stdrt.exe

[corpop]

Dobrý den, dneska jsem náhodou nalezl tento proces v taskmanageru a bram mi docela dost cpu a ram, tak jsem ho vypl. Objevuje se pouze po restartu pc (nevím jak to bude dlouho co ho mám, jelikož používám hibernaci). Mohli byste mi prosím poradit jak se této havěti zbavit?

[corpop]

přikládám log


Logfile of random's system information tool 1.09 (written by random/random)
Run by Jakub at 2012-04-21 11:26:16
Microsoft Windows 7 Home Premium
System drive C: has 22 GB (35%) free of 62 GB
Total RAM: 4094 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:26:22, on 21.4.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\UnHackMe\hackmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\AGEIA Technologies\bin\TrayIcon.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jakub.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=108602&ba ... e4004edba0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Epson Stylus SX420W(Síť)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Windows\TEMP\E_S3DA4.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AML Device Install.lnk = C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe
O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Global Startup: Trend Micro SafeSync.lnk = C:\Program Files\Trend Micro SafeSync\HrfsClient.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Licensing Console - - C:\Windows\SysWOW64\lnsecsl.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
O23 - Service: OnlineStorageService - Trend Micro Inc. - C:\Program Files\Trend Micro SafeSync\hrfscore.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9110 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\system32\WLANExt.exe 35569488
\??\C:\Windows\system32\conhost.exe "-2513783241188395469647324574218846902-2142224731275612544-1330905570-748987629
"C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE" "C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe"
C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe"
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
"C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\SysWOW64\svchost.exe -k netsvcs
WLIDSvcM.exe 2652
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
"D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\RocketDock\RocketDock.exe"
"C:\Program Files\Rainmeter\Rainmeter.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Trend Micro SafeSync\hrfscore.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\UnHackMe\hackmon.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/WarmSocketImpact/last_accessed_socket/ --renderer-print-preview --channel=340.04DEBA80.1171875462 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel=340.06F89AA0.277675283 --reduce-gpu-sandbox --disable-image-transport-surface /prefetch:12
"C:\Program Files (x86)\AGEIA Technologies\bin\TrayIcon.exe"
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\180102~1.162\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.162\gcswf32.dll" --lang=cs --channel=340.0571F230.32753591 --flash-broker=6040 /prefetch:4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Inactive/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd16/SpdyImpact/npn_with_spdy/WarmSocketImpact/last_accessed_socket/WebStoreLinkExperiment/Disabled/ --renderer-print-preview --channel=340.079C4C40.73253008 /prefetch:3
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Jakub\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-04-19 347424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-04-19 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-10 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-02-25 10081312]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-02-25 877600]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-02-05 324608]
"Acer ePower Management"=C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [2010-03-17 496160]
"Broadcom Wireless Manager UI"=C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [2012-03-10 4786688]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 1436736]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"RocketDock"=C:\Program Files (x86)\RocketDock\RocketDock.exe [2007-09-02 495616]
"Epson Stylus SX420W(Síť)"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [2012-04-02 224768]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-03-03 1300560]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-02-14 636032]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"Malwarebytes' Anti-Malware"=D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AML Device Install.lnk - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
Trend Micro SafeSync.lnk - C:\Program Files\Trend Micro SafeSync\HrfsClient.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-04-21 11:26:16 ----D---- C:\rsit
2012-04-21 11:26:16 ----D---- C:\Program Files\trend micro
2012-04-21 11:15:33 ----A---- C:\TDSSKiller.2.7.31.0_21.04.2012_11.15.33_log.txt
2012-04-21 11:01:40 ----A---- C:\Windows\SYSWOW64\Partizan.exe
2012-04-21 11:01:40 ----A---- C:\Windows\SYSWOW64\drivers\Partizan.sys
2012-04-21 11:01:37 ----RASHOT---- C:\Windows\winstart.bat
2012-04-21 11:01:25 ----A---- C:\Windows\SYSWOW64\drivers\UnHackMeDrv.sys
2012-04-21 11:00:59 ----D---- C:\Program Files (x86)\UnHackMe
2012-04-21 10:34:27 ----D---- C:\Users\Jakub\AppData\Roaming\Malwarebytes
2012-04-21 10:33:59 ----D---- C:\ProgramData\Malwarebytes
2012-04-21 10:33:55 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-04-21 10:23:42 ----A---- C:\Windows\SYSWOW64\key.dat
2012-04-21 10:21:05 ----A---- C:\Windows\SYSWOW64\x64.txt
2012-04-21 10:18:30 ----D---- C:\Program Files (x86)\flash
2012-04-21 10:18:30 ----D---- C:\flash
2012-04-21 09:53:21 ----A---- C:\Windows\SYSWOW64\REX Shared Library.dll
2012-04-21 09:53:20 ----A---- C:\Windows\SYSWOW64\bconvert.dll
2012-04-21 09:49:13 ----A---- C:\Windows\SYSWOW64\NI_IRC_1_2.dll
2012-04-21 09:49:13 ----A---- C:\Windows\SYSWOW64\NI_DFD_1_5.dll
2012-04-21 08:39:28 ----A---- C:\Windows\SYSWOW64\lnsecsl.exe
2012-04-19 17:30:25 ----D---- C:\Users\Jakub\AppData\Roaming\Mozilla
2012-04-19 11:04:30 ----A---- C:\Windows\system32\javaws.exe
2012-04-19 11:04:30 ----A---- C:\Windows\system32\javaw.exe
2012-04-19 11:04:30 ----A---- C:\Windows\system32\java.exe
2012-04-19 11:04:30 ----A---- C:\Windows\system32\deployJava1.dll
2012-04-19 11:03:53 ----D---- C:\Program Files\Java
2012-04-17 22:02:09 ----D---- C:\ProgramData\TmForever
2012-04-15 16:41:15 ----D---- C:\Users\Jakub\AppData\Roaming\Notepad++
2012-04-15 16:41:15 ----D---- C:\Program Files (x86)\Notepad++
2012-04-14 21:16:38 ----D---- C:\ProgramData\TrackMania
2012-04-14 16:14:11 ----D---- C:\Program Files\Trend Micro SafeSync
2012-04-14 16:14:04 ----D---- C:\ProgramData\Trend Micro
2012-04-14 15:54:42 ----A---- C:\Windows\UC.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\RAR.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\PKZIP.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\PKUNZIP.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\NOCLOSE.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\LHA.PIF
2012-04-14 15:54:42 ----A---- C:\Windows\ARJ.PIF
2012-04-14 15:54:41 ----D---- C:\Users\Jakub\AppData\Roaming\GHISLER
2012-04-13 19:38:17 ----HDC---- C:\ProgramData\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
2012-04-13 19:35:29 ----HDC---- C:\ProgramData\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
2012-04-13 19:34:53 ----HDC---- C:\ProgramData\{DCC412E7-393B-4016-91FB-9307F059AFB6}
2012-04-13 19:34:10 ----HDC---- C:\ProgramData\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}
2012-04-13 19:30:34 ----HDC---- C:\ProgramData\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}
2012-04-12 16:21:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-04-12 16:21:45 ----A---- C:\Windows\system32\mshtmled.dll
2012-04-12 16:21:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-04-12 16:21:44 ----A---- C:\Windows\system32\iertutil.dll
2012-04-12 16:21:43 ----A---- C:\Windows\SYSWOW64\url.dll
2012-04-12 16:21:43 ----A---- C:\Windows\system32\jscript9.dll
2012-04-12 16:21:42 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-04-12 16:21:42 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-04-12 16:21:42 ----A---- C:\Windows\system32\url.dll
2012-04-12 16:21:42 ----A---- C:\Windows\system32\ieui.dll
2012-04-12 16:21:41 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-04-12 16:21:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-04-12 16:21:41 ----A---- C:\Windows\system32\jscript.dll
2012-04-12 16:21:40 ----A---- C:\Windows\system32\urlmon.dll
2012-04-12 16:21:40 ----A---- C:\Windows\system32\jsproxy.dll
2012-04-12 16:21:39 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-04-12 16:21:39 ----A---- C:\Windows\system32\wininet.dll
2012-04-12 16:21:38 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-04-12 16:21:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-04-12 16:21:36 ----A---- C:\Windows\system32\mshtml.dll
2012-04-12 16:21:35 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-04-12 16:21:33 ----A---- C:\Windows\system32\ieframe.dll
2012-04-12 16:21:01 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-04-12 16:20:59 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-04-12 16:20:59 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-04-12 16:20:29 ----A---- C:\Windows\system32\imagehlp.dll
2012-04-12 16:20:29 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-04-12 16:20:28 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-04-12 16:20:27 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-04-12 16:20:27 ----A---- C:\Windows\system32\wmi.dll
2012-04-12 16:20:27 ----A---- C:\Windows\system32\wintrust.dll
2012-04-12 16:20:26 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-04-12 15:13:37 ----D---- C:\Program Files (x86)\Minecraft ID Finder
2012-04-10 16:09:56 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-04-10 16:09:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-04-10 16:09:54 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-04-09 11:15:09 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-04-09 09:51:28 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-04-09 09:08:17 ----D---- C:\Users\Jakub\AppData\Roaming\Sierra Entertainment
2012-04-09 08:57:26 ----D---- C:\Windows\system32\AGEIA
2012-04-09 08:56:55 ----D---- C:\Windows\SYSWOW64\AGEIA
2012-04-09 08:56:55 ----D---- C:\Program Files (x86)\AGEIA Technologies
2012-04-08 19:31:40 ----A---- C:\AILog.txt
2012-04-08 17:40:14 ----D---- C:\Program Files (x86)\DOSBox-0.74
2012-04-07 14:47:21 ----D---- C:\Users\Jakub\AppData\Roaming\Summer Athletics 2009
2012-04-07 14:10:32 ----D---- C:\Program Files (x86)\East West
2012-04-07 10:46:31 ----D---- C:\ProgramData\Winter Sports 2009
2012-04-07 10:46:18 ----A---- C:\crtdbg.txt
2012-04-02 22:37:05 ----A---- C:\Windows\SYSWOW64\EEBUtil.dll
2012-04-02 22:37:05 ----A---- C:\Windows\SYSWOW64\EEBSDKIF.dll
2012-04-02 22:37:05 ----A---- C:\Windows\SYSWOW64\EEBDSCVR.dll
2012-04-02 22:37:05 ----A---- C:\Windows\SYSWOW64\EEBAPI.dll
2012-04-02 22:37:05 ----A---- C:\Windows\SYSWOW64\EBAPI.dll
2012-04-02 22:36:57 ----D---- C:\Program Files\Common Files\EPSON
2012-04-02 22:33:34 ----A---- C:\Windows\system32\enspres.dll
2012-04-02 22:33:34 ----A---- C:\Windows\system32\ensppui.dll
2012-04-02 22:33:34 ----A---- C:\Windows\system32\ensppmon.dll
2012-04-02 22:33:34 ----A---- C:\Windows\system32\enpres.dll
2012-04-02 22:33:34 ----A---- C:\Windows\system32\enppui.dll
2012-04-02 22:33:33 ----A---- C:\Windows\system32\enppmon.dll
2012-04-02 22:33:32 ----D---- C:\Program Files\EpsonNet
2012-04-02 22:33:08 ----D---- C:\Program Files (x86)\EpsonNet
2012-04-02 22:31:21 ----A---- C:\Windows\system32\E_GCINST.DLL
2012-04-02 22:31:17 ----A---- C:\Windows\system32\E_ILMGCE.DLL
2012-04-02 22:31:16 ----A---- C:\Windows\system32\E_IBCBGCE.DLL
2012-04-02 22:30:55 ----D---- C:\ProgramData\EPSON
2012-04-02 22:30:07 ----A---- C:\Windows\system32\esxw2ud.dll
2012-04-02 22:30:07 ----A---- C:\Windows\system32\esxcdev.dll
2012-04-02 22:30:07 ----A---- C:\Windows\system32\esdevapp.exe
2012-04-02 22:30:06 ----D---- C:\Program Files (x86)\epson
2012-04-02 10:44:44 ----RA---- C:\Windows\SYSWOW64\tmp2E3D.tmp
2012-03-31 20:25:59 ----D---- C:\ProgramData\PassMark
2012-03-31 20:25:59 ----AD---- C:\ProgramData\TEMP
2012-03-30 19:59:34 ----HDC---- C:\ProgramData\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}
2012-03-30 16:25:25 ----D---- C:\Program Files\Common Files\Native Instruments
2012-03-30 16:25:05 ----D---- C:\ProgramData\Native Instruments
2012-03-30 16:25:05 ----D---- C:\Program Files\Native Instruments
2012-03-27 21:37:31 ----D---- C:\ProgramData\VST3 Presets
2012-03-27 21:17:57 ----D---- C:\ProgramData\Steinberg
2012-03-27 21:15:00 ----D---- C:\Users\Jakub\AppData\Roaming\Steinberg
2012-03-24 22:39:26 ----D---- C:\ProgramData\McAfee
2012-03-24 22:38:27 ----D---- C:\Program Files (x86)\Adobe
2012-03-24 22:37:31 ----D---- C:\ProgramData\Adobe
2012-03-24 11:18:21 ----A---- C:\user.js
2012-03-24 11:18:16 ----D---- C:\Users\Jakub\AppData\Roaming\Babylon
2012-03-24 11:18:16 ----D---- C:\ProgramData\Babylon
2012-03-22 21:57:40 ----A---- C:\Windows\system32\drivers\VBoxDrv.sys
2012-03-22 21:57:28 ----A---- C:\Windows\system32\drivers\VBoxUSBMon.sys

