Firefox i chrome jsou pomalé vytěžují procesor na 100%

[petatape]

Je to stále stejné, jak chrome tak mozila.
Nemohu mít někde ňákou potvoru??

[motji]

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[petatape]

ComboFix 12-03-17.01 - petr 18.03.2012 21:00:58.10.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.939 [GMT 1:00]
Spuštěný z: c:\documents and settings\petr\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msmqinst.log
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-18 do 2012-03-18 )))))))))))))))))))))))))))))))
.
.
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-12 17:20 . 2011-10-14 21:09 1859968 ----a-w- c:\windows\system32\win32k.sys
2011-09-30 22:37 . 2011-05-06 18:42 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-12-26_14.18.45 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-03-18 17:50 . 2012-03-18 17:50 16384 c:\windows\temp\Perflib_Perfdata_728.dat
- 2007-01-29 08:58 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
+ 2007-01-29 08:58 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
+ 2007-03-25 18:08 . 2008-11-07 17:55 26144 c:\windows\system32\spupdsvc.exe
+ 2012-01-10 16:05 . 2008-11-07 17:55 16928 c:\windows\system32\spmsgXP_2k3.dll
- 2007-08-11 10:41 . 2011-08-12 11:51 18296 c:\windows\system32\spmsg.dll
+ 2007-08-11 10:41 . 2010-07-05 13:13 18296 c:\windows\system32\spmsg.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\pngfilt.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\pngfilt.dll
- 2001-10-25 14:00 . 2011-11-26 23:08 72464 c:\windows\system32\perfc009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 72464 c:\windows\system32\perfc009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 84270 c:\windows\system32\perfc005.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 84270 c:\windows\system32\perfc005.dat
+ 2004-08-17 13:49 . 2011-11-20 06:12 60416 c:\windows\system32\packager.exe
+ 2010-06-11 12:19 . 2011-08-17 08:57 75264 c:\windows\system32\nmwcdcls.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 52224 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 52224 c:\windows\system32\msfeedsbs.dll
- 2004-08-17 13:49 . 2008-04-14 03:21 23040 c:\windows\system32\mciseq.dll
+ 2004-08-17 13:49 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 27648 c:\windows\system32\jsproxy.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 27648 c:\windows\system32\jsproxy.dll
+ 2007-08-13 17:39 . 2011-12-16 12:22 13824 c:\windows\system32\ieudinit.exe
- 2007-08-13 17:39 . 2011-08-17 12:21 13824 c:\windows\system32\ieudinit.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\iernonce.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\iernonce.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 78336 c:\windows\system32\ieencode.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 78336 c:\windows\system32\ieencode.dll
+ 2004-08-17 13:49 . 2011-12-16 12:22 70656 c:\windows\system32\ie4uinit.exe
- 2004-08-17 13:49 . 2011-08-17 12:21 70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-13 17:36 . 2011-12-19 08:08 63488 c:\windows\system32\icardie.dll
- 2007-08-13 17:36 . 2011-08-17 21:25 63488 c:\windows\system32\icardie.dll
+ 2009-07-14 09:35 . 2009-07-14 09:35 37608 c:\windows\system32\drivers\wdfldr.sys
+ 2011-08-17 08:56 . 2011-08-17 08:56 18176 c:\windows\system32\drivers\ccdcmb.sys
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\pngfilt.dll
+ 2011-11-20 06:12 . 2011-11-20 06:12 60416 c:\windows\system32\dllcache\packager.exe
+ 2007-12-15 15:44 . 2011-12-19 08:08 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-12-15 15:44 . 2011-12-16 12:22 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2007-12-15 15:44 . 2011-08-17 12:21 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2009-02-20 17:13 . 2011-12-19 08:08 78336 c:\windows\system32\dllcache\ieencode.dll
- 2009-02-20 17:13 . 2011-08-17 21:25 78336 c:\windows\system32\dllcache\ieencode.dll
- 2004-08-17 13:49 . 2011-08-17 12:21 70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2004-08-17 13:49 . 2011-12-16 12:22 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-12-15 15:44 . 2011-08-17 21:25 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 63488 c:\windows\system32\dllcache\icardie.dll
+ 2009-12-14 07:10 . 2011-10-28 05:32 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2009-12-14 07:10 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2009-06-29 15:59 . 2011-12-19 08:08 17408 c:\windows\system32\dllcache\corpol.dll
- 2009-06-29 15:59 . 2011-08-17 21:25 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-17 13:49 . 2011-10-28 05:32 33280 c:\windows\system32\csrsrv.dll
- 2004-08-17 13:49 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 17408 c:\windows\system32\corpol.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 17408 c:\windows\system32\corpol.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2003-02-20 20:10 . 2003-02-20 20:10 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2004-07-15 01:11 . 2004-07-15 01:11 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2009-06-24 18:56 . 2009-06-24 18:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2003-02-21 07:24 . 2003-02-21 07:24 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2011-12-25 10:07 . 2011-12-25 10:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2004-07-14 23:35 . 2004-07-14 23:35 66560 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\PerfCounter.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorsn.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\CORPerfMonExt.dll
+ 2004-07-14 23:34 . 2004-07-14 23:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_PerfCounter.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorsn.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_CORPerfMonExt.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2004-07-14 23:34 . 2004-07-14 23:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2007-01-15 15:11 . 2007-01-15 15:11 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
- 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2004-07-14 23:33 . 2004-07-14 23:33 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
- 2003-02-21 07:25 . 2003-02-21 07:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2004-07-15 13:28 . 2004-07-15 13:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
- 2003-02-21 07:25 . 2003-02-21 07:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2004-07-15 13:28 . 2004-07-15 13:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
- 2003-02-21 07:24 . 2003-02-21 07:24 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2003-10-08 13:30 . 2003-10-08 13:30 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
- 2003-02-21 10:20 . 2003-02-21 10:20 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2004-07-15 10:23 . 2004-07-15 10:23 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2011-12-24 21:55 . 2011-12-24 21:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2003-02-20 19:19 . 2003-02-20 19:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2011-12-24 22:49 . 2011-12-24 22:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2003-02-20 19:19 . 2003-02-20 19:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-15 00:49 . 2004-07-15 00:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-15 00:49 . 2004-07-15 00:49 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
- 2003-02-20 19:19 . 2003-02-20 19:19 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2011-12-24 22:49 . 2011-12-24 22:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 19:19 . 2003-02-20 19:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 44544 c:\windows\ie7updates\KB2647516-IE7\pngfilt.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 52224 c:\windows\ie7updates\KB2647516-IE7\msfeedsbs.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 27648 c:\windows\ie7updates\KB2647516-IE7\jsproxy.dll
+ 2012-03-07 07:02 . 2011-08-17 12:21 13824 c:\windows\ie7updates\KB2647516-IE7\ieudinit.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 44544 c:\windows\ie7updates\KB2647516-IE7\iernonce.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 78336 c:\windows\ie7updates\KB2647516-IE7\ieencode.dll
+ 2012-03-07 07:02 . 2011-08-17 12:21 70656 c:\windows\ie7updates\KB2647516-IE7\ie4uinit.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 63488 c:\windows\ie7updates\KB2647516-IE7\icardie.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 17408 c:\windows\ie7updates\KB2647516-IE7\corpol.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_ab33a82a\System.Drawing.Design.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_88e941e6\CustomMarshalers.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\31b65443e56a470d199f293085576e05\System.Web.DynamicData.Design.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-03-07 07:44 . 2012-03-07 07:44 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe
+ 2012-03-07 07:41 . 2012-03-07 07:41 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 66560 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 90112 c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-01-10 16:05 . 2009-07-13 15:49 47104 c:\windows\$NtUninstallWdf01009$\spuninst\KmdfCustom.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 8192 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-14 21:14 . 2011-10-14 21:14 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 8192 c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2004-08-17 13:49 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
+ 2004-08-17 13:49 . 2011-11-25 21:57 293376 c:\windows\system32\winsrv.dll
+ 2004-08-17 13:49 . 2011-10-14 14:47 174592 c:\windows\system32\winmm.dll
- 2004-08-17 13:49 . 2008-04-14 03:22 174592 c:\windows\system32\winmm.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 832512 c:\windows\system32\wininet.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 832512 c:\windows\system32\wininet.dll
+ 2004-08-17 13:49 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
- 2004-08-17 13:49 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 233472 c:\windows\system32\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 233472 c:\windows\system32\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 106496 c:\windows\system32\url.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 106496 c:\windows\system32\url.dll
+ 2004-08-17 13:49 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll
+ 2004-08-17 13:49 . 2011-11-03 15:29 386560 c:\windows\system32\qdvd.dll
- 2004-08-17 13:49 . 2008-04-14 03:21 386560 c:\windows\system32\qdvd.dll
