01-09 05:13 174848 c:\windows\system32\perfc005.dat
+ 2012-01-02 21:21 . 2012-01-02 21:20 263560 c:\windows\system32\javaws.exe
+ 2012-01-02 21:21 . 2012-01-02 21:20 188808 c:\windows\system32\javaw.exe
+ 2009-07-14 04:45 . 2012-01-07 16:26 477256 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 05:01 . 2012-01-09 15:53 381104 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-26 04:18 . 2011-12-26 04:18 721680 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
+ 2011-12-26 04:47 . 2011-12-26 04:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
+ 2012-01-02 21:54 . 2011-12-25 20:40 746256 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
+ 2011-12-26 02:54 . 2011-12-26 02:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
+ 2011-12-26 03:39 . 2011-12-26 03:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2012-01-02 21:54 . 2011-12-25 20:42 437520 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-01-02 22:03 . 2012-01-02 22:03 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-09-17 23:20 . 2011-10-13 00:34 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-09-17 23:20 . 2012-01-02 21:58 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-09-17 23:20 . 2012-01-02 21:58 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-09-17 23:20 . 2011-10-13 00:34 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-01-02 22:03 . 2012-01-02 22:03 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-01-02 21:19 . 2012-01-02 21:19 973312 c:\windows\Installer\383d51.msi
+ 2011-10-13 00:35 . 2011-10-13 00:35 269672 c:\windows\assembly\temp\WKKYGVRVJZ\System.Transactions.dll
+ 2011-09-17 23:20 . 2011-10-13 00:34 109568 c:\windows\assembly\temp\ITQCP55LTV\System.EnterpriseServices.Wrapper.dll
+ 2012-01-02 22:56 . 2012-01-02 22:56 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\Temp\64c-0\System.Web.DynamicData.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\c47cd2fc542c0fc7e20689433fa5123c\System.Web.Entity.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\efc6dead4b44c8e2e1963b7a3acd4988\System.Web.Entity.Design.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\23d96e7cca727a45aca6f28b5bec7dc5\System.Web.DynamicData.ni.dll
+ 2012-01-02 22:56 . 2012-01-02 22:56 331264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\7257d37f6ed2f933793381870db07a81\System.Web.DataVisualization.Design.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 587776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\92b694399f4f39b23a78ba679073f375\System.ServiceModel.Activation.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 884224 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\787507ecc504c8e467728fe7853f876b\System.ServiceModel.DomainServices.Server.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 711680 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\34e0647c378a30a0bddf42208298ab8c\System.ServiceModel.DomainServices.Hosting.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 280064 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\075bb1c1caab5a6d9925eb2444b841b1\System.ServiceModel.DomainServices.Hosting.OData.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\fd8d112a2b0b4a65909d4174d503ae47\System.Runtime.Remoting.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 662528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\f36f39f48842409277d30dce974f6e7d\System.Data.Services.Design.ni.dll
+ 2012-01-02 22:54 . 2012-01-02 22:54 827392 c:\windows\assembly\NativeImages_v4.0.30319_64\StanCore\922ee921e887b4e81f627d642608cdcb\StanCore.ni.dll
+ 2012-01-02 22:54 . 2012-01-02 22:54 467968 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\d1ed7a78dbfbd63e1a9c693271906a13\Microsoft.VisualStudio.ServiceModel.DomainServices.Tools.ni.dll
+ 2012-01-02 22:54 . 2012-01-02 22:54 253440 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\891aba8ada2dbd49741cdbab1153dd90\Microsoft.VisualStudio.QualityTools.UnitTestFramework.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 275968 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.NetEnterp#\ebe786d5a28c039cc0af1eff16ae55d4\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-01-02 22:53 . 2012-01-02 22:53 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\09cc3399142a93d77f317dda8c18a346\ComSvcConfig.ni.exe
+ 2012-01-02 23:11 . 2012-01-02 23:11 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\c4688bf6b864e76fbd936a7fdd5f0748\System.Web.Extensions.Design.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\8614eb36d94b640ab78ca4b7165f08f8\System.Web.Entity.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\8e2860651899e90f4de23486fbd5be87\System.Web.Entity.Design.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\b1c10c1591154f94a93dad7bb306f3ed\System.Web.DynamicData.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\17f371e10888ff6fdee8274a11f2605a\System.Web.DataVisualization.Design.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 509952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\fdf1a7d309090265dd953b748a53a0d3\System.ServiceModel.DomainServices.Hosting.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b998d241c567915a2069d0c790dd6c53\System.ServiceModel.Activation.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 212480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\92b7f7cc002d86b8517a38f928973cfc\System.ServiceModel.DomainServices.Hosting.OData.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 641024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\766fb1c58548de487f340935f92321a8\System.ServiceModel.DomainServices.Server.ni.dll
+ 2012-01-02 23:02 . 2012-01-02 23:02 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b209c76b6b03bee6deedfa3e1a8c4290\System.Runtime.Remoting.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\8feecdcd543403861ae71d1c7c37a67b\System.Data.Services.Design.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 805376 c:\windows\assembly\NativeImages_v4.0.30319_32\StanPackage\cd9a97f003f05dd8db0e7a7305f8dd1c\StanPackage.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 651264 c:\windows\assembly\NativeImages_v4.0.30319_32\StanCore\a095ef74dc6e04d217106cb6348287cf\StanCore.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 269312 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b1ba767429742db58ab4bdc973780c53\Microsoft.VisualStudio.TestImpact.AutoPackage.ni.dll
+ 2012-01-02 23:04 . 2012-01-02 23:04 196608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\02685b40765697d9e4ac10c8e95e2169\Microsoft.VisualStudio.QualityTools.UnitTestFramework.ni.dll