======List of files/folders modified in the last 1 month======

2012-04-21 11:26:16 ----RD---- C:\Program Files
2012-04-21 11:25:28 ----D---- C:\Windows\Temp
2012-04-21 11:24:16 ----D---- C:\Windows\system32\config
2012-04-21 11:15:34 ----D---- C:\Windows\system32\drivers
2012-04-21 11:06:37 ----D---- C:\Windows\SysWOW64
2012-04-21 11:03:09 ----D---- C:\ProgramData\boost_interprocess
2012-04-21 11:01:40 ----D---- C:\Windows\SYSWOW64\drivers
2012-04-21 11:01:37 ----D---- C:\Windows
2012-04-21 11:01:34 ----D---- C:\Windows\system32\Tasks
2012-04-21 11:01:10 ----D---- C:\Users\Jakub\AppData\Roaming\vlc
2012-04-21 11:00:59 ----RD---- C:\Program Files (x86)
2012-04-21 10:56:46 ----SHD---- C:\System Volume Information
2012-04-21 10:55:46 ----D---- C:\Program Files (x86)\Common Files
2012-04-21 10:48:48 ----D---- C:\Windows\inf
2012-04-21 10:47:05 ----D---- C:\Users\Jakub\AppData\Roaming\uTorrent
2012-04-21 10:33:59 ----HD---- C:\ProgramData
2012-04-21 10:27:15 ----D---- C:\Users\Jakub\AppData\Roaming\DAEMON Tools Lite
2012-04-21 10:26:54 ----SHD---- C:\Windows\Installer
2012-04-21 09:57:50 ----D---- C:\Windows\System32
2012-04-21 09:57:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-04-21 08:39:40 ----D---- C:\Program Files (x86)\Image-Line
2012-04-20 22:50:20 ----D---- C:\Users\Jakub\AppData\Roaming\.minecraft
2012-04-19 09:19:24 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-04-17 21:59:11 ----RSD---- C:\Windows\assembly
2012-04-16 13:02:03 ----A---- C:\Windows\SYSWOW64\msvcsv60.dll
2012-04-16 11:34:18 ----D---- C:\Windows\Logs
2012-04-16 11:34:18 ----D---- C:\Windows\debug
2012-04-16 11:32:25 ----D---- C:\Programy
2012-04-15 13:12:52 ----D---- C:\Windows\Microsoft.NET
2012-04-14 16:10:13 ----D---- C:\Program Files (x86)\Steinberg
2012-04-14 16:02:26 ----DC---- C:\Windows\system32\DRVSTORE
2012-04-14 16:02:26 ----D---- C:\Windows\system32\DriverStore
2012-04-14 16:02:26 ----D---- C:\Windows\system32\catroot
2012-04-13 19:38:53 ----D---- C:\Windows\system32\catroot2
2012-04-13 19:35:41 ----D---- C:\Windows\Prefetch
2012-04-12 19:15:25 ----D---- C:\Windows\winsxs
2012-04-12 19:13:40 ----D---- C:\Windows\SYSWOW64\migration
2012-04-12 19:13:40 ----D---- C:\Windows\system32\migration
2012-04-12 19:13:40 ----D---- C:\Program Files\Internet Explorer
2012-04-12 19:13:40 ----D---- C:\Program Files (x86)\Internet Explorer
2012-04-09 11:15:17 ----SD---- C:\ProgramData\Microsoft
2012-04-08 18:56:05 ----RSD---- C:\Windows\Fonts
2012-04-02 22:36:57 ----D---- C:\Program Files\Common Files
2012-04-02 22:30:06 ----D---- C:\Windows\twain_32
2012-04-02 13:11:06 ----D---- C:\ProgramData\Codemasters
2012-04-02 10:45:14 ----D---- C:\Program Files (x86)\BRS
2012-04-02 10:44:47 ----A---- C:\Windows\system32\wrap_oal.dll
2012-04-02 10:44:47 ----A---- C:\Windows\system32\OpenAL32.dll
2012-04-02 10:44:45 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2012-04-02 10:44:44 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2012-03-27 21:16:09 ----SD---- C:\Users\Jakub\AppData\Roaming\Microsoft
2012-03-25 12:57:35 ----D---- C:\Windows\rescache
2012-03-24 22:43:59 ----D---- C:\Users\Jakub\AppData\Roaming\Adobe
2012-03-24 21:38:22 ----D---- C:\Windows\SYSWOW64\directx