+ 2001-10-25 14:00 . 2012-03-07 07:39 444206 c:\windows\system32\perfh009.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 444206 c:\windows\system32\perfh009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 440934 c:\windows\system32\perfh005.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 440934 c:\windows\system32\perfh005.dat
+ 2004-08-17 13:49 . 2011-12-19 08:08 102912 c:\windows\system32\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 102912 c:\windows\system32\occache.dll
+ 2011-08-17 08:57 . 2011-08-17 08:57 605696 c:\windows\system32\nmwcdcocls.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 671232 c:\windows\system32\mstime.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 671232 c:\windows\system32\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 193024 c:\windows\system32\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 193024 c:\windows\system32\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 478720 c:\windows\system32\mshtmled.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 478720 c:\windows\system32\mshtmled.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 468480 c:\windows\system32\msfeeds.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 468480 c:\windows\system32\msfeeds.dll
- 2007-03-23 16:36 . 2011-05-02 15:32 692736 c:\windows\system32\inetcomm.dll
+ 2007-03-23 16:36 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll
- 2007-08-13 17:34 . 2011-08-17 21:25 268288 c:\windows\system32\iertutil.dll
+ 2007-08-13 17:34 . 2011-12-19 08:08 268288 c:\windows\system32\iertutil.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 192512 c:\windows\system32\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 192512 c:\windows\system32\iepeers.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 384512 c:\windows\system32\iedkcs32.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-11 11:27 . 2011-08-17 21:25 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-11 11:27 . 2011-12-19 08:08 380928 c:\windows\system32\ieapfltr.dll
- 2001-10-25 14:00 . 2011-08-17 11:00 161792 c:\windows\system32\ieakui.dll
+ 2001-10-25 14:00 . 2011-12-16 10:58 161792 c:\windows\system32\ieakui.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 230400 c:\windows\system32\ieaksie.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 153088 c:\windows\system32\ieakeng.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 153088 c:\windows\system32\ieakeng.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 133120 c:\windows\system32\extmgr.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 133120 c:\windows\system32\extmgr.dll
+ 2004-08-17 13:49 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
- 2004-08-17 13:49 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 214528 c:\windows\system32\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 214528 c:\windows\system32\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 347136 c:\windows\system32\dxtmsft.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 347136 c:\windows\system32\dxtmsft.dll
+ 2009-07-14 09:35 . 2009-07-14 09:35 444136 c:\windows\system32\drivers\wdf01000.sys
- 2010-06-18 17:47 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2010-06-18 17:47 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 174592 c:\windows\system32\dllcache\winmm.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 832512 c:\windows\system32\dllcache\wininet.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 832512 c:\windows\system32\dllcache\wininet.dll
- 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2008-12-16 12:32 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 106496 c:\windows\system32\dllcache\url.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 106496 c:\windows\system32\dllcache\url.dll
+ 2008-12-05 06:57 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll
+ 2009-05-01 08:48 . 2011-11-03 15:29 386560 c:\windows\system32\dllcache\qdvd.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 193024 c:\windows\system32\dllcache\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 193024 c:\windows\system32\dllcache\msrating.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 478720 c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 478720 c:\windows\system32\dllcache\mshtmled.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 468480 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 468480 c:\windows\system32\dllcache\msfeeds.dll
- 2008-08-14 10:36 . 2011-05-02 15:32 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2008-08-14 10:36 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2007-03-23 16:36 . 2011-12-16 11:00 634680 c:\windows\system32\dllcache\iexplore.exe
- 2007-12-15 15:44 . 2011-08-17 21:25 268288 c:\windows\system32\dllcache\iertutil.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 268288 c:\windows\system32\dllcache\iertutil.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2001-10-25 14:00 . 2011-12-16 10:58 161792 c:\windows\system32\dllcache\ieakui.dll
- 2001-10-25 14:00 . 2011-08-17 11:00 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 230400 c:\windows\system32\dllcache\ieaksie.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 153088 c:\windows\system32\dllcache\ieakeng.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 133120 c:\windows\system32\dllcache\extmgr.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 133120 c:\windows\system32\dllcache\extmgr.dll
- 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
+ 2011-02-09 13:53 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2011-09-03 10:17 . 2011-09-09 09:12 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2011-09-28 07:06 602112 c:\windows\system32\dllcache\crypt32.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 124928 c:\windows\system32\dllcache\advpack.dll
- 2004-08-17 13:49 . 2011-09-09 09:12 602112 c:\windows\system32\crypt32.dll
+ 2004-08-17 13:49 . 2011-09-28 07:06 602112 c:\windows\system32\crypt32.dll
+ 2011-08-17 08:57 . 2011-08-17 08:57 123904 c:\windows\system32\ccdcmbwu.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 124928 c:\windows\system32\advpack.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 124928 c:\windows\system32\advpack.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2004-07-15 10:23 . 2004-07-15 10:23 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- 2003-02-21 10:20 . 2003-02-21 10:20 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2004-07-15 13:31 . 2004-07-15 13:31 573440 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
- 2003-02-21 07:27 . 2003-02-21 07:27 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
- 2003-02-21 07:27 . 2003-02-21 07:27 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 372736 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 303104 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2004-07-14 23:35 . 2004-07-14 23:35 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2003-02-21 04:42 . 2003-02-21 04:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\msvcr71.dll
+ 2003-02-20 19:06 . 2003-02-20 19:06 311296 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorjit.dll
+ 2003-02-20 19:06 . 2003-02-20 19:06 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\fusion.dll
+ 2003-02-20 19:19 . 2003-02-20 19:19 253952 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\aspnet_isapi.dll
+ 2003-02-21 04:42 . 2003-02-21 04:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_msvcr71.dll
+ 2004-07-14 23:25 . 2004-07-14 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorjit.dll
+ 2004-07-14 23:24 . 2004-07-14 23:24 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_fusion.dll
+ 2004-07-15 00:49 . 2004-07-15 00:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_aspnet_isapi.dll
+ 2004-07-14 23:33 . 2004-07-14 23:33 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 720896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2004-07-14 23:35 . 2004-07-14 23:35 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
- 2003-02-20 19:06 . 2003-02-20 19:06 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2004-07-14 23:24 . 2004-07-14 23:24 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
- 2003-02-21 10:21 . 2003-02-21 10:21 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2004-07-15 10:23 . 2004-07-15 10:23 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2011-12-24 22:49 . 2011-12-24 22:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2012-01-20 18:28 . 2012-01-20 18:28 605696 c:\windows\Installer\9fcb4.msi
+ 2011-12-25 04:40 . 2011-12-25 04:40 819200 c:\windows\Installer\7367e.msp
+ 2012-03-07 07:02 . 2011-08-17 21:25 832512 c:\windows\ie7updates\KB2647516-IE7\wininet.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 233472 c:\windows\ie7updates\KB2647516-IE7\webcheck.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 106496 c:\windows\ie7updates\KB2647516-IE7\url.dll
+ 2012-03-07 07:03 . 2010-07-05 13:13 391032 c:\windows\ie7updates\KB2647516-IE7\spuninst\updspapi.dll
+ 2012-03-07 07:03 . 2010-07-05 13:13 233848 c:\windows\ie7updates\KB2647516-IE7\spuninst\spuninst.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 102912 c:\windows\ie7updates\KB2647516-IE7\occache.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 671232 c:\windows\ie7updates\KB2647516-IE7\mstime.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 193024 c:\windows\ie7updates\KB2647516-IE7\msrating.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 478720 c:\windows\ie7updates\KB2647516-IE7\mshtmled.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 468480 c:\windows\ie7updates\KB2647516-IE7\msfeeds.dll
+ 2012-03-07 07:02 . 2011-08-17 11:01 634632 c:\windows\ie7updates\KB2647516-IE7\iexplore.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 268288 c:\windows\ie7updates\KB2647516-IE7\iertutil.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 192512 c:\windows\ie7updates\KB2647516-IE7\iepeers.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 384512 c:\windows\ie7updates\KB2647516-IE7\iedkcs32.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 380928 c:\windows\ie7updates\KB2647516-IE7\ieapfltr.dll
+ 2012-03-07 07:02 . 2011-08-17 11:00 161792 c:\windows\ie7updates\KB2647516-IE7\ieakui.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 230400 c:\windows\ie7updates\KB2647516-IE7\ieaksie.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 153088 c:\windows\ie7updates\KB2647516-IE7\ieakeng.dll
+ 2012-03-07 07:03 . 2011-08-17 21:25 133120 c:\windows\ie7updates\KB2647516-IE7\extmgr.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 214528 c:\windows\ie7updates\KB2647516-IE7\dxtrans.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 347136 c:\windows\ie7updates\KB2647516-IE7\dxtmsft.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 124928 c:\windows\ie7updates\KB2647516-IE7\advpack.dll