+ 2012-01-02 23:04 . 2012-01-02 23:04 363008 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\00b8ca5917d87abfa5a017b50e6b08d6\Microsoft.VisualStudio.ServiceModel.DomainServices.Tools.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 917504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.ServiceMo#\4b1d62a62d34a6e49a00ef8d342742ca\Microsoft.ServiceModel.DomainServices.Tools.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 644096 c:\windows\assembly\NativeImages_v4.0.30319_32\MetricsPackage\529a8bf96c1548af4beaaafa70350736\MetricsPackage.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\c6a7103a6ee46deb73a7343bd7e71e61\ComSvcConfig.ni.exe
+ 2012-01-02 23:02 . 2012-01-02 23:02 851968 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\453bbfe8e7f07f9be9fe1c690687e15b\AspNetMMCExt.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\f715b47c2f0440ea23a71f1076b0af2b\System.Web.Routing.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\d258f45340e6e538a19a56d1165b750f\System.Web.Entity.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\6f6d11e33e2f3f6bddd4c33809340a48\System.Web.Entity.Design.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\bca38e802e2b45f80f8fbde2b54ce0a2\System.Web.DynamicData.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\0e411c30fc2caebb55813b8fa0689d42\System.Web.Abstractions.ni.dll
+ 2012-01-02 22:43 . 2012-01-02 22:43 293376 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.NetEnterp#\b40bd96a9ed2f8e7bb9684ce47470ebe\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\9688f14bd504fd3ac1631fd72345670f\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a227e4bd6c644cddd6bd8205356f612b\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5ed7047117ed69e124fe70576220c2b8\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1a586a607a218c8f48c305306c03984c\WindowsLive.Writer.HtmlParser.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\8e576ae7d946a5440bddfdbe06818a8b\System.Web.Routing.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\5bd4f855a0b0386cb4baf093216ad2d3\System.Web.Extensions.Design.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\8d56e2f2a05dbde707d87cb3bdf0dffc\System.Web.Entity.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f560658d9ee6d2786cab976e775758d6\System.Web.Entity.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#25 Příspěvek od nom »

Design.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\e94f08faeb08a8ee9d51a3480083bd07\System.Web.DynamicData.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\2dc7ec41005f6e6fe45e0cc0a20a12bc\System.Web.Abstractions.ni.dll
+ 2012-01-02 22:06 . 2012-01-02 22:06 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b559a471eef00081f0b5c2719d1d9623\System.Runtime.Remoting.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\e6fa2be533d9e540ccafe51980ae0103\System.Data.Entity.Design.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 999936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c9f5bd7847de7d51afdfcc3e3f29a49e\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 232960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\9d546d99219d80495f10727fb365a8be\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 236032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Exception#\d9ddb63d196e6810878819d11e5b7332\Microsoft.ExceptionMessageBox.ni.dll
+ 2012-01-02 21:54 . 2010-11-13 02:01 606208 c:\windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.resources.dll
- 2010-11-20 17:50 . 2010-11-20 17:50 606208 c:\windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Web.resources.dll
- 2009-07-14 04:45 . 2011-12-18 06:33 7113258 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2012-01-07 09:18 7113258 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-01-16 16:42 . 2012-01-08 12:45 4301376 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1498072532-3510031312-3464764778-1000-8192.dat
+ 2011-12-17 19:22 . 2012-01-07 16:23 1388048 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1498072532-3510031312-3464764778-1000-4096.dat
- 2011-03-20 10:09 . 2011-12-19 23:11 6856056 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1498072532-3510031312-3464764778-1000-12288.dat
+ 2011-03-20 10:09 . 2012-01-06 09:09 6856056 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1498072532-3510031312-3464764778-1000-12288.dat
+ 2011-12-26 02:54 . 2011-12-26 02:54 1863464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-26 04:18 . 2011-12-26 04:18 5200656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.dll
+ 2012-01-02 21:54 . 2011-12-25 20:40 5263360 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll
+ 2011-12-26 02:54 . 2011-12-26 02:54 1863464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-26 02:54 . 2011-12-26 02:54 5230864 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
+ 2012-01-02 21:54 . 2011-12-25 20:42 5255168 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-01-02 22:03 . 2012-01-02 22:03 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
- 2011-09-17 23:23 . 2011-09-17 23:23 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 5200656 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-01-02 22:00 . 2012-01-02 22:00 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-01-02 22:04 . 2012-01-02 22:04 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-02 21:58 . 2012-01-02 21:58 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-01-02 21:58 . 2012-01-02 21:58 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-13 00:34 . 2011-10-13 00:34 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-01-02 21:59 . 2012-01-02 21:59 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2011-10-13 00:35 . 2011-10-13 00:35 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2011-07-28 07:43 . 2011-07-28 07:43 3352576 c:\windows\Installer\8f0e10c.msi
+ 2011-07-28 07:43 . 2012-01-02 21:19 3352576 c:\windows\Installer\8f0e10c.msi
+ 2011-12-26 05:24 . 2011-12-26 05:24 8835072 c:\windows\Installer\585b91.msp
+ 2011-10-13 00:35 . 2011-10-13 00:35 2975064 c:\windows\assembly\temp\00UP8MTS04\System.Data.dll
+ 2012-01-02 23:02 . 2012-01-02 23:02 1601024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\b581bfffc1808ae8b75717f2a8dd2135\System.WorkflowServices.ni.dll