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-23 16440]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-03-10 283200]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 189440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-01-03 55936]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-02-15 10856960]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-02-15 327680]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-12-05 95248]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2012-03-10 22520]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-03-10 2978296]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-02-25 2276128]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-01-18 75304]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 40832]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 84864]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
S0 Partizan;Partizan; C:\Windows\system32\drivers\Partizan.sys []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 123408]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2007-05-14 27520]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2012-03-14 147248]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys []
S3 VBoxUSB;VirtualBox USB; C:\Windows\System32\Drivers\VBoxUSB.sys [2012-03-14 117040]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-02-15 235520]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-14 361984]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-17 820768]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 MBAMService;MBAMService; D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 12784]
R2 NIHardwareService;NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2011-04-07 5352960]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE [2012-03-10 33280]
R2 wmcmgc;Windows Management Configuration; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 OnlineStorageService;OnlineStorageService; C:\Program Files\Trend Micro SafeSync\hrfscore.exe [2012-03-10 7588112]
S2 Adobe Licensing Console;Adobe Licensing Console; C:\Windows\SysWOW64\lnsecsl.exe [2012-04-21 905154]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 136176]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-11 1255736]

-----------------EOF-----------------

[vyosek]

Zdravim a pekny den preji

vidim nainstalovany a bezici MBAM, delal jste jim sken, nasel neco?

Tohle znate

• C:\Windows\SYSWOW64\key.dat
  C:\Windows\SYSWOW64\x64.txt

Poprosim o tenhle log C:\TDSSKiller.2.7.31.0_21.04.2012_11.15.33_log.txt

[corpop]

Ano MBAM skan jsem provedl,ale nic nenašel.