[petatape]

+ 2012-03-07 19:02 . 2012-03-07 19:02 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_6e64ce08\System.Drawing.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_085c5ac5\System.Drawing.Design.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_5307889b\CustomMarshalers.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe
+ 2012-03-07 07:58 . 2012-03-07 07:58 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\4ad8369d6a60765d7e9b43cdf9023f41\WindowsFormsIntegration.ni.dll
+ 2012-03-07 07:58 . 2012-03-07 07:58 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fc63b434b2f253cd27625487f7b02ac0\System.Web.Routing.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\86650d4fb220f94f25bb5da42a03d454\System.Web.Extensions.Design.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\654465871e547e131668874de7c60b8c\System.Web.Entity.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f0d6895f6e709d425cb5da6053c603d2\System.Web.Entity.Design.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3f3b7dc7208e302e39a2dfb5b2cb953b\System.Web.DynamicData.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\e9cddd213343f15d611b14620d649bb0\System.Web.Abstractions.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e9ae7ae6d1e9edc7aaf819889cd1c692\System.Drawing.Design.ni.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll
+ 2012-03-07 08:28 . 2012-03-07 08:28 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4ac9ac2326720485aefd4d79d2024945\System.Data.Entity.Design.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe
+ 2012-03-07 08:22 . 2012-03-07 08:22 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\edec83be646eb52204c991371751a428\ServiceModelReg.ni.exe
+ 2012-03-07 07:47 . 2012-03-07 07:47 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe
+ 2012-03-07 08:22 . 2012-03-07 08:22 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe
+ 2012-03-07 08:02 . 2012-03-07 08:02 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\25ce400b547f517258c8afb0480390ea\AspNetMMCExt.ni.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 573440 c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 372736 c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 303104 c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 720896 c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-01-10 16:05 . 2008-11-07 17:55 382496 c:\windows\$NtUninstallWdf01009$\spuninst\updspapi.dll
+ 2012-01-10 16:05 . 2008-11-07 17:55 231456 c:\windows\$NtUninstallWdf01009$\spuninst\spuninst.exe
+ 2011-05-18 06:09 . 2011-05-18 06:09 1461992 c:\windows\system32\wdfcoinstaller01009.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 1168896 c:\windows\system32\urlmon.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 1168896 c:\windows\system32\urlmon.dll
+ 2004-08-17 13:49 . 2011-11-03 15:29 1294848 c:\windows\system32\quartz.dll
+ 2004-08-17 13:49 . 2011-11-01 16:07 1288192 c:\windows\system32\ole32.dll
+ 2004-08-17 13:45 . 2011-10-26 10:49 2150912 c:\windows\system32\ntoskrnl.exe
- 2004-08-17 13:45 . 2010-12-09 15:14 2150912 c:\windows\system32\ntoskrnl.exe
+ 2004-08-17 15:45 . 2011-10-26 10:49 2029056 c:\windows\system32\ntkrnlpa.exe
- 2004-08-17 15:45 . 2010-12-09 15:14 2029056 c:\windows\system32\ntkrnlpa.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 3616768 c:\windows\system32\mshtml.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 6076416 c:\windows\system32\ieframe.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 6076416 c:\windows\system32\ieframe.dll
- 2007-03-23 00:27 . 2011-07-13 18:21 2159064 c:\windows\system32\FNTCACHE.DAT
+ 2007-03-23 00:27 . 2012-03-07 07:54 2159064 c:\windows\system32\FNTCACHE.DAT
+ 2008-10-16 15:58 . 2012-01-12 17:20 1859968 c:\windows\system32\dllcache\win32k.sys
+ 2004-08-17 13:49 . 2011-12-19 08:08 1168896 c:\windows\system32\dllcache\urlmon.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2008-05-07 05:12 . 2011-11-03 15:29 1294848 c:\windows\system32\dllcache\quartz.dll
+ 2010-07-16 12:00 . 2011-11-01 16:07 1288192 c:\windows\system32\dllcache\ole32.dll
- 2008-10-16 15:58 . 2010-12-09 15:14 2194944 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2194944 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 3616768 c:\windows\system32\dllcache\mshtml.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 6076416 c:\windows\system32\dllcache\ieframe.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 6076416 c:\windows\system32\dllcache\ieframe.dll
+ 2011-12-25 02:50 . 2011-12-25 02:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-10-26 02:39 . 2011-10-26 02:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2004-07-15 07:15 . 2004-07-15 07:15 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
- 2003-02-21 05:04 . 2003-02-21 05:04 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 1339392 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2011-12-25 10:07 . 2011-12-25 10:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 1703936 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2004-07-15 13:32 . 2004-07-15 13:32 1294336 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2003-02-20 19:08 . 2003-02-20 19:08 2482176 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorwks.dll
+ 2003-02-20 19:07 . 2003-02-20 19:07 2494464 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorsvr.dll
+ 2003-02-21 07:26 . 2003-02-21 07:26 2088960 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorlib.dll
+ 2004-07-14 23:28 . 2004-07-14 23:28 2502656 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorwks.dll
+ 2004-07-14 23:26 . 2004-07-14 23:26 2510848 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorsvr.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 2138112 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorlib.dll
+ 2011-12-24 21:54 . 2011-12-24 21:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2011-12-26 08:59 . 2011-12-26 08:59 4368896 c:\windows\Installer\73677.msp
+ 2011-10-30 21:54 . 2011-10-30 21:54 2748416 c:\windows\Installer\2df2a7.msp
+ 2012-03-07 07:02 . 2011-08-17 21:25 1168896 c:\windows\ie7updates\KB2647516-IE7\urlmon.dll
+ 2012-03-07 07:02 . 2011-09-05 07:45 3615744 c:\windows\ie7updates\KB2647516-IE7\mshtml.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 6076416 c:\windows\ie7updates\KB2647516-IE7\ieframe.dll
- 2008-10-16 15:58 . 2010-12-09 15:14 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-03-07 19:00 . 2012-03-07 19:00 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_e43bccd7\System.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_062dc3a2\System.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_75784bb4\System.Xml.dll
+ 2012-03-07 19:01 . 2012-03-07 19:01 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_6c4a46ec\System.Xml.dll
+ 2012-03-07 19:01 . 2012-03-07 19:01 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c3eef29e\System.Windows.Forms.dll
+ 2012-03-07 19:05 . 2012-03-07 19:05 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_aa12827b\System.Windows.Forms.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_41b46906\System.Drawing.dll
+ 2012-03-07 19:02 . 2012-03-07 19:02 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b153217a\System.Design.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_a004ee26\System.Design.dll