+ 2012-01-02 23:02 . 2012-01-02 23:02 2887680 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\e69d85c8210a988b4c104948f04cf5aa\System.Workflow.Runtime.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 3743744 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\572967d338f59ea254e9c1affc52695d\System.Workflow.Activities.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:53 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\43728abc794e8a2f8b9178d83299f691\System.Web.Services.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 2964480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\ae6e69ee7b8f89872246462ba8b6b186\System.Web.Mobile.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\6d04600d11baa5d8a09b594b591d0572\System.Web.Extensions.ni.dll
+ 2012-01-02 23:01 . 2012-01-02 23:01 1100800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\5a312292936c549b4a013fac180e2187\System.Web.Extensions.Design.ni.dll
+ 2012-01-02 22:56 . 2012-01-02 22:56 5599232 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\4c3d1f744e5edf4b2ee6a6001c4e19c3\System.Web.DataVisualization.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\cfbec2879ae56c6bb8b1ba78a92694e9\System.ServiceModel.Web.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 2702848 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\0bd655a7f8793293240accf4c65758c8\System.Data.Services.ni.dll
+ 2012-01-02 22:55 . 2012-01-02 22:55 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\18688c8627c24053b0b967d88210548b\System.Data.Entity.Design.ni.dll
+ 2012-01-02 22:54 . 2012-01-02 22:54 4027392 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\bfffb6d4ba00870881955d39ad6026e2\Microsoft.VisualStudio.QualityTools.Common.ni.dll
+ 2012-01-02 22:54 . 2012-01-02 22:54 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e93435bbdcca65b908e663f8bd3be213\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 1111552 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\c29ecc50f7b1a25d6f9091b2b35f0266\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-01-02 22:53 . 2012-01-02 22:53 1188352 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.ServiceMo#\178af6d5280e629548af39661885bdcd\Microsoft.ServiceModel.DomainServices.Tools.ni.dll
+ 2012-01-02 22:45 . 2012-01-02 22:45 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\122733b12d421862dca6ce320ac6b733\AspNetMMCExt.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 3086848 c:\windows\assembly\NativeImages_v4.0.30319_64\AcWindows\96831ab2315539cf795571106d9f214d\AcWindows.ni.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 7774720 c:\windows\assembly\NativeImages_v4.0.30319_64\Acmgd\8451c403d3d14395da26b432d2218ed9\Acmgd.ni.dll
+ 2012-01-02 23:12 . 2012-01-02 23:12 1223168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\c62d9d8bb2b22f8eaf9d8cbbf6123e47\System.WorkflowServices.ni.dll
+ 2012-01-02 23:12 . 2012-01-02 23:12 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\e8804a70f32e7804d259792e7d27b5b8\System.Workflow.Runtime.ni.dll
+ 2012-01-02 23:12 . 2012-01-02 23:12 2871808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\a0ba653e91dcb6fbbfb94e37e18ed736\System.Workflow.Activities.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\53f1ed558eef032f8678a10b623db2c6\System.Web.Services.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 2334208 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\f2f7d93088dc2d346d680763d464c03f\System.Web.Mobile.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 3126784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\3722b214046f3e48d9e78d9adf233263\System.Web.Extensions.ni.dll
+ 2012-01-02 23:11 . 2012-01-02 23:11 4535808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\a439f6190b9ad82d9345292736777c85\System.Web.DataVisualization.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d40d01d24635877797a3c389510d9c3a\System.ServiceModel.Web.ni.dll
+ 2012-01-02 23:06 . 2012-01-02 23:06 2026496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\66ebacc95030b565991917af67cbd885\System.Data.Services.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\3713bc9e571e75a2f26a3b082b3f2609\System.Data.Entity.Design.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 2424832 c:\windows\assembly\NativeImages_v4.0.30319_32\perfpkg\814a86c196b306878ef6f641827b9407\perfpkg.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 1690112 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Web.Desig#\192046eb9f6e798c335052872b6e9758\Microsoft.Web.Design.Client.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 2848768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9f3fb6282c0f3d6ee1443c61e029797c\Microsoft.VisualStudio.Web.ni.dll
+ 2012-01-02 23:04 . 2012-01-02 23:04 4141568 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\5ad081538dc53353eba09bd950253c98\Microsoft.VisualStudio.Modeling.ArtifactMapper.VSHost.ni.dll
+ 2012-01-02 23:04 . 2012-01-02 23:04 6043648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4b7753951b414f6e0b381db4783e0049\Microsoft.VisualStudio.Editors.ni.dll
+ 2012-01-02 23:04 . 2012-01-02 23:04 3097088 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\2f99f8034f4cbee3a9e58efabdedd1a0\Microsoft.VisualStudio.QualityTools.Common.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 1177088 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1ddf35604dba87d916de0ab3cfcefbae\Microsoft.VisualStudio.TestTools.TestGeneration.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 2613248 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\098811dd883ccc6b6ad55a2e09cc9bc1\Microsoft.VisualStudio.Web.Application.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1b2ea24db3eeda25b3a9330574af4439\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-01-02 23:02 . 2012-01-02 23:02 2695168 c:\windows\assembly\NativeImages_v4.0.30319_32\aspnet_merge\9a4c741d9ae8fc3d36816ff9c04f4721\aspnet_merge.ni.exe
+ 2012-01-02 22:45 . 2012-01-02 22:45 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\455567dae39910d806447b77ee657a85\System.WorkflowServices.ni.dll
+ 2012-01-02 22:08 . 2012-01-02 22:08 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\45339e741d73e8f1f9393df8163c8c00\System.Workflow.Runtime.ni.dll
+ 2012-01-02 22:08 . 2012-01-02 22:08 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\48ef2f59740ad3d438d0514b335dd334\System.Workflow.ComponentModel.ni.dll
+ 2012-01-02 22:08 . 2012-01-02 22:08 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\7972e04df268430da009e63e90ff4ca9\System.Workflow.Activities.ni.dll
