Prosím o kontrolu logu.
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Nejdou hry
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Nejdou hry
Nejdou mi hry které mi šli před odpojením počítače. Po opětovném zapojení mi to dělá švíky.
Prosím o kontrolu logu.
Prosím o kontrolu logu.
Re: Nejdou hry
Instalovala jsem na jiný oddíl disku win7, už jsem to zrušila a zase běží xp na celém disku.Ale od té doby mi to blbne.Na win7 jsem neměla žádný antivir, tak proto prosím kontrolu 
Logfile of random's system information tool 1.09 (written by random/random)
Run by peta at 2012-01-09 19:12:38
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (14%) free of 107 GB
Total RAM: 1280 MB (23% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:51, on 9.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\utility\Eject.exe
C:\utility\MouseWheelVolume\mwvolume.exe
C:\utility\WinLišta 1.8.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\IDA\ida.exe
C:\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\peta.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - (no file)
O3 - Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O3 - Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - Eject.lnk = C:\utility\Eject.exe
O4 - Startup: Zástupce - mwvolume.lnk = C:\utility\MouseWheelVolume\mwvolume.exe
O4 - Startup: Zástupce - WinLišta 1.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download remotely with IDA - C:\Program Files\IDA\remdown.htm
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe
--
End of file - 7551 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003UA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
C:\WINDOWS\tasks\WGASetup.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}]
IE 4.x-6.x BHO for Internet Download Accelerator - C:\PROGRA~1\IDA\idaiehlp.dll [2011-03-11 165184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-07 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-07 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{99079a25-328f-4bd4-be04-00955acaa0a7}
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
{30F9B915-B755-4826-820B-08FBA6BD249D}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"C-Media Mixer"=Mixer.exe /startup []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpyEmergency"=C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe [2011-10-20 1940024]
"AdobeBridge"= []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
AVer HID Receiver.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění
Zástupce - Eject.lnk - C:\utility\Eject.exe
Zástupce - mwvolume.lnk - C:\utility\MouseWheelVolume\mwvolume.exe
Zástupce - WinLišta 1.lnk - C:\utility\WinLišta 1.8.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Activision Value\Baja 1000\Baja.exe"="C:\Program Files\Activision Value\Baja 1000\Baja.exe:*:Enabled:Baja"
"C:\Program Files\Innonics\Wiggles\Wiggles.exe"="C:\Program Files\Innonics\Wiggles\Wiggles.exe:*:Enabled:Wiggles"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\WINDOWS\KMSEmulator.exe"="C:\WINDOWS\KMSEmulator.exe:*:Enabled:KMSEmulator"
"C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe"="C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe:*:Enabled:OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"msacm.divxa32"=msaud32_divx.acm
"wave1"=wdmaud.drv
"midi"=wdmaud.drv
"mixer1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2020-10-26 15:25:28 ----A---- C:\WINDOWS\vypalovac.ini
2020-10-22 14:25:54 ----DC---- C:\715655c57614a5e9a2c6
2020-10-06 12:19:13 ----D---- C:\Program Files\Vypalovač
2012-01-09 19:12:39 ----D---- C:\Program Files\trend micro
2012-01-09 19:12:38 ----DC---- C:\rsit
2012-01-09 16:47:24 ----D---- C:\WINDOWS\LastGood
2012-01-09 10:33:49 ----DC---- C:\Downloads
2012-01-09 10:13:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2012-01-09 10:12:50 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2012-01-09 10:12:42 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2012-01-09 10:12:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2012-01-09 10:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2012-01-09 10:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2012-01-09 10:11:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2012-01-09 10:11:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2012-01-09 10:11:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2012-01-09 10:11:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2012-01-09 10:11:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2012-01-09 10:11:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2012-01-09 10:10:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2012-01-09 10:10:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2012-01-09 10:10:38 ----D---- C:\WINDOWS\system32\KB905474
2012-01-09 10:10:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2012-01-09 10:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2012-01-09 10:09:44 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2012-01-09 10:09:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2012-01-09 10:09:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2012-01-09 10:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2012-01-09 10:09:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2012-01-09 10:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2012-01-09 10:08:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2012-01-09 10:08:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2012-01-09 10:08:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2012-01-09 10:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2012-01-09 10:07:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2012-01-09 10:07:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2012-01-09 10:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2012-01-09 10:07:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2012-01-09 10:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2012-01-09 10:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2012-01-09 10:06:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2012-01-09 10:06:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2012-01-09 10:06:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2012-01-09 10:05:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2012-01-09 10:05:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2012-01-09 10:05:36 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2012-01-09 10:05:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2012-01-09 10:05:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2012-01-09 10:05:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-01-09 10:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2012-01-09 10:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2012-01-09 10:04:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2012-01-09 10:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2012-01-09 10:04:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2012-01-09 10:04:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2012-01-09 10:03:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2012-01-09 10:03:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2012-01-09 10:03:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2012-01-09 10:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2012-01-09 10:03:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2012-01-09 10:02:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2012-01-09 10:02:38 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2012-01-09 10:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2012-01-09 10:02:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2012-01-09 10:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2012-01-09 10:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2012-01-09 10:01:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2012-01-09 10:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2012-01-09 10:01:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2012-01-09 10:01:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2012-01-09 10:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2012-01-09 10:00:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-01-09 09:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2012-01-09 09:58:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-01-09 09:58:26 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2012-01-09 09:58:16 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2012-01-09 09:58:07 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2012-01-09 09:57:48 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-01-09 09:57:37 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2012-01-09 09:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2012-01-09 09:57:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2012-01-09 09:57:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2618444$
2012-01-09 09:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2012-01-09 09:56:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2012-01-09 09:56:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2012-01-09 09:56:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2012-01-09 09:55:42 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2012-01-09 09:55:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2012-01-09 09:55:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2012-01-09 09:55:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2012-01-09 09:55:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2012-01-09 09:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2012-01-09 09:54:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-01-09 09:54:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2012-01-09 09:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2012-01-09 09:53:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2012-01-09 09:53:41 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2012-01-09 09:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2012-01-09 09:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2012-01-07 11:44:32 ----ASH---- C:\pagefile.sys
2012-01-07 11:35:33 ----D---- C:\WINDOWS\Prefetch
2012-01-07 11:35:02 ----ASH---- C:\hiberfil.sys
2012-01-07 11:04:15 ----A---- C:\WINDOWS\pnplog.txt
2012-01-07 10:59:53 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2012-01-07 10:55:21 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-01-07 10:55:21 ----A---- C:\WINDOWS\system32\irclass.dll
2012-01-07 10:54:48 ----RA---- C:\WINDOWS\SETA5.tmp
2012-01-07 10:54:45 ----RA---- C:\WINDOWS\SET99.tmp
2012-01-07 10:54:43 ----RA---- C:\WINDOWS\SET98.tmp
2012-01-07 00:43:32 ----D---- C:\WINDOWS\ServicePackFiles
2012-01-06 18:29:48 ----D---- C:\WINDOWS\system32\CatRoot_bak
2012-01-06 15:41:32 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2012-01-06 15:03:47 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2012-01-06 14:50:49 ----A---- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
2012-01-06 09:51:02 ----SHDC---- C:\$RECYCLE.BIN
2012-01-06 08:26:18 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2012-01-06 08:09:33 ----RA---- C:\WINDOWS\SETC3.tmp
2012-01-06 08:09:30 ----RA---- C:\WINDOWS\SETB7.tmp
2012-01-06 08:09:28 ----RA---- C:\WINDOWS\SETB6.tmp
2012-01-06 07:17:06 ----RASHC---- C:\BOOTSECT.BAK
2012-01-06 07:17:04 ----SHC---- C:\Boot.BAK
2012-01-06 07:17:03 ----SHDC---- C:\Boot
2012-01-06 06:43:33 ----A---- C:\WINDOWS\OutLog.txt
2012-01-06 01:06:34 ----A---- C:\WINDOWS\BcdLog.txt
2012-01-06 00:58:47 ----D---- C:\Program Files\EASEUS
2012-01-05 22:11:18 ----D---- C:\WINDOWS\SxsCaPendDel
2012-01-01 20:07:34 ----DC---- C:\VIAagp
2012-01-01 20:07:34 ----A---- C:\WINDOWS\system32\drivers\VIAAGP1.SYS
2012-01-01 02:34:05 ----D---- C:\Program Files\MSXML 4.0
2012-01-01 01:13:06 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
2012-01-01 00:41:30 ----D---- C:\Program Files\MarkAnyContentSAFER
2011-12-31 23:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-12-31 23:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-12-31 23:35:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-12-31 23:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-12-31 23:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-12-31 23:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-12-31 23:34:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-31 22:38:24 ----D---- C:\Program Files\SlimDrivers
2011-12-31 22:17:42 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
2011-12-31 22:17:36 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
2011-12-31 20:42:30 ----RA---- C:\WINDOWS\SETF1.tmp
2011-12-31 20:42:24 ----RA---- C:\WINDOWS\SETE5.tmp
2011-12-31 20:42:21 ----RA---- C:\WINDOWS\SETE2.tmp
2011-12-31 20:41:09 ----A---- C:\WINDOWS\setuplog.txt
2011-12-31 20:02:49 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2011-12-31 20:02:38 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-12-31 20:02:10 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2011-12-31 20:02:09 ----D---- C:\Program Files\DIFX
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExDisk.Sys
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2011-12-31 20:01:15 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
2011-12-31 18:23:35 ----DC---- C:\TopCD
2011-12-29 13:15:45 ----D---- C:\Program Files\Astroburn Toolbar
2011-12-29 13:15:40 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
2011-12-29 13:15:37 ----D---- C:\Program Files\Astroburn Lite
2011-12-28 07:55:06 ----A---- C:\WINDOWS\SILCOM_P.INI
2011-12-28 07:55:04 ----DC---- C:\DIKTATY
2011-12-28 07:54:34 ----DC---- C:\CESTINA
2011-12-28 07:54:34 ----A---- C:\WINDOWS\CESTINA.INI
2011-12-28 06:56:23 ----D---- C:\Program Files\PC Diktáty Holubec
2011-12-27 16:29:31 ----A---- C:\WINDOWS\system32\msikbs32.dll
2011-12-24 12:16:44 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
2011-12-24 12:16:22 ----D---- C:\Program Files\ConduitEngine
2011-12-24 12:16:17 ----D---- C:\Program Files\MyAshampoo
2011-12-24 12:16:08 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
2011-12-18 14:44:26 ----D---- C:\Program Files\Rally Trophy
======List of files/folders modified in the last 1 month======
2012-01-09 19:12:39 ----RD---- C:\Program Files
2012-01-09 19:02:43 ----D---- C:\WINDOWS\system32
2012-01-09 18:47:51 ----D---- C:\Program Files\Activision Value
2012-01-09 18:44:58 ----D---- C:\Program Files\Opera
2012-01-09 16:54:26 ----HD---- C:\WINDOWS\inf
2012-01-09 16:47:24 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-09 16:47:24 ----D---- C:\WINDOWS
2012-01-09 10:20:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-09 10:16:03 ----D---- C:\WINDOWS\Temp
2012-01-09 10:14:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-09 10:14:52 ----D---- C:\WINDOWS\system32\wbem
2012-01-09 10:14:52 ----D---- C:\WINDOWS\AppPatch
2012-01-09 10:13:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-09 10:13:03 ----D---- C:\WINDOWS\system32\drivers
2012-01-09 10:12:55 ----A---- C:\WINDOWS\imsins.BAK
2012-01-09 10:11:50 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-09 10:10:38 ----SD---- C:\WINDOWS\Tasks
2012-01-09 09:58:29 ----D---- C:\Program Files\Outlook Express
2012-01-09 09:57:41 ----D---- C:\Program Files\Movie Maker
2012-01-09 09:52:34 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
2012-01-08 22:00:45 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-07 15:41:10 ----D---- C:\WINDOWS\SoftwareDistribution
2012-01-07 15:41:03 ----D---- C:\WINDOWS\Help
2012-01-07 15:27:07 ----D---- C:\Program Files\Zombie Shooter
2012-01-07 14:03:04 ----D---- C:\Program Files\Kobra 11 Nitro
2012-01-07 11:50:45 ----D---- C:\WINDOWS\system32\Setup
2012-01-07 11:50:36 ----D---- C:\WINDOWS\L2Schemas
2012-01-07 11:50:33 ----D---- C:\WINDOWS\system32\usmt
2012-01-07 11:50:21 ----D---- C:\WINDOWS\ehome
2012-01-07 11:50:20 ----D---- C:\WINDOWS\ime
2012-01-07 11:50:18 ----RSD---- C:\WINDOWS\Fonts
2012-01-07 11:50:17 ----D---- C:\WINDOWS\Network Diagnostic
2012-01-07 11:50:17 ----D---- C:\WINDOWS\Media
2012-01-07 11:50:13 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-07 11:50:00 ----D---- C:\WINDOWS\PeerNet
2012-01-07 11:49:42 ----D---- C:\WINDOWS\system32\npp
2012-01-07 11:49:32 ----D---- C:\WINDOWS\msagent
2012-01-07 11:49:25 ----D---- C:\WINDOWS\system32\cs
2012-01-07 11:46:48 ----D---- C:\WINDOWS\system32\1029
2012-01-07 11:46:42 ----RDC---- C:\JD stazene
2012-01-07 11:46:40 ----D---- C:\WINDOWS\twain_32
2012-01-07 11:46:23 ----D---- C:\WINDOWS\system32\icsxml
2012-01-07 11:45:46 ----D---- C:\WINDOWS\system32\1033
2012-01-07 11:44:32 ----D---- C:\WINDOWS\Driver Cache
2012-01-07 11:42:44 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-01-07 11:37:05 ----D---- C:\WINDOWS\Registration
2012-01-07 11:25:12 ----D---- C:\WINDOWS\system32\config
2012-01-07 11:17:18 ----D---- C:\WINDOWS\security
2012-01-07 11:16:55 ----A---- C:\WINDOWS\OEWABLog.txt
2012-01-07 11:16:48 ----A---- C:\WINDOWS\ODBCINST.INI
2012-01-07 11:16:18 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-01-07 11:16:14 ----D---- C:\WINDOWS\system32\ias
2012-01-07 11:15:31 ----RD---- C:\WINDOWS\Web
2012-01-07 11:15:18 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2012-01-07 11:15:02 ----A---- C:\WINDOWS\win.ini
2012-01-07 11:14:51 ----D---- C:\WINDOWS\srchasst
2012-01-07 11:14:47 ----D---- C:\Program Files\Windows Media Player
2012-01-07 11:14:37 ----D---- C:\WINDOWS\system32\oobe
2012-01-07 11:14:29 ----D---- C:\WINDOWS\system32\Restore
2012-01-07 11:14:27 ----D---- C:\Program Files\NetMeeting
2012-01-07 11:14:23 ----D---- C:\Program Files\Common Files\System
2012-01-07 11:14:11 ----D---- C:\Program Files\Internet Explorer
2012-01-07 11:12:50 ----D---- C:\WINDOWS\system32\Com
2012-01-07 11:12:10 ----D---- C:\Program Files\Windows NT
2012-01-07 11:10:55 ----SHC---- C:\boot.ini
2012-01-07 10:55:30 ----A---- C:\WINDOWS\system.ini
2012-01-07 10:55:21 ----D---- C:\WINDOWS\system
2012-01-07 10:55:05 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\desktop.ini
2012-01-07 00:59:15 ----D---- C:\WINDOWS\WinSxS
2012-01-07 00:58:10 ----A---- C:\WINDOWS\iis6.BAK
2012-01-07 00:57:20 ----HDC---- C:\WINDOWS\ie8
2012-01-06 19:20:28 ----D---- C:\MOP030B
2012-01-06 18:29:48 ----D---- C:\WINDOWS\Debug
2012-01-06 14:51:10 ----D---- C:\Program Files\MultiRes
2012-01-06 00:22:26 ----D---- C:\Program Files\Adobe
2012-01-05 22:10:41 ----D---- C:\Program Files\Common Files
2012-01-05 22:05:05 ----D---- C:\Program Files\Safari
2012-01-05 22:03:42 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Skype
2012-01-05 22:03:40 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Skype
2012-01-05 21:43:56 ----D---- C:\Program Files\Common Files\Adobe
2012-01-05 01:42:36 ----D---- C:\Program Files\JDownloader
2012-01-01 01:16:54 ----SDC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Microsoft
2012-01-01 00:20:58 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-31 23:22:30 ----A---- C:\WINDOWS\mixerdef.ini
2011-12-31 22:13:54 ----A---- C:\WINDOWS\CMISETUP.INI
2011-12-31 22:13:53 ----A---- C:\WINDOWS\CMCDPLAY.INI
2011-12-31 21:59:47 ----DC---- C:\Documents and Settings
2011-12-30 02:04:11 ----D---- C:\Zaloha disk D
2011-12-27 18:38:33 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\AVerTV
2011-12-15 17:37:14 ----DC---- C:\Deer Avenger 4
2011-12-15 14:19:07 ----D---- C:\WINDOWS\Minidump
2011-12-15 11:02:36 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2002-07-24 32128]
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys [2000-01-01 13976]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 atitray;atitray; \??\C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-10-20 218688]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 SpyEmrg;Spy Emergency Driver; C:\WINDOWS\System32\Drivers\spyemrg.sys [2009-02-04 12344]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-11-01 279712]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-11-01 25888]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-04-14 701440]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2001-12-10 357070]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 SpyEmrgAccess;Spy Emergency OnAccess Driver; C:\WINDOWS\System32\Drivers\spyemrg_access.sys [2009-04-21 18232]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver; C:\WINDOWS\System32\Drivers\spyemrg_guard.sys [2009-02-04 14392]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VMHybrid;VMHybrid service; C:\WINDOWS\system32\DRIVERS\VMHybrid.sys [2011-03-14 1105408]
S3 AVerA706;AVerMedia A706 BDA Service; C:\WINDOWS\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920]
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2004-10-15 15295]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2011-12-31 12984]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys []
S3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys []
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2009-04-09 344064]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-12-10 405504]
R2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-11 57344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 SpyEmrgSrv;Spy Emergency Engine Service; C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe [2009-04-22 1788472]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-12-05 495616]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-09-28 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-11-04 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by peta at 2012-01-09 19:12:38