+ 2012-03-07 19:07 . 2012-03-07 19:07 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d85b6220\mscorlib.dll
+ 2012-03-07 19:03 . 2012-03-07 19:03 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_690bd075\mscorlib.dll
+ 2012-03-07 07:42 . 2012-03-07 07:42 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll
+ 2012-03-07 07:58 . 2012-03-07 07:58 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll
+ 2012-03-07 07:41 . 2012-03-07 07:41 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
+ 2012-03-07 07:57 . 2012-03-07 07:57 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c4c671c737b553db8e07664816475333\System.WorkflowServices.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\80a288b6611668160334668cc2608e4a\System.Workflow.ComponentModel.ni.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\4c27548df5897320840ee0d65db38742\System.Workflow.Activities.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\030cde14924eefebc06c240dbfe093a4\System.Web.Mobile.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6379c8ca8ae11effb415139990923ff1\System.Web.Extensions.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e456140d5d6c43d7383bd36d3f9e12c6\System.Speech.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d51e6bb07124a1d780d1e024858e0dc1\System.Printing.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\707a05a7d5a8d99dd56d1d50311a60d2\System.Deployment.ni.dll
+ 2012-03-07 07:48 . 2012-03-07 07:48 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll
+ 2012-03-07 07:49 . 2012-03-07 07:49 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll
+ 2012-03-07 08:28 . 2012-03-07 08:28 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\424160369b301ccd1b6fd86265611955\System.Data.Entity.ni.dll
+ 2012-03-07 07:48 . 2012-03-07 07:48 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll
+ 2012-03-07 07:47 . 2012-03-07 07:47 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\33cdfb4c322a528260016ac759230501\ReachFramework.ni.dll
+ 2012-03-07 07:47 . 2012-03-07 07:47 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a6def83aee1aaf3336675ce58ac09013\PresentationUI.ni.dll
+ 2012-03-07 07:41 . 2012-03-07 07:41 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\59cd6ce5a254006179eee92952cd2272\PresentationBuildTasks.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\96e485c02ad346a2bd26a635e7fcb023\Microsoft.VisualBasic.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\912789fd859e0887e10a935cade08e72\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6c1d3eec78906cc2a2ecffb013114c50\Microsoft.Build.Tasks.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 07:00 . 2012-03-07 07:00 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2010-10-06 13:31 . 2010-10-06 13:31 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 1339392 c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
+ 2012-03-07 18:59 . 2012-03-07 18:59 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 1703936 c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 1294336 c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
+ 2007-03-27 18:29 . 2012-01-26 22:20 52550552 c:\windows\system32\MRT.exe
+ 2011-12-26 16:02 . 2011-12-26 16:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp
+ 2012-03-07 08:40 . 2012-03-07 08:40 15256576 c:\windows\Installer\2c000e.msp
+ 2012-03-06 22:53 . 2012-03-06 22:53 19210240 c:\windows\Installer\1337dfa.msp
+ 2011-12-26 08:02 . 2011-12-26 08:02 19677184 c:\windows\Installer\10851dd.msp
+ 2012-03-07 07:57 . 2012-03-07 07:57 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c8f8fb506c32500acc1b6190d054f26\System.Design.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5060105fb9e169399fe45600b1e9215e\PresentationFramework.ni.dll
+ 2012-03-07 07:44 . 2012-03-07 07:44 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KeySpy"="c:\documents and settings\petr\Plocha\finest group\KeySpy\KeySpy.exe" [2007-04-07 217088]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"nwiz"="nwiz.exe" [2008-05-16 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-11-28 3744552]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe [2008-12-17 295606]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)
"NoSecurityTab"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSecurityTab"= 1 (0x1)
"HonorAutoRunSetting"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MDM"=2 (0x2)
"LVPrcSrv"=2 (0x2)
"btwdins"=2 (0x2)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
"<NO NAME>"=
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" /hide
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"Print2PDF Print Monitor"="c:\program files\Software602\Print2PDF\Print2PDF.exe" /server
"igfxtray"=c:\windows\system32\igfxtray.exe
"igfxhkcmd"=c:\windows\system32\hkcmd.exe
"igfxpers"=c:\windows\system32\igfxpers.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\dc++strong\\sdc21\\StrongDC.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\squid\\ncftpput.exe"=
"c:\\Casino\\ParadiseCasino\\casino.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"c:\\Program Files\\Common Files\\EPSON\\EBAPI\\eEBSvc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [16.9.2011 22:08 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [19.7.2008 20:06 314456]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 9:28 85344]
R2 Aladdin SQL Server;Aladdin SQL Server;c:\program files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [27.9.2011 7:40 136192]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19.7.2008 20:06 20568]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [19.4.2010 12:45 1050440]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [25.2.2010 10:18 10064]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [11.6.2010 13:18 36608]
S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [17.8.2004 14:49 14336]
S3 TNET1130;802.11 b/g WLAN;c:\windows\system32\DRIVERS\tnet1130.sys --> c:\windows\system32\DRIVERS\tnet1130.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-18 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-583907252-362288127-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
.
2012-03-11 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-362288127-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.Google.com
uDefault_Search_URL = hxxp://www.Google.com
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = 127.0.0.1:3128
uSearchAssistant = hxxp://www.Google.com/
uCustomizeSearch = hxxp://www.Google.com/
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 178.77.254.254 77.48.100.254
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-18 22:05
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2012-03-18 22:32:57
ComboFix-quarantined-files.txt 2012-03-18 21:32
ComboFix2.txt 2011-12-26 14:35
ComboFix3.txt 2011-09-18 13:09
ComboFix4.txt 2011-09-18 09:26
ComboFix5.txt 2012-03-18 19:54
.
Před spuštěním: Volných bajtů: 14 003 666 944
Po spuštění: Volných bajtů: 14 151 618 560
.
- - End Of File - - 54763723A77951571256689BEF98A2E1


Najednou se to bohužel nevešlo.....

[motji]

Potvory nevidím, ted to vypadá jak?

[petatape]

bohužel je to stále stejné, jak chrome tak firefox zatěžují procesor v průměru na 70%, chvílemi na 100%. Je problém cokoli na PC udělat....