+ 2012-01-02 22:08 . 2012-01-02 22:08 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\8d374a0a9c49f485a7ce6e89ec354b4c\System.Web.Services.ni.dll
+ 2012-01-02 22:45 . 2012-01-02 22:45 1897984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mvc\79526bf73b4fbfbb23d948cbe65f06d1\System.Web.Mvc.ni.dll
+ 2012-01-02 22:45 . 2012-01-02 22:45 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\91ecefc70d74ed44e5139ea2929adbb8\System.Web.Mobile.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\71da5a6d09e12eb94be32935e4a8d5a2\System.Web.Extensions.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2bb91a2edcc92d2bb79007e7d2ddc2ae\System.Web.Extensions.Design.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\3a6ac85c04453976c0f3a7c6a64ec43a\System.ServiceModel.Web.ni.dll
+ 2012-01-02 22:07 . 2012-01-02 22:07 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\d12c2299179cb05591cf08c8712a6495\System.Runtime.Remoting.ni.dll
+ 2012-01-02 22:33 . 2012-01-02 22:33 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\1f90d38a42906a776be313d9720e350d\System.IdentityModel.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\1d2c369d8e2d6f95c99ca90aca273418\System.Data.Services.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\b7bd7d91dc9abd73f2506bb7a0292373\System.Data.Entity.Design.ni.dll
+ 2012-01-02 22:43 . 2012-01-02 22:43 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\53fcf7f34708a9482d3e4059ce29608c\MIGUIControls.ni.dll
+ 2012-01-02 22:44 . 2012-01-02 22:44 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\486ff8cee09c8c63aa9c60ff4f5feafa\Microsoft.VisualBasic.ni.dll
+ 2012-01-02 22:43 . 2012-01-02 22:43 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b68f19bf3f3d545547d2b680eb54a660\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-01-02 22:41 . 2012-01-02 22:41 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7e81f50c34dec17b90bfebec5929853a\Microsoft.MediaCenter.UI.ni.dll
+ 2012-01-02 22:41 . 2012-01-02 22:41 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\65a892a923b49b062bd8fc97254940d3\Microsoft.MediaCenter.ni.dll
+ 2012-01-02 22:43 . 2012-01-02 22:43 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\33fd1381f221898a53253303cb7e5380\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e27f06dcb4dec77651b2e2a5303b947b\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\14eff88c851400b58c27d9826e658127\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-01-02 22:17 . 2012-01-02 22:17 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\a612958eaf641f0ba83b0daae44cb7b1\System.WorkflowServices.ni.dll
+ 2012-01-02 22:07 . 2012-01-02 22:07 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\ad68aa9e6fa1ec8005e1f604579a76be\System.Workflow.Runtime.ni.dll
+ 2012-01-02 22:07 . 2012-01-02 22:07 4515840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\00b0a14ef5cb0154db7989da39a7f1e5\System.Workflow.ComponentModel.ni.dll
+ 2012-01-02 22:07 . 2012-01-02 22:07 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\54873f241a4ad6d2a13e48d2da444538\System.Workflow.Activities.ni.dll
+ 2012-01-02 22:06 . 2012-01-02 22:06 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\be4f1d78d06979df7fd08dedf0d8c804\System.Web.Services.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 1332736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mvc\625179d5e499a49413584b347b81a6b1\System.Web.Mvc.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\d957ec1fb12ff02282a7f73d6318b66b\System.Web.Mobile.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\a90f033a5a062ff29f7df8f9edc1a80c\System.Web.Extensions.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\828e31a37bfd9d432083be6307845630\System.ServiceModel.Web.ni.dll
+ 2012-01-02 22:15 . 2012-01-02 22:15 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c0d9df88f2b37d14cf416281364c5b7f\System.IdentityModel.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\76e676a9b6387aad5544d61a4ac12a78\System.Data.Services.ni.dll
+ 2012-01-02 22:15 . 2012-01-02 22:15 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\20d18697deb8413c01119531c6b987ad\MIGUIControls.ni.dll
+ 2012-01-02 22:16 . 2012-01-02 22:16 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\dd759df05fad8dc6d3404e8e02b40819\Microsoft.VisualBasic.ni.dll
+ 2012-01-02 22:14 . 2012-01-02 22:14 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\695508ea67706e5f66208cabe5363099\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-01-02 22:15 . 2012-01-02 22:15 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5662462cfa995c71817791af93686db2\Microsoft.MediaCenter.ni.dll
+ 2012-01-02 22:15 . 2012-01-02 22:15 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4676e3f99469bd1120f8aed9cf37e4d2\Microsoft.MediaCenter.UI.ni.dll
+ 2012-01-02 22:13 . 2012-01-02 22:13 2553856 c:\windows\assembly\NativeImages_v2.0.50727_32\aspnet_merge\9680b113ee98b6b7de9d88c0d254ee80\aspnet_merge.ni.exe
+ 2012-01-02 21:54 . 2011-12-25 20:42 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-06-23 19:23 . 2010-11-05 01:53 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-02 21:54 . 2011-12-25 20:40 5263360 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-02 21:54 . 2011-12-25 20:42 5255168 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-02 22:52 . 2012-01-02 22:52 15761920 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\866ef200ca7a2ed4f26835709646125d\System.Web.ni.dll
+ 2012-01-02 22:53 . 2012-01-02 22:53 13300736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\6be8e8e57a83372e41481009ef6de482\System.Design.ni.dll
+ 2012-01-02 23:03 . 2012-01-02 23:03 12079104 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\c775972c9a15169ac27abb027154c1fd\System.Web.ni.dll
+ 2012-01-02 22:05 . 2012-01-02 22:05 10999296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\fa53ece586079c2eccc354b6feb31394\System.Design.ni.dll
+ 2012-01-02 23:05 . 2012-01-02 23:05 10688512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigner\6eb6f5e9b1813066b940ee3017bb390b\Microsoft.VSDesigner.ni.dll
+ 2012-01-02 22:07 . 2012-01-02 22:07 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\ab920a032a9b63aa07f26c5592d7c72c\System.Web.ni.dll
+ 2012-01-02 22:33 . 2012-01-02 22:33 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\4bf05a9a1aebde89033c40b9e51af495\System.ServiceModel.ni.dll
+ 2012-01-02 22:08 . 2012-01-02 22:08 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\665178c1ccfd538896eaa0fff283b6ef\System.Design.ni.dll
+ 2012-01-02 22:42 . 2012-01-02 22:42 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\897b2e70eb1754bf8c557fadd93faf98\ehshell.ni.dll