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (14%) free of 107 GB
Total RAM: 1280 MB (23% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:51, on 9.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\utility\Eject.exe
C:\utility\MouseWheelVolume\mwvolume.exe
C:\utility\WinLišta 1.8.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Program Files\IDA\ida.exe
C:\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\peta.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - (no file)
O3 - Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O3 - Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - Eject.lnk = C:\utility\Eject.exe
O4 - Startup: Zástupce - mwvolume.lnk = C:\utility\MouseWheelVolume\mwvolume.exe
O4 - Startup: Zástupce - WinLišta 1.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm
O8 - Extra context menu item: Download remotely with IDA - C:\Program Files\IDA\remdown.htm
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe
--
End of file - 7551 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003UA.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
C:\WINDOWS\tasks\WGASetup.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}]
IE 4.x-6.x BHO for Internet Download Accelerator - C:\PROGRA~1\IDA\idaiehlp.dll [2011-03-11 165184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-07 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-07 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{99079a25-328f-4bd4-be04-00955acaa0a7}
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
{30F9B915-B755-4826-820B-08FBA6BD249D}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"C-Media Mixer"=Mixer.exe /startup []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpyEmergency"=C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe [2011-10-20 1940024]
"AdobeBridge"= []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
AVer HID Receiver.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění
Zástupce - Eject.lnk - C:\utility\Eject.exe
Zástupce - mwvolume.lnk - C:\utility\MouseWheelVolume\mwvolume.exe
Zástupce - WinLišta 1.lnk - C:\utility\WinLišta 1.8.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Activision Value\Baja 1000\Baja.exe"="C:\Program Files\Activision Value\Baja 1000\Baja.exe:*:Enabled:Baja"
"C:\Program Files\Innonics\Wiggles\Wiggles.exe"="C:\Program Files\Innonics\Wiggles\Wiggles.exe:*:Enabled:Wiggles"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\WINDOWS\KMSEmulator.exe"="C:\WINDOWS\KMSEmulator.exe:*:Enabled:KMSEmulator"
"C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe"="C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe:*:Enabled:OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"msacm.divxa32"=msaud32_divx.acm
"wave1"=wdmaud.drv
"midi"=wdmaud.drv
"mixer1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2020-10-26 15:25:28 ----A---- C:\WINDOWS\vypalovac.ini
2020-10-22 14:25:54 ----DC---- C:\715655c57614a5e9a2c6
2020-10-06 12:19:13 ----D---- C:\Program Files\Vypalovač
2012-01-09 19:12:39 ----D---- C:\Program Files\trend micro
2012-01-09 19:12:38 ----DC---- C:\rsit
2012-01-09 16:47:24 ----D---- C:\WINDOWS\LastGood
2012-01-09 10:33:49 ----DC---- C:\Downloads
2012-01-09 10:13:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2012-01-09 10:12:50 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2012-01-09 10:12:42 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2012-01-09 10:12:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2012-01-09 10:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2012-01-09 10:12:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2012-01-09 10:11:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2012-01-09 10:11:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2012-01-09 10:11:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2012-01-09 10:11:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2012-01-09 10:11:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2012-01-09 10:11:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2012-01-09 10:10:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2012-01-09 10:10:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2012-01-09 10:10:38 ----D---- C:\WINDOWS\system32\KB905474
2012-01-09 10:10:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2012-01-09 10:09:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2012-01-09 10:09:44 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2012-01-09 10:09:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2012-01-09 10:09:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2012-01-09 10:09:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2012-01-09 10:09:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2012-01-09 10:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2012-01-09 10:08:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2012-01-09 10:08:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2012-01-09 10:08:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2012-01-09 10:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2012-01-09 10:07:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2012-01-09 10:07:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2012-01-09 10:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2012-01-09 10:07:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2012-01-09 10:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2012-01-09 10:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2012-01-09 10:06:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2012-01-09 10:06:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2012-01-09 10:06:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2012-01-09 10:05:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2012-01-09 10:05:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2012-01-09 10:05:36 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2012-01-09 10:05:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2012-01-09 10:05:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2012-01-09 10:05:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-01-09 10:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2012-01-09 10:04:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2012-01-09 10:04:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2012-01-09 10:04:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2012-01-09 10:04:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2012-01-09 10:04:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2012-01-09 10:03:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2012-01-09 10:03:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2012-01-09 10:03:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2012-01-09 10:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2012-01-09 10:03:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2012-01-09 10:02:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2012-01-09 10:02:38 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2012-01-09 10:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2012-01-09 10:02:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2012-01-09 10:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2012-01-09 10:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2012-01-09 10:01:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2012-01-09 10:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2012-01-09 10:01:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2012-01-09 10:01:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2012-01-09 10:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2012-01-09 10:00:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-01-09 09:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2012-01-09 09:58:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-01-09 09:58:26 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2012-01-09 09:58:16 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2012-01-09 09:58:07 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2012-01-09 09:57:48 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-01-09 09:57:37 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2012-01-09 09:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2012-01-09 09:57:17 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2012-01-09 09:57:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2618444$
2012-01-09 09:56:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2012-01-09 09:56:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2012-01-09 09:56:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2012-01-09 09:56:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2012-01-09 09:55:42 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2012-01-09 09:55:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2012-01-09 09:55:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2012-01-09 09:55:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2012-01-09 09:55:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2012-01-09 09:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2012-01-09 09:54:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-01-09 09:54:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2012-01-09 09:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2012-01-09 09:53:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2012-01-09 09:53:41 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2012-01-09 09:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2012-01-09 09:53:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2012-01-07 11:44:32 ----ASH---- C:\pagefile.sys
2012-01-07 11:35:33 ----D---- C:\WINDOWS\Prefetch
2012-01-07 11:35:02 ----ASH---- C:\hiberfil.sys
2012-01-07 11:04:15 ----A---- C:\WINDOWS\pnplog.txt
2012-01-07 10:59:53 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2012-01-07 10:55:21 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-01-07 10:55:21 ----A---- C:\WINDOWS\system32\irclass.dll
2012-01-07 10:54:48 ----RA---- C:\WINDOWS\SETA5.tmp
2012-01-07 10:54:45 ----RA---- C:\WINDOWS\SET99.tmp
2012-01-07 10:54:43 ----RA---- C:\WINDOWS\SET98.tmp
2012-01-07 00:43:32 ----D---- C:\WINDOWS\ServicePackFiles
2012-01-06 18:29:48 ----D---- C:\WINDOWS\system32\CatRoot_bak
2012-01-06 15:41:32 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2012-01-06 15:03:47 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2012-01-06 14:50:49 ----A---- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
2012-01-06 09:51:02 ----SHDC---- C:\$RECYCLE.BIN
2012-01-06 08:26:18 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2012-01-06 08:09:33 ----RA---- C:\WINDOWS\SETC3.tmp
2012-01-06 08:09:30 ----RA---- C:\WINDOWS\SETB7.tmp
2012-01-06 08:09:28 ----RA---- C:\WINDOWS\SETB6.tmp
2012-01-06 07:17:06 ----RASHC---- C:\BOOTSECT.BAK
2012-01-06 07:17:04 ----SHC---- C:\Boot.BAK
2012-01-06 07:17:03 ----SHDC---- C:\Boot
2012-01-06 06:43:33 ----A---- C:\WINDOWS\OutLog.txt
2012-01-06 01:06:34 ----A---- C:\WINDOWS\BcdLog.txt
2012-01-06 00:58:47 ----D---- C:\Program Files\EASEUS
2012-01-05 22:11:18 ----D---- C:\WINDOWS\SxsCaPendDel
2012-01-01 20:07:34 ----DC---- C:\VIAagp
2012-01-01 20:07:34 ----A---- C:\WINDOWS\system32\drivers\VIAAGP1.SYS
2012-01-01 02:34:05 ----D---- C:\Program Files\MSXML 4.0
2012-01-01 01:13:06 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
2012-01-01 00:41:30 ----D---- C:\Program Files\MarkAnyContentSAFER
2011-12-31 23:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-12-31 23:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-12-31 23:35:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-12-31 23:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-12-31 23:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-12-31 23:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-12-31 23:34:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-31 22:38:24 ----D---- C:\Program Files\SlimDrivers
2011-12-31 22:17:42 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
2011-12-31 22:17:36 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
2011-12-31 20:42:30 ----RA---- C:\WINDOWS\SETF1.tmp
2011-12-31 20:42:24 ----RA---- C:\WINDOWS\SETE5.tmp
2011-12-31 20:42:21 ----RA---- C:\WINDOWS\SETE2.tmp
2011-12-31 20:41:09 ----A---- C:\WINDOWS\setuplog.txt
2011-12-31 20:02:49 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2011-12-31 20:02:38 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-12-31 20:02:10 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2011-12-31 20:02:09 ----D---- C:\Program Files\DIFX
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExDisk.Sys
2011-12-31 20:01:42 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2011-12-31 20:01:15 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
2011-12-31 18:23:35 ----DC---- C:\TopCD
2011-12-29 13:15:45 ----D---- C:\Program Files\Astroburn Toolbar
2011-12-29 13:15:40 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
2011-12-29 13:15:37 ----D---- C:\Program Files\Astroburn Lite
2011-12-28 07:55:06 ----A---- C:\WINDOWS\SILCOM_P.INI
2011-12-28 07:55:04 ----DC---- C:\DIKTATY
2011-12-28 07:54:34 ----DC---- C:\CESTINA
2011-12-28 07:54:34 ----A---- C:\WINDOWS\CESTINA.INI
2011-12-28 06:56:23 ----D---- C:\Program Files\PC Diktáty Holubec
2011-12-27 16:29:31 ----A---- C:\WINDOWS\system32\msikbs32.dll
2011-12-24 12:16:44 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
2011-12-24 12:16:22 ----D---- C:\Program Files\ConduitEngine
2011-12-24 12:16:17 ----D---- C:\Program Files\MyAshampoo
2011-12-24 12:16:08 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
2011-12-18 14:44:26 ----D---- C:\Program Files\Rally Trophy
======List of files/folders modified in the last 1 month======
2012-01-09 19:12:39 ----RD---- C:\Program Files
2012-01-09 19:02:43 ----D---- C:\WINDOWS\system32
2012-01-09 18:47:51 ----D---- C:\Program Files\Activision Value
2012-01-09 18:44:58 ----D---- C:\Program Files\Opera
2012-01-09 16:54:26 ----HD---- C:\WINDOWS\inf
2012-01-09 16:47:24 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-09 16:47:24 ----D---- C:\WINDOWS
2012-01-09 10:20:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-09 10:16:03 ----D---- C:\WINDOWS\Temp
2012-01-09 10:14:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-09 10:14:52 ----D---- C:\WINDOWS\system32\wbem
2012-01-09 10:14:52 ----D---- C:\WINDOWS\AppPatch
2012-01-09 10:13:58 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-01-09 10:13:03 ----D---- C:\WINDOWS\system32\drivers
2012-01-09 10:12:55 ----A---- C:\WINDOWS\imsins.BAK
2012-01-09 10:11:50 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-09 10:10:38 ----SD---- C:\WINDOWS\Tasks
2012-01-09 09:58:29 ----D---- C:\Program Files\Outlook Express
2012-01-09 09:57:41 ----D---- C:\Program Files\Movie Maker
2012-01-09 09:52:34 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
2012-01-08 22:00:45 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-07 15:41:10 ----D---- C:\WINDOWS\SoftwareDistribution
2012-01-07 15:41:03 ----D---- C:\WINDOWS\Help
2012-01-07 15:27:07 ----D---- C:\Program Files\Zombie Shooter
2012-01-07 14:03:04 ----D---- C:\Program Files\Kobra 11 Nitro
2012-01-07 11:50:45 ----D---- C:\WINDOWS\system32\Setup
2012-01-07 11:50:36 ----D---- C:\WINDOWS\L2Schemas
2012-01-07 11:50:33 ----D---- C:\WINDOWS\system32\usmt
2012-01-07 11:50:21 ----D---- C:\WINDOWS\ehome
2012-01-07 11:50:20 ----D---- C:\WINDOWS\ime
2012-01-07 11:50:18 ----RSD---- C:\WINDOWS\Fonts
2012-01-07 11:50:17 ----D---- C:\WINDOWS\Network Diagnostic
2012-01-07 11:50:17 ----D---- C:\WINDOWS\Media
2012-01-07 11:50:13 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-07 11:50:00 ----D---- C:\WINDOWS\PeerNet
2012-01-07 11:49:42 ----D---- C:\WINDOWS\system32\npp
2012-01-07 11:49:32 ----D---- C:\WINDOWS\msagent
2012-01-07 11:49:25 ----D---- C:\WINDOWS\system32\cs
2012-01-07 11:46:48 ----D---- C:\WINDOWS\system32\1029
2012-01-07 11:46:42 ----RDC---- C:\JD stazene
2012-01-07 11:46:40 ----D---- C:\WINDOWS\twain_32
2012-01-07 11:46:23 ----D---- C:\WINDOWS\system32\icsxml
2012-01-07 11:45:46 ----D---- C:\WINDOWS\system32\1033
2012-01-07 11:44:32 ----D---- C:\WINDOWS\Driver Cache
2012-01-07 11:42:44 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-01-07 11:37:05 ----D---- C:\WINDOWS\Registration
2012-01-07 11:25:12 ----D---- C:\WINDOWS\system32\config
2012-01-07 11:17:18 ----D---- C:\WINDOWS\security
2012-01-07 11:16:55 ----A---- C:\WINDOWS\OEWABLog.txt
2012-01-07 11:16:48 ----A---- C:\WINDOWS\ODBCINST.INI
2012-01-07 11:16:18 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-01-07 11:16:14 ----D---- C:\WINDOWS\system32\ias
2012-01-07 11:15:31 ----RD---- C:\WINDOWS\Web
2012-01-07 11:15:18 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2012-01-07 11:15:02 ----A---- C:\WINDOWS\win.ini
2012-01-07 11:14:51 ----D---- C:\WINDOWS\srchasst
2012-01-07 11:14:47 ----D---- C:\Program Files\Windows Media Player
2012-01-07 11:14:37 ----D---- C:\WINDOWS\system32\oobe
2012-01-07 11:14:29 ----D---- C:\WINDOWS\system32\Restore
2012-01-07 11:14:27 ----D---- C:\Program Files\NetMeeting
2012-01-07 11:14:23 ----D---- C:\Program Files\Common Files\System
2012-01-07 11:14:11 ----D---- C:\Program Files\Internet Explorer
2012-01-07 11:12:50 ----D---- C:\WINDOWS\system32\Com
2012-01-07 11:12:10 ----D---- C:\Program Files\Windows NT
2012-01-07 11:10:55 ----SHC---- C:\boot.ini
2012-01-07 10:55:30 ----A---- C:\WINDOWS\system.ini
2012-01-07 10:55:21 ----D---- C:\WINDOWS\system
2012-01-07 10:55:05 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\desktop.ini
2012-01-07 00:59:15 ----D---- C:\WINDOWS\WinSxS
2012-01-07 00:58:10 ----A---- C:\WINDOWS\iis6.BAK
2012-01-07 00:57:20 ----HDC---- C:\WINDOWS\ie8
2012-01-06 19:20:28 ----D---- C:\MOP030B
2012-01-06 18:29:48 ----D---- C:\WINDOWS\Debug
2012-01-06 14:51:10 ----D---- C:\Program Files\MultiRes
2012-01-06 00:22:26 ----D---- C:\Program Files\Adobe
2012-01-05 22:10:41 ----D---- C:\Program Files\Common Files
2012-01-05 22:05:05 ----D---- C:\Program Files\Safari
2012-01-05 22:03:42 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Skype
2012-01-05 22:03:40 ----DC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Skype
2012-01-05 21:43:56 ----D---- C:\Program Files\Common Files\Adobe
2012-01-05 01:42:36 ----D---- C:\Program Files\JDownloader
2012-01-01 01:16:54 ----SDC---- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Microsoft
2012-01-01 00:20:58 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-31 23:22:30 ----A---- C:\WINDOWS\mixerdef.ini
2011-12-31 22:13:54 ----A---- C:\WINDOWS\CMISETUP.INI
2011-12-31 22:13:53 ----A---- C:\WINDOWS\CMCDPLAY.INI
2011-12-31 21:59:47 ----DC---- C:\Documents and Settings
2011-12-30 02:04:11 ----D---- C:\Zaloha disk D
2011-12-27 18:38:33 ----DC---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\AVerTV
2011-12-15 17:37:14 ----DC---- C:\Deer Avenger 4
2011-12-15 14:19:07 ----D---- C:\WINDOWS\Minidump
2011-12-15 11:02:36 ----A---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2002-07-24 32128]
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys [2000-01-01 13976]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 atitray;atitray; \??\C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-10-20 218688]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 SpyEmrg;Spy Emergency Driver; C:\WINDOWS\System32\Drivers\spyemrg.sys [2009-02-04 12344]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-11-01 279712]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-11-01 25888]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-04-14 701440]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2001-12-10 357070]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 SpyEmrgAccess;Spy Emergency OnAccess Driver; C:\WINDOWS\System32\Drivers\spyemrg_access.sys [2009-04-21 18232]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver; C:\WINDOWS\System32\Drivers\spyemrg_guard.sys [2009-02-04 14392]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VMHybrid;VMHybrid service; C:\WINDOWS\system32\DRIVERS\VMHybrid.sys [2011-03-14 1105408]
S3 AVerA706;AVerMedia A706 BDA Service; C:\WINDOWS\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920]
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\System32\Drivers\BrScnUsb.sys [2004-10-15 15295]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SWDUMon;SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [2011-12-31 12984]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys []
S3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys []
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2009-04-09 344064]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-12-10 405504]
R2 Brother XP spl Service;BrSplService; C:\WINDOWS\system32\brsvc01a.exe [2002-04-11 57344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 SpyEmrgSrv;Spy Emergency Engine Service; C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe [2009-04-22 1788472]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-12-05 495616]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-09-28 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-11-04 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Re: Nejdou hry
Dobrý večer 
Systém je legální?
Systém je legální?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Nejdou hry
To znamená co . Máte ho koupený v obchodě?
. Máte ho koupený v obchodě?Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Nejdou hry
Počítač jsem koupila v bazaru i s cd..na cd je normální obrázek a nikdy před tím jsem ho nepoužívala tak nevím.Nikde se mi nezobrazuje, že bych měla nelegální verzi.