[motji]

Zkusíme ještě mrknout, zda OTL něco nevyhrabe

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

netsvcs
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

/md5start
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
hal.dll
logevent.dll
netlogon.dll
ntelogon.dll
scecli.dll
sceclt.dll
ws2_32.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
cdrom.sys
Changer.sys
fastfat.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
mv61xx.sys
ndis.sys
ntfs.sys
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
symmpi.sys
tcpip.sys
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
/md5stop

C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe


HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5 

- zaškrtněte okénko Pro všechny uživatele.
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde

[petatape]

OTL logfile created on: 26.3.2012 20:51:09 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 64,27% Memory free
2,84 Gb Paging File | 2,51 Gb Available in Paging File | 88,32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 13,21 Gb Free Space | 8,87% Space Free | Partition Type: NTFS

Computer Name: PETR-D455EAF4C9 | User Name: petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.03.26 20:48:44 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
PRC - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
PRC - [2012.01.20 07:35:36 | 001,047,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2011.11.28 20:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.11.28 20:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011.10.10 14:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2010.04.19 13:47:26 | 000,719,688 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2010.04.19 13:45:44 | 001,050,440 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2009.07.24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2008.07.26 09:23:42 | 000,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.04.07 12:25:28 | 000,217,088 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe
PRC - [2002.06.21 12:04:06 | 000,184,320 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe
PRC - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe


========== Modules (No Company Name) ==========

MOD - [2012.03.26 10:54:34 | 001,749,504 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12032601\algo.dll
MOD - [2012.03.25 20:46:55 | 001,749,504 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12032501\algo.dll
MOD - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
MOD - [2012.01.20 07:35:35 | 000,411,120 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\ppgooglenaclpluginchrome.dll
MOD - [2012.01.20 07:35:34 | 003,767,792 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\pdf.dll
MOD - [2012.01.20 07:34:10 | 000,122,880 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avutil-51.dll
MOD - [2012.01.20 07:34:09 | 000,222,208 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avformat-53.dll
MOD - [2012.01.20 07:34:07 | 001,746,432 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avcodec-53.dll
MOD - [2012.01.20 04:14:40 | 008,593,056 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\gcswf32.dll
MOD - [2009.04.27 23:49:26 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2008.07.26 09:24:04 | 000,068,120 | ---- | M] () -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVCSPS.dll
MOD - [2007.04.07 12:25:28 | 000,217,088 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe
MOD - [2002.04.05 00:07:00 | 000,286,720 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBNWDev.dll
MOD - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper_3004.dll -- (nosGetPlusHelper) getPlus(R)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () [Auto | Running] -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe -- (Aladdin SQL Server)
SRV - [2011.11.28 20:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.10.10 14:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2010.07.09 14:42:20 | 000,435,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.04.19 13:45:44 | 001,050,440 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009.07.24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2008.12.17 22:06:40 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.07.26 09:25:36 | 000,150,040 | ---- | M] (Logitech Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2008.07.26 09:23:42 | 000,186,904 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer)
SRV - [2004.03.31 18:13:32 | 000,135,168 | ---- | M] (WIDCOMM, Inc.) [Disabled | Stopped] -- C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2002.06.21 12:04:06 | 000,184,320 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe -- (EpsonBidirectionalAgent)
SRV - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\tnet1130.sys -- (TNET1130)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\petr\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Boot | Stopped] -- System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vbtenum.sys -- (BTHidEnum)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\btcusb.sys -- (Btcsrusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\blueletaudio.sys -- (BlueletAudio)
DRV - File not found [Kernel | Auto | Stopped] -- -- (adfs)
DRV - [2011.11.28 19:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 19:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 19:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 19:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 19:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 19:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 19:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.08.17 10:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.02.25 11:18:08 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008.07.26 17:26:22 | 000,041,752 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2008.07.26 17:25:48 | 000,627,864 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2008.07.26 17:22:34 | 002,570,520 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV - [2008.07.26 17:22:22 | 000,013,848 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter)
DRV - [2008.07.26 09:25:02 | 000,025,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2008.04.13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007.04.01 11:37:23 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.03.31 18:13:34 | 000,016,640 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2004.03.31 18:13:32 | 000,146,684 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2004.03.31 18:13:32 | 000,052,856 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2004.03.31 18:13:32 | 000,030,235 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004.03.31 18:13:30 | 001,260,106 | ---- | M] (WIDCOMM, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.Google.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://google.icq.com/search/search_frame.php
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.Google.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.Google.com/
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.Google.com/
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes,DefaultScope = search13
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... s}&locale=
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatche ... tbid=60342
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://www.icq.com/search/results.php?q ... &ch_id=osd
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\search13: "URL" = http://search13.net/search.php?q={searchTerms}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:3128

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.param.yahoo-fr: "megaup"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com"
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA80}:1.0.23
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA96}:1.0.5
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {4D144BC3-23FB-47de-90C5-63CCB0139CCF}:1.0
FF - prefs.js..network.proxy.share_proxy_settings: true


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nppl3260.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprpjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@software602.cz/602XML Filler: C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\{@alibaba.com/alisetup;version=1.0}: C:\Documents and Settings\petr\Local Settings\Data aplikací\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll (alibaba)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.09.01 17:26:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.01 00:37:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.11 13:24:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011.09.22 22:21:31 | 000,000,000 | ---D | M]

[2010.01.22 20:30:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Extensions
[2010.01.22 20:30:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.03.12 11:28:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\extensions
[2011.11.09 21:51:53 | 000,000,000 | ---D | M] (Feedback module) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a19}
[2007.04.09 18:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Sunbird\Profiles\7aoed1t2.default\extensions
[2010.04.01 13:43:47 | 000,002,251 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\askcom.xml
[2012.03.24 20:05:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-1.xml
[2008.09.24 20:57:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-2.xml
[2008.09.27 20:34:15 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-3.xml
[2008.11.15 10:21:07 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-4.xml
[2008.12.20 21:12:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-5.xml
[2009.02.04 15:16:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-6.xml
[2009.03.21 19:12:47 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-7.xml
[2008.07.09 23:35:48 | 000,000,962 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin.xml
[2011.09.05 07:50:31 | 000,001,575 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\web-search.xml
[2011.05.06 20:42:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.09.12 12:25:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA80}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA96}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{8675F4B3-2F19-11ED-2D6B-0800600C0A19}
[2009.09.02 12:25:45 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.10.01 00:37:04 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.09.12 12:25:13 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.09.21 12:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml
[2010.01.01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.210.6 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npfiller.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Data aplikac\u00ED\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.18_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.2_1\
CHR - Extension: Gmail = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.03.18 23:04:08 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No CLSID value found.
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KeySpy] C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 1
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Append to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 178.77.254.254 77.48.100.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8DBE2F65-E88F-45D0-A6FA-4426E06182D6}: DhcpNameServer = 178.77.254.254 77.48.100.254
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.04.17 23:24:03 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.ACDV - C:\WINDOWS\System32\ACDV.dll (ACD Systems)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\i420vfw.dll (www.helixcommunity.org)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.03.26 20:48:53 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
[2012.03.22 19:57:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\petr\Plocha\okulandy
[2012.03.19 09:11:42 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.03.18 21:53:59 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012.03.18 21:53:59 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012.03.18 21:53:59 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012.03.18 21:53:59 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012.03.18 21:52:28 | 004,438,697 | R--- | C] (Swearware) -- C:\Documents and Settings\petr\Plocha\ComboFix.exe
[2012.03.10 20:20:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012.03.07 20:58:52 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2012.03.02 16:30:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\petr\Dokumenty\Downloads