x64 byl prázdný txt
key.dat tak to nevím vůbec co to je

log TDSSkiler

11:15:33.0164 0848 TDSS rootkit removing tool 2.7.31.0 Apr 20 2012 19:49:47
11:15:33.0275 0848 ============================================================
11:15:33.0275 0848 Current date / time: 2012/04/21 11:15:33.0275
11:15:33.0275 0848 SystemInfo:
11:15:33.0275 0848
11:15:33.0275 0848 OS Version: 6.1.7600 ServicePack: 0.0
11:15:33.0275 0848 Product type: Workstation
11:15:33.0275 0848 ComputerName: JAKUB-PC
11:15:33.0276 0848 UserName: Jakub
11:15:33.0276 0848 Windows directory: C:\Windows
11:15:33.0276 0848 System windows directory: C:\Windows
11:15:33.0276 0848 Running under WOW64
11:15:33.0276 0848 Processor architecture: Intel x64
11:15:33.0276 0848 Number of processors: 3
11:15:33.0276 0848 Page size: 0x1000
11:15:33.0276 0848 Boot type: Normal boot
11:15:33.0276 0848 ============================================================
11:15:35.0194 0848 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:15:35.0204 0848 \Device\Harddisk0\DR0:
11:15:35.0205 0848 MBR partitions:
11:15:35.0205 0848 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x12628B, BlocksNum 0x42DB647D
11:15:35.0205 0848 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x42EDC708, BlocksNum 0x797A7B9
11:15:35.0234 0848 C: <-> \Device\Harddisk0\DR0\Partition1
11:15:35.0283 0848 D: <-> \Device\Harddisk0\DR0\Partition0
11:15:35.0284 0848 Initialize success
11:15:35.0284 0848 ============================================================
11:15:43.0295 5244 ============================================================
11:15:43.0295 5244 Scan started
11:15:43.0295 5244 Mode: Manual;
11:15:43.0295 5244 ============================================================
11:15:43.0821 5244 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
11:15:43.0826 5244 1394ohci - ok
11:15:43.0869 5244 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
11:15:43.0875 5244 ACPI - ok
11:15:43.0957 5244 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
11:15:43.0958 5244 AcpiPmi - ok
11:15:44.0234 5244 Adobe Licensing Console (c90bfbe590122672622d91a3ccea4b50) C:\Windows\SysWOW64\lnsecsl.exe
11:15:44.0250 5244 Adobe Licensing Console - ok
11:15:44.0391 5244 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
11:15:44.0393 5244 AdobeARMservice - ok
11:15:44.0523 5244 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
11:15:44.0530 5244 adp94xx - ok
11:15:44.0579 5244 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
11:15:44.0584 5244 adpahci - ok
11:15:44.0617 5244 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
11:15:44.0620 5244 adpu320 - ok
11:15:44.0664 5244 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
11:15:44.0666 5244 AeLookupSvc - ok
11:15:44.0727 5244 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
11:15:44.0736 5244 AFD - ok
11:15:44.0785 5244 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
11:15:44.0786 5244 agp440 - ok
11:15:44.0846 5244 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
11:15:44.0848 5244 ALG - ok
11:15:44.0898 5244 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
11:15:44.0899 5244 aliide - ok
11:15:44.0946 5244 AMD External Events Utility (962227630779043b5c1d4cd157abb912) C:\Windows\system32\atiesrxx.exe
11:15:44.0950 5244 AMD External Events Utility - ok
11:15:45.0024 5244 AMD FUEL Service - ok
11:15:45.0130 5244 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
11:15:45.0131 5244 amdide - ok
11:15:45.0176 5244 amdiox64 (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
11:15:45.0178 5244 amdiox64 - ok
11:15:45.0216 5244 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
11:15:45.0217 5244 AmdK8 - ok
11:15:45.0687 5244 amdkmdag (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
11:15:45.0846 5244 amdkmdag - ok
11:15:45.0924 5244 amdkmdap (2d9005ea0bfd25c740e53c8dd3c069e0) C:\Windows\system32\DRIVERS\atikmpag.sys
11:15:45.0930 5244 amdkmdap - ok
11:15:45.0984 5244 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
11:15:45.0986 5244 AmdPPM - ok
11:15:46.0058 5244 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
11:15:46.0061 5244 amdsata - ok
11:15:46.0111 5244 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
11:15:46.0114 5244 amdsbs - ok
11:15:46.0143 5244 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
11:15:46.0144 5244 amdxata - ok
11:15:46.0247 5244 AODDriver4.1 (0e2ba6dc63e9cf3bf275856735a3e3be) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
11:15:46.0248 5244 AODDriver4.1 - ok
11:15:46.0380 5244 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
11:15:46.0382 5244 AppID - ok
11:15:46.0426 5244 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
11:15:46.0427 5244 AppIDSvc - ok
11:15:46.0442 5244 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll
11:15:46.0444 5244 Appinfo - ok
11:15:46.0485 5244 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
11:15:46.0487 5244 arc - ok
11:15:46.0505 5244 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
11:15:46.0507 5244 arcsas - ok
11:15:46.0532 5244 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
11:15:46.0534 5244 AsyncMac - ok
11:15:46.0550 5244 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
11:15:46.0551 5244 atapi - ok
11:15:46.0623 5244 AtiHDAudioService (2b3b05c0a7768bf033217eb8f33f9c35) C:\Windows\system32\drivers\AtihdW76.sys
11:15:46.0625 5244 AtiHDAudioService - ok
11:15:46.0673 5244 AtiHdmiService (7e2f5a758f63f80f8b03f889b4e6b19f) C:\Windows\system32\drivers\AtiHdmi.sys
11:15:46.0675 5244 AtiHdmiService - ok
11:15:46.0734 5244 AtiPcie (c07a040d6b5a42dd41ee386cf90974c8) C:\Windows\system32\DRIVERS\AtiPcie.sys
11:15:46.0735 5244 AtiPcie - ok
11:15:46.0826 5244 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
11:15:46.0837 5244 AudioEndpointBuilder - ok
11:15:46.0882 5244 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll
11:15:46.0893 5244 AudioSrv - ok
11:15:46.0927 5244 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll
11:15:46.0930 5244 AxInstSV - ok
11:15:47.0021 5244 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
11:15:47.0029 5244 b06bdrv - ok
11:15:47.0164 5244 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
11:15:47.0168 5244 b57nd60a - ok
11:15:47.0219 5244 BCM42RLY (50d45e314b13f70bf328d783868e6ea6) C:\Windows\system32\drivers\BCM42RLY.sys
11:15:47.0220 5244 BCM42RLY - ok
11:15:47.0387 5244 BCM43XX (b44879610f2dc4a046b14befa3ae72de) C:\Windows\system32\DRIVERS\bcmwl664.sys
11:15:47.0430 5244 BCM43XX - ok
11:15:47.0550 5244 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
11:15:47.0553 5244 BDESVC - ok
11:15:47.0628 5244 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
11:15:47.0629 5244 Beep - ok
11:15:47.0701 5244 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll
11:15:47.0713 5244 BFE - ok
11:15:47.0775 5244 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll
11:15:47.0791 5244 BITS - ok
11:15:47.0854 5244 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
11:15:47.0855 5244 blbdrive - ok
11:15:47.0905 5244 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
11:15:47.0907 5244 bowser - ok
11:15:47.0920 5244 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:15:47.0921 5244 BrFiltLo - ok
11:15:47.0937 5244 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:15:47.0938 5244 BrFiltUp - ok
11:15:47.0979 5244 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll
11:15:47.0982 5244 Browser - ok
11:15:48.0017 5244 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
11:15:48.0022 5244 Brserid - ok
11:15:48.0036 5244 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
11:15:48.0037 5244 BrSerWdm - ok
11:15:48.0055 5244 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
11:15:48.0056 5244 BrUsbMdm - ok
11:15:48.0072 5244 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
11:15:48.0074 5244 BrUsbSer - ok
11:15:48.0139 5244 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys
11:15:48.0140 5244 BthEnum - ok
11:15:48.0187 5244 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
11:15:48.0189 5244 BTHMODEM - ok
11:15:48.0245 5244 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
11:15:48.0247 5244 BthPan - ok
11:15:48.0327 5244 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys
11:15:48.0335 5244 BTHPORT - ok
11:15:48.0384 5244 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
11:15:48.0386 5244 bthserv - ok
11:15:48.0415 5244 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys
11:15:48.0417 5244 BTHUSB - ok
11:15:48.0453 5244 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
11:15:48.0455 5244 cdfs - ok
11:15:48.0546 5244 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
11:15:48.0549 5244 cdrom - ok
11:15:48.0606 5244 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
11:15:48.0608 5244 CertPropSvc - ok
11:15:48.0672 5244 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
11:15:48.0673 5244 circlass - ok
11:15:48.0725 5244 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
11:15:48.0731 5244 CLFS - ok
11:15:48.0809 5244 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:15:48.0812 5244 clr_optimization_v2.0.50727_32 - ok
11:15:48.0869 5244 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
11:15:48.0872 5244 clr_optimization_v2.0.50727_64 - ok
11:15:48.0968 5244 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:15:48.0971 5244 clr_optimization_v4.0.30319_32 - ok
11:15:49.0050 5244 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
11:15:49.0053 5244 clr_optimization_v4.0.30319_64 - ok
11:15:49.0153 5244 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
11:15:49.0154 5244 CmBatt - ok
11:15:49.0184 5244 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
11:15:49.0185 5244 cmdide - ok
11:15:49.0247 5244 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
11:15:49.0254 5244 CNG - ok
11:15:49.0308 5244 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
11:15:49.0309 5244 Compbatt - ok
11:15:49.0353 5244 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
11:15:49.0355 5244 CompositeBus - ok
11:15:49.0382 5244 COMSysApp - ok
11:15:49.0410 5244 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
11:15:49.0411 5244 crcdisk - ok
11:15:49.0467 5244 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll
11:15:49.0471 5244 CryptSvc - ok
11:15:49.0528 5244 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
11:15:49.0539 5244 DcomLaunch - ok
11:15:49.0572 5244 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
11:15:49.0577 5244 defragsvc - ok
11:15:49.0649 5244 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
11:15:49.0651 5244 DfsC - ok
11:15:49.0709 5244 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll
11:15:49.0715 5244 Dhcp - ok
11:15:49.0754 5244 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
11:15:49.0755 5244 discache - ok
11:15:49.0813 5244 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
11:15:49.0815 5244 Disk - ok
11:15:49.0869 5244 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll
11:15:49.0874 5244 Dnscache - ok
11:15:49.0918 5244 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll
11:15:49.0923 5244 dot3svc - ok
11:15:49.0955 5244 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll
11:15:49.0959 5244 DPS - ok
11:15:50.0008 5244 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
11:15:50.0009 5244 drmkaud - ok
11:15:50.0127 5244 DsiWMIService (61e894fe1e9cc720c909e6e343351794) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
11:15:50.0132 5244 DsiWMIService - ok
11:15:50.0256 5244 dtsoftbus01 (46571ed73ae84469dca53081d33cf3c8) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
11:15:50.0261 5244 dtsoftbus01 - ok
11:15:50.0332 5244 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
11:15:50.0347 5244 DXGKrnl - ok
11:15:50.0388 5244 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
11:15:50.0391 5244 EapHost - ok