Re: Nejdou hry
Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript:
Kód: Vybrat vše
netsvcs
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
/md5start
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
hal.dll
logevent.dll
netlogon.dll
ntelogon.dll
scecli.dll
sceclt.dll
ws2_32.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
cdrom.sys
Changer.sys
fastfat.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
mv61xx.sys
ndis.sys
ntfs.sys
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
symmpi.sys
tcpip.sys
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
/md5stop
C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c
type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Nejdou hry
nejdou mi sem vložit - jsou moooooc veliké a windows mám legální - použila jsem nástroj genuine advantage..co ted s těma logama?
Re: Nejdou hry
Klidně je vložte na několik částí, zítra na ně mrknu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Nejdou hry
OTL logfile created on: 9.1.2012 22:01:46 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\peta.PETULA-F28A0597\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,25 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 54,08% Memory free
3,11 Gb Paging File | 2,81 Gb Available in Paging File | 90,35% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104,83 Gb Total Space | 14,79 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive I: | 2,64 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PETULA-F28A0597 | User Name: peta | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.01.09 21:58:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
PRC - [2012.01.05 10:48:46 | 001,047,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2011.04.11 15:07:17 | 000,152,576 | ---- | M] () -- C:\utility\Eject.exe
PRC - [2009.07.22 20:51:20 | 000,062,976 | ---- | M] (czRoPa) -- C:\utility\MouseWheelVolume\mwvolume.exe
PRC - [2009.06.20 00:31:39 | 000,651,264 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2009.04.22 11:45:46 | 001,788,472 | ---- | M] (NETGATE Technologies s.r.o.) -- C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe
PRC - [2009.04.09 02:49:30 | 000,344,064 | ---- | M] (AVerMedia) -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2008.06.12 01:34:02 | 000,159,744 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.07.23 18:34:30 | 000,607,291 | ---- | M] (YURAJ ...:::www.yuraj.tk:::...) -- C:\utility\WinLišta 1.8.exe
PRC - [2001.11.15 11:08:40 | 001,216,512 | ---- | M] (C-Media Electronic Inc. (www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe
========== Modules (No Company Name) ==========
MOD - [2012.01.09 21:55:08 | 000,086,016 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Temp\MMBPlayer\Tweak.dll
MOD - [2012.01.05 10:48:44 | 000,411,120 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\ppgooglenaclpluginchrome.dll
MOD - [2012.01.05 10:48:43 | 003,767,792 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\pdf.dll
MOD - [2012.01.05 10:47:19 | 000,122,880 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avutil-51.dll
MOD - [2012.01.05 10:47:18 | 000,222,208 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avformat-53.dll
MOD - [2012.01.05 10:47:17 | 001,746,432 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avcodec-53.dll
MOD - [2012.01.05 08:06:01 | 008,593,056 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\gcswf32.dll
MOD - [2011.04.11 15:07:17 | 000,152,576 | ---- | M] () -- C:\utility\Eject.exe
MOD - [2010.01.30 01:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009.07.03 18:54:55 | 000,053,248 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\dll\MsgLog.dll
MOD - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
MOD - [2008.06.12 01:34:02 | 000,159,744 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
MOD - [2008.04.14 07:51:48 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007.03.12 02:08:04 | 000,023,040 | ---- | M] () -- C:\utility\MouseWheelVolume\hookDll.dll
MOD - [2007.02.02 10:16:28 | 000,163,840 | ---- | M] () -- C:\Program Files\NETGATE\Spy Emergency 2009\unrar.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011.11.04 21:47:18 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.03.25 09:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009.04.22 11:45:46 | 001,788,472 | ---- | M] (NETGATE Technologies s.r.o.) [Auto | Running] -- C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe -- (SpyEmrgSrv)
SRV - [2009.04.09 02:49:30 | 000,344,064 | ---- | M] (AVerMedia) [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
========== Driver Services (SafeList) ==========
DRV - [2011.12.31 23:39:20 | 000,012,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SWDUMon.sys -- (SWDUMon)
DRV - [2011.11.01 20:32:36 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.11.01 20:32:35 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.10.20 21:03:27 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.03.14 10:02:56 | 001,105,408 | ---- | M] (Compro Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMHybrid.sys -- (VMHybrid)
DRV - [2009.06.10 11:26:24 | 001,169,920 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVerA706.sys -- (AVerA706)
DRV - [2009.04.21 16:55:18 | 000,018,232 | ---- | M] (NETGATE Technologies s.r.o.) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\spyemrg_access.sys -- (SpyEmrgAccess)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.04 17:42:08 | 000,014,392 | ---- | M] (NETGATE Technologies s.r.o.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\spyemrg_guard.sys -- (SpyEmrgGuard)
DRV - [2009.02.04 17:42:04 | 000,012,344 | ---- | M] (NETGATE Technologies s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\spyemrg.sys -- (SpyEmrg)
DRV - [2008.04.14 08:10:02 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2008.04.14 08:10:02 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.04.14 07:40:52 | 000,701,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008.04.13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2007.11.05 08:55:04 | 000,017,952 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys -- (atitray)
DRV - [2004.09.03 18:23:10 | 000,115,680 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.09.03 18:19:07 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004.07.19 15:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2002.07.24 04:30:00 | 000,032,128 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2001.12.10 16:25:22 | 000,357,070 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)
DRV - [2000.01.01 01:00:00 | 000,013,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
[2011.03.11 11:58:46 | 000,128,320 | ---- | M] (WestByte) -- C:\Program Files\mozilla firefox\plugins\npida.dll
[2011.11.28 20:26:10 | 000,002,519 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\peta\Local Settings\Data aplikac\u00ED\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Juicy Dirt Bike Games = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\dkaenlcpbkbeoceejmgpimllieiikjlb\0.1_0\
O1 HOSTS File: ([2011.12.31 13:56:31 | 000,000,754 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IE 4.x-6.x BHO for Internet Download Accelerator) - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\Program Files\IDA\idaiehlp.dll (WestByte)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O4 - HKLM..\Run: [C-Media Mixer] C:\WINDOWS\mixer.exe (C-Media Electronic Inc. (www.cmedia.com.tw))
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe (NETGATE Technologies s.r.o.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Status Monitor.lnk = File not found
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - Eject.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - mwvolume.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - WinLišta 1.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - Eject.lnk = C:\utility\Eject.exe ()
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - mwvolume.lnk = C:\utility\MouseWheelVolume\mwvolume.exe (czRoPa)
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - WinLišta 1.lnk = C:\utility\WinLišta 1.8.exe (YURAJ ...:::www.yuraj.tk:::...)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm ()
O8 - Extra context menu item: Download remotely with IDA - C:\Program Files\IDA\remdown.htm ()
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm ()
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Od&eslat do aplikace OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (WestByte)
O9 - Extra 'Tools' menuitem : &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (WestByte)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.100.0.100 90.183.12.188
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94DEAE8F-8E4D-48BC-9C66-D17CC635F65F}: DhcpNameServer = 10.100.0.100 90.183.12.188
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.10.20 12:08:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2007.10.13 01:01:43 | 000,000,067 | R--- | M] () - I:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{0ccfd440-ff23-11e0-966c-00e07da63884}\Shell - "" = AutoRun
O33 - MountPoints2\{0ccfd440-ff23-11e0-966c-00e07da63884}\Shell\AutoRun\command - "" = J:\Autorun.exe
O33 - MountPoints2\{4c2e6237-ff11-11e0-966b-00e07da63884}\Shell - "" = AutoRun
O33 - MountPoints2\{4c2e6237-ff11-11e0-966b-00e07da63884}\Shell\AutoRun\command - "" = I:\setup.exe -- [2007.11.08 02:18:16 | 000,308,119 | R--- | M] (Activision Inc. )
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.divxa32 - C:\WINDOWS\System32\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2020.10.26 15:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Vypalovač CD, DVD, Blu-ray, HD-DVD
[2020.10.22 14:25:54 | 000,000,000 | ---D | C] -- C:\715655c57614a5e9a2c6
[2020.10.06 12:19:13 | 000,000,000 | ---D | C] -- C:\Program Files\Vypalovač
[2012.01.09 21:58:36 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
[2012.01.09 21:45:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Windows Genuine Advantage
[2012.01.09 19:58:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
[2012.01.09 19:58:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Ledová královna 3 - Vraní čarodějka
[2012.01.09 19:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Ledova kralovna 3 - Vrani carodejka
[2012.01.09 19:12:39 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.09 19:12:38 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.09 18:54:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Monster Jam
[2012.01.09 10:33:49 | 000,000,000 | ---D | C] -- C:\Downloads
[2012.01.08 22:04:39 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mp4sds32.ax
[2012.01.08 22:04:12 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2012.01.08 22:04:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2012.01.08 22:03:47 | 000,456,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012.01.08 22:02:57 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msyuv.dll
[2012.01.08 22:02:38 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
[2012.01.08 22:01:09 | 000,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2012.01.08 21:59:35 | 002,194,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012.01.08 21:59:35 | 002,150,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012.01.08 21:59:35 | 002,071,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2012.01.08 21:59:35 | 002,029,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012.01.08 21:19:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Peta pocitac
[2012.01.07 14:03:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\TopCD
[2012.01.07 11:35:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012.01.07 11:21:31 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
[2012.01.07 11:21:31 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
[2012.01.07 11:21:30 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
[2012.01.07 11:21:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
[2012.01.07 11:21:29 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
[2012.01.07 11:21:28 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
[2012.01.07 11:21:26 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
[2012.01.07 11:21:26 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
[2012.01.07 11:21:24 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamreg51.dll
[2012.01.07 11:21:24 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll
[2012.01.07 11:21:23 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wam51.dll
[2012.01.07 11:21:22 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svc.dll
[2012.01.07 11:21:22 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll
[2012.01.07 11:21:22 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll
[2012.01.07 11:21:22 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2012.01.07 11:21:21 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
[2012.01.07 11:21:20 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
[2012.01.07 11:21:20 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
[2012.01.07 11:21:13 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
[2012.01.07 11:21:13 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
[2012.01.07 11:21:12 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uihelper.dll
[2012.01.07 11:21:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
[2012.01.07 11:21:08 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tools.dll
[2012.01.07 11:21:07 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
[2012.01.07 11:21:07 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
[2012.01.07 11:21:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
[2012.01.07 11:21:06 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2012.01.07 11:21:06 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2012.01.07 11:21:05 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
[2012.01.07 11:21:05 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
[2012.01.07 11:21:04 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
[2012.01.07 11:21:01 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\svcext51.dll
[2012.01.07 11:21:00 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sspifilt.dll
[2012.01.07 11:21:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll
[2012.01.07 11:20:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ssinc51.dll
[2012.01.07 11:20:58 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
[2012.01.07 11:20:56 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
[2012.01.07 11:20:55 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll
[2012.01.07 11:20:55 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe
[2012.01.07 11:20:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2012.01.07 11:20:54 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll
[2012.01.07 11:20:54 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll
[2012.01.07 11:20:54 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
[2012.01.07 11:20:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll
[2012.01.07 11:20:53 | 000,460,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsvc.dll
[2012.01.07 11:20:53 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll
[2012.01.07 11:20:53 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe
[2012.01.07 11:20:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2012.01.07 11:20:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpapi.dll
[2012.01.07 11:20:51 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe
[2012.01.07 11:20:51 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
[2012.01.07 11:20:51 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
[2012.01.07 11:20:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
[2012.01.07 11:20:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
[2012.01.07 11:20:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
[2012.01.07 11:20:50 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
[2012.01.07 11:20:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
[2012.01.07 11:20:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
[2012.01.07 11:20:49 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
[2012.01.07 11:20:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
[2012.01.07 11:20:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
[2012.01.07 11:20:48 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
[2012.01.07 11:20:47 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
[2012.01.07 11:20:43 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2012.01.07 11:20:42 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seo.dll
[2012.01.07 11:20:41 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2012.01.07 11:20:40 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwnh.dll
[2012.01.07 11:20:39 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2012.01.07 11:20:39 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2012.01.07 11:20:39 | 000,029,184 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2012.01.07 11:20:39 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll
[2012.01.07 11:20:37 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
[2012.01.07 11:20:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcref.dll
[2012.01.07 11:20:36 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2012.01.07 11:20:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
[2012.01.07 11:20:33 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys
[2012.01.07 11:20:32 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
[2012.01.07 11:20:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
[2012.01.07 11:20:32 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
[2012.01.07 11:20:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pwsdata.dll
[2012.01.07 11:20:27 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2012.01.07 11:20:27 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll
[2012.01.07 11:20:27 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2012.01.07 11:20:27 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
[2012.01.07 11:20:26 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2012.01.07 11:20:26 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe
[2012.01.07 11:20:26 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2012.01.07 11:20:25 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime
[2012.01.07 11:20:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll
[2012.01.07 11:20:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll
[2012.01.07 11:20:23 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll
[2012.01.07 11:20:22 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
[2012.01.07 11:20:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
[2012.01.07 11:20:22 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
[2012.01.07 11:20:17 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2012.01.07 11:20:16 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsepm.dll
[2012.01.07 11:20:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll
[2012.01.07 11:20:11 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll
[2012.01.07 11:20:11 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe
[2012.01.07 11:20:05 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex
[2012.01.07 11:20:05 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll
[2012.01.07 11:19:54 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
[2012.01.07 11:19:54 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe
[2012.01.07 11:19:53 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
[2012.01.07 11:19:53 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\metada51.dll
[2012.01.07 11:19:53 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll
[2012.01.07 11:19:52 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\md5filt.dll
[2012.01.07 11:19:51 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2012.01.07 11:19:50 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll
[2012.01.07 11:19:50 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll
[2012.01.07 11:19:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lonsint.dll
[2012.01.07 11:19:49 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll
[2012.01.07 11:19:48 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll
[2012.01.07 11:19:44 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2012.01.07 11:19:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2012.01.07 11:19:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
[2012.01.07 11:19:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
[2012.01.07 11:19:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
[2012.01.07 11:19:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2012.01.07 11:19:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2012.01.07 11:19:38 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2012.01.07 11:19:38 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2012.01.07 11:19:38 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2012.01.07 11:19:37 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2012.01.07 11:19:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2012.01.07 11:19:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2012.01.07 11:19:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
[2012.01.07 11:19:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
[2012.01.07 11:19:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll
[2012.01.07 11:19:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2012.01.07 11:19:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2012.01.07 11:19:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll
[2012.01.07 11:19:33 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2012.01.07 11:19:33 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
[2012.01.07 11:19:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
[2012.01.07 11:19:31 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
[2012.01.07 11:19:31 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll
[2012.01.07 11:19:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
[2012.01.07 11:19:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll
[2012.01.07 11:19:30 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iscomlog.dll
[2012.01.07 11:19:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll
[2012.01.07 11:19:29 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll
[2012.01.07 11:19:27 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infocomm.dll
[2012.01.07 11:19:27 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetin51.exe
[2012.01.07 11:19:27 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll
[2012.01.07 11:19:26 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll
[2012.01.07 11:19:26 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll
[2012.01.07 11:19:25 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
[2012.01.07 11:19:25 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
[2012.01.07 11:19:25 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
[2012.01.07 11:19:25 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
[2012.01.07 11:19:24 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
[2012.01.07 11:19:24 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
[2012.01.07 11:19:24 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
[2012.01.07 11:19:23 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
[2012.01.07 11:19:23 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2012.01.07 11:19:23 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
[2012.01.07 11:19:23 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2012.01.07 11:19:22 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
[2012.01.07 11:19:22 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
[2012.01.07 11:19:22 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
[2012.01.07 11:19:21 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
[2012.01.07 11:19:21 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
[2012.01.07 11:19:21 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
[2012.01.07 11:19:21 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
[2012.01.07 11:19:20 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
[2012.01.07 11:19:20 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
[2012.01.07 11:19:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2012.01.07 11:19:19 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iislog51.dll
[2012.01.07 11:19:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisfecnv.dll
[2012.01.07 11:19:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe
[2012.01.07 11:19:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll
[2012.01.07 11:19:18 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iische51.dll
[2012.01.07 11:19:18 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll
[2012.01.07 11:19:18 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisadmin.dll
[2012.01.07 11:19:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2012.01.07 11:19:12 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
[2012.01.07 11:19:02 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
[2012.01.07 11:19:02 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll
[2012.01.07 11:19:02 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpod51.dll
[2012.01.07 11:19:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpmb51.dll
[2012.01.07 11:19:01 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll
[2012.01.07 11:19:00 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
[2012.01.07 11:18:59 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gzip.dll
[2012.01.07 11:18:56 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2012.01.07 11:18:56 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll
[2012.01.07 11:18:56 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2012.01.07 11:18:56 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll
[2012.01.07 11:18:55 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll
[2012.01.07 11:18:55 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe
[2012.01.07 11:18:55 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll
[2012.01.07 11:18:55 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
[2012.01.07 11:18:55 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
[2012.01.07 11:18:54 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll
[2012.01.07 11:18:54 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll
[2012.01.07 11:18:54 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll
[2012.01.07 11:18:54 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll
[2012.01.07 11:18:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll
[2012.01.07 11:18:53 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll
[2012.01.07 11:18:53 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe
[2012.01.07 11:18:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2012.01.07 11:18:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll
[2012.01.07 11:18:53 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2012.01.07 11:18:52 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll
[2012.01.07 11:18:52 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2012.01.07 11:18:52 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsv251.dll
[2012.01.07 11:18:52 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2012.01.07 11:18:51 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2012.01.07 11:18:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpmib.dll
[2012.01.07 11:18:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2012.01.07 11:18:50 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe
[2012.01.07 11:18:50 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll
[2012.01.07 11:18:49 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
[2012.01.07 11:18:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2012.01.07 11:18:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2012.01.07 11:18:47 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll
[2012.01.07 11:18:47 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe
[2012.01.07 11:18:47 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe
[2012.01.07 11:18:47 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exstrace.dll
[2012.01.07 11:18:46 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012.01.07 11:18:46 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2012.01.07 11:18:46 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
[2012.01.07 11:18:45 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2012.01.07 11:18:36 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
[2012.01.07 11:18:35 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\davcdata.exe
[2012.01.07 11:18:33 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
[2012.01.07 11:18:33 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
[2012.01.07 11:18:32 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe
[2012.01.07 11:18:32 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll
[2012.01.07 11:18:32 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll
[2012.01.07 11:18:31 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\compfilt.dll
[2012.01.07 11:18:29 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
[2012.01.07 11:18:29 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2012.01.07 11:18:28 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
[2012.01.07 11:18:28 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
[2012.01.07 11:18:28 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
[2012.01.07 11:18:27 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2012.01.07 11:18:26 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2012.01.07 11:18:26 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
[2012.01.07 11:18:26 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
[2012.01.07 11:18:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
[2012.01.07 11:18:25 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
[2012.01.07 11:18:25 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
[2012.01.07 11:18:24 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2012.01.07 11:18:23 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll
[2012.01.07 11:18:23 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
[2012.01.07 11:18:23 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
[2012.01.07 11:18:10 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll
[2012.01.07 11:18:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll
[2012.01.07 11:18:00 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asp51.dll
[2012.01.07 11:18:00 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll
[2012.01.07 11:18:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll
[2012.01.07 11:17:59 | 000,330,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aqueue.dll
[2012.01.07 11:17:59 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\appconf.dll
[2012.01.07 11:17:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll
[2012.01.07 11:17:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll
[2012.01.07 11:17:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll
[2012.01.07 11:17:52 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll
[2012.01.07 11:17:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll
[2012.01.07 11:17:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2012.01.07 11:17:51 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admexs.dll
[2012.01.07 11:17:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll
[2012.01.07 11:17:45 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe
[2012.01.07 11:17:45 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll
[2012.01.07 11:17:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\staxmem.dll
[2012.01.07 11:17:44 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsnap.dll
[2012.01.07 11:17:44 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpadm.dll
[2012.01.07 11:17:43 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll
[2012.01.07 11:17:43 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe
[2012.01.07 11:17:38 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logui.ocx
[2012.01.07 11:17:37 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isatq.dll
[2012.01.07 11:17:37 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoadmn.dll
[2012.01.07 11:17:36 | 000,834,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.dll
[2012.01.07 11:17:36 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll
[2012.01.07 11:17:36 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll
[2012.01.07 11:17:36 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe
[2012.01.07 11:17:35 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrtl.dll
[2012.01.07 11:17:35 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismap.dll
[2012.01.07 11:17:35 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstas.exe
[2012.01.07 11:17:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe
[2012.01.07 11:17:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll
[2012.01.07 11:17:34 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisext51.dll
[2012.01.07 11:17:34 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe
[2012.01.07 11:17:34 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2012.01.07 11:17:33 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll
[2012.01.07 11:17:33 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2012.01.07 11:17:33 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe
[2012.01.07 11:17:33 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll
[2012.01.07 11:17:32 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll
[2012.01.07 11:17:32 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe
[2012.01.07 11:17:32 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2012.01.07 11:17:32 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2012.01.07 11:17:31 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2012.01.07 11:17:31 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll
[2012.01.07 11:17:31 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2012.01.07 11:17:31 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll
[2012.01.07 11:17:30 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2012.01.07 11:17:30 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll
[2012.01.07 11:17:30 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2012.01.07 11:17:29 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2012.01.07 11:17:29 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cnfgprts.ocx
[2012.01.07 11:17:29 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\coadmin.dll
[2012.01.07 11:17:28 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certwiz.ocx
[2012.01.07 11:17:28 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx
[2012.01.07 11:17:28 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe
[2012.01.07 11:17:27 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adsiis51.dll
[2012.01.07 11:17:27 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admwprox.dll
[2012.01.07 11:17:27 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll
[2012.01.07 11:17:26 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe
[2012.01.07 11:17:25 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll
[2012.01.07 11:14:52 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
[2012.01.07 10:59:53 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\RTL8139.sys
[2012.01.07 10:55:21 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2012.01.07 10:55:21 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012.01.07 10:55:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2012.01.07 10:55:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2012.01.07 00:43:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2012.01.06 20:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\MOP030B
[2012.01.06 18:29:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2012.01.06 18:19:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\hellgate
[2012.01.06 15:41:32 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2012.01.06 09:51:02 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.01.06 08:26:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2012.01.06 07:17:03 | 000,000,000 | -HSD | C] -- C:\Boot
[2012.01.06 00:58:47 | 000,000,000 | ---D | C] -- C:\Program Files\EASEUS
[2012.01.05 22:11:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2012.01.01 20:07:34 | 000,032,128 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\VIAAGP1.SYS
[2012.01.01 20:07:34 | 000,000,000 | ---D | C] -- C:\VIAagp
[2012.01.01 02:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2012.01.01 01:16:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Soubory aplikace Outlook
[2012.01.01 01:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2012.01.01 00:41:30 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAnyContentSAFER
[2011.12.31 23:00:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Uniblue
[2011.12.31 22:38:24 | 000,000,000 | ---D | C] -- C:\Program Files\SlimDrivers
[2011.12.31 22:17:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2011.12.31 22:17:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2011.12.31 22:11:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Nová složka
[2011.12.31 21:59:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\WINDOWS
[2011.12.31 21:57:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\APN
[2011.12.31 20:02:49 | 000,090,624 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcls.dll
[2011.12.31 20:02:38 | 000,021,632 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2011.12.31 20:02:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Samsung_USB_Drivers
[2011.12.31 20:02:09 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2011.12.31 20:01:42 | 000,233,472 | ---- | C] (Teruten) -- C:\WINDOWS\System32\FsUsbExService.Exe
[2011.12.31 20:01:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\My NPS Files
[2011.12.31 20:01:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2011.12.31 18:23:35 | 000,000,000 | ---D | C] -- C:\TopCD
[2011.12.30 01:39:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\JD stazene
[2011.12.29 13:15:45 | 000,000,000 | ---D | C] -- C:\Program Files\Astroburn Toolbar
[2011.12.29 13:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Astroburn Lite
[2011.12.29 13:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
[2011.12.29 13:15:37 | 000,000,000 | ---D | C] -- C:\Program Files\Astroburn Lite
[2011.12.28 07:55:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Diktáty s piráty
[2011.12.28 07:55:04 | 000,000,000 | ---D | C] -- C:\DIKTATY
[2011.12.28 07:54:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Zábavná čeština v ZOO
[2011.12.28 07:54:34 | 000,000,000 | ---D | C] -- C:\CESTINA
[2011.12.28 07:54:23 | 000,935,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VB40016.DLL
[2011.12.28 07:54:23 | 000,536,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OC25.DLL
[2011.12.28 07:54:23 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2.DLL
[2011.12.28 07:54:23 | 000,177,824 | ---- | C] (Sheridan Software Systems, Inc.) -- C:\WINDOWS\System\THREED16.OCX
[2011.12.28 07:54:23 | 000,177,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TYPELIB.DLL
[2011.12.28 07:54:23 | 000,164,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2DISP.DLL
[2011.12.28 07:54:23 | 000,152,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2NLS.DLL
[2011.12.28 07:54:23 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMPOBJ.DLL
[2011.12.28 07:54:23 | 000,100,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCI16.OCX
[2011.12.28 07:54:23 | 000,057,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2CONV.DLL
[2011.12.28 07:54:23 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2PROX.DLL
[2011.12.28 07:54:23 | 000,046,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\PICCLP16.OCX
[2011.12.28 07:54:23 | 000,035,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VAEN21.OLB
[2011.12.28 07:54:23 | 000,026,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3DV2.DLL
[2011.12.28 07:54:23 | 000,012,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SCP.DLL
[2011.12.28 07:54:23 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\STKIT416.DLL
[2011.12.28 06:56:23 | 000,000,000 | ---D | C] -- C:\Program Files\PC Diktáty Holubec
[2011.12.28 06:56:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\PC Diktáty Holubec
[2011.12.24 12:16:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.12.24 12:16:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Conduit
[2011.12.24 12:16:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\MyAshampoo
[2011.12.24 12:16:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\ConduitEngine
[2011.12.24 12:16:22 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine
[2011.12.24 12:16:17 | 000,000,000 | ---D | C] -- C:\Program Files\MyAshampoo
[2011.12.24 12:16:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\ashampoo
[2011.12.24 12:16:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
[2011.12.18 14:44:26 | 000,000,000 | ---D | C] -- C:\Program Files\Rally Trophy
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\peta.PETULA-F28A0597\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,25 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 54,08% Memory free
3,11 Gb Paging File | 2,81 Gb Available in Paging File | 90,35% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104,83 Gb Total Space | 14,79 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive I: | 2,64 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PETULA-F28A0597 | User Name: peta | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.01.09 21:58:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
PRC - [2012.01.05 10:48:46 | 001,047,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2011.04.11 15:07:17 | 000,152,576 | ---- | M] () -- C:\utility\Eject.exe
PRC - [2009.07.22 20:51:20 | 000,062,976 | ---- | M] (czRoPa) -- C:\utility\MouseWheelVolume\mwvolume.exe
PRC - [2009.06.20 00:31:39 | 000,651,264 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2009.04.22 11:45:46 | 001,788,472 | ---- | M] (NETGATE Technologies s.r.o.) -- C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe
PRC - [2009.04.09 02:49:30 | 000,344,064 | ---- | M] (AVerMedia) -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2008.06.12 01:34:02 | 000,159,744 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.07.23 18:34:30 | 000,607,291 | ---- | M] (YURAJ ...:::www.yuraj.tk:::...) -- C:\utility\WinLišta 1.8.exe
PRC - [2001.11.15 11:08:40 | 001,216,512 | ---- | M] (C-Media Electronic Inc. (www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe
========== Modules (No Company Name) ==========
MOD - [2012.01.09 21:55:08 | 000,086,016 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Temp\MMBPlayer\Tweak.dll
MOD - [2012.01.05 10:48:44 | 000,411,120 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\ppgooglenaclpluginchrome.dll
MOD - [2012.01.05 10:48:43 | 003,767,792 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\pdf.dll
MOD - [2012.01.05 10:47:19 | 000,122,880 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avutil-51.dll
MOD - [2012.01.05 10:47:18 | 000,222,208 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avformat-53.dll
MOD - [2012.01.05 10:47:17 | 001,746,432 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\avcodec-53.dll
MOD - [2012.01.05 08:06:01 | 008,593,056 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.75\gcswf32.dll
MOD - [2011.04.11 15:07:17 | 000,152,576 | ---- | M] () -- C:\utility\Eject.exe
MOD - [2010.01.30 01:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009.07.03 18:54:55 | 000,053,248 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\dll\MsgLog.dll
MOD - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
MOD - [2008.06.12 01:34:02 | 000,159,744 | ---- | M] () -- C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
MOD - [2008.04.14 07:51:48 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007.03.12 02:08:04 | 000,023,040 | ---- | M] () -- C:\utility\MouseWheelVolume\hookDll.dll
MOD - [2007.02.02 10:16:28 | 000,163,840 | ---- | M] () -- C:\Program Files\NETGATE\Spy Emergency 2009\unrar.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011.11.04 21:47:18 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010.03.25 09:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009.04.22 11:45:46 | 001,788,472 | ---- | M] (NETGATE Technologies s.r.o.) [Auto | Running] -- C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergencySrv.exe -- (SpyEmrgSrv)
SRV - [2009.04.09 02:49:30 | 000,344,064 | ---- | M] (AVerMedia) [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2008.12.10 09:01:50 | 000,405,504 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
========== Driver Services (SafeList) ==========
DRV - [2011.12.31 23:39:20 | 000,012,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SWDUMon.sys -- (SWDUMon)
DRV - [2011.11.01 20:32:36 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.11.01 20:32:35 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.10.20 21:03:27 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.03.14 10:02:56 | 001,105,408 | ---- | M] (Compro Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMHybrid.sys -- (VMHybrid)
DRV - [2009.06.10 11:26:24 | 001,169,920 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AVerA706.sys -- (AVerA706)
DRV - [2009.04.21 16:55:18 | 000,018,232 | ---- | M] (NETGATE Technologies s.r.o.) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\spyemrg_access.sys -- (SpyEmrgAccess)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009.02.04 17:42:08 | 000,014,392 | ---- | M] (NETGATE Technologies s.r.o.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\spyemrg_guard.sys -- (SpyEmrgGuard)
DRV - [2009.02.04 17:42:04 | 000,012,344 | ---- | M] (NETGATE Technologies s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\spyemrg.sys -- (SpyEmrg)
DRV - [2008.04.14 08:10:02 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)
DRV - [2008.04.14 08:10:02 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.04.14 07:40:52 | 000,701,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008.04.13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2007.11.05 08:55:04 | 000,017,952 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys -- (atitray)
DRV - [2004.09.03 18:23:10 | 000,115,680 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.09.03 18:19:07 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004.07.19 15:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2002.07.24 04:30:00 | 000,032,128 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2001.12.10 16:25:22 | 000,357,070 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)
DRV - [2000.01.01 01:00:00 | 000,013,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found
IE - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
[2011.03.11 11:58:46 | 000,128,320 | ---- | M] (WestByte) -- C:\Program Files\mozilla firefox\plugins\npida.dll
[2011.11.28 20:26:10 | 000,002,519 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.75\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\peta\Local Settings\Data aplikac\u00ED\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Juicy Dirt Bike Games = C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\dkaenlcpbkbeoceejmgpimllieiikjlb\0.1_0\
O1 HOSTS File: ([2011.12.31 13:56:31 | 000,000,754 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (IE 4.x-6.x BHO for Internet Download Accelerator) - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\Program Files\IDA\idaiehlp.dll (WestByte)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O4 - HKLM..\Run: [C-Media Mixer] C:\WINDOWS\mixer.exe (C-Media Electronic Inc. (www.cmedia.com.tw))
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe (NETGATE Technologies s.r.o.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Status Monitor.lnk = File not found
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\AVer HID Receiver.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - Eject.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - mwvolume.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta\Nabídka Start\Programy\Po spuštění\Zástupce - WinLišta 1.lnk = File not found
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - Eject.lnk = C:\utility\Eject.exe ()
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - mwvolume.lnk = C:\utility\MouseWheelVolume\mwvolume.exe (czRoPa)
O4 - Startup: C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Po spuštění\Zástupce - WinLišta 1.lnk = C:\utility\WinLišta 1.8.exe (YURAJ ...:::www.yuraj.tk:::...)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm ()
O8 - Extra context menu item: Download remotely with IDA - C:\Program Files\IDA\remdown.htm ()
O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm ()
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Od&eslat do aplikace OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (WestByte)
O9 - Extra 'Tools' menuitem : &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe (WestByte)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.100.0.100 90.183.12.188
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94DEAE8F-8E4D-48BC-9C66-D17CC635F65F}: DhcpNameServer = 10.100.0.100 90.183.12.188
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.10.20 12:08:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2007.10.13 01:01:43 | 000,000,067 | R--- | M] () - I:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{0ccfd440-ff23-11e0-966c-00e07da63884}\Shell - "" = AutoRun
O33 - MountPoints2\{0ccfd440-ff23-11e0-966c-00e07da63884}\Shell\AutoRun\command - "" = J:\Autorun.exe
O33 - MountPoints2\{4c2e6237-ff11-11e0-966b-00e07da63884}\Shell - "" = AutoRun
O33 - MountPoints2\{4c2e6237-ff11-11e0-966b-00e07da63884}\Shell\AutoRun\command - "" = I:\setup.exe -- [2007.11.08 02:18:16 | 000,308,119 | R--- | M] (Activision Inc. )
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.divxa32 - C:\WINDOWS\System32\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
========== Files/Folders - Created Within 30 Days ==========
[2020.10.26 15:25:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Vypalovač CD, DVD, Blu-ray, HD-DVD
[2020.10.22 14:25:54 | 000,000,000 | ---D | C] -- C:\715655c57614a5e9a2c6
[2020.10.06 12:19:13 | 000,000,000 | ---D | C] -- C:\Program Files\Vypalovač
[2012.01.09 21:58:36 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
[2012.01.09 21:45:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Windows Genuine Advantage
[2012.01.09 19:58:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
[2012.01.09 19:58:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Ledová královna 3 - Vraní čarodějka
[2012.01.09 19:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Ledova kralovna 3 - Vrani carodejka
[2012.01.09 19:12:39 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.01.09 19:12:38 | 000,000,000 | ---D | C] -- C:\rsit
[2012.01.09 18:54:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Monster Jam
[2012.01.09 10:33:49 | 000,000,000 | ---D | C] -- C:\Downloads
[2012.01.08 22:04:39 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mp4sds32.ax
[2012.01.08 22:04:12 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iyuv_32.dll
[2012.01.08 22:04:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2012.01.08 22:03:47 | 000,456,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2012.01.08 22:02:57 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msyuv.dll
[2012.01.08 22:02:38 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