========== Files - Modified Within 30 Days ==========

[2012.03.26 21:13:01 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.03.26 20:48:44 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
[2012.03.26 20:16:31 | 000,186,500 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012.03.26 20:16:30 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-583907252-362288127-839522115-1003.job
[2012.03.26 20:16:26 | 000,002,337 | ---- | M] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Speed Launcher.lnk
[2012.03.26 20:15:38 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.03.26 20:15:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.03.25 23:15:17 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-362288127-839522115-1003.job
[2012.03.25 21:48:34 | 000,254,782 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\Nové čestné prohlášení.bmp
[2012.03.25 18:22:33 | 000,444,206 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.03.25 18:22:33 | 000,440,934 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.03.25 18:22:33 | 000,072,464 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.03.25 18:22:32 | 000,084,270 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.03.22 18:33:44 | 001,136,428 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\fa+inspekcni vyj050.pdf
[2012.03.22 18:29:34 | 004,722,678 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\čestné prohlášení burčákpotv
[2012.03.20 20:02:11 | 002,159,064 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.20 00:00:00 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.03.18 23:04:08 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.03.18 21:52:56 | 004,438,697 | R--- | M] (Swearware) -- C:\Documents and Settings\petr\Plocha\ComboFix.exe
[2012.03.14 00:17:39 | 000,120,877 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\vratné logo.jpg
[2012.03.10 20:15:56 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012.03.10 20:15:54 | 000,241,664 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.06 19:49:21 | 001,434,483 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\bryz.JPG
[2012.02.29 19:53:44 | 000,293,098 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\obrazovka.JPG
[2012.02.29 19:38:51 | 005,292,054 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\obrazovka.bmp

========== Files Created - No Company Name ==========

[2012.03.26 21:13:01 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.03.25 21:48:32 | 000,254,782 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\Nové čestné prohlášení.bmp
[2012.03.22 18:33:41 | 001,136,428 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\fa+inspekcni vyj050.pdf
[2012.03.22 18:29:27 | 004,722,678 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\čestné prohlášení burčákpotv
[2012.03.18 21:53:59 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.03.18 21:53:59 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.03.18 21:53:59 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.03.18 21:53:59 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.03.18 21:53:59 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.03.14 00:17:38 | 000,120,877 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\vratné logo.jpg
[2012.03.06 19:52:20 | 000,869,685 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\kolo.JPG
[2012.03.06 19:50:53 | 000,864,392 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\bryz1.JPG
[2012.03.06 19:49:20 | 001,434,483 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\bryz.JPG
[2012.02.29 19:45:40 | 000,293,098 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\obrazovka.JPG
[2012.02.29 19:38:50 | 005,292,054 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\obrazovka.bmp
[2011.09.25 19:33:59 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\EEBDSCVR.dll
[2011.09.25 19:33:58 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\EEBAPI.dll
[2011.09.25 19:33:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\EBAPI.dll
[2011.09.25 15:44:22 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT
[2011.05.11 12:51:26 | 000,074,752 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe
[2010.11.04 17:00:13 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2010.08.12 10:13:28 | 000,000,367 | ---- | C] () -- C:\WINDOWS\posta2.ini
[2010.06.27 22:31:26 | 000,925,712 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2010.06.11 14:18:35 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010.06.11 14:18:35 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010.04.21 18:46:14 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Data aplikací\85C3B64EBA.sys

========== LOP Check ==========

[petatape]

[2010.11.14 11:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2008.07.19 21:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg7
[2008.03.21 15:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Bluetooth
[2008.01.13 17:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\EPSON
[2008.07.09 23:37:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2011.05.11 14:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nitro PDF
[2008.08.17 10:27:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
[2010.06.11 14:21:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2010.07.09 14:41:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2008.01.13 17:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\UDL
[2010.07.09 14:40:58 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2007.05.11 23:47:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG7
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Softland
[2011.11.02 12:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602Installer
[2011.11.02 12:58:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602XML
[2007.04.01 11:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ACD Systems
[2008.09.27 20:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\AVG7
[2011.05.11 12:51:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CAD-KAS
[2009.01.09 18:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ChaosPro
[2008.12.19 12:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\com.adobe.ExMan
[2011.05.11 14:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Downloaded Installations
[2008.01.13 18:25:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\EPSON
[2010.08.05 20:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\FileZilla
[2009.03.07 21:07:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\fltk.org
[2009.07.21 11:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\gtk-2.0
[2009.02.11 21:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\HDRsoft
[2009.05.29 19:10:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQ
[2007.03.25 21:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQLite
[2010.03.07 11:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InfraRecorder
[2009.11.07 11:58:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\KillProcess
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\langmaster.sz
[2008.03.14 19:51:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Leadertech
[2009.08.20 11:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\mojosoft
[2011.05.11 14:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Nitro PDF
[2010.06.11 14:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\PC Suite
[2008.10.24 18:56:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Pixmantec
[2010.10.17 14:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Posta
[2008.02.28 22:18:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\postgresql
[2011.09.17 20:39:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Samsung
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Softland
[2008.03.01 17:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems
[2011.11.16 00:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\STORMWARE
[2010.01.22 20:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Thunderbird
[2011.09.16 22:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TNS2011
[2011.05.11 13:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Tomahawk
[2007.03.24 19:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TuneUp Software
[2009.01.09 18:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Ultra Fractal 3
[2010.04.18 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\uTorrent
[2008.03.29 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< >

< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: CSRSS.EXE >
[2008.04.14 05:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\ServicePackFiles\i386\csrss.exe
[2008.04.14 05:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\csrss.exe

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

< MD5 for: FASTFAT.SYS >
[2008.04.13 21:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\ServicePackFiles\i386\fastfat.sys
[2008.04.13 21:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\drivers\fastfat.sys

< MD5 for: HAL.DLL >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 05:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 05:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\isapnp.sys

< MD5 for: LSASS.EXE >
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys

< MD5 for: NETLOGON.DLL >
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: NTFS.SYS >
[2007.02.09 13:23:36 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=05AB81909514BFD69CBB1F2C147CF6B9 -- C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\ERDNT\cache\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\drivers\ntfs.sys
[2004.08.04 00:15:10 | 000,574,592 | ---- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\cmdcons\NTFS.SYS

< MD5 for: SCECLI.DLL >
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 13:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\ERDNT\cache\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 05:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe

< MD5 for: SMSS.EXE >
[2004.08.17 16:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SPOOLSV.EXE >
[2010.08.17 15:19:36 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=258DD5D4283FD9F9A7166BE9AE45CE73 -- C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\ERDNT\cache\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\dllcache\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\spoolsv.exe
[2005.06.11 02:17:13 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=AD3D9D191AEA7B5445FE1D82FFBB4788 -- C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[2008.04.14 05:22:48 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2008.07.06 14:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2003.06.19 02:31:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008.07.06 14:06:10 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll

< %systemroot%\system32\drivers\*.sys /5 >

< %systemroot%\system32\drivers\*.sys /X >
[2008.04.14 05:21:36 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008.04.14 05:21:36 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008.04.14 05:21:36 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008.04.14 05:21:36 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008.04.14 05:21:36 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008.04.14 05:21:36 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008.04.14 05:21:36 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2004.07.17 11:36:24 | 000,064,352 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativmc20.cod
[2008.04.14 05:21:37 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008.04.14 05:21:37 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008.04.14 05:21:37 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008.04.14 05:21:37 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008.04.14 05:21:37 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008.04.14 05:21:38 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2004.07.17 22:55:24 | 000,129,045 | ---- | M] () -- C:\WINDOWS\system32\drivers\cxthsfs2.cty
[2001.10.25 16:00:00 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2001.10.25 16:00:00 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt
[2004.08.17 16:49:30 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kstvtune.ax
[2004.08.17 16:49:30 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kswdmcap.ax
[2004.08.17 16:49:30 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\ksxbar.ax
[2008.07.26 08:44:30 | 000,069,592 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFaL000.cfg
[2008.07.26 08:44:30 | 000,227,172 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL000.cfg
[2008.07.26 08:44:30 | 000,146,680 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL001.cfg
[2008.07.26 08:44:30 | 000,085,302 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL002.cfg
[2012.01.10 18:05:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012.01.10 18:06:27 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2004.07.17 11:35:00 | 000,067,866 | ---- | M] () -- C:\WINDOWS\system32\drivers\netwlan5.img
[2008.04.14 05:21:55 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008.04.14 05:22:04 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll
[2004.08.17 16:49:20 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\vfwwdm32.dll
[2004.08.17 16:49:30 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\vidcap.ax