11:15:50.0535 5244 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
11:15:50.0583 5244 ebdrv - ok
11:15:50.0619 5244 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe
11:15:50.0622 5244 EFS - ok
11:15:50.0700 5244 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe
11:15:50.0711 5244 ehRecvr - ok
11:15:50.0754 5244 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
11:15:50.0756 5244 ehSched - ok
11:15:50.0883 5244 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
11:15:50.0891 5244 elxstor - ok
11:15:50.0992 5244 ePowerSvc (a04df13f40022550381a48e4e4587a67) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
11:15:51.0004 5244 ePowerSvc - ok
11:15:51.0086 5244 EpsonBidirectionalService (abdd5ad016affd34ad40e944ce94bf59) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
11:15:51.0088 5244 EpsonBidirectionalService - ok
11:15:51.0187 5244 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
11:15:51.0188 5244 ErrDev - ok
11:15:51.0279 5244 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
11:15:51.0287 5244 EventSystem - ok
11:15:51.0318 5244 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
11:15:51.0324 5244 exfat - ok
11:15:51.0340 5244 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
11:15:51.0346 5244 fastfat - ok
11:15:51.0415 5244 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe
11:15:51.0427 5244 Fax - ok
11:15:51.0441 5244 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
11:15:51.0442 5244 fdc - ok
11:15:51.0502 5244 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
11:15:51.0504 5244 fdPHost - ok
11:15:51.0518 5244 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
11:15:51.0521 5244 FDResPub - ok
11:15:51.0537 5244 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
11:15:51.0538 5244 FileInfo - ok
11:15:51.0554 5244 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
11:15:51.0556 5244 Filetrace - ok
11:15:51.0572 5244 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
11:15:51.0574 5244 flpydisk - ok
11:15:51.0623 5244 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
11:15:51.0628 5244 FltMgr - ok
11:15:51.0714 5244 FontCache (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll
11:15:51.0733 5244 FontCache - ok
11:15:51.0803 5244 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:15:51.0805 5244 FontCache3.0.0.0 - ok
11:15:51.0889 5244 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
11:15:51.0890 5244 FsDepends - ok
11:15:51.0939 5244 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys
11:15:51.0940 5244 Fs_Rec - ok
11:15:52.0024 5244 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
11:15:52.0028 5244 fvevol - ok
11:15:52.0086 5244 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
11:15:52.0088 5244 gagp30kx - ok
11:15:52.0149 5244 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll
11:15:52.0162 5244 gpsvc - ok
11:15:52.0288 5244 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:15:52.0291 5244 gupdate - ok
11:15:52.0301 5244 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:15:52.0303 5244 gupdatem - ok
11:15:52.0420 5244 hamachi (1e6438d4ea6e1174a3b3b1edc4de660b) C:\Windows\system32\DRIVERS\hamachi.sys
11:15:52.0421 5244 hamachi - ok
11:15:52.0591 5244 Hamachi2Svc (d483dbaef409e8ab7477c28615fcd853) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
11:15:52.0626 5244 Hamachi2Svc - ok
11:15:52.0721 5244 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
11:15:52.0722 5244 hcw85cir - ok
11:15:52.0770 5244 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
11:15:52.0776 5244 HdAudAddService - ok
11:15:52.0792 5244 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
11:15:52.0794 5244 HDAudBus - ok
11:15:52.0808 5244 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
11:15:52.0809 5244 HidBatt - ok
11:15:52.0827 5244 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
11:15:52.0829 5244 HidBth - ok
11:15:52.0862 5244 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
11:15:52.0864 5244 HidIr - ok
11:15:52.0908 5244 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
11:15:52.0911 5244 hidserv - ok
11:15:52.0964 5244 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
11:15:52.0965 5244 HidUsb - ok
11:15:53.0008 5244 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll
11:15:53.0012 5244 hkmsvc - ok
11:15:53.0038 5244 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll
11:15:53.0044 5244 HomeGroupListener - ok
11:15:53.0088 5244 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll
11:15:53.0095 5244 HomeGroupProvider - ok
11:15:53.0154 5244 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
11:15:53.0156 5244 HpSAMD - ok
11:15:53.0221 5244 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
11:15:53.0232 5244 HTTP - ok
11:15:53.0261 5244 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
11:15:53.0262 5244 hwpolicy - ok
11:15:53.0294 5244 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
11:15:53.0296 5244 i8042prt - ok
11:15:53.0352 5244 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
11:15:53.0359 5244 iaStorV - ok
11:15:53.0457 5244 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
11:15:53.0470 5244 idsvc - ok
11:15:53.0558 5244 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
11:15:53.0560 5244 iirsp - ok
11:15:53.0624 5244 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll
11:15:53.0638 5244 IKEEXT - ok
11:15:53.0781 5244 IntcAzAudAddService (28ceefbd2c63f91dc17ded3e8d27ecf5) C:\Windows\system32\drivers\RTKVHD64.sys
11:15:53.0815 5244 IntcAzAudAddService - ok
11:15:53.0847 5244 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
11:15:53.0848 5244 intelide - ok
11:15:53.0873 5244 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
11:15:53.0875 5244 intelppm - ok
11:15:53.0956 5244 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
11:15:53.0960 5244 IPBusEnum - ok
11:15:53.0975 5244 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:15:53.0977 5244 IpFilterDriver - ok
11:15:54.0024 5244 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll
11:15:54.0035 5244 iphlpsvc - ok
11:15:54.0066 5244 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
11:15:54.0067 5244 IPMIDRV - ok
11:15:54.0086 5244 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
11:15:54.0089 5244 IPNAT - ok
11:15:54.0117 5244 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
11:15:54.0118 5244 IRENUM - ok
11:15:54.0136 5244 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
11:15:54.0137 5244 isapnp - ok
11:15:54.0179 5244 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
11:15:54.0183 5244 iScsiPrt - ok
11:15:54.0206 5244 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
11:15:54.0208 5244 kbdclass - ok
11:15:54.0234 5244 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
11:15:54.0236 5244 kbdhid - ok
11:15:54.0274 5244 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
11:15:54.0277 5244 KeyIso - ok
11:15:54.0299 5244 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
11:15:54.0302 5244 KSecDD - ok
11:15:54.0327 5244 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
11:15:54.0330 5244 KSecPkg - ok
11:15:54.0385 5244 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
11:15:54.0386 5244 ksthunk - ok
11:15:54.0431 5244 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
11:15:54.0439 5244 KtmRm - ok
11:15:54.0501 5244 L1C (6e0698cea0901fd1a2b9ce0859e2d8fe) C:\Windows\system32\DRIVERS\L1C62x64.sys
11:15:54.0502 5244 L1C - ok
11:15:54.0556 5244 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll
11:15:54.0563 5244 LanmanServer - ok
11:15:54.0610 5244 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll
11:15:54.0616 5244 LanmanWorkstation - ok
11:15:54.0675 5244 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
11:15:54.0677 5244 lltdio - ok
11:15:54.0724 5244 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
11:15:54.0731 5244 lltdsvc - ok
11:15:54.0745 5244 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
11:15:54.0748 5244 lmhosts - ok
11:15:54.0781 5244 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
11:15:54.0784 5244 LSI_FC - ok
11:15:54.0800 5244 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
11:15:54.0802 5244 LSI_SAS - ok
11:15:54.0818 5244 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:15:54.0820 5244 LSI_SAS2 - ok
11:15:54.0847 5244 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:15:54.0850 5244 LSI_SCSI - ok
11:15:54.0882 5244 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
11:15:54.0885 5244 luafv - ok
11:15:54.0957 5244 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
11:15:54.0958 5244 MBAMProtector - ok
11:15:55.0079 5244 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
11:15:55.0090 5244 MBAMService - ok
11:15:55.0199 5244 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll
11:15:55.0203 5244 Mcx2Svc - ok
11:15:55.0254 5244 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
11:15:55.0255 5244 megasas - ok
11:15:55.0275 5244 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
11:15:55.0279 5244 MegaSR - ok
11:15:55.0332 5244 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
11:15:55.0337 5244 MMCSS - ok
11:15:55.0366 5244 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
11:15:55.0368 5244 Modem - ok
11:15:55.0391 5244 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
11:15:55.0392 5244 monitor - ok
11:15:55.0415 5244 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
11:15:55.0417 5244 mouclass - ok
11:15:55.0436 5244 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
11:15:55.0437 5244 mouhid - ok
11:15:55.0465 5244 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
11:15:55.0467 5244 mountmgr - ok
11:15:55.0545 5244 MpFilter (c177a7ebf5e8a0b596f618870516cab8) C:\Windows\system32\DRIVERS\MpFilter.sys
11:15:55.0548 5244 MpFilter - ok
11:15:55.0565 5244 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
11:15:55.0568 5244 mpio - ok
11:15:55.0596 5244 MpNWMon (8fbf6b31fe8af1833d93c5913d5b4d55) C:\Windows\system32\DRIVERS\MpNWMon.sys
11:15:55.0598 5244 MpNWMon - ok
11:15:55.0629 5244 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
11:15:55.0631 5244 mpsdrv - ok
11:15:55.0690 5244 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll
11:15:55.0705 5244 MpsSvc - ok
11:15:55.0722 5244 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
11:15:55.0725 5244 MRxDAV - ok
11:15:55.0767 5244 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
11:15:55.0770 5244 mrxsmb - ok
11:15:55.0830 5244 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:15:55.0835 5244 mrxsmb10 - ok
11:15:55.0865 5244 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:15:55.0868 5244 mrxsmb20 - ok
11:15:55.0903 5244 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
11:15:55.0904 5244 msahci - ok
11:15:55.0921 5244 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
11:15:55.0924 5244 msdsm - ok
11:15:55.0965 5244 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
11:15:55.0970 5244 MSDTC - ok
11:15:56.0004 5244 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
11:15:56.0007 5244 Msfs - ok
11:15:56.0023 5244 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
11:15:56.0024 5244 mshidkmdf - ok
11:15:56.0043 5244 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
11:15:56.0045 5244 msisadrv - ok
11:15:56.0107 5244 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
11:15:56.0112 5244 MSiSCSI - ok
11:15:56.0125 5244 msiserver - ok
11:15:56.0175 5244 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
11:15:56.0176 5244 MSKSSRV - ok
11:15:56.0294 5244 MsMpSvc (157e9e498206a3366baa7e4697bdd947) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
11:15:56.0295 5244 MsMpSvc - ok
11:15:56.0386 5244 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
11:15:56.0387 5244 MSPCLOCK - ok
11:15:56.0401 5244 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
11:15:56.0402 5244 MSPQM - ok