[2012.01.08 22:01:09 | 000,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2012.01.08 21:59:35 | 002,194,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2012.01.08 21:59:35 | 002,150,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2012.01.08 21:59:35 | 002,071,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2012.01.08 21:59:35 | 002,029,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2012.01.08 21:19:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Peta pocitac
[2012.01.07 14:03:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\TopCD
[2012.01.07 11:35:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012.01.07 11:21:31 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
[2012.01.07 11:21:31 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
[2012.01.07 11:21:30 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
[2012.01.07 11:21:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
[2012.01.07 11:21:29 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
[2012.01.07 11:21:28 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
[2012.01.07 11:21:26 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
[2012.01.07 11:21:26 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
[2012.01.07 11:21:24 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamreg51.dll
[2012.01.07 11:21:24 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll
[2012.01.07 11:21:23 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wam51.dll
[2012.01.07 11:21:22 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svc.dll
[2012.01.07 11:21:22 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll
[2012.01.07 11:21:22 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll
[2012.01.07 11:21:22 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2012.01.07 11:21:21 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
[2012.01.07 11:21:20 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
[2012.01.07 11:21:20 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
[2012.01.07 11:21:13 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
[2012.01.07 11:21:13 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
[2012.01.07 11:21:12 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uihelper.dll
[2012.01.07 11:21:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
[2012.01.07 11:21:08 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tools.dll
[2012.01.07 11:21:07 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
[2012.01.07 11:21:07 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
[2012.01.07 11:21:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
[2012.01.07 11:21:06 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2012.01.07 11:21:06 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2012.01.07 11:21:05 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
[2012.01.07 11:21:05 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
[2012.01.07 11:21:04 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
[2012.01.07 11:21:01 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\svcext51.dll
[2012.01.07 11:21:00 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sspifilt.dll
[2012.01.07 11:21:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll
[2012.01.07 11:20:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ssinc51.dll
[2012.01.07 11:20:58 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
[2012.01.07 11:20:56 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
[2012.01.07 11:20:55 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll
[2012.01.07 11:20:55 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe
[2012.01.07 11:20:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2012.01.07 11:20:54 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll
[2012.01.07 11:20:54 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll
[2012.01.07 11:20:54 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
[2012.01.07 11:20:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll
[2012.01.07 11:20:53 | 000,460,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsvc.dll
[2012.01.07 11:20:53 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll
[2012.01.07 11:20:53 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe
[2012.01.07 11:20:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2012.01.07 11:20:52 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpapi.dll
[2012.01.07 11:20:51 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe
[2012.01.07 11:20:51 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
[2012.01.07 11:20:51 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
[2012.01.07 11:20:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
[2012.01.07 11:20:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
[2012.01.07 11:20:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
[2012.01.07 11:20:50 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
[2012.01.07 11:20:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
[2012.01.07 11:20:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
[2012.01.07 11:20:49 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
[2012.01.07 11:20:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
[2012.01.07 11:20:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
[2012.01.07 11:20:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
[2012.01.07 11:20:48 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
[2012.01.07 11:20:47 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
[2012.01.07 11:20:43 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2012.01.07 11:20:42 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seo.dll
[2012.01.07 11:20:41 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2012.01.07 11:20:40 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwnh.dll
[2012.01.07 11:20:39 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2012.01.07 11:20:39 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2012.01.07 11:20:39 | 000,029,184 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2012.01.07 11:20:39 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll
[2012.01.07 11:20:37 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
[2012.01.07 11:20:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcref.dll
[2012.01.07 11:20:36 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2012.01.07 11:20:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
[2012.01.07 11:20:33 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys
[2012.01.07 11:20:32 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
[2012.01.07 11:20:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
[2012.01.07 11:20:32 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
[2012.01.07 11:20:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pwsdata.dll
[2012.01.07 11:20:27 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2012.01.07 11:20:27 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll
[2012.01.07 11:20:27 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2012.01.07 11:20:27 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
[2012.01.07 11:20:26 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2012.01.07 11:20:26 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe
[2012.01.07 11:20:26 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2012.01.07 11:20:25 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime
[2012.01.07 11:20:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll
[2012.01.07 11:20:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll
[2012.01.07 11:20:23 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll
[2012.01.07 11:20:22 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
[2012.01.07 11:20:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
[2012.01.07 11:20:22 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
[2012.01.07 11:20:17 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2012.01.07 11:20:16 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsepm.dll
[2012.01.07 11:20:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll
[2012.01.07 11:20:11 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll
[2012.01.07 11:20:11 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe
[2012.01.07 11:20:05 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex
[2012.01.07 11:20:05 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll
[2012.01.07 11:19:54 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
[2012.01.07 11:19:54 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe
[2012.01.07 11:19:53 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
[2012.01.07 11:19:53 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\metada51.dll
[2012.01.07 11:19:53 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll
[2012.01.07 11:19:52 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\md5filt.dll
[2012.01.07 11:19:51 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2012.01.07 11:19:50 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll
[2012.01.07 11:19:50 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll
[2012.01.07 11:19:50 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lonsint.dll
[2012.01.07 11:19:49 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll
[2012.01.07 11:19:48 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll
[2012.01.07 11:19:44 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2012.01.07 11:19:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2012.01.07 11:19:41 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
[2012.01.07 11:19:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
[2012.01.07 11:19:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
[2012.01.07 11:19:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
[2012.01.07 11:19:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2012.01.07 11:19:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2012.01.07 11:19:38 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2012.01.07 11:19:38 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2012.01.07 11:19:38 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2012.01.07 11:19:37 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2012.01.07 11:19:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2012.01.07 11:19:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2012.01.07 11:19:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
[2012.01.07 11:19:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2012.01.07 11:19:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
[2012.01.07 11:19:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll
[2012.01.07 11:19:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2012.01.07 11:19:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2012.01.07 11:19:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2012.01.07 11:19:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll
[2012.01.07 11:19:33 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2012.01.07 11:19:33 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
[2012.01.07 11:19:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
[2012.01.07 11:19:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
[2012.01.07 11:19:31 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
[2012.01.07 11:19:31 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll
[2012.01.07 11:19:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
[2012.01.07 11:19:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll
[2012.01.07 11:19:30 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iscomlog.dll
[2012.01.07 11:19:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll
[2012.01.07 11:19:29 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll
[2012.01.07 11:19:27 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infocomm.dll
[2012.01.07 11:19:27 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetin51.exe
[2012.01.07 11:19:27 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll
[2012.01.07 11:19:26 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll
[2012.01.07 11:19:26 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll
[2012.01.07 11:19:25 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
[2012.01.07 11:19:25 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
[2012.01.07 11:19:25 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
[2012.01.07 11:19:25 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
[2012.01.07 11:19:24 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
[2012.01.07 11:19:24 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
[2012.01.07 11:19:24 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
[2012.01.07 11:19:23 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
[2012.01.07 11:19:23 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2012.01.07 11:19:23 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
[2012.01.07 11:19:23 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2012.01.07 11:19:22 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
[2012.01.07 11:19:22 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
[2012.01.07 11:19:22 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
[2012.01.07 11:19:21 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
[2012.01.07 11:19:21 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
[2012.01.07 11:19:21 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
[2012.01.07 11:19:21 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
[2012.01.07 11:19:20 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
[2012.01.07 11:19:20 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
[2012.01.07 11:19:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2012.01.07 11:19:19 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iislog51.dll
[2012.01.07 11:19:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisfecnv.dll
[2012.01.07 11:19:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe
[2012.01.07 11:19:19 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll
[2012.01.07 11:19:18 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iische51.dll
[2012.01.07 11:19:18 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll
[2012.01.07 11:19:18 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisadmin.dll
[2012.01.07 11:19:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2012.01.07 11:19:12 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
[2012.01.07 11:19:02 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
[2012.01.07 11:19:02 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll
[2012.01.07 11:19:02 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpod51.dll
[2012.01.07 11:19:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpmb51.dll
[2012.01.07 11:19:01 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll
[2012.01.07 11:19:00 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
[2012.01.07 11:18:59 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gzip.dll
[2012.01.07 11:18:56 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2012.01.07 11:18:56 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll
[2012.01.07 11:18:56 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2012.01.07 11:18:56 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll
[2012.01.07 11:18:55 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll
[2012.01.07 11:18:55 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe
[2012.01.07 11:18:55 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll
[2012.01.07 11:18:55 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
[2012.01.07 11:18:55 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
[2012.01.07 11:18:54 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll
[2012.01.07 11:18:54 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll
[2012.01.07 11:18:54 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll
[2012.01.07 11:18:54 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll
[2012.01.07 11:18:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll
[2012.01.07 11:18:53 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll
[2012.01.07 11:18:53 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe
[2012.01.07 11:18:53 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2012.01.07 11:18:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll
[2012.01.07 11:18:53 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2012.01.07 11:18:52 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll
[2012.01.07 11:18:52 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2012.01.07 11:18:52 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsv251.dll
[2012.01.07 11:18:52 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2012.01.07 11:18:51 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2012.01.07 11:18:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpmib.dll
[2012.01.07 11:18:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2012.01.07 11:18:50 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe
[2012.01.07 11:18:50 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll
[2012.01.07 11:18:49 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
[2012.01.07 11:18:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2012.01.07 11:18:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2012.01.07 11:18:47 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll
[2012.01.07 11:18:47 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe
[2012.01.07 11:18:47 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe
[2012.01.07 11:18:47 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exstrace.dll
[2012.01.07 11:18:46 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012.01.07 11:18:46 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2012.01.07 11:18:46 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
[2012.01.07 11:18:45 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2012.01.07 11:18:36 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
[2012.01.07 11:18:35 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\davcdata.exe
[2012.01.07 11:18:33 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
[2012.01.07 11:18:33 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
[2012.01.07 11:18:32 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe
[2012.01.07 11:18:32 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll
[2012.01.07 11:18:32 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll
[2012.01.07 11:18:31 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\compfilt.dll
[2012.01.07 11:18:29 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
[2012.01.07 11:18:29 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2012.01.07 11:18:28 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
[2012.01.07 11:18:28 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
[2012.01.07 11:18:28 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
[2012.01.07 11:18:27 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2012.01.07 11:18:26 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2012.01.07 11:18:26 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
[2012.01.07 11:18:26 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
[2012.01.07 11:18:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
[2012.01.07 11:18:25 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
[2012.01.07 11:18:25 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
[2012.01.07 11:18:24 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2012.01.07 11:18:23 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll
[2012.01.07 11:18:23 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
[2012.01.07 11:18:23 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
[2012.01.07 11:18:10 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll
[2012.01.07 11:18:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll
[2012.01.07 11:18:00 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asp51.dll
[2012.01.07 11:18:00 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll
[2012.01.07 11:18:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll
[2012.01.07 11:17:59 | 000,330,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aqueue.dll
[2012.01.07 11:17:59 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\appconf.dll
[2012.01.07 11:17:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll
[2012.01.07 11:17:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll
[2012.01.07 11:17:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll
[2012.01.07 11:17:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll
[2012.01.07 11:17:52 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll
[2012.01.07 11:17:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll
[2012.01.07 11:17:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2012.01.07 11:17:51 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admexs.dll
[2012.01.07 11:17:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll
[2012.01.07 11:17:45 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe
[2012.01.07 11:17:45 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll
[2012.01.07 11:17:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\staxmem.dll
[2012.01.07 11:17:44 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsnap.dll
[2012.01.07 11:17:44 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpadm.dll
[2012.01.07 11:17:43 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll
[2012.01.07 11:17:43 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe
[2012.01.07 11:17:38 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logui.ocx
[2012.01.07 11:17:37 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isatq.dll
[2012.01.07 11:17:37 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoadmn.dll
[2012.01.07 11:17:36 | 000,834,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.dll
[2012.01.07 11:17:36 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll
[2012.01.07 11:17:36 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll
[2012.01.07 11:17:36 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe
[2012.01.07 11:17:35 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrtl.dll
[2012.01.07 11:17:35 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismap.dll
[2012.01.07 11:17:35 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstas.exe
[2012.01.07 11:17:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe
[2012.01.07 11:17:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll
[2012.01.07 11:17:34 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisext51.dll
[2012.01.07 11:17:34 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe
[2012.01.07 11:17:34 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2012.01.07 11:17:33 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll
[2012.01.07 11:17:33 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2012.01.07 11:17:33 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe
[2012.01.07 11:17:33 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll
[2012.01.07 11:17:32 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll
[2012.01.07 11:17:32 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe
[2012.01.07 11:17:32 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2012.01.07 11:17:32 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2012.01.07 11:17:31 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2012.01.07 11:17:31 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll
[2012.01.07 11:17:31 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2012.01.07 11:17:31 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll
[2012.01.07 11:17:30 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2012.01.07 11:17:30 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll
[2012.01.07 11:17:30 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2012.01.07 11:17:29 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2012.01.07 11:17:29 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cnfgprts.ocx
[2012.01.07 11:17:29 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\coadmin.dll
[2012.01.07 11:17:28 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certwiz.ocx
[2012.01.07 11:17:28 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx
[2012.01.07 11:17:28 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe
[2012.01.07 11:17:27 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adsiis51.dll
[2012.01.07 11:17:27 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admwprox.dll
[2012.01.07 11:17:27 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll
[2012.01.07 11:17:26 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe
[2012.01.07 11:17:25 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll
[2012.01.07 11:14:52 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
[2012.01.07 10:59:53 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\RTL8139.sys
[2012.01.07 10:55:21 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2012.01.07 10:55:21 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012.01.07 10:55:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2012.01.07 10:55:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2012.01.07 00:43:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2012.01.06 20:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\MOP030B
[2012.01.06 18:29:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2012.01.06 18:19:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\hellgate
[2012.01.06 15:41:32 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2012.01.06 09:51:02 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012.01.06 08:26:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2012.01.06 07:17:03 | 000,000,000 | -HSD | C] -- C:\Boot
[2012.01.06 00:58:47 | 000,000,000 | ---D | C] -- C:\Program Files\EASEUS
[2012.01.05 22:11:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2012.01.01 20:07:34 | 000,032,128 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\VIAAGP1.SYS