+ 2012-01-02 22:06 . 2012-01-02 22:06 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b41e38edbd6dfe20997f6ea7c080aceb\System.Web.ni.dll
+ 2012-01-02 22:15 . 2012-01-02 22:15 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7bc7e33d4568a214f226cdb6a161a37a\System.ServiceModel.ni.dll
+ 2012-01-02 22:06 . 2012-01-02 22:07 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\70f9f6de6dc9611157ed563bdb4e79a4\System.Design.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FileHippo.com"="c:\program files (x86)\FileHippo.com\UpdateChecker.exe" [2010-08-09 248832]
"WinArranger"="c:\program files (x86)\ManageBytes\WinArranger\WinArranger.exe" [2005-10-10 214016]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-21 98304]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ dfboottime \??\c:\windows\System32\dfboottime.cfg\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [x]
R3 ATHDFU;Atheros Valkyrie USB BootROM;c:\windows\system32\Drivers\AthDfu.sys [x]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [x]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [x]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [x]
R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [x]
R3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP;c:\windows\system32\DRIVERS\BthMtpEnum.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
R3 GGSAFERDriver;GGSAFER Driver;c:\program files (x86)\Garena Messenger\Room\safedrv.sys [x]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [x]
R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
S2 PanService;PandoraService;c:\program files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-01-03 578776]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 SentinelKeysServer;Sentinel Keys Server;c:\program files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-09 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2011-11-08 09:12]
.
2012-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 16:38]
.
2012-01-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 16:38]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2010-11-20 206208]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2010-07-29 594080]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2010-07-29 377504]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.1.1
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
FF - ProfilePath - c:\users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://my.daemon-search.com/|http://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?sourceid=navclient&hl=cs&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-combofix - c:\combofix\CF17404.3XE
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SentinelFilter]
"ImagePath"="\??\c:\windows\System32"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1498072532-3510031312-3464764778-1000\Software\SecuROM\License information*]
"datasecu"=hex:16,ab,fc,6b,45,d7,aa,12,01,fe,99,d8,38,b1,f6,a5,c5,c9,9f,b1,14,
e1,31,ae,fc,16,c7,fe,c0,b7,5a,84,81,89,6d,e7,3b,7e,38,e9,d7,d5,a2,f2,bc,7b,\
"rkeysecu"=hex:04,65,e3,37,bf,cb,2a,37,84,72,98,06,0a,41,45,ed
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-01-09 19:54:28
ComboFix-quarantined-files.txt 2012-01-09 18:54
ComboFix2.txt 2012-01-02 21:00
.
Před spuštěním: Volných bajtů: 147 517 583 360
Po spuštění: Volných bajtů: 140 847 677 440
.
- - End Of File - - 0651FABD1B3F0378CF307BAEC0CFD944
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#26 Příspěvek od motji »

:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

:arrow: Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#27 Příspěvek od nom »

Logfile of random's system information tool 1.09 (written by random/random)
Run by HITTL ROMAN at 2012-01-10 08:24:54
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 138 GB (30%) free of 464 GB
Total RAM: 4091 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:25:10, on 10.1.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\trend micro\HITTL ROMAN.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://acer.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKCU\..\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
O4 - HKCU\..\Run: [WinArranger] "C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Unibet - {EF0124FD-AA19-45A0-A233-705CC28AA847} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} -
O20 - AppInit_DLLs: C:\PROGRA~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10562 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
taskeng.exe {0870E894-04EA-4659-A596-FAF344B42891}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Defraggler\df64.exe" C: /ts /user "HITTL ROMAN" /appPath "C:\Program Files\Defraggler" /shutdown
\??\C:\Windows\system32\conhost.exe "548420509391892141663564162403341449-20780916871343175692041926498-1701152578
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe"
"C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe"
WLIDSvcM.exe 2692
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-7e07662d-8703-4eb2-8633-6ac95ca13048 -SystemEventPortName:HostProcess-3c37a49b-97e9-40ad-8512-4d128971bb12 -IoCancelEventPortName:HostProcess-a97f95d9-6a84-4bf2-90ee-b8304d9ce622 -NonStateChangingEventPortName:HostProcess-e7a99bc0-950b-49c7-8d8c-4a6c3895acfc -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c11e2c80-aed5-42ad-b349-62b1202ac2a5
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\PLFSetI.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
"C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Users\HITTL ROMAN\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Defraggler Volume C Task.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://my.daemon-search.com/|http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.25"
prefs.js - "keyword.URL" - "http://www.google.com/search?sourceid=n ... t&hl=cs&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files (x86)\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files (x86)\Veetle\Player\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla\Firefox\Profiles\e1a9hhyo.default\extensions\
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-01-02 79240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~2\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DDA57003-0068-4ed2-9D32-4D1EC707D94D}]
Microsoft Web Test Recorder 10.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19 61360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-12-10 1890088]