11:15:56.0427 5244 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
11:15:56.0433 5244 MsRPC - ok
11:15:56.0453 5244 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
11:15:56.0454 5244 mssmbios - ok
11:15:56.0488 5244 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
11:15:56.0489 5244 MSTEE - ok
11:15:56.0514 5244 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
11:15:56.0515 5244 MTConfig - ok
11:15:56.0551 5244 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
11:15:56.0553 5244 Mup - ok
11:15:56.0615 5244 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll
11:15:56.0626 5244 napagent - ok
11:15:56.0680 5244 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
11:15:56.0685 5244 NativeWifiP - ok
11:15:56.0777 5244 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
11:15:56.0792 5244 NDIS - ok
11:15:56.0816 5244 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
11:15:56.0817 5244 NdisCap - ok
11:15:56.0848 5244 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
11:15:56.0849 5244 NdisTapi - ok
11:15:56.0892 5244 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
11:15:56.0894 5244 Ndisuio - ok
11:15:56.0913 5244 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
11:15:56.0916 5244 NdisWan - ok
11:15:56.0931 5244 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
11:15:56.0933 5244 NDProxy - ok
11:15:56.0949 5244 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
11:15:56.0951 5244 NetBIOS - ok
11:15:56.0973 5244 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
11:15:56.0978 5244 NetBT - ok
11:15:57.0018 5244 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
11:15:57.0022 5244 Netlogon - ok
11:15:57.0086 5244 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
11:15:57.0095 5244 Netman - ok
11:15:57.0132 5244 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
11:15:57.0142 5244 netprofm - ok
11:15:57.0213 5244 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:15:57.0216 5244 NetTcpPortSharing - ok
11:15:57.0329 5244 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
11:15:57.0331 5244 nfrd960 - ok
11:15:57.0626 5244 NIHardwareService (0bcb418c2906852c6f9347a258fd5711) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
11:15:57.0703 5244 NIHardwareService - ok
11:15:57.0830 5244 NisDrv (5f7d72cbcdd025af1f38fdeee5646968) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
11:15:57.0832 5244 NisDrv - ok
11:15:57.0944 5244 NisSrv (566ddd5d82520da01d75f81428ac4c38) C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
11:15:57.0950 5244 NisSrv - ok
11:15:58.0015 5244 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll
11:15:58.0022 5244 NlaSvc - ok
11:15:58.0064 5244 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
11:15:58.0066 5244 Npfs - ok
11:15:58.0091 5244 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
11:15:58.0095 5244 nsi - ok
11:15:58.0110 5244 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
11:15:58.0111 5244 nsiproxy - ok
11:15:58.0217 5244 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
11:15:58.0242 5244 Ntfs - ok
11:15:58.0276 5244 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
11:15:58.0277 5244 Null - ok
11:15:58.0329 5244 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
11:15:58.0332 5244 nvraid - ok
11:15:58.0380 5244 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
11:15:58.0383 5244 nvstor - ok
11:15:58.0450 5244 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
11:15:58.0453 5244 nv_agp - ok
11:15:58.0469 5244 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
11:15:58.0471 5244 ohci1394 - ok
11:15:58.0826 5244 OnlineStorageService (a7f983f6946dd78ca2eda2038cedfe37) C:\Program Files\Trend Micro SafeSync\hrfscore.exe
11:15:58.0937 5244 OnlineStorageService - ok
11:15:59.0063 5244 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
11:15:59.0071 5244 p2pimsvc - ok
11:15:59.0119 5244 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
11:15:59.0128 5244 p2psvc - ok
11:15:59.0178 5244 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
11:15:59.0181 5244 Parport - ok
11:15:59.0236 5244 Partizan - ok
11:15:59.0256 5244 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
11:15:59.0258 5244 partmgr - ok
11:15:59.0431 5244 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
11:15:59.0437 5244 PcaSvc - ok
11:15:59.0468 5244 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
11:15:59.0471 5244 pci - ok
11:15:59.0486 5244 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
11:15:59.0487 5244 pciide - ok
11:15:59.0507 5244 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
11:15:59.0511 5244 pcmcia - ok
11:15:59.0527 5244 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
11:15:59.0529 5244 pcw - ok
11:15:59.0577 5244 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
11:15:59.0587 5244 PEAUTH - ok
11:15:59.0671 5244 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
11:15:59.0674 5244 PerfHost - ok
11:15:59.0805 5244 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll
11:15:59.0829 5244 pla - ok
11:15:59.0911 5244 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll
11:15:59.0921 5244 PlugPlay - ok
11:15:59.0951 5244 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
11:15:59.0956 5244 PNRPAutoReg - ok
11:15:59.0977 5244 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
11:15:59.0985 5244 PNRPsvc - ok
11:16:00.0054 5244 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll
11:16:00.0063 5244 PolicyAgent - ok
11:16:00.0115 5244 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
11:16:00.0122 5244 Power - ok
11:16:00.0177 5244 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
11:16:00.0179 5244 PptpMiniport - ok
11:16:00.0209 5244 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
11:16:00.0211 5244 Processor - ok
11:16:00.0268 5244 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll
11:16:00.0275 5244 ProfSvc - ok
11:16:00.0318 5244 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
11:16:00.0322 5244 ProtectedStorage - ok
11:16:00.0376 5244 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
11:16:00.0378 5244 Psched - ok
11:16:00.0451 5244 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
11:16:00.0474 5244 ql2300 - ok
11:16:00.0492 5244 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
11:16:00.0495 5244 ql40xx - ok
11:16:00.0531 5244 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
11:16:00.0538 5244 QWAVE - ok
11:16:00.0553 5244 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
11:16:00.0555 5244 QWAVEdrv - ok
11:16:00.0572 5244 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
11:16:00.0573 5244 RasAcd - ok
11:16:00.0627 5244 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
11:16:00.0629 5244 RasAgileVpn - ok
11:16:00.0676 5244 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
11:16:00.0681 5244 RasAuto - ok
11:16:00.0735 5244 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
11:16:00.0737 5244 Rasl2tp - ok
11:16:00.0778 5244 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll
11:16:00.0787 5244 RasMan - ok
11:16:00.0815 5244 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
11:16:00.0817 5244 RasPppoe - ok
11:16:00.0835 5244 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
11:16:00.0837 5244 RasSstp - ok
11:16:00.0882 5244 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
11:16:00.0887 5244 rdbss - ok
11:16:00.0903 5244 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
11:16:00.0904 5244 rdpbus - ok
11:16:00.0922 5244 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
11:16:00.0923 5244 RDPCDD - ok
11:16:00.0964 5244 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
11:16:00.0965 5244 RDPENCDD - ok
11:16:00.0988 5244 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
11:16:00.0989 5244 RDPREFMP - ok
11:16:01.0047 5244 RDPWD (074ac702d8b8b660b0e1371555995386) C:\Windows\system32\drivers\RDPWD.sys
11:16:01.0053 5244 RDPWD - ok
11:16:01.0087 5244 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
11:16:01.0091 5244 rdyboost - ok
11:16:01.0133 5244 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
11:16:01.0137 5244 RemoteAccess - ok
11:16:01.0179 5244 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
11:16:01.0185 5244 RemoteRegistry - ok
11:16:01.0241 5244 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
11:16:01.0244 5244 RFCOMM - ok
11:16:01.0279 5244 RimUsb (7b04c9843921ab1f695fb395422c5360) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
11:16:01.0281 5244 RimUsb - ok
11:16:01.0341 5244 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
11:16:01.0346 5244 RpcEptMapper - ok
11:16:01.0384 5244 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
11:16:01.0387 5244 RpcLocator - ok
11:16:01.0427 5244 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll
11:16:01.0438 5244 RpcSs - ok
11:16:01.0487 5244 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
11:16:01.0489 5244 rspndr - ok
11:16:01.0530 5244 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
11:16:01.0533 5244 SamSs - ok
11:16:01.0549 5244 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
11:16:01.0552 5244 sbp2port - ok
11:16:01.0605 5244 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
11:16:01.0611 5244 SCardSvr - ok
11:16:01.0627 5244 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
11:16:01.0628 5244 scfilter - ok
11:16:01.0704 5244 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll
11:16:01.0724 5244 Schedule - ok
11:16:01.0774 5244 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll
11:16:01.0776 5244 SCPolicySvc - ok
11:16:01.0817 5244 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll
11:16:01.0823 5244 SDRSVC - ok
11:16:01.0890 5244 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
11:16:01.0891 5244 secdrv - ok
11:16:01.0919 5244 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll
11:16:01.0923 5244 seclogon - ok
11:16:01.0942 5244 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
11:16:01.0947 5244 SENS - ok
11:16:01.0983 5244 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
11:16:01.0987 5244 SensrSvc - ok
11:16:02.0102 5244 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
11:16:02.0103 5244 Serenum - ok
11:16:02.0133 5244 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
11:16:02.0135 5244 Serial - ok
11:16:02.0154 5244 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
11:16:02.0155 5244 sermouse - ok
11:16:02.0202 5244 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll
11:16:02.0208 5244 SessionEnv - ok
11:16:02.0223 5244 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
11:16:02.0224 5244 sffdisk - ok
11:16:02.0242 5244 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
11:16:02.0243 5244 sffp_mmc - ok
11:16:02.0262 5244 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
11:16:02.0263 5244 sffp_sd - ok
11:16:02.0281 5244 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
11:16:02.0282 5244 sfloppy - ok
11:16:02.0329 5244 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
11:16:02.0336 5244 SharedAccess - ok
11:16:02.0387 5244 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll
11:16:02.0396 5244 ShellHWDetection - ok
11:16:02.0455 5244 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:16:02.0456 5244 SiSRaid2 - ok
11:16:02.0472 5244 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
11:16:02.0474 5244 SiSRaid4 - ok
11:16:02.0507 5244 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
11:16:02.0509 5244 Smb - ok
11:16:02.0567 5244 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
11:16:02.0571 5244 SNMPTRAP - ok
11:16:02.0619 5244 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
11:16:02.0620 5244 spldr - ok
11:16:02.0685 5244 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe
11:16:02.0697 5244 Spooler - ok
11:16:02.0857 5244 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe
11:16:02.0912 5244 sppsvc - ok