[2012.01.01 20:07:34 | 000,000,000 | ---D | C] -- C:\VIAagp
[2012.01.01 02:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2012.01.01 01:16:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Soubory aplikace Outlook
[2012.01.01 01:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2012.01.01 00:41:30 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAnyContentSAFER
[2011.12.31 23:00:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Uniblue
[2011.12.31 22:38:24 | 000,000,000 | ---D | C] -- C:\Program Files\SlimDrivers
[2011.12.31 22:17:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2011.12.31 22:17:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2011.12.31 22:11:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Nová složka
[2011.12.31 21:59:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\WINDOWS
[2011.12.31 21:57:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\APN
[2011.12.31 20:02:49 | 000,090,624 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcls.dll
[2011.12.31 20:02:38 | 000,021,632 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2011.12.31 20:02:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Samsung_USB_Drivers
[2011.12.31 20:02:09 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2011.12.31 20:01:42 | 000,233,472 | ---- | C] (Teruten) -- C:\WINDOWS\System32\FsUsbExService.Exe
[2011.12.31 20:01:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\My NPS Files
[2011.12.31 20:01:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2011.12.31 18:23:35 | 000,000,000 | ---D | C] -- C:\TopCD
[2011.12.30 01:39:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\JD stazene
[2011.12.29 13:15:45 | 000,000,000 | ---D | C] -- C:\Program Files\Astroburn Toolbar
[2011.12.29 13:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Astroburn Lite
[2011.12.29 13:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
[2011.12.29 13:15:37 | 000,000,000 | ---D | C] -- C:\Program Files\Astroburn Lite
[2011.12.28 07:55:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Diktáty s piráty
[2011.12.28 07:55:04 | 000,000,000 | ---D | C] -- C:\DIKTATY
[2011.12.28 07:54:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Zábavná čeština v ZOO
[2011.12.28 07:54:34 | 000,000,000 | ---D | C] -- C:\CESTINA
[2011.12.28 07:54:23 | 000,935,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VB40016.DLL
[2011.12.28 07:54:23 | 000,536,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OC25.DLL
[2011.12.28 07:54:23 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2.DLL
[2011.12.28 07:54:23 | 000,177,824 | ---- | C] (Sheridan Software Systems, Inc.) -- C:\WINDOWS\System\THREED16.OCX
[2011.12.28 07:54:23 | 000,177,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TYPELIB.DLL
[2011.12.28 07:54:23 | 000,164,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2DISP.DLL
[2011.12.28 07:54:23 | 000,152,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2NLS.DLL
[2011.12.28 07:54:23 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMPOBJ.DLL
[2011.12.28 07:54:23 | 000,100,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCI16.OCX
[2011.12.28 07:54:23 | 000,057,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2CONV.DLL
[2011.12.28 07:54:23 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2PROX.DLL
[2011.12.28 07:54:23 | 000,046,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\PICCLP16.OCX
[2011.12.28 07:54:23 | 000,035,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VAEN21.OLB
[2011.12.28 07:54:23 | 000,026,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3DV2.DLL
[2011.12.28 07:54:23 | 000,012,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SCP.DLL
[2011.12.28 07:54:23 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\STKIT416.DLL
[2011.12.28 06:56:23 | 000,000,000 | ---D | C] -- C:\Program Files\PC Diktáty Holubec
[2011.12.28 06:56:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\PC Diktáty Holubec
[2011.12.24 12:16:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.12.24 12:16:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\Conduit
[2011.12.24 12:16:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\MyAshampoo
[2011.12.24 12:16:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\ConduitEngine
[2011.12.24 12:16:22 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine
[2011.12.24 12:16:17 | 000,000,000 | ---D | C] -- C:\Program Files\MyAshampoo
[2011.12.24 12:16:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\ashampoo
[2011.12.24 12:16:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
[2011.12.18 14:44:26 | 000,000,000 | ---D | C] -- C:\Program Files\Rally Trophy
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
Re: Nejdou hry
[2020.10.26 15:25:25 | 000,000,640 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Vypalovač.lnk
[2012.01.09 22:04:18 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.09 21:58:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
[2012.01.09 21:55:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.09 21:55:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
[2012.01.09 21:54:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.09 21:54:53 | 1341,755,392 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.09 20:54:04 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003UA.job
[2012.01.09 19:58:10 | 000,001,782 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\České pohádky zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hry zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,006 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Ledová královna 3 - Vraní čarodějka.lnk
[2012.01.09 18:54:37 | 000,000,878 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Monster Jam.lnk
[2012.01.09 18:45:24 | 000,116,224 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.09 14:54:01 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003Core.job
[2012.01.09 10:20:01 | 000,691,164 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.01.09 10:20:01 | 000,292,478 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.01.09 10:20:01 | 000,183,764 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.01.09 10:20:01 | 000,034,352 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.01.09 10:15:54 | 002,168,208 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.01.09 10:12:55 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.01.07 14:03:04 | 000,000,712 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Kobra 11 Nitro.lnk
[2012.01.07 11:22:48 | 000,000,288 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2012.01.07 11:17:04 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012.01.07 11:17:03 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2012.01.07 11:17:03 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2012.01.07 11:16:48 | 000,004,249 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2012.01.07 11:12:48 | 000,022,976 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.01.07 11:10:55 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012.01.07 00:58:10 | 002,003,487 | ---- | M] () -- C:\WINDOWS\iis6.BAK
[2012.01.07 00:47:43 | 000,553,675 | ---- | M] () -- C:\WINDOWS\setupapi.old
[2012.01.06 20:20:34 | 000,000,687 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hellgate - London.lnk
[2012.01.06 20:00:48 | 000,002,368 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Google Chrome.lnk
[2012.01.06 16:55:57 | 000,000,742 | -H-- | M] () -- C:\WINDOWS\EPMBatch.ept
[2012.01.06 15:03:47 | 000,006,820 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.01.06 14:59:52 | 000,001,987 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI Tray Tools.lnk
[2012.01.06 14:59:50 | 000,001,494 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI 3D Control Panel.lnk
[2012.01.06 14:50:49 | 000,472,576 | ---- | M] () -- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
[2012.01.06 07:27:34 | 000,000,012 | RHS- | M] () -- C:\win7.ld
[2012.01.06 07:27:30 | 000,203,464 | RHS- | M] () -- C:\grldr
[2012.01.06 07:17:06 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012.01.06 07:01:25 | 000,002,562 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2012.01.06 07:01:25 | 000,001,908 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2012.01.06 00:20:52 | 000,000,988 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
[2012.01.02 09:59:37 | 000,000,166 | ---- | M] () -- C:\WINDOWS\vypalovac.ini
[2012.01.01 14:20:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
[2012.01.01 00:36:10 | 000,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011.12.31 23:39:20 | 000,012,984 | ---- | M] () -- C:\WINDOWS\System32\drivers\SWDUMon.sys
[2011.12.31 23:22:30 | 000,000,025 | ---- | M] () -- C:\WINDOWS\mixerdef.ini
[2011.12.31 22:13:54 | 000,000,199 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI
[2011.12.31 22:13:53 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI
[2011.12.31 21:16:40 | 000,000,211 | -HS- | M] () -- C:\Boot.BAK
[2011.12.31 21:11:30 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2011.12.31 20:17:35 | 000,000,661 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Zástupce - mpc-hc.lnk
[2011.12.31 20:01:20 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.12.28 07:55:06 | 000,000,044 | ---- | M] () -- C:\WINDOWS\SILCOM_P.INI
[2011.12.28 07:54:34 | 000,000,052 | ---- | M] () -- C:\WINDOWS\CESTINA.INI
[2011.12.27 16:29:31 | 000,175,616 | ---- | M] () -- C:\WINDOWS\System32\msikbs32.dll
[2011.12.26 02:34:42 | 944,173,056 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Mechanik zabijak 2011 CZ.avi
[2011.12.15 17:35:48 | 000,000,095 | ---- | M] () -- C:\WINDOWS\System\TSCP_H0.THD
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2020.10.26 15:25:28 | 000,000,166 | ---- | C] () -- C:\WINDOWS\vypalovac.ini
[2020.10.26 15:25:25 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Vypalovač.lnk
[2012.01.09 22:04:18 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.09 19:58:10 | 000,001,782 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\České pohádky zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hry zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,006 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Ledová královna 3 - Vraní čarodějka.lnk
[2012.01.09 18:54:37 | 000,000,878 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Monster Jam.lnk
[2012.01.07 14:03:04 | 000,000,712 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Kobra 11 Nitro.lnk
[2012.01.07 11:37:10 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Internet Explorer.lnk
[2012.01.07 11:35:02 | 1341,755,392 | -HS- | C] () -- C:\hiberfil.sys
[2012.01.07 11:20:25 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012.01.07 11:19:44 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012.01.07 11:19:25 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2012.01.07 11:19:23 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012.01.07 11:19:20 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2012.01.07 11:19:07 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012.01.07 11:19:00 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2012.01.07 11:18:50 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2012.01.07 11:18:28 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2012.01.07 10:54:54 | 000,809,394 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012.01.07 10:54:54 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012.01.07 10:54:54 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2012.01.07 10:54:54 | 000,105,628 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2012.01.07 10:54:54 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2012.01.07 10:54:54 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2012.01.07 10:54:54 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2012.01.07 10:54:54 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2012.01.07 10:54:54 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012.01.07 10:54:54 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2012.01.07 10:54:54 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2012.01.07 10:54:54 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012.01.07 10:54:54 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012.01.07 10:54:53 | 002,033,597 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2012.01.07 10:54:53 | 001,246,067 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2012.01.07 10:54:52 | 000,631,112 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2012.01.06 20:20:34 | 000,000,687 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hellgate - London.lnk
[2012.01.06 15:03:47 | 000,006,820 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.01.06 14:59:52 | 000,001,987 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI Tray Tools.lnk
[2012.01.06 14:59:50 | 000,001,494 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI 3D Control Panel.lnk
[2012.01.06 14:50:49 | 000,472,576 | ---- | C] () -- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
[2012.01.06 07:27:34 | 000,000,012 | RHS- | C] () -- C:\win7.ld
[2012.01.06 07:27:30 | 000,203,464 | RHS- | C] () -- C:\grldr
[2012.01.06 07:17:06 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2012.01.06 07:17:04 | 000,383,562 | RHS- | C] () -- C:\bootmgr
[2012.01.06 07:17:04 | 000,000,211 | -HS- | C] () -- C:\Boot.BAK
[2012.01.06 07:00:32 | 000,002,562 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2012.01.06 07:00:32 | 000,001,908 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2012.01.06 01:07:28 | 000,000,742 | -H-- | C] () -- C:\WINDOWS\EPMBatch.ept
[2012.01.06 00:20:51 | 000,000,988 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
[2011.12.31 20:17:35 | 000,000,661 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Zástupce - mpc-hc.lnk
[2011.12.31 20:01:42 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.12.31 20:01:42 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.12.31 20:01:20 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.12.28 07:55:06 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SILCOM_P.INI
[2011.12.28 07:54:34 | 000,000,052 | ---- | C] () -- C:\WINDOWS\CESTINA.INI
[2011.12.28 07:54:23 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System\STORAGE.DLL
[2011.12.28 07:54:23 | 000,028,113 | ---- | C] () -- C:\WINDOWS\System\OLE2.REG
[2011.12.28 07:54:23 | 000,014,933 | ---- | C] () -- C:\WINDOWS\System\VSHARE.386
[2011.12.27 16:29:31 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\msikbs32.dll
[2011.12.26 01:31:09 | 944,173,056 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Mechanik zabijak 2011 CZ.avi
[2011.11.28 20:54:45 | 000,302,592 | ---- | C] () -- C:\WINDOWS\mauninst.exe
[2011.11.16 09:36:53 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011.11.15 16:01:25 | 000,615,936 | ---- | C] () -- C:\WINDOWS\AutoKMS.exe
[2011.11.15 16:01:25 | 000,000,161 | ---- | C] () -- C:\WINDOWS\AutoKMS.ini
[2011.11.15 16:01:22 | 000,077,824 | ---- | C] () -- C:\WINDOWS\KMSEmulator.exe
[2011.11.15 02:09:37 | 000,000,031 | ---- | C] () -- C:\WINDOWS\brassi.dat
[2011.11.01 20:32:35 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011.11.01 20:32:35 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011.10.28 08:48:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.10.22 21:40:30 | 000,000,050 | ---- | C] () -- C:\WINDOWS\BRQIKMON.INI
[2011.10.22 19:51:44 | 000,000,026 | ---- | C] () -- C:\WINDOWS\BrmfBidi.ini
[2011.10.21 01:26:06 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011.10.20 22:26:22 | 000,116,224 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.20 17:38:05 | 000,000,419 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2011.10.20 17:38:05 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2011.10.20 17:38:05 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2011.10.20 15:09:00 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2011.10.20 14:05:25 | 000,050,020 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2011.10.20 13:51:11 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.10.20 13:49:33 | 002,168,208 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.10.20 13:11:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\AVerIO.dll
[2011.10.20 13:11:48 | 000,003,456 | ---- | C] () -- C:\WINDOWS\System32\AVerIO.sys
[2011.10.20 13:11:45 | 000,598,016 | ---- | C] () -- C:\WINDOWS\System32\sptlib21.dll
[2011.10.20 13:11:45 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\sptlib11.dll
[2011.10.20 13:11:45 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\sptlib22.dll
[2011.10.20 13:11:45 | 000,249,856 | ---- | C] () -- C:\WINDOWS\System32\sptlib03.dll
[2011.10.20 13:11:45 | 000,249,856 | ---- | C] () -- C:\WINDOWS\System32\sptlib01.dll
[2011.10.20 13:11:45 | 000,225,280 | ---- | C] () -- C:\WINDOWS\System32\sptlib02.dll
[2011.10.20 13:11:45 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\sptlib12.dll
[2011.10.20 12:57:48 | 000,000,025 | ---- | C] () -- C:\WINDOWS\mixerdef.ini
[2011.10.20 12:54:05 | 000,122,880 | ---- | C] () -- C:\WINDOWS\cmuninst.exe
[2011.10.20 12:54:05 | 000,122,880 | ---- | C] () -- C:\WINDOWS\cmuninst.dat
[2011.10.20 12:53:47 | 000,000,199 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2011.10.20 12:53:47 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2011.10.20 12:51:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2011.10.20 12:33:53 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\vusetup.dll
[2011.10.20 12:25:26 | 000,012,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\SWDUMon.sys
[2011.10.20 12:12:22 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.10.20 12:03:58 | 000,022,976 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011.10.12 16:16:30 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\OpenVideo.dll
[2011.10.06 12:02:39 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\atiiprxx.exe
[2011.10.06 12:02:36 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2011.10.06 12:02:36 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011.10.06 12:02:36 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011.10.06 12:02:36 | 000,158,080 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.10.06 12:02:36 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.ini
[2008.04.14 09:51:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008.04.14 08:16:08 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006.12.31 06:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006.06.01 23:10:25 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2001.10.25 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.25 13:00:00 | 000,691,164 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 13:00:00 | 000,292,478 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 13:00:00 | 000,183,764 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 13:00:00 | 000,034,352 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 13:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001.10.25 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2011.10.15 21:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Aquadelic GT
[2011.10.06 14:16:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVerTV
[2011.10.07 13:47:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2011.10.07 19:20:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Easy Driver Pro
[2011.10.06 11:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NETGATE
[2011.10.06 14:14:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.12.24 12:16:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
[2011.12.29 13:16:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
[2011.12.27 18:38:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\AVerTV
[2011.11.30 06:37:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\boost_interprocess
[2011.10.20 21:01:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\DAEMON Tools Lite
[2011.10.20 14:26:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\NETGATE
[2011.12.31 22:17:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2011.10.16 12:59:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\DAEMON Tools Lite
[2011.10.14 12:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\FileZilla
[2011.10.08 22:54:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\GetRightToGo
[2011.10.18 18:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Internet Download Accelerator
[2011.10.20 10:24:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Spy Emergency
[2011.10.11 15:16:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Toolbar4
[2011.10.06 12:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Web Page Maker V2
[2011.12.24 12:16:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.10.20 21:06:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\DAEMON Tools Lite
[2011.10.28 23:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Darq Software
[2011.10.22 20:41:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GetRightToGo
[2011.10.23 13:27:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Internet Download Accelerator
[2012.01.01 01:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2011.10.25 18:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\OpenOffice.org
[2011.10.20 13:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Opera
[2011.12.31 22:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2012.01.01 13:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2012.01.09 21:56:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
[2012.01.09 19:58:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 07:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"SpyEmergency" = C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe -- [2011.10.20 14:30:47 | 001,940,024 | ---- | M] (NETGATE Technologies s.r.o.)
"AdobeBridge" =
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2011.01.20 10:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =
< >
< MD5 for: AGP440.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T112614718750\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113036859375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113248093750\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T114843109375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115142828125\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115838359375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T120300421875\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191157312500\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191817531250\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T074850609375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T080026390625\gencdrom\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: CSRSS.EXE >
[2008.04.14 04:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\csrss.exe
[2008.04.14 07:52:18 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\csrss.exe
[2008.04.14 07:52:18 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\dllcache\csrss.exe
< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\explorer.exe
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: FASTFAT.SYS >
[2008.04.13 20:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\fastfat.sys
[2008.04.13 23:44:30 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\dllcache\fastfat.sys
[2008.04.13 23:44:30 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\drivers\fastfat.sys
< MD5 for: HAL.DLL >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T112614718750\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113036859375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113248093750\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T114843109375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115142828125\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115838359375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T120300421875\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191157312500\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191817531250\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T074850609375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T080026390625\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.04.13 19:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\changer.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
[2008.04.14 06:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2qfe\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\SoftwareDistribution\Download\9778f8cdabb029412b74f168c04bff53\sp2qfe\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: NTFS.SYS >
[2008.04.13 20:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ntfs.sys
[2008.04.13 23:45:54 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\dllcache\ntfs.sys
[2008.04.13 23:45:54 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\drivers\ntfs.sys
< MD5 for: SCECLI.DLL >
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SERVICES.EXE >
[2009.02.09 10:54:36 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=33081FED75032291EE0E008D5385E86F -- C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe
[2009.02.09 10:54:36 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=33081FED75032291EE0E008D5385E86F -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\services.exe
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\services.exe
[2009.02.09 11:11:38 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=4F9F7B567970B524F31D9970A23F7C24 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 07:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 04:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\services.exe
< MD5 for: SMSS.EXE >
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\smss.exe
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SPOOLSV.EXE >