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\system32\*.* /5 >
[2012.03.26 20:16:31 | 000,186,500 | ---- | M] () -- C:\WINDOWS\system32\nvapps.xml
[2012.03.25 18:22:32 | 000,084,270 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.03.25 18:22:33 | 000,072,464 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.03.25 18:22:33 | 000,440,934 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.03.25 18:22:33 | 000,444,206 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.03.25 18:22:32 | 001,057,018 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2012.03.26 20:15:38 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\config\*.sav >
[2007.03.23 02:26:12 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2007.03.23 02:26:12 | 000,663,552 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2007.03.23 02:26:12 | 000,458,752 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\*.* /U /s >
[15 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]

< %systemroot%\*. /mp /s >

< %ALLUSERSPROFILE%\Data Aplikací\*.* >
[2010.04.21 18:46:14 | 000,000,008 | RHS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\85C3B64EBA.sys
[2007.03.23 02:29:19 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\desktop.ini
[2010.04.30 08:31:41 | 000,002,828 | -HS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\KGyGaAvL.sys
[2008.04.18 17:28:22 | 000,001,743 | ---- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\QTSBandwidthCache

< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >
[2010.01.11 21:46:57 | 079,858,648 | ---- | M] (Acresso Software Inc. ) -- C:\Documents and Settings\All Users\Data Aplikací\Corel\Downloads\540215253_610005\1271254118180\KPTCollection.exe
[2011.05.25 12:30:28 | 202,521,536 | ---- | M] (Acresso Software Inc. ) -- C:\Documents and Settings\All Users\Data Aplikací\Corel\Downloads\540215253_610005\1300677038363\CDGSX5SP3.exe
[2006.04.18 05:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Data Aplikací\EPSON\EPW!3 SSRP\E_S30RP1.EXE

< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >

< %APPDATA%\*. >
[2011.11.02 12:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602Installer
[2011.11.02 12:58:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602XML
[2007.04.01 11:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ACD Systems
[2010.09.04 22:42:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Adobe
[2008.01.05 21:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Apple Computer
[2008.09.27 20:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\AVG7
[2011.05.11 12:51:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CAD-KAS
[2009.01.09 18:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ChaosPro
[2008.12.19 12:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\com.adobe.ExMan
[2010.05.02 20:56:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Corel
[2008.08.12 20:16:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CyberLink
[2011.05.11 14:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Downloaded Installations
[2008.01.13 18:25:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\EPSON
[2010.08.05 20:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\FileZilla
[2009.03.07 21:07:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\fltk.org
[2009.07.21 11:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\gtk-2.0
[2009.02.11 21:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\HDRsoft
[2007.03.29 23:21:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Help
[2009.05.29 19:10:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQ
[2007.03.25 21:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQLite
[2007.03.23 18:45:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Identities
[2010.03.07 11:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InfraRecorder
[2011.04.14 19:39:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InstallShield
[2009.11.07 11:58:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\KillProcess
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\langmaster.sz
[2007.04.02 17:31:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Lavasoft
[2008.03.14 19:51:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Leadertech
[2007.03.24 19:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Macromedia
[2011.02.02 18:45:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Malwarebytes
[2012.01.20 20:32:26 | 000,000,000 | --SD | M] -- C:\Documents and Settings\petr\Data aplikací\Microsoft
[2009.08.20 11:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\mojosoft
[2008.08.26 23:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Mozilla
[2011.05.11 14:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Nitro PDF
[2010.06.11 14:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\PC Suite
[2008.10.24 18:56:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Pixmantec
[2010.10.17 14:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Posta
[2008.02.28 22:18:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\postgresql
[2010.09.01 16:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Real
[2011.09.17 20:39:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Samsung
[2012.02.15 16:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Skype
[2011.07.31 19:29:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\skypePM
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Softland
[2008.03.01 17:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems
[2011.11.16 00:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\STORMWARE
[2007.03.24 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sun
[2007.03.24 15:43:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Talkback
[2010.01.22 20:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Thunderbird
[2011.09.16 22:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TNS2011
[2011.05.11 13:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Tomahawk
[2007.03.24 19:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TuneUp Software
[2009.01.09 18:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Ultra Fractal 3
[2010.04.18 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\uTorrent
[2008.03.29 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Zoner

< %APPDATA%\*.* >
[2007.06.11 14:53:37 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\$_hpcst$.hpc
[2007.03.23 02:29:19 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\petr\Data aplikací\desktop.ini

< %APPDATA%\*.exe /s >
[2009.12.23 13:08:37 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\petr\Data aplikací\Microsoft\Installer\{446E684C-A48C-4A67-89F7-824B63F96153}\_D72106D85CB38188D5EFB4.exe
[2008.02.05 13:56:14 | 000,074,016 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\Download.exe
[2008.02.05 10:33:36 | 000,060,920 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\iisinstall.exe
[2008.02.05 14:25:10 | 000,202,168 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\install.exe
[2007.10.25 18:02:12 | 038,220,656 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\SQLEXPR32.EXE
[2008.02.05 10:34:30 | 000,198,032 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\VistaIIS.exe
[2008.02.05 10:34:38 | 000,050,496 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\WinVer.exe

< %SYSTEMDRIVE%\*.exe >
[2011.09.25 19:00:51 | 002,577,408 | ---- | M] () -- C:\epson18385eu.exe
[2011.09.25 15:42:17 | 002,775,552 | ---- | M] () -- C:\epson19067eu.exe

< >

< >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-03-19 22:08:14

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s >
"StateIndex" = 1

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *\0\0

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=3
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.03.26 21:13:01 | 000,000,512 | ---- | M] () MD5=5DAD7A15C2AB2B7F14DD1F3B99DD5EA3 -- C:\PhysicalMBR.bin

< End of report >

[petatape]

OTL Extras logfile created on: 26.3.2012 20:51:09 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 64,27% Memory free
2,84 Gb Paging File | 2,51 Gb Available in Paging File | 88,32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 13,21 Gb Free Space | 8,87% Space Free | Partition Type: NTFS