11:16:02.0931 5244 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
11:16:02.0936 5244 sppuinotify - ok
11:16:03.0013 5244 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
11:16:03.0020 5244 srv - ok
11:16:03.0064 5244 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
11:16:03.0071 5244 srv2 - ok
11:16:03.0109 5244 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
11:16:03.0113 5244 srvnet - ok
11:16:03.0175 5244 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
11:16:03.0182 5244 SSDPSRV - ok
11:16:03.0197 5244 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
11:16:03.0203 5244 SstpSvc - ok
11:16:03.0246 5244 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
11:16:03.0247 5244 stexstor - ok
11:16:03.0293 5244 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll
11:16:03.0306 5244 stisvc - ok
11:16:03.0321 5244 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
11:16:03.0322 5244 swenum - ok
11:16:03.0361 5244 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
11:16:03.0373 5244 swprv - ok
11:16:03.0454 5244 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll
11:16:03.0484 5244 SysMain - ok
11:16:03.0509 5244 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll
11:16:03.0514 5244 TabletInputService - ok
11:16:03.0545 5244 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll
11:16:03.0554 5244 TapiSrv - ok
11:16:03.0578 5244 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
11:16:03.0584 5244 TBS - ok
11:16:03.0724 5244 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
11:16:03.0752 5244 Tcpip - ok
11:16:03.0902 5244 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
11:16:03.0929 5244 TCPIP6 - ok
11:16:03.0974 5244 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
11:16:03.0976 5244 tcpipreg - ok
11:16:04.0005 5244 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
11:16:04.0006 5244 TDPIPE - ok
11:16:04.0063 5244 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys
11:16:04.0064 5244 TDTCP - ok
11:16:04.0081 5244 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
11:16:04.0084 5244 tdx - ok
11:16:04.0116 5244 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
11:16:04.0118 5244 TermDD - ok
11:16:04.0188 5244 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll
11:16:04.0202 5244 TermService - ok
11:16:04.0228 5244 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
11:16:04.0233 5244 Themes - ok
11:16:04.0277 5244 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
11:16:04.0281 5244 THREADORDER - ok
11:16:04.0314 5244 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
11:16:04.0320 5244 TrkWks - ok
11:16:04.0366 5244 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe
11:16:04.0369 5244 TrustedInstaller - ok
11:16:04.0428 5244 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
11:16:04.0430 5244 tssecsrv - ok
11:16:04.0480 5244 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
11:16:04.0482 5244 tunnel - ok
11:16:04.0499 5244 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
11:16:04.0501 5244 uagp35 - ok
11:16:04.0540 5244 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
11:16:04.0545 5244 udfs - ok
11:16:04.0599 5244 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
11:16:04.0604 5244 UI0Detect - ok
11:16:04.0633 5244 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
11:16:04.0635 5244 uliagpkx - ok
11:16:04.0661 5244 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
11:16:04.0663 5244 umbus - ok
11:16:04.0680 5244 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
11:16:04.0681 5244 UmPass - ok
11:16:04.0726 5244 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
11:16:04.0735 5244 upnphost - ok
11:16:04.0788 5244 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
11:16:04.0791 5244 usbaudio - ok
11:16:04.0840 5244 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys
11:16:04.0843 5244 usbccgp - ok
11:16:04.0907 5244 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
11:16:04.0909 5244 usbcir - ok
11:16:04.0943 5244 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys
11:16:04.0945 5244 usbehci - ok
11:16:05.0004 5244 usbfilter (2c780746dc44a28fe67004dc58173f05) C:\Windows\system32\DRIVERS\usbfilter.sys
11:16:05.0005 5244 usbfilter - ok
11:16:05.0074 5244 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys
11:16:05.0079 5244 usbhub - ok
11:16:05.0134 5244 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys
11:16:05.0135 5244 usbohci - ok
11:16:05.0194 5244 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
11:16:05.0195 5244 usbprint - ok
11:16:05.0231 5244 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
11:16:05.0233 5244 usbscan - ok
11:16:05.0273 5244 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:16:05.0275 5244 USBSTOR - ok
11:16:05.0303 5244 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys
11:16:05.0305 5244 usbuhci - ok
11:16:05.0366 5244 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys
11:16:05.0369 5244 usbvideo - ok
11:16:05.0416 5244 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
11:16:05.0421 5244 UxSms - ok
11:16:05.0453 5244 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe
11:16:05.0456 5244 VaultSvc - ok
11:16:05.0517 5244 VBoxNetAdp (c9f86aeb504355541ec9820e3155e253) C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
11:16:05.0521 5244 VBoxNetAdp - ok
11:16:05.0546 5244 VBoxNetFlt - ok
11:16:05.0605 5244 VBoxUSB (4831ee295c9911b0236867931be493f1) C:\Windows\system32\Drivers\VBoxUSB.sys
11:16:05.0608 5244 VBoxUSB - ok
11:16:05.0667 5244 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
11:16:05.0668 5244 vdrvroot - ok
11:16:05.0724 5244 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe
11:16:05.0736 5244 vds - ok
11:16:05.0752 5244 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
11:16:05.0754 5244 vga - ok
11:16:05.0771 5244 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
11:16:05.0773 5244 VgaSave - ok
11:16:05.0794 5244 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
11:16:05.0798 5244 vhdmp - ok
11:16:05.0813 5244 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
11:16:05.0814 5244 viaide - ok
11:16:05.0843 5244 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
11:16:05.0845 5244 volmgr - ok
11:16:05.0872 5244 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
11:16:05.0878 5244 volmgrx - ok
11:16:05.0900 5244 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
11:16:05.0906 5244 volsnap - ok
11:16:05.0955 5244 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
11:16:05.0959 5244 vsmraid - ok
11:16:06.0048 5244 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe
11:16:06.0076 5244 VSS - ok
11:16:06.0092 5244 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
11:16:06.0094 5244 vwifibus - ok
11:16:06.0125 5244 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
11:16:06.0127 5244 vwififlt - ok
11:16:06.0151 5244 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
11:16:06.0161 5244 W32Time - ok
11:16:06.0204 5244 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
11:16:06.0205 5244 WacomPen - ok
11:16:06.0270 5244 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
11:16:06.0272 5244 WANARP - ok
11:16:06.0298 5244 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
11:16:06.0300 5244 Wanarpv6 - ok
11:16:06.0407 5244 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
11:16:06.0426 5244 WatAdminSvc - ok
11:16:06.0509 5244 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe
11:16:06.0535 5244 wbengine - ok
11:16:06.0555 5244 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
11:16:06.0562 5244 WbioSrvc - ok
11:16:06.0620 5244 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll
11:16:06.0629 5244 wcncsvc - ok
11:16:06.0655 5244 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
11:16:06.0660 5244 WcsPlugInService - ok
11:16:06.0717 5244 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
11:16:06.0718 5244 Wd - ok
11:16:06.0772 5244 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
11:16:06.0782 5244 Wdf01000 - ok
11:16:06.0807 5244 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
11:16:06.0813 5244 WdiServiceHost - ok
11:16:06.0821 5244 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
11:16:06.0827 5244 WdiSystemHost - ok
11:16:06.0879 5244 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll
11:16:06.0887 5244 WebClient - ok
11:16:06.0922 5244 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
11:16:06.0929 5244 Wecsvc - ok
11:16:06.0958 5244 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
11:16:06.0964 5244 wercplsupport - ok
11:16:07.0016 5244 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
11:16:07.0021 5244 WerSvc - ok
11:16:07.0077 5244 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
11:16:07.0079 5244 WfpLwf - ok
11:16:07.0095 5244 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
11:16:07.0096 5244 WIMMount - ok
11:16:07.0143 5244 WinDefend - ok
11:16:07.0157 5244 WinHttpAutoProxySvc - ok
11:16:07.0226 5244 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
11:16:07.0230 5244 Winmgmt - ok
11:16:07.0340 5244 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll
11:16:07.0375 5244 WinRM - ok
11:16:07.0460 5244 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
11:16:07.0478 5244 Wlansvc - ok
11:16:07.0639 5244 wlidsvc (98f138897ef4246381d197cb81846d62) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
11:16:07.0673 5244 wlidsvc - ok
11:16:07.0717 5244 wltrysvc (e16ecf4388aec579bc9f35c91d770276) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
11:16:07.0718 5244 wltrysvc - ok
11:16:08.0323 5244 wmcmgc (bf8fac9e0ef46c1c01aee53edbafc9f0) C:\Program Files (x86)\Common Files\\System\icm64.dll
11:16:08.0545 5244 wmcmgc - ok
11:16:08.0689 5244 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
11:16:08.0691 5244 WmiAcpi - ok
11:16:08.0783 5244 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
11:16:08.0788 5244 wmiApSrv - ok
11:16:08.0868 5244 WMPNetworkSvc - ok
11:16:08.0999 5244 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
11:16:09.0004 5244 WPCSvc - ok
11:16:09.0024 5244 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll
11:16:09.0031 5244 WPDBusEnum - ok
11:16:09.0091 5244 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
11:16:09.0093 5244 ws2ifsl - ok
11:16:09.0135 5244 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll
11:16:09.0142 5244 wscsvc - ok
11:16:09.0156 5244 WSearch - ok
11:16:09.0289 5244 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll
11:16:09.0329 5244 wuauserv - ok
11:16:09.0348 5244 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
11:16:09.0350 5244 WudfPf - ok
11:16:09.0384 5244 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
11:16:09.0387 5244 WUDFRd - ok
11:16:09.0419 5244 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll
11:16:09.0424 5244 wudfsvc - ok
11:16:09.0450 5244 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
11:16:09.0458 5244 WwanSvc - ok
11:16:09.0539 5244 xusb21 (38f55d07b1d3391065c40ec065f984e2) C:\Windows\system32\DRIVERS\xusb21.sys
11:16:09.0541 5244 xusb21 - ok
11:16:09.0629 5244 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
11:16:09.0689 5244 \Device\Harddisk0\DR0 - ok
11:16:09.0722 5244 Boot (0x1200) (11d3777cb10c515e5fc96c3136593aa8) \Device\Harddisk0\DR0\Partition0
11:16:09.0725 5244 \Device\Harddisk0\DR0\Partition0 - ok
11:16:09.0732 5244 Boot (0x1200) (3633a268bf63f264143b6533ba05f27d) \Device\Harddisk0\DR0\Partition1
11:16:09.0735 5244 \Device\Harddisk0\DR0\Partition1 - ok
11:16:09.0738 5244 ============================================================
11:16:09.0738 5244 Scan finished
11:16:09.0738 5244 ============================================================
11:16:09.0767 6012 Detected object count: 0
11:16:09.0767 6012 Actual detected object count: 0
11:16:19.0322 2692 Deinitialize success