"PLFSetI"=C:\Windows\PLFSetI.exe [2010-11-20 206208]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2010-07-29 594080]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2010-07-29 377504]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 861216]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"FileHippo.com"=C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
"WinArranger"=C:\Program Files (x86)\ManageBytes\WinArranger\WinArranger.exe [2005-10-10 214016]
"SpybotSD TeaTimer"=C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
I:\Anime\BitLord\BitLord.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisTecPMMUpdate]
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EgisUpdate]
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2011-12-24 460872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SuiteTray]
C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wakoopa]
C:\Users\HITTL ROMAN\AppData\Local\Wakoopa\Wakoopa.exe [2011-08-31 1409376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^HITTL ROMAN^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-21 98304]
"Microsoft Default Manager"=C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2010-05-10 439568]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-10 975952]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-28 265984]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"msacm.ac3filter"=ac3filter64.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
.txt - open - C:\Windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2012-01-10 08:24:54 ----D---- C:\rsit
2012-01-10 07:14:09 ----SHD---- C:\$RECYCLE.BIN
2012-01-02 22:21:08 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaws.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\javaw.exe
2012-01-02 22:21:08 ----A---- C:\Windows\system32\deployJava1.dll
2012-01-02 22:20:54 ----D---- C:\Program Files\Java
2012-01-02 22:18:47 ----D---- C:\Program Files (x86)\Zrychleni Pocitace
2012-01-02 22:17:05 ----D---- C:\Program Files (x86)\PANDORA.TV
2012-01-02 22:10:37 ----D---- C:\Program Files (x86)\FileHippo.com
2012-01-01 12:06:44 ----D---- C:\ProgramData\Friends Games
2011-12-31 21:03:10 ----D---- C:\Windows\pss
2011-12-29 14:51:08 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\dvdcss
2011-12-28 22:55:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Photo DVD Maker
2011-12-28 22:55:02 ----D---- C:\ProgramData\Anvsoft
2011-12-28 22:53:07 ----D---- C:\Program Files (x86)\AnvSoft
2011-12-28 22:41:34 ----D---- C:\Program Files\AnvSoft
2011-12-28 22:11:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Vso
2011-12-28 22:11:53 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\pcouffin.sys
2011-12-28 21:54:23 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DCF
2011-12-21 20:42:30 ----A---- C:\Windows\SYSWOW64\RICHED.DLL
2011-12-21 01:02:26 ----A---- C:\Windows\SYSWOW64\GPhotos.scr
2011-12-20 00:42:40 ----A---- C:\Windows\system32\dfboottime.exe
2011-12-20 00:25:42 ----D---- C:\Program Files\Speccy
2011-12-20 00:23:49 ----D---- C:\Program Files\Recuva
2011-12-19 06:45:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Malwarebytes
2011-12-19 06:45:14 ----D---- C:\ProgramData\Malwarebytes
2011-12-19 06:45:10 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-19 06:45:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-12-18 07:49:50 ----SHD---- C:\Windows\SYSWOW64\%APPDATA%
2011-12-17 18:00:12 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-17 18:00:12 ----A---- C:\Windows\system32\tzres.dll
2011-12-17 15:38:58 ----D---- C:\Program Files (x86)\Sifrovani
2011-12-16 08:23:50 ----A---- C:\Windows\system32\GDIPFONTCACHEV1.DAT
2011-12-15 16:21:18 ----A---- C:\Users\HITTL ROMAN\AppData\Roaming\bitlord_log.txt
2011-12-15 09:55:06 ----D---- C:\Program Files (x86)\TMbot
2011-12-14 22:33:40 ----D---- C:\ProgramData\Spybot - Search & Destroy
2011-12-14 22:33:40 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy
2011-12-14 22:15:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TuneUp Software
2011-12-14 22:09:52 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2011-12-14 22:05:00 ----D---- C:\ProgramData\TuneUp Software
2011-12-14 20:38:15 ----RD---- C:\Backup
2011-12-14 20:34:48 ----RD---- C:\Program Files (x86)\Skype
2011-12-14 18:30:37 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-14 18:30:37 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\url.dll
2011-12-14 18:30:36 ----A---- C:\Windows\system32\iertutil.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\urlmon.dll
2011-12-14 18:30:35 ----A---- C:\Windows\system32\ieui.dll
2011-12-14 18:30:34 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-14 18:30:33 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-14 18:30:33 ----A---- C:\Windows\system32\wininet.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript9.dll
2011-12-14 18:30:32 ----A---- C:\Windows\system32\jscript.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-14 18:30:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-14 18:30:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-14 18:30:28 ----A---- C:\Windows\system32\mshtml.dll
2011-12-14 18:30:27 ----A---- C:\Windows\system32\ieframe.dll
2011-12-14 13:24:50 ----D---- C:\f63502f75a76bf61f7d8ce2d823393
2011-12-14 13:01:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-14 13:01:05 ----A---- C:\Windows\system32\EncDec.dll
2011-12-14 13:01:04 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-14 11:00:27 ----D---- C:\b5502a7e1fdc90134be248b8f06a
2011-12-13 21:17:39 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-13 18:18:25 ----D---- C:\ProgramData\PreEmptive Solutions
2011-12-13 17:29:10 ----D---- C:\ProgramData\VS
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-12-13 17:13:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-12-13 17:13:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-12-13 17:13:20 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-12-13 17:13:17 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-12-13 17:13:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-12-13 17:13:17 ----A---- C:\Windows\system32\msls31.dll
2011-12-13 17:13:16 ----A---- C:\Windows\system32\msrating.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\pngfilt.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\occache.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\mshta.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieUnatt.exe