Computer Name: PETR-D455EAF4C9 | User Name: petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\dc++strong\sdc21\StrongDC.exe" = C:\dc++strong\sdc21\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\squid\ncftpput.exe" = C:\squid\ncftpput.exe:*:Enabled:TNSftp -- (NcFTP Software)
"C:\Casino\ParadiseCasino\casino.exe" = C:\Casino\ParadiseCasino\casino.exe:*:Enabled:casino -- ()
"C:\Program Files\Common Files\soft602\langserv.exe" = C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker -- ()
"C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe" = C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe:*:Enabled:eEBSvc -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{44864C09-D493-4B07-BAD0-F65557A3C552}" = CorelDRAW Graphics Suite X5 - KPT Collection
"_{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension
"_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{05D18A0F-ED9D-4FBD-9BF5-AF632EB09CB3}" = CGS15_IPM_T2
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0901FCE8-5415-4499-BBC8-1AA106DD66E2}" = Adobe Setup
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{19D2B63E-C1F1-4803-BA8B-4AB8FE216952}" = EPSON PRINT Image Framer Tool
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
"{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
"{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32C74893-0243-4235-A6F3-201F0E5D2C03}" = Software602 Print2PDF
"{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{356658C7-8C60-4A43-AF50-75CA8E642934}" = CorelDRAW Graphics Suite X5 - CZ
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3AF8FCCD-F51A-4014-9002-F195E1CBC876}" = Logitech QuickCam
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{446E684C-A48C-4A67-89F7-824B63F96153}" = Stigo YouTube Downloader
"{44864C09-D493-4B07-BAD0-F65557A3C552}" = CorelDRAW Graphics Suite X5 - KPT Collection
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5178C1BB-1EB1-4468-894B-7DE964DDCAA2}" = Adobe Photoshop CS3
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
"{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
"{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}" = Adobe Color NA Extra Settings
"{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
"{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3
"{77077FFF-8831-470F-9627-E86F06A50CCD}" = Avery Wizard 3.1
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-1029-0000-7760-000000000003}" = Adobe Acrobat 8 Professional - Czech, Greek, Hungarian, Polish, Slovak
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{AF21F061-F04B-42B4-B6C3-784A080F782A}" = dirLock
"{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}" = Adobe Color EU Recommended Settings
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D387C31D-971F-4EEC-8734-382B39AD04F0}" = Software602 Form Filler
"{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English
"{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E86BC406-944E-41F6-ADE6-2C136734C96B}" = EPSON File Manager
"{E98D6792-FC51-4187-9448-CA9BF893384E}" = MicroStar Bluetooth Software
"{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
"{F4E74C05-CD77-4422-B5BB-E82693EE2FA3}" = iSpQ VideoChat 8.0
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)
"{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Balíček ovladače systému Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Balíček ovladače systému Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
"Adobe Acrobat Reader 3.02" = Adobe Acrobat Reader 3.02
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_4977c84bcdc298c444ccfbdcccb660d" = Adobe Photoshop CS3
"Aladdin" = Aladdin - ekonomický informační systém
"AliSetup" = AliSetup 0.1.0.52
"Audacity_is1" = Audacity 1.2.6
"avast" = avast! Free Antivirus
"CCleaner" = CCleaner (remove only)
"C-Media Audio Driver" = C-Media WDM Audio Driver
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"FileZilla Client" = FileZilla Client 3.2.4.1
"GTK 2.0" = GTK+ Runtime 2.6.9 rev a (odstranit)
"HijackThis" = HijackThis 2.0.2
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"KJ05P_is1" = E-VISION Kniha jízd 2005 Professional
"lvdrivers_11.80" = Logitech QuickCam Driver Package
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 7.0.1 (x86 cs)" = Mozilla Firefox 7.0.1 (x86 cs)
"Mozilla Thunderbird 10.0.2 (x86 cs)" = Mozilla Thunderbird 10.0.2 (x86 cs)
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NVIDIA Drivers" = NVIDIA Drivers
"ParadiseCasino" = ParadiseCasino
"PDF Editor 2" = PDF Editor 2
"PENTAX Digital Camera Utility" = PENTAX Digital Camera Utility
"PhotoFiltre Studio" = PhotoFiltre Studio
"Pošta & kancelář_is1" = Pošta & kancelář 2.6
"Pošta a kancelář 3_is1" = Pošta a kancelář 3.1
"rajče.net_is1" = rajče verze 57 sestavení 183
"RealPlayer 12.0" = RealPlayer
"ReDynaMix HDR (Adobe Photoshop Plug-in)_is1" = DCETools - ReDynaMix HDR 1.01
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"simple2_is1" = Tone Mapping Plug-In 1.2
"The KMPlayer" = The KMPlayer (remove only)
"TuneUp Utilities" = TuneUp Utilities
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = Archivátor WinRAR

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Aladdin Events ]
Error - 17.10.2011 17:23:32 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

Error - 9.11.2011 16:50:27 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

Error - 15.11.2011 10:19:51 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.12.2011 16:24:27 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 15.12.2011 8:57:23 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = ERROR: Client pipe broken!

Error - 30.12.2011 14:34:26 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 2.2.2012 6:44:10 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 7.2.2012 15:16:35 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.3.2012 5:58:51 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 21.3.2012 10:50:30 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

[ Antivirus Events ]
Error - 14.2.2009 4:05:02 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 5.11.2009 3:11:12 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 7.11.2009 17:32:00 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 28.11.2009 12:36:03 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 6.3.2010 17:29:36 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 6.3.2010 17:30:44 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 7.3.2010 5:13:06 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:25:07 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:25:50 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:36:25 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

[ System Events ]
Error - 22.3.2012 14:56:59 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 22.3.2012 14:57:17 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 22.3.2012 17:34:07 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 23.3.2012 2:27:21 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 23.3.2012 5:09:13 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby upnphost
s argumenty za účelem spuštění serveru: {204810B9-73B2-11D4-BF42-00B0D0118B56}

Error - 24.3.2012 5:44:38 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 24.3.2012 7:56:34 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 24.3.2012 7:56:51 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 25.3.2012 12:18:32 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 26.3.2012 14:16:52 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2


< End of report >

[motji]

Spustte OTL
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No CLSID value found.
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\{@alibaba.com/alisetup;version=1.0}: C:\Documents and Settings\petr\Local Settings\Data aplikací\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll (alibaba)
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA80}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA96}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{8675F4B3-2F19-11ED-2D6B-0800600C0A19}
FF - prefs.js..browser.search.param.yahoo-fr: "megaup"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes,DefaultScope = search13
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... src=crm&q={searchTerms}&locale=
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatche ... tp=bs&qkw={searchTerms}&tbid=60342
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\search13: "URL" = http://search13.net/search.php?q={searchTerms}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://google.icq.com/search/search_frame.php
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
E - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

:files
C:\WINDOWS\system32\*.tmp.dll /s
C:\WINDOWS\system32\SET*.tmp /s
C:\WINDOWS\*.tmp /s
C:\Documents and Settings\All Users\Data aplikací\85C3B64EBA.sys

:commands
[resethosts]
[emptytemp]
[EMPTYFLASH]
[Reboot]

-klikněte na tlačítko opravit.
-Následně se pc restartuje.
- Log vložte zde

[petatape]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFC32E1D-EE75-4A48-BC60-104E11EE2431}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\{@alibaba.com/alisetup;version=1.0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{@alibaba.com/alisetup;version=1.0}\ not found.
C:\Documents and Settings\petr\Local Settings\Data aplikací\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll moved successfully.
Prefs.js: "megaup" removed from browser.search.param.yahoo-fr
Prefs.js: "megaup" removed from browser.search.param.yahoo-fr-cjkt
HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Bar| /E : value set successfully!
HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP135.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP186.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C7.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1DF.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP25A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP37.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC.tmp folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\85C3B64EBA.sys moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: petr
->Temp folder emptied: 222054 bytes
->Temporary Internet Files folder emptied: 2545273 bytes
->Java cache emptied: 61982 bytes
->FireFox cache emptied: 51357993 bytes
->Google Chrome cache emptied: 248118991 bytes
->Flash cache emptied: 6291 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 153658 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 289,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: petr
->Flash cache emptied: 0 bytes

User: postgres

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.39.2 log created on 03272012_225954

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

[motji]

Jak to vypadá?

[petatape]

Je to o trošku lepší, ale stále při načítání stránek nebo při již dvou otevřených panelech je pořád vytížení procesoru 65%-99%.
Napadá Vás ještě něco??
Díky za Vaši pomoc

[motji]

Zkoušeli jsme zakázat doplnky?