[2010.08.17 14:19:36 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=258DD5D4283FD9F9A7166BE9AE45CE73 -- C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\SoftwareDistribution\Download\f6c525d95e98af6721a0244324b98925\sp3gdr\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\dllcache\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\spoolsv.exe
[2008.04.14 07:52:50 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe
[2008.04.14 04:22:48 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\spoolsv.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp2gdr\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp2qfe\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp3gdr\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\SoftwareDistribution\Download\fe608cd8d2b8f77abaee7a69a696bcf7\sp3gdr\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp3qfe\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2004.02.08 23:00:00 | 000,026,285 | ---- | M] (Brother Industries ,Ltd ) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\brmfpp1.dll
[2008.07.06 13:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008.07.06 13:06:10 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
< %systemroot%\system32\drivers\*.sys /5 >
< %systemroot%\system32\drivers\*.sys /X >
[2007.12.05 03:16:37 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2erec.dll
[2007.04.18 14:19:24 | 001,311,202 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativcaxx.cpa
[2007.04.18 14:19:24 | 000,000,929 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativcaxx.vp
[2007.05.30 18:43:05 | 000,002,096 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativckxx.vp
[2007.04.18 13:19:50 | 000,002,096 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativdkxx.vp
[2007.09.09 04:37:03 | 000,047,360 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativvpxx.vp
[2001.10.25 13:00:00 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2001.10.25 13:00:00 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\system32\*.* /5 >
[2012.01.07 11:22:48 | 000,000,288 | ---- | M] () -- C:\WINDOWS\system32\$winnt$.inf
[2012.01.07 11:17:03 | 000,016,832 | ---- | M] () -- C:\WINDOWS\system32\amcompat.tlb
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\cdplayer.exe.manifest
[2012.01.06 15:03:47 | 000,006,820 | ---- | M] () -- C:\WINDOWS\system32\d3d9caps.dat
[2012.01.07 11:12:48 | 000,022,976 | ---- | M] () -- C:\WINDOWS\system32\emptyregdb.dat
[2012.01.09 10:15:54 | 002,168,208 | ---- | M] () -- C:\WINDOWS\system32\FNTCACHE.DAT
[2012.01.07 11:15:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\system32\logonui.exe.manifest
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\ncpa.cpl.manifest
[2012.01.07 11:17:03 | 000,023,392 | ---- | M] () -- C:\WINDOWS\system32\nscompat.tlb
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\nwc.cpl.manifest
[2012.01.09 10:20:01 | 000,183,764 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.01.09 10:20:01 | 000,034,352 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.01.09 10:20:01 | 000,691,164 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.01.09 10:20:01 | 000,292,478 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.01.09 10:20:01 | 000,333,848 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\sapi.cpl.manifest
[2012.01.09 09:59:01 | 000,020,030 | ---- | M] () -- C:\WINDOWS\system32\TZLog.log
[2012.01.07 11:15:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\system32\WindowsLogon.manifest
[2012.01.09 21:55:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\wuaucpl.cpl.manifest
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\config\*.sav >
[2012.01.07 11:52:17 | 000,270,336 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2012.01.07 10:25:27 | 000,262,144 | ---- | M] () -- C:\WINDOWS\system32\config\security.sav
[2012.01.07 11:52:17 | 028,835,840 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2012.01.07 11:52:17 | 003,932,160 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\*.* /U /s >
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[2 C:\WINDOWS\inf\*.tmp files -> C:\WINDOWS\inf\*.tmp -> ]
[4 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\066ffb90ad17118b5d00aa1a10e09d35\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\066ffb90ad17118b5d00aa1a10e09d35\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\1c13a3485c4b9a24bac76c4cc8aa317b\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\1c13a3485c4b9a24bac76c4cc8aa317b\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\46d9adeed599173df3acea562650bebd\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\46d9adeed599173df3acea562650bebd\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a081a150a4f978c1bd667c2a5a110ed7\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a081a150a4f978c1bd667c2a5a110ed7\*.tmp -> ]
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\system32\DirectX\*.tmp files -> C:\WINDOWS\system32\DirectX\*.tmp -> ]
[10 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ]
< %systemroot%\*. /mp /s >
< %ALLUSERSPROFILE%\Data Aplikací\*.* >
[2012.01.07 10:55:05 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Data Aplikací\desktop.ini
< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >
< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >
< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >
< %APPDATA%\*. >
[2011.11.16 09:33:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Adobe
[2011.10.20 17:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Apple Computer
[2011.12.24 12:16:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.11.09 15:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\atitray
[2011.10.20 21:06:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\DAEMON Tools Lite
[2011.10.28 23:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Darq Software
[2011.10.22 20:41:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GetRightToGo
[2011.10.20 18:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GRETECH
[2011.10.21 19:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Help
[2011.10.20 12:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Identities
[2011.10.23 13:27:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Internet Download Accelerator
[2011.10.20 13:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Macromedia
[2011.10.21 02:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Media Player Classic
[2012.01.01 01:16:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Microsoft
[2012.01.01 01:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2011.10.25 18:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\OpenOffice.org
[2011.10.20 13:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Opera
[2011.12.31 22:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2011.10.23 13:20:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Real
[2012.01.01 13:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2012.01.05 22:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Skype
[2012.01.09 21:56:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
[2011.10.20 13:07:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Sun
[2012.01.09 19:58:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
[2011.10.24 16:59:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\WinRAR
< %APPDATA%\*.* >
[2011.12.31 20:01:20 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.10.20 13:50:33 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\desktop.ini
< %APPDATA%\*.exe /s >
[2008.05.29 07:03:08 | 000,037,176 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
< %SYSTEMDRIVE%\*.exe >
[2011.11.02 15:59:34 | 000,028,572 | ---- | M] () -- C:\Setup_ver1.1779.2.exe
< >
< >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-09 09:13:06
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s >
"StateIndex" = 1
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *\0\0
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
PENDINGFILERENAMEOPERATIONS REG_MULTI_SZ \??\C:\DOCUME~1\PETA~1.PET\LOCALS~1\Temp\spyemergency\0\0\0
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.09 22:04:18 | 000,000,512 | ---- | M] () MD5=40CCB6040580AF10A6F1ECC73439B26C -- C:\PhysicalMBR.bin
========== Alternate Data Streams ==========
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:1AAB2E68
< End of report >
[2012.01.09 22:04:18 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.01.09 21:58:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\OTL.exe
[2012.01.09 21:55:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.01.09 21:55:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
[2012.01.09 21:54:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.01.09 21:54:53 | 1341,755,392 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.09 20:54:04 | 000,001,054 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003UA.job
[2012.01.09 19:58:10 | 000,001,782 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\České pohádky zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hry zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,006 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Ledová královna 3 - Vraní čarodějka.lnk
[2012.01.09 18:54:37 | 000,000,878 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Monster Jam.lnk
[2012.01.09 18:45:24 | 000,116,224 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.01.09 14:54:01 | 000,001,002 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-1659004503-1177238915-1003Core.job
[2012.01.09 10:20:01 | 000,691,164 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.01.09 10:20:01 | 000,292,478 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.01.09 10:20:01 | 000,183,764 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.01.09 10:20:01 | 000,034,352 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.01.09 10:15:54 | 002,168,208 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.01.09 10:12:55 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.01.07 14:03:04 | 000,000,712 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Kobra 11 Nitro.lnk
[2012.01.07 11:22:48 | 000,000,288 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2012.01.07 11:17:04 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012.01.07 11:17:03 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2012.01.07 11:17:03 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2012.01.07 11:16:48 | 000,004,249 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2012.01.07 11:12:48 | 000,022,976 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.01.07 11:10:55 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012.01.07 00:58:10 | 002,003,487 | ---- | M] () -- C:\WINDOWS\iis6.BAK
[2012.01.07 00:47:43 | 000,553,675 | ---- | M] () -- C:\WINDOWS\setupapi.old
[2012.01.06 20:20:34 | 000,000,687 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hellgate - London.lnk
[2012.01.06 20:00:48 | 000,002,368 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Google Chrome.lnk
[2012.01.06 16:55:57 | 000,000,742 | -H-- | M] () -- C:\WINDOWS\EPMBatch.ept
[2012.01.06 15:03:47 | 000,006,820 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.01.06 14:59:52 | 000,001,987 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI Tray Tools.lnk
[2012.01.06 14:59:50 | 000,001,494 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI 3D Control Panel.lnk
[2012.01.06 14:50:49 | 000,472,576 | ---- | M] () -- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
[2012.01.06 07:27:34 | 000,000,012 | RHS- | M] () -- C:\win7.ld
[2012.01.06 07:27:30 | 000,203,464 | RHS- | M] () -- C:\grldr
[2012.01.06 07:17:06 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012.01.06 07:01:25 | 000,002,562 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2012.01.06 07:01:25 | 000,001,908 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2012.01.06 00:20:52 | 000,000,988 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
[2012.01.02 09:59:37 | 000,000,166 | ---- | M] () -- C:\WINDOWS\vypalovac.ini
[2012.01.01 14:20:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1275210071-1659004503-1177238915-1003.job
[2012.01.01 00:36:10 | 000,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011.12.31 23:39:20 | 000,012,984 | ---- | M] () -- C:\WINDOWS\System32\drivers\SWDUMon.sys
[2011.12.31 23:22:30 | 000,000,025 | ---- | M] () -- C:\WINDOWS\mixerdef.ini
[2011.12.31 22:13:54 | 000,000,199 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI
[2011.12.31 22:13:53 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI
[2011.12.31 21:16:40 | 000,000,211 | -HS- | M] () -- C:\Boot.BAK
[2011.12.31 21:11:30 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2011.12.31 20:17:35 | 000,000,661 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Zástupce - mpc-hc.lnk
[2011.12.31 20:01:20 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.12.28 07:55:06 | 000,000,044 | ---- | M] () -- C:\WINDOWS\SILCOM_P.INI
[2011.12.28 07:54:34 | 000,000,052 | ---- | M] () -- C:\WINDOWS\CESTINA.INI
[2011.12.27 16:29:31 | 000,175,616 | ---- | M] () -- C:\WINDOWS\System32\msikbs32.dll
[2011.12.26 02:34:42 | 944,173,056 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Mechanik zabijak 2011 CZ.avi
[2011.12.15 17:35:48 | 000,000,095 | ---- | M] () -- C:\WINDOWS\System\TSCP_H0.THD
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2020.10.26 15:25:28 | 000,000,166 | ---- | C] () -- C:\WINDOWS\vypalovac.ini
[2020.10.26 15:25:25 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Vypalovač.lnk
[2012.01.09 22:04:18 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.01.09 19:58:10 | 000,001,782 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\České pohádky zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hry zdarma ke stažení.lnk
[2012.01.09 19:58:10 | 000,001,006 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Ledová královna 3 - Vraní čarodějka.lnk
[2012.01.09 18:54:37 | 000,000,878 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Monster Jam.lnk
[2012.01.07 14:03:04 | 000,000,712 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Kobra 11 Nitro.lnk
[2012.01.07 11:37:10 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Nabídka Start\Programy\Internet Explorer.lnk
[2012.01.07 11:35:02 | 1341,755,392 | -HS- | C] () -- C:\hiberfil.sys
[2012.01.07 11:20:25 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012.01.07 11:19:44 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012.01.07 11:19:25 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2012.01.07 11:19:23 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012.01.07 11:19:20 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2012.01.07 11:19:07 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012.01.07 11:19:00 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2012.01.07 11:18:50 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2012.01.07 11:18:28 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2012.01.07 10:54:54 | 000,809,394 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012.01.07 10:54:54 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012.01.07 10:54:54 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2012.01.07 10:54:54 | 000,105,628 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2012.01.07 10:54:54 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2012.01.07 10:54:54 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2012.01.07 10:54:54 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2012.01.07 10:54:54 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2012.01.07 10:54:54 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012.01.07 10:54:54 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2012.01.07 10:54:54 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2012.01.07 10:54:54 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012.01.07 10:54:54 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012.01.07 10:54:53 | 002,033,597 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2012.01.07 10:54:53 | 001,246,067 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2012.01.07 10:54:52 | 000,631,112 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2012.01.06 20:20:34 | 000,000,687 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Plocha\Hellgate - London.lnk
[2012.01.06 15:03:47 | 000,006,820 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.01.06 14:59:52 | 000,001,987 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI Tray Tools.lnk
[2012.01.06 14:59:50 | 000,001,494 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\ATI 3D Control Panel.lnk
[2012.01.06 14:50:49 | 000,472,576 | ---- | C] () -- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
[2012.01.06 07:27:34 | 000,000,012 | RHS- | C] () -- C:\win7.ld
[2012.01.06 07:27:30 | 000,203,464 | RHS- | C] () -- C:\grldr
[2012.01.06 07:17:06 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2012.01.06 07:17:04 | 000,383,562 | RHS- | C] () -- C:\bootmgr
[2012.01.06 07:17:04 | 000,000,211 | -HS- | C] () -- C:\Boot.BAK
[2012.01.06 07:00:32 | 000,002,562 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2012.01.06 07:00:32 | 000,001,908 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2012.01.06 01:07:28 | 000,000,742 | -H-- | C] () -- C:\WINDOWS\EPMBatch.ept
[2012.01.06 00:20:51 | 000,000,988 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
[2011.12.31 20:17:35 | 000,000,661 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Zástupce - mpc-hc.lnk
[2011.12.31 20:01:42 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.12.31 20:01:42 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.12.31 20:01:20 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.12.28 07:55:06 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SILCOM_P.INI
[2011.12.28 07:54:34 | 000,000,052 | ---- | C] () -- C:\WINDOWS\CESTINA.INI
[2011.12.28 07:54:23 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System\STORAGE.DLL
[2011.12.28 07:54:23 | 000,028,113 | ---- | C] () -- C:\WINDOWS\System\OLE2.REG
[2011.12.28 07:54:23 | 000,014,933 | ---- | C] () -- C:\WINDOWS\System\VSHARE.386
[2011.12.27 16:29:31 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\msikbs32.dll
[2011.12.26 01:31:09 | 944,173,056 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Plocha\Mechanik zabijak 2011 CZ.avi
[2011.11.28 20:54:45 | 000,302,592 | ---- | C] () -- C:\WINDOWS\mauninst.exe
[2011.11.16 09:36:53 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011.11.15 16:01:25 | 000,615,936 | ---- | C] () -- C:\WINDOWS\AutoKMS.exe
[2011.11.15 16:01:25 | 000,000,161 | ---- | C] () -- C:\WINDOWS\AutoKMS.ini
[2011.11.15 16:01:22 | 000,077,824 | ---- | C] () -- C:\WINDOWS\KMSEmulator.exe
[2011.11.15 02:09:37 | 000,000,031 | ---- | C] () -- C:\WINDOWS\brassi.dat
[2011.11.01 20:32:35 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011.11.01 20:32:35 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011.10.28 08:48:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.10.22 21:40:30 | 000,000,050 | ---- | C] () -- C:\WINDOWS\BRQIKMON.INI
[2011.10.22 19:51:44 | 000,000,026 | ---- | C] () -- C:\WINDOWS\BrmfBidi.ini
[2011.10.21 01:26:06 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011.10.20 22:26:22 | 000,116,224 | ---- | C] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.10.20 17:38:05 | 000,000,419 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2011.10.20 17:38:05 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2011.10.20 17:38:05 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2011.10.20 15:09:00 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2011.10.20 14:05:25 | 000,050,020 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2011.10.20 13:51:11 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.10.20 13:49:33 | 002,168,208 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.10.20 13:11:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\AVerIO.dll
[2011.10.20 13:11:48 | 000,003,456 | ---- | C] () -- C:\WINDOWS\System32\AVerIO.sys
[2011.10.20 13:11:45 | 000,598,016 | ---- | C] () -- C:\WINDOWS\System32\sptlib21.dll
[2011.10.20 13:11:45 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\sptlib11.dll
[2011.10.20 13:11:45 | 000,290,816 | ---- | C] () -- C:\WINDOWS\System32\sptlib22.dll
[2011.10.20 13:11:45 | 000,249,856 | ---- | C] () -- C:\WINDOWS\System32\sptlib03.dll
[2011.10.20 13:11:45 | 000,249,856 | ---- | C] () -- C:\WINDOWS\System32\sptlib01.dll
[2011.10.20 13:11:45 | 000,225,280 | ---- | C] () -- C:\WINDOWS\System32\sptlib02.dll
[2011.10.20 13:11:45 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\sptlib12.dll
[2011.10.20 12:57:48 | 000,000,025 | ---- | C] () -- C:\WINDOWS\mixerdef.ini
[2011.10.20 12:54:05 | 000,122,880 | ---- | C] () -- C:\WINDOWS\cmuninst.exe
[2011.10.20 12:54:05 | 000,122,880 | ---- | C] () -- C:\WINDOWS\cmuninst.dat
[2011.10.20 12:53:47 | 000,000,199 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2011.10.20 12:53:47 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2011.10.20 12:51:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2011.10.20 12:33:53 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\vusetup.dll
[2011.10.20 12:25:26 | 000,012,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\SWDUMon.sys
[2011.10.20 12:12:22 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.10.20 12:03:58 | 000,022,976 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011.10.12 16:16:30 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\OpenVideo.dll
[2011.10.06 12:02:39 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\atiiprxx.exe
[2011.10.06 12:02:36 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2011.10.06 12:02:36 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011.10.06 12:02:36 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011.10.06 12:02:36 | 000,158,080 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011.10.06 12:02:36 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.ini
[2008.04.14 09:51:54 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008.04.14 08:16:08 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006.12.31 06:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006.06.01 23:10:25 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2001.10.25 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.10.25 13:00:00 | 000,691,164 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2001.10.25 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001.10.25 13:00:00 | 000,292,478 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001.10.25 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001.10.25 13:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2001.10.25 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001.10.25 13:00:00 | 000,183,764 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2001.10.25 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001.10.25 13:00:00 | 000,034,352 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001.10.25 13:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2001.10.25 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001.10.25 13:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001.10.25 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2011.10.15 21:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Aquadelic GT
[2011.10.06 14:16:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVerTV
[2011.10.07 13:47:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2011.10.07 19:20:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Easy Driver Pro
[2011.10.06 11:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NETGATE
[2011.10.06 14:14:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2011.12.24 12:16:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ashampoo
[2011.12.29 13:16:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Astroburn Lite
[2011.12.27 18:38:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\AVerTV
[2011.11.30 06:37:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\boost_interprocess
[2011.10.20 21:01:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\DAEMON Tools Lite
[2011.10.20 14:26:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\NETGATE
[2011.12.31 22:17:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\PC Suite
[2011.10.16 12:59:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\DAEMON Tools Lite
[2011.10.14 12:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\FileZilla
[2011.10.08 22:54:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\GetRightToGo
[2011.10.18 18:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Internet Download Accelerator
[2011.10.20 10:24:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Spy Emergency
[2011.10.11 15:16:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Toolbar4
[2011.10.06 12:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta\Data aplikací\Web Page Maker V2
[2011.12.24 12:16:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.10.20 21:06:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\DAEMON Tools Lite
[2011.10.28 23:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Darq Software
[2011.10.22 20:41:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GetRightToGo
[2011.10.23 13:27:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Internet Download Accelerator
[2012.01.01 01:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2011.10.25 18:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\OpenOffice.org
[2011.10.20 13:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Opera
[2011.12.31 22:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2012.01.01 13:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2012.01.09 21:56:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
[2012.01.09 19:58:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 07:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)
"SpyEmergency" = C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe -- [2011.10.20 14:30:47 | 001,940,024 | ---- | M] (NETGATE Technologies s.r.o.)