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieakui.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\ieaksie.dll
2011-12-13 17:13:14 ----A---- C:\Windows\system32\admparse.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\mshtmler.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-13 17:13:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\imgutil.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iesysprep.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\iepeers.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\ieakeng.dll
2011-12-13 17:13:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtrans.dll
2011-12-13 17:13:09 ----A---- C:\Windows\system32\dxtmsft.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iesetup.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iernonce.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dll
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ieapfltr.dat
2011-12-13 17:13:08 ----A---- C:\Windows\system32\ie4uinit.exe
2011-12-13 17:13:08 ----A---- C:\Windows\system32\icardie.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\wextract.exe
2011-12-13 17:13:07 ----A---- C:\Windows\system32\webcheck.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\vbscript.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\inseng.dll
2011-12-13 17:13:07 ----A---- C:\Windows\system32\iexpress.exe
2011-12-13 16:58:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2011-12-13 16:58:19 ----A---- C:\Windows\system32\SQSRVRES.DLL
2011-12-13 16:54:07 ----D---- C:\Program Files\Microsoft.NET
2011-12-13 16:44:03 ----A---- C:\Windows\system32\shell32.dll
2011-12-13 16:43:54 ----A---- C:\Windows\SYSWOW64\shell32.dll

======List of files/folders modified in the last 1 month======

2012-01-10 08:25:04 ----D---- C:\Windows\Temp
2012-01-10 08:24:57 ----D---- C:\Program Files\trend micro
2012-01-10 08:14:48 ----D---- C:\Windows\system32\config
2012-01-10 07:49:46 ----D---- C:\Windows
2012-01-10 07:48:05 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Skype
2012-01-10 07:44:35 ----SHD---- C:\System Volume Information
2012-01-10 07:43:41 ----D---- C:\Windows\system32\drivers
2012-01-09 19:13:14 ----A---- C:\Windows\system.ini
2012-01-09 18:58:00 ----RASHD---- C:\Windows\SysWOW64
2012-01-09 18:58:00 ----D---- C:\Windows\SYSWOW64\drivers
2012-01-09 18:58:00 ----D---- C:\Windows\System32
2012-01-09 18:58:00 ----D---- C:\Windows\AppPatch
2012-01-09 18:57:57 ----D---- C:\Program Files\Common Files
2012-01-09 18:57:57 ----D---- C:\Program Files (x86)\Common Files
2012-01-09 07:57:13 ----D---- C:\Windows\system32\NDF
2012-01-09 07:55:29 ----D---- C:\ProgramData\boost_interprocess
2012-01-09 06:13:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-01-09 06:13:13 ----D---- C:\Windows\inf
2012-01-08 20:54:18 ----D---- C:\Program Files (x86)\The KMPlayer
2012-01-08 13:44:40 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SoftGrid Client
2012-01-07 13:06:25 ----RSD---- C:\Windows\Fonts
2012-01-07 10:09:57 ----D---- C:\Windows\system32\drivers\etc
2012-01-06 23:37:59 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BitLord
2012-01-06 10:41:51 ----D---- C:\Windows\winsxs
2012-01-06 10:31:58 ----SHD---- C:\Windows\Installer
2012-01-06 10:31:58 ----D---- C:\Program Files (x86)\SolidWorks
2012-01-06 10:31:58 ----D---- C:\Config.Msi
2012-01-06 10:31:39 ----RD---- C:\Program Files (x86)
2012-01-06 10:31:39 ----D---- C:\ProgramData
2012-01-06 10:31:30 ----D---- C:\Program Files (x86)\Microsoft Office
2012-01-06 10:29:49 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-06 10:29:49 ----D---- C:\Program Files (x86)\Surfware
2012-01-06 10:29:01 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DWGEditor
2012-01-06 10:24:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\DAEMON Tools Lite
2012-01-03 00:12:25 ----RSD---- C:\Windows\assembly
2012-01-03 00:12:25 ----D---- C:\Windows\Microsoft.NET
2012-01-02 23:05:08 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-02 22:51:20 ----D---- C:\Windows\system32\catroot
2012-01-02 22:51:18 ----D---- C:\Windows\system32\catroot2
2012-01-02 22:22:19 ----D---- C:\Windows\system32\Tasks
2012-01-02 22:22:16 ----D---- C:\Windows\Tasks
2012-01-02 22:20:54 ----RD---- C:\Program Files
2012-01-02 22:16:53 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenCandy
2012-01-01 19:06:30 ----D---- C:\Program Files (x86)\WebKeySoft
2012-01-01 12:14:30 ----AD---- C:\ProgramData\Temp
2011-12-31 22:12:35 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\CodeLite
2011-12-31 12:58:57 ----D---- C:\Windows\Prefetch
2011-12-31 12:29:09 ----D---- C:\Windows\system32\drivers\UMDF
2011-12-31 08:26:35 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-12-27 13:25:07 ----D---- C:\ProgramData\DVD Shrink
2011-12-26 21:38:04 ----HD---- C:\Program Files (x86)\Temp
2011-12-26 21:37:48 ----D---- C:\Windows\system32\DriverStore
2011-12-25 18:27:05 ----D---- C:\Program Files (x86)\VirtuaGirl HD
2011-12-25 18:03:06 ----D---- C:\Program Files (x86)\Google
2011-12-25 15:14:07 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-12-24 07:23:46 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mumble
2011-12-21 19:57:29 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\vlc
2011-12-20 00:21:36 ----D---- C:\Program Files\Defraggler
2011-12-18 13:00:00 ----SD---- C:\Users\HITTL ROMAN\AppData\Roaming\Microsoft
2011-12-18 07:25:21 ----A---- C:\Windows\system32\MRT.exe
2011-12-18 07:24:34 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-12-18 07:24:34 ----D---- C:\Windows\system32\cs-CZ
2011-12-17 12:00:24 ----D---- C:\Program Files (x86)\Opera
2011-12-17 11:58:00 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Opera
2011-12-16 22:32:14 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Aegisub
2011-12-15 12:54:22 ----D---- C:\Program Files (x86)\Trillian
2011-12-15 12:43:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\ICQ
2011-12-14 21:49:51 ----D---- C:\Windows\system32\wfp
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Ventrilo
2011-12-14 21:49:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mp3tag
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\gtk-2.0
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\GHISLER
2011-12-14 21:49:47 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Audacity
2011-12-14 21:49:33 ----RD---- C:\Users
2011-12-14 21:49:01 ----D---- C:\Windows\registration
2011-12-14 21:48:50 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Virtual Mechanics
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Trillian
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sun
2011-12-14 21:48:49 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Sony
2011-12-14 21:48:48 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\OpenOffice.org
2011-12-14 21:48:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mozilla
2011-12-14 21:48:26 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Autodesk
2011-12-14 21:48:25 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Adobe
2011-12-14 20:58:45 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Wireshark
2011-12-14 20:58:44 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\TS3Client
2011-12-14 20:58:42 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\SolidWorks
2011-12-14 20:58:22 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Notebook Hardware Control
2011-12-14 20:58:02 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\Mount&Blade Warband
2011-12-14 20:57:20 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\BatteryBar
2011-12-14 20:34:47 ----D---- C:\ProgramData\Skype
2011-12-14 20:16:52 ----D---- C:\Windows\system32\LogFiles
2011-12-14 19:17:34 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-14 19:17:33 ----D---- C:\Program Files\Internet Explorer
2011-12-14 19:17:32 ----D---- C:\Windows\SYSWOW64\migration
2011-12-14 19:17:25 ----D---- C:\Windows\system32\migration
2011-12-14 18:40:37 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-14 13:09:50 ----D---- C:\Program Files\CCleaner
2011-12-14 12:54:43 ----D---- C:\Recovery
2011-12-14 12:54:27 ----D---- C:\Windows\system32\Recovery
2011-12-14 12:54:18 ----D---- C:\Users\HITTL ROMAN\AppData\Roaming\WinRAR
2011-12-13 21:01:57 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\system32\en-US
2011-12-13 21:01:56 ----D---- C:\Windows\PolicyDefinitions
2011-12-13 18:24:51 ----D---- C:\Program Files\MSBuild
2011-12-13 18:24:47 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2011-12-13 17:29:51 ----D---- C:\Program Files (x86)\Microsoft SDKs
2011-12-13 17:17:29 ----D---- C:\Windows\Logs
2011-12-13 16:54:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-12-13 16:51:14 ----D---- C:\Program Files\Microsoft SQL Server
2011-12-13 16:51:14 ----D---- C:\Program Files (x86)\Microsoft SQL Server

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-13 513080]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-11-25 88480]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-11-25 46400]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-21 6406144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-20 188928]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-11 2229608]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-07-29 28832]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-05-14 384040]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-20 18432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-06-17 246376]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-01-27 231328]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 760168]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-12-10 301104]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-07-09 17408]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 SentinelFilter;SentinelFilter; \??\C:\Windows\syswow64 []
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-07-29 36000]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-07-29 51872]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-07-29 295072]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-07-29 201376]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-07-29 51872]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-07-29 154272]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-07-29 270496]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthMtpEnum;Modul pro výčet zařízení Bluetooth MTP; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [2009-07-14 64512]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Messenger\Room\safedrv.sys []
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-12-02 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-12-02 27136]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-12-02 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-12-02 9216]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 154256]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\Windows\system32\DRIVERS\vcsvad.sys [2008-12-26 21504]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440]
S4 RsFx0105;RsFx0105 Driver; C:\Windows\system32\DRIVERS\RsFx0105.sys [2011-09-22 311144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-21 202752]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2010-07-29 52896]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]
R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2011-09-22 58345832]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [2012-01-10 578776]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-01-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-01-15 107832]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-07-27 249136]
R2 SentinelKeysServer;Sentinel Keys Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [2006-08-22 316992]
R2 SentinelProtectionServer;Sentinel Protection Server; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [2006-12-21 206400]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2011-09-22 154984]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-14 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-20 655624]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-05 30192]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-31 136176]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-13 1255736]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-09-22 431464]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2011-09-22 255336]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#28 Příspěvek od motji »

Log je v pořádku. Doporučila bych odinstalovat Spybota. :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
nom
Návštěvník
Návštěvník
Příspěvky: 100
Registrován: 23 bře 2008 19:22
Bydliště: Kroměříž (ZL)

Re: Samovolné vypínání noteboku

#29 Příspěvek od nom »

Oks spy bota sem odinstaloval a zatím se nevypnul sám od sebe doufám že to tak zustane :o
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Samovolné vypínání noteboku

#30 Příspěvek od motji »

Dejte potom vědět :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“