"AdobeBridge" =
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2011.01.20 10:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =
< >
< MD5 for: AGP440.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\dllcache\autochk.exe
< MD5 for: CDROM.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T112614718750\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113036859375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113248093750\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T114843109375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115142828125\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115838359375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T120300421875\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191157312500\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191817531250\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T074850609375\gencdrom\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T080026390625\gencdrom\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\dllcache\cryptsvc.dll
< MD5 for: CSRSS.EXE >
[2008.04.14 04:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\csrss.exe
[2008.04.14 07:52:18 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\csrss.exe
[2008.04.14 07:52:18 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\dllcache\csrss.exe
< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\explorer.exe
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\system32\dllcache\explorer.exe
< MD5 for: FASTFAT.SYS >
[2008.04.13 20:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\fastfat.sys
[2008.04.13 23:44:30 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\dllcache\fastfat.sys
[2008.04.13 23:44:30 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\drivers\fastfat.sys
< MD5 for: HAL.DLL >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T112614718750\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113036859375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T113248093750\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T114843109375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115142828125\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T115838359375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111020T120300421875\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191157312500\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111007T191817531250\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T074850609375\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\Documents and Settings\peta\Local Settings\Data aplikací\SlimWare Utilities Inc\SlimDrivers\Backups\20111008T080026390625\acpiapic_up\hal.dll
[2008.04.13 23:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\hal.dll
< MD5 for: CHANGER.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.04.13 19:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\changer.sys
< MD5 for: ISAPNP.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 07:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
[2008.04.14 06:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\isapnp.sys
< MD5 for: LSASS.EXE >
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\dllcache\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2qfe\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\SoftwareDistribution\Download\9778f8cdabb029412b74f168c04bff53\sp2qfe\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: NTFS.SYS >
[2008.04.13 20:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ntfs.sys
[2008.04.13 23:45:54 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\dllcache\ntfs.sys
[2008.04.13 23:45:54 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\drivers\ntfs.sys
< MD5 for: SCECLI.DLL >
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SERVICES.EXE >
[2009.02.09 10:54:36 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=33081FED75032291EE0E008D5385E86F -- C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe
[2009.02.09 10:54:36 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=33081FED75032291EE0E008D5385E86F -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2QFE\services.exe
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2009.02.09 12:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3QFE\services.exe
[2009.02.09 11:11:38 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=4F9F7B567970B524F31D9970A23F7C24 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP2GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\SoftwareDistribution\Download\3600e56e45ad54d0df91c2e4c0249f5a\SP3GDR\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 12:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 07:52:46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\$NtUninstallKB956572$\services.exe
[2008.04.14 04:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\services.exe
< MD5 for: SMSS.EXE >
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\smss.exe
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\dllcache\smss.exe
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SPOOLSV.EXE >
[2010.08.17 14:19:36 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=258DD5D4283FD9F9A7166BE9AE45CE73 -- C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\SoftwareDistribution\Download\f6c525d95e98af6721a0244324b98925\sp3gdr\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\dllcache\spoolsv.exe
[2010.08.17 14:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\spoolsv.exe
[2008.04.14 07:52:50 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe
[2008.04.14 04:22:48 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\spoolsv.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\dllcache\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp2gdr\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp2qfe\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp3gdr\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\SoftwareDistribution\Download\fe608cd8d2b8f77abaee7a69a696bcf7\sp3gdr\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\SoftwareDistribution\Download\1d2803a1f84cfd41d61e509943d67213\sp3qfe\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\dllcache\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2004.02.08 23:00:00 | 000,026,285 | ---- | M] (Brother Industries ,Ltd ) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\brmfpp1.dll
[2008.07.06 13:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008.07.06 13:06:10 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll
< %systemroot%\system32\drivers\*.sys /5 >
< %systemroot%\system32\drivers\*.sys /X >
[2007.12.05 03:16:37 | 000,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\system32\drivers\ati2erec.dll
[2007.04.18 14:19:24 | 001,311,202 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativcaxx.cpa
[2007.04.18 14:19:24 | 000,000,929 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativcaxx.vp
[2007.05.30 18:43:05 | 000,002,096 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativckxx.vp
[2007.04.18 13:19:50 | 000,002,096 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativdkxx.vp
[2007.09.09 04:37:03 | 000,047,360 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativvpxx.vp
[2001.10.25 13:00:00 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2001.10.25 13:00:00 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\system32\*.* /5 >
[2012.01.07 11:22:48 | 000,000,288 | ---- | M] () -- C:\WINDOWS\system32\$winnt$.inf
[2012.01.07 11:17:03 | 000,016,832 | ---- | M] () -- C:\WINDOWS\system32\amcompat.tlb
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\cdplayer.exe.manifest
[2012.01.06 15:03:47 | 000,006,820 | ---- | M] () -- C:\WINDOWS\system32\d3d9caps.dat
[2012.01.07 11:12:48 | 000,022,976 | ---- | M] () -- C:\WINDOWS\system32\emptyregdb.dat
[2012.01.09 10:15:54 | 002,168,208 | ---- | M] () -- C:\WINDOWS\system32\FNTCACHE.DAT
[2012.01.07 11:15:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\system32\logonui.exe.manifest
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\ncpa.cpl.manifest
[2012.01.07 11:17:03 | 000,023,392 | ---- | M] () -- C:\WINDOWS\system32\nscompat.tlb
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\nwc.cpl.manifest
[2012.01.09 10:20:01 | 000,183,764 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.01.09 10:20:01 | 000,034,352 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.01.09 10:20:01 | 000,691,164 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.01.09 10:20:01 | 000,292,478 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.01.09 10:20:01 | 000,333,848 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\sapi.cpl.manifest
[2012.01.09 09:59:01 | 000,020,030 | ---- | M] () -- C:\WINDOWS\system32\TZLog.log
[2012.01.07 11:15:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\system32\WindowsLogon.manifest
[2012.01.09 21:55:20 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[2012.01.07 11:15:18 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\system32\wuaucpl.cpl.manifest
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\*.dll /lockedfiles >
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\config\*.sav >
[2012.01.07 11:52:17 | 000,270,336 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2012.01.07 10:25:27 | 000,262,144 | ---- | M] () -- C:\WINDOWS\system32\config\security.sav
[2012.01.07 11:52:17 | 028,835,840 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2012.01.07 11:52:17 | 003,932,160 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\*.* /U /s >
[12 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[2 C:\WINDOWS\inf\*.tmp files -> C:\WINDOWS\inf\*.tmp -> ]
[4 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\066ffb90ad17118b5d00aa1a10e09d35\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\066ffb90ad17118b5d00aa1a10e09d35\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\1c13a3485c4b9a24bac76c4cc8aa317b\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\1c13a3485c4b9a24bac76c4cc8aa317b\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\46d9adeed599173df3acea562650bebd\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\46d9adeed599173df3acea562650bebd\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\a081a150a4f978c1bd667c2a5a110ed7\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\a081a150a4f978c1bd667c2a5a110ed7\*.tmp -> ]
[6 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[1 C:\WINDOWS\system32\DirectX\*.tmp files -> C:\WINDOWS\system32\DirectX\*.tmp -> ]
[10 C:\WINDOWS\Temp\*.tmp files -> C:\WINDOWS\Temp\*.tmp -> ]
< %systemroot%\*. /mp /s >
< %ALLUSERSPROFILE%\Data Aplikací\*.* >
[2012.01.07 10:55:05 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Data Aplikací\desktop.ini
< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >
< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >
< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >
< %APPDATA%\*. >
[2011.11.16 09:33:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Adobe
[2011.10.20 17:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Apple Computer
[2011.12.24 12:16:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Ashampoo
[2011.11.09 15:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\atitray
[2011.10.20 21:06:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\DAEMON Tools Lite
[2011.10.28 23:24:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Darq Software
[2011.10.22 20:41:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GetRightToGo
[2011.10.20 18:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\GRETECH
[2011.10.21 19:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Help
[2011.10.20 12:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Identities
[2011.10.23 13:27:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Internet Download Accelerator
[2011.10.20 13:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Macromedia
[2011.10.21 02:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Media Player Classic
[2012.01.01 01:16:54 | 000,000,000 | --SD | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Microsoft
[2012.01.01 01:46:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Mobile Master
[2011.10.25 18:48:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\OpenOffice.org
[2011.10.20 13:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Opera
[2011.12.31 22:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\PC Suite
[2011.10.23 13:20:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Real
[2012.01.01 13:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Samsung
[2012.01.05 22:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Skype
[2012.01.09 21:56:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Spy Emergency
[2011.10.20 13:07:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Sun
[2012.01.09 19:58:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\URSE Games
[2011.10.24 16:59:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\WinRAR
< %APPDATA%\*.* >
[2011.12.31 20:01:20 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\$_hpcst$.hpc
[2011.10.20 13:50:33 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\desktop.ini
< %APPDATA%\*.exe /s >
[2008.05.29 07:03:08 | 000,037,176 | ---- | M] () -- C:\Documents and Settings\peta.PETULA-F28A0597\Data aplikací\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
< %SYSTEMDRIVE%\*.exe >
[2011.11.02 15:59:34 | 000,028,572 | ---- | M] () -- C:\Setup_ver1.1779.2.exe
< >
< >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-09 09:13:06
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s >
"StateIndex" = 1
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *\0\0
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
PENDINGFILERENAMEOPERATIONS REG_MULTI_SZ \??\C:\DOCUME~1\PETA~1.PET\LOCALS~1\Temp\spyemergency\0\0\0
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.01.09 22:04:18 | 000,000,512 | ---- | M] () MD5=40CCB6040580AF10A6F1ECC73439B26C -- C:\PhysicalMBR.bin
========== Alternate Data Streams ==========
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:1AAB2E68
< End of report >
Re: Nejdou hry
OTL Extras logfile created on: 9.1.2012 22:01:46 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\peta.PETULA-F28A0597\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,25 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 54,08% Memory free
3,11 Gb Paging File | 2,81 Gb Available in Paging File | 90,35% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104,83 Gb Total Space | 14,79 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive I: | 2,64 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PETULA-F28A0597 | User Name: peta | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- "C:\Program Files\Opera\Opera.exe" "%1"
[HKEY_USERS\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Activision Value\Baja 1000\Baja.exe" = C:\Program Files\Activision Value\Baja 1000\Baja.exe:*:Enabled:Baja
"C:\Program Files\Innonics\Wiggles\Wiggles.exe" = C:\Program Files\Innonics\Wiggles\Wiggles.exe:*:Enabled:Wiggles -- (SEK-Ost)
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)
"C:\WINDOWS\KMSEmulator.exe" = C:\WINDOWS\KMSEmulator.exe:*:Enabled:KMSEmulator -- ()
"C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe" = C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe:*:Enabled:OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{23CA9123-B1AA-C4B6-6997-7756BBAEC461}" = AMD Catalyst Install Manager
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 29
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{41E340F0-0BD6-4A87-AF29-E9E584471756}" = VideoMate T, M, S Series Driver
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{58005385-C433-4B89-BFA5-484A7C315C55}_is1" = Vypalovač CD / DVD / Blu-ray / HD-DVD 1.25
"{5AAA952E-B15E-47E0-94E4-DD6DC7B9C796}_is1" = Kobra 11 Nitro
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8EDBA74D-0686-4C99-BFDD-F894678E5102}" = Adobe Common File Installer
"{90140000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 14
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{97AA0C55-AFAD-4126-B21C-F1318FB6DADA}" = RTLSetup
"{993A94A9-DCE3-4774-B35D-D8C74FC1E0BE}" = Royale Remixed Theme
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Czech
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{Ledova kralovna 3 - Vrani carodejka}_is1" = Ledová královna 3 - Vraní čarodějka 1.1
"7-Zip" = 7-Zip 9.21beta
"Adobe AIR" = Adobe AIR
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Astroburn Lite" = Astroburn Lite
"ATI Display Driver" = ATI Display Driver (Omega 3.8.442)
"AVerMedia A16D PCI Hybrid DVB-T" = AVerMedia A16D PCI Hybrid DVB-T 3.6.0.6
"AVerMedia DVD EZMaker Gold" = AVerMedia DVD EZMaker Gold 3.6.0.8
"AVerMedia MCE Encoder x86" = AVerMedia MCE Encoder x86 3.0.1.6
"Cities of Earth 3D Screensaver_is1" = Cities of Earth 3D Screensaver v. 2.1
"Coiffeur" = Kadeřník
"conduitEngine" = Conduit Engine
"DAEMON Tools Lite" = DAEMON Tools Lite
"Deer Avenger 4" = Deer Avenger 4
"Defraggler" = Defraggler (remove only)
"Diktáty ČJ_is1" = Diktáty 1.1
"GOM Player" = GOM Player
"Hellgate - London_is1" = Hellgate - London
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Ovladače zařízení
"InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"Internet Download Accelerator_is1" = Internet Download Accelerator version 5.11
"JDownloader" = JDownloader
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.9.0 (Basic)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Monster Jam_is1" = Monster Jam
"MultiRes (remove only)" = MultiRes (remove only)
"MyAshampoo Toolbar" = MyAshampoo Toolbar
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OSS Audio CD Maker_is1" = OSS Audio CD Maker 3.0.0.1
"PCI Audio Driver" = PCI Audio Driver
"Radeon Omega Drivers for Windows XP/2kv4.8.442" = Radeon Omega Drivers v4.8.442 Setup Files and Tools
"Spy Emergency_is1" = Spy Emergency 2009
"Vyjmenovaná slova (instalace na disk)" = Vyjmenovaná slova (instalace na disk)
"Zombie Shooter_is1" = Zombie Shooter
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 16.11.2011 4:34:02 | Computer Name = PETULA-F28A0597 | Source = Bonjour Service | ID = 100
Description =
Error - 16.11.2011 6:01:47 | Computer Name = PETULA-F28A0597 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 9.0.0.4503, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3011
Description = Nezdařilo se uvolnění řetězců čítače výkonu pro WmiApRpl (WmiApRpl).
Kód chyby je v první hodnotě DWORD v datové oblasti.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3011
Description = Nezdařilo se uvolnění řetězců čítače výkonu pro WmiApRpl (WmiApRpl).
Kód chyby je v první hodnotě DWORD v datové oblasti.
Error - 17.11.2011 6:46:41 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 6:46:41 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
[ System Events ]
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 10:39:41 | Computer Name = PETULA-F28A0597 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.
Error - 7.1.2012 10:39:42 | Computer Name = PETULA-F28A0597 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%5
Error - 9.1.2012 4:51:51 | Computer Name = PETULA-F28A0597 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.
Error - 9.1.2012 4:51:52 | Computer Name = PETULA-F28A0597 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%5
< End of report >
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\peta.PETULA-F28A0597\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
1,25 Gb Total Physical Memory | 0,68 Gb Available Physical Memory | 54,08% Memory free
3,11 Gb Paging File | 2,81 Gb Available in Paging File | 90,35% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 104,83 Gb Total Space | 14,79 Gb Free Space | 14,11% Space Free | Partition Type: NTFS
Drive I: | 2,64 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: PETULA-F28A0597 | User Name: peta | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- "C:\Program Files\Opera\Opera.exe" "%1"
[HKEY_USERS\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1"
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Program Files\Activision Value\Baja 1000\Baja.exe" = C:\Program Files\Activision Value\Baja 1000\Baja.exe:*:Enabled:Baja
"C:\Program Files\Innonics\Wiggles\Wiggles.exe" = C:\Program Files\Innonics\Wiggles\Wiggles.exe:*:Enabled:Wiggles -- (SEK-Ost)
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)
"C:\WINDOWS\KMSEmulator.exe" = C:\WINDOWS\KMSEmulator.exe:*:Enabled:KMSEmulator -- ()
"C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe" = C:\Documents and Settings\peta.PETULA-F28A0597\Dokumenty\Downloads\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY\OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY.exe:*:Enabled:OSS.Audio.CD.Maker.3.0.0.1.patch.by.FUTURiTY
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{23CA9123-B1AA-C4B6-6997-7756BBAEC461}" = AMD Catalyst Install Manager
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 29
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{41E340F0-0BD6-4A87-AF29-E9E584471756}" = VideoMate T, M, S Series Driver
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{58005385-C433-4B89-BFA5-484A7C315C55}_is1" = Vypalovač CD / DVD / Blu-ray / HD-DVD 1.25
"{5AAA952E-B15E-47E0-94E4-DD6DC7B9C796}_is1" = Kobra 11 Nitro
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8EDBA74D-0686-4C99-BFDD-F894678E5102}" = Adobe Common File Installer
"{90140000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 14
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2010
"{90140000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2010
"{90140000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2010
"{90140000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2010
"{90140000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2010
"{90140000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2010
"{90140000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2010
"{90140000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2010
"{90140000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2010
"{90140000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2010
"{90140000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2010
"{90140000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2010
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{97AA0C55-AFAD-4126-B21C-F1318FB6DADA}" = RTLSetup
"{993A94A9-DCE3-4774-B35D-D8C74FC1E0BE}" = Royale Remixed Theme
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Czech
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FAB43061-FEFB-46E8-A159-96710395DB5E}" = OpenOffice.org 3.2
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{Ledova kralovna 3 - Vrani carodejka}_is1" = Ledová královna 3 - Vraní čarodějka 1.1
"7-Zip" = 7-Zip 9.21beta
"Adobe AIR" = Adobe AIR
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Astroburn Lite" = Astroburn Lite
"ATI Display Driver" = ATI Display Driver (Omega 3.8.442)
"AVerMedia A16D PCI Hybrid DVB-T" = AVerMedia A16D PCI Hybrid DVB-T 3.6.0.6
"AVerMedia DVD EZMaker Gold" = AVerMedia DVD EZMaker Gold 3.6.0.8
"AVerMedia MCE Encoder x86" = AVerMedia MCE Encoder x86 3.0.1.6
"Cities of Earth 3D Screensaver_is1" = Cities of Earth 3D Screensaver v. 2.1
"Coiffeur" = Kadeřník
"conduitEngine" = Conduit Engine
"DAEMON Tools Lite" = DAEMON Tools Lite
"Deer Avenger 4" = Deer Avenger 4
"Defraggler" = Defraggler (remove only)
"Diktáty ČJ_is1" = Diktáty 1.1
"GOM Player" = GOM Player
"Hellgate - London_is1" = Hellgate - London
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Ovladače zařízení
"InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"Internet Download Accelerator_is1" = Internet Download Accelerator version 5.11
"JDownloader" = JDownloader
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.9.0 (Basic)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Monster Jam_is1" = Monster Jam
"MultiRes (remove only)" = MultiRes (remove only)
"MyAshampoo Toolbar" = MyAshampoo Toolbar
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OSS Audio CD Maker_is1" = OSS Audio CD Maker 3.0.0.1
"PCI Audio Driver" = PCI Audio Driver
"Radeon Omega Drivers for Windows XP/2kv4.8.442" = Radeon Omega Drivers v4.8.442 Setup Files and Tools
"Spy Emergency_is1" = Spy Emergency 2009
"Vyjmenovaná slova (instalace na disk)" = Vyjmenovaná slova (instalace na disk)
"Zombie Shooter_is1" = Zombie Shooter
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1275210071-1659004503-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 16.11.2011 4:34:02 | Computer Name = PETULA-F28A0597 | Source = Bonjour Service | ID = 100
Description =
Error - 16.11.2011 6:01:47 | Computer Name = PETULA-F28A0597 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace wmplayer.exe, verze 9.0.0.4503, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 16.11.2011 15:26:21 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3011
Description = Nezdařilo se uvolnění řetězců čítače výkonu pro WmiApRpl (WmiApRpl).
Kód chyby je v první hodnotě DWORD v datové oblasti.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 4:13:11 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3011
Description = Nezdařilo se uvolnění řetězců čítače výkonu pro WmiApRpl (WmiApRpl).
Kód chyby je v první hodnotě DWORD v datové oblasti.
Error - 17.11.2011 6:46:41 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
Error - 17.11.2011 6:46:41 | Computer Name = PETULA-F28A0597 | Source = LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance rozšíření zprostředkovatele čítačů. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.
[ System Events ]
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 6:16:47 | Computer Name = PETULA-F28A0597 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .
Error - 7.1.2012 10:39:41 | Computer Name = PETULA-F28A0597 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.
Error - 7.1.2012 10:39:42 | Computer Name = PETULA-F28A0597 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%5
Error - 9.1.2012 4:51:51 | Computer Name = PETULA-F28A0597 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.
Error - 9.1.2012 4:51:52 | Computer Name = PETULA-F28A0597 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%5
< End of report >
Re: Nejdou hry
Prosím, mohl by mi tu někdo pomoci??(odpovědět) 
Re: Nejdou hry
Omlouvám se, jen prostě nestíhám .
Odinstalujte Spy Emergency
Spustte OTL
-do bílého okna dole skopírujte tento skript:
-klikněte na tlačítko opravit.
-Následně se pc restartuje.
- Log vložte zde
. Odinstalujte Spy Emergency Spustte OTL-do bílého okna dole skopírujte tento skript:
Kód: Vybrat vše
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:1AAB2E68
O3 - HKLM\..\Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - No CLSID value found.
O4 - HKU\S-1-5-21-1275210071-1659004503-1177238915-1003..\Run: [SpyEmergency] C:\Program Files\NETGATE\Spy Emergency 2009\SpyEmergency.exe (NETGATE Technologies s.r.o.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\Setup_ver1.1779.2.exe
C:\Documents and Settings\peta\Data aplikací\Spy Emergency
C:\Documents and Settings\peta\Data aplikací\Toolbar4
C:\WINDOWS\AutoKMS.exe
C:\WINDOWS\AutoKMS.ini
C:\WINDOWS\KMSEmulator.exe
C:\Documents and Settings\peta.PETULA-F28A0597\Local Settings\Data aplikací\ConduitEngine
C:\Program Files\ConduitEngine
C:\Program Files\NETGATE
:commands
[emptytemp]
[EMPTYFLASH]
[Reboot]-klikněte na tlačítko opravit.
-Následně se pc restartuje.
- Log vložte zde
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde
K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Nejdou hry
Dalo mi to hodně práce přebrat soubory, které smazat a které vypálit, aspoň jsem si v tom udělala pořádek . Abych mohla naformátovat HDD a znovu nainstalovat můj legální windows.
Tím jsem si problém vyřešila, za 10 hodin.
Jediné co jsem vyřešila zde:
1) legálnost mého windows
2) nic
Příště bych byla spokojenější s jiným moderátorem.
. Abych mohla naformátovat HDD a znovu nainstalovat můj legální windows.Tím jsem si problém vyřešila, za 10 hodin.
Jediné co jsem vyřešila zde:
1) legálnost mého windows
2) nic
Příště bych byla spokojenější s jiným moderátorem.
Přispějete na provoz fóra?