[vyosek]

Stahnete SytemLook http://jpshortstuff.247fixes.com/SystemLook_x64.exe a ulozte jej na plochu

• Do okna vlozte skript nize

• Kód: Vybrat vše

  :filefind
  stdrt.exe

• Kliknete na Look
• Tlacitko Look se zmeni na Scanning a zsedne
• Pockejte pokud se tlacitko Scanning opet nezmeni na Look - tak poznate ze SystemLook dokoncil svou praci
• Vyskoci na Vas log s nazvem SystemLook (pripadne bude ulozen na plose), jeho obsah mi sem vlozte

[corpop]

SystemLook 30.07.11 by jpshortstuff
Log created at 12:29 on 21/04/2012 by Jakub
Administrator - Elevation successful

========== filefind ==========

Searching for "stdrt.exe"
C:\Users\Jakub\AppData\Local\Temp\mrtE6F9.tmp\stdrt.exe --a---- 372736 bytes [06:38 21/04/2012] [06:38 21/04/2012] 5413B1A323F0837A01821FEA3CB2A5A2
C:\Windows\Temp\mrt8AC1.tmp\stdrt.exe --a---- 372736 bytes [08:48 21/04/2012] [08:48 21/04/2012] 5413B1A323F0837A01821FEA3CB2A5A2
C:\Windows\Temp\mrt8ED6.tmp\stdrt.exe --a---- 372736 bytes [08:21 21/04/2012] [08:21 21/04/2012] 5413B1A323F0837A01821FEA3CB2A5A2

-= EOF =-

[vyosek]

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[corpop]

probehlo, cca za 30 min


ComboFix 12-04-20.03 - Jakub 21.04.2012 13:07:46.1.3 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4094.2511 [GMT 2:00]
Spuštěný z: c:\users\Jakub\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Jakub\AppData\Local\setup.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\msvcsv60.dll
c:\windows\SysWow64\tmp2E3C.tmp
c:\windows\SysWow64\tmp2E3D.tmp
c:\windows\SysWow64\tmp611B.tmp
c:\windows\SysWow64\tmp611C.tmp
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-21 do 2012-04-21 )))))))))))))))))))))))))))))))
.
.
2012-04-21 11:19 . 2012-04-21 11:19 -------- d-----w- c:\users\Guest\AppData\Local\temp
2012-04-21 11:19 . 2012-04-21 11:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-21 09:26 . 2012-04-21 09:26 -------- d-----w- C:\rsit
2012-04-21 09:26 . 2012-04-21 09:26 -------- d-----w- c:\program files\trend micro
2012-04-21 09:01 . 2012-04-21 09:01 39184 ----a-w- c:\windows\SysWow64\Partizan.exe
2012-04-21 09:01 . 2012-04-21 09:01 35816 ----a-w- c:\windows\SysWow64\drivers\Partizan.sys
2012-04-21 09:01 . 2012-04-21 09:01 2 --shatr- c:\windows\winstart.bat
2012-04-21 09:01 . 2012-01-23 15:01 12800 ----a-w- c:\windows\SysWow64\drivers\UnHackMeDrv.sys
2012-04-21 09:00 . 2012-04-21 09:01 -------- d-----w- c:\program files (x86)\UnHackMe
2012-04-21 08:58 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{CEF6452B-7666-4181-9C0C-C7F9A0361E90}\mpengine.dll
2012-04-21 08:34 . 2012-04-21 08:34 -------- d-----w- c:\users\Jakub\AppData\Roaming\Malwarebytes
2012-04-21 08:33 . 2012-04-21 08:33 -------- d-----w- c:\programdata\Malwarebytes
2012-04-21 08:33 . 2011-12-10 13:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-21 08:18 . 2012-04-21 08:20 -------- d-----w- C:\flash
2012-04-21 08:18 . 2012-04-21 08:18 -------- d-----w- c:\program files (x86)\flash
2012-04-21 07:53 . 2007-08-27 12:02 233472 ----a-w- c:\windows\SysWow64\REX Shared Library.dll
2012-04-21 07:53 . 2007-08-27 12:02 1870336 ----a-w- c:\windows\SysWow64\bconvert.dll
2012-04-21 07:49 . 2007-07-27 11:25 61440 ----a-w- c:\windows\SysWow64\NI_DFD_1_5.dll
2012-04-21 07:49 . 2007-07-27 11:25 393216 ----a-w- c:\windows\SysWow64\NI_IRC_1_2.dll
2012-04-21 07:46 . 2012-04-21 08:04 -------- d-----w- c:\program files (x86)\Common Files\Native Instruments
2012-04-21 06:52 . 2009-09-15 09:14 1554944 ----a-w- c:\windows\SysWow64\vorbis.acm
2012-04-21 06:39 . 2012-04-21 06:39 905154 ----a-w- c:\windows\SysWow64\lnsecsl.exe
2012-04-19 09:04 . 2012-04-19 09:03 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-19 09:03 . 2012-04-19 09:03 -------- d-----w- c:\program files\Java
2012-04-18 17:53 . 2012-04-18 17:53 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2012-04-18 17:52 . 2001-09-05 01:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-18 17:52 . 2001-09-05 01:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-18 17:52 . 2001-09-05 01:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-18 17:52 . 2001-09-05 01:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-04-17 20:02 . 2012-04-17 20:40 -------- d-----w- c:\programdata\TmForever
2012-04-15 14:41 . 2012-04-15 14:43 -------- d-----w- c:\users\Jakub\AppData\Roaming\Notepad++
2012-04-15 14:41 . 2012-04-15 14:41 -------- d-----w- c:\program files (x86)\Notepad++
2012-04-14 19:16 . 2012-04-14 19:18 -------- d-----w- c:\programdata\TrackMania
2012-04-14 14:23 . 2012-04-14 14:23 -------- d-----w- c:\users\Jakub\.thinupload
2012-04-14 14:18 . 2012-04-21 08:49 -------- d-----r- c:\users\Jakub\SafeSync
2012-04-14 14:18 . 2012-04-14 14:18 -------- d-----w- c:\users\Jakub\AppData\Local\Trend Micro
2012-04-14 14:14 . 2012-04-14 14:14 -------- d-----w- c:\program files\Trend Micro SafeSync
2012-04-14 14:14 . 2012-04-14 14:14 -------- d-----w- c:\programdata\Trend Micro
2012-04-14 13:56 . 2012-04-14 13:56 -------- d-----w- c:\users\Jakub\AppData\Local\GHISLER
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\UC.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\RAR.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\NOCLOSE.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\LHA.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\ARJ.PIF
2012-04-14 13:54 . 2012-04-14 13:54 -------- d-----w- c:\users\Jakub\AppData\Roaming\GHISLER
2012-04-13 17:38 . 2012-04-13 17:38 -------- dc-h--w- c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
2012-04-13 17:35 . 2012-04-13 17:35 -------- dc-h--w- c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
2012-04-13 17:34 . 2012-04-13 17:34 -------- dc-h--w- c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}
2012-04-13 17:34 . 2012-04-13 17:34 -------- dc-h--w- c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}
2012-04-13 17:30 . 2012-04-13 17:44 -------- dc-h--w- c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}
2012-04-12 14:20 . 2012-03-06 05:59 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 14:20 . 2012-03-06 05:59 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 14:20 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 14:20 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 14:20 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 14:20 . 2012-03-01 06:45 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 14:20 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 14:20 . 2012-03-01 05:49 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 14:20 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 13:13 . 2012-04-12 13:13 -------- d-----w- c:\program files (x86)\Minecraft ID Finder
2012-04-10 14:09 . 2008-10-15 04:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2012-04-10 14:09 . 2008-10-15 04:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2012-04-10 14:09 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-04-09 09:15 . 2012-04-09 09:15 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-09 07:52 . 2012-04-21 08:48 -------- d-----w- c:\users\Jakub\AppData\Local\LogMeIn Hamachi
2012-04-09 07:51 . 2012-04-09 07:51 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-04-09 07:08 . 2012-04-09 07:08 -------- d-----w- c:\users\Jakub\AppData\Roaming\Sierra Entertainment
2012-04-09 06:57 . 2012-04-09 06:57 -------- d-----w- c:\windows\system32\AGEIA
2012-04-09 06:56 . 2012-04-09 06:57 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2012-04-09 06:56 . 2012-04-09 06:56 -------- d-----w- c:\windows\SysWow64\AGEIA
2012-04-09 06:56 . 2012-04-09 06:56 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2012-04-08 15:40 . 2012-04-08 15:40 -------- d-----w- c:\users\Jakub\AppData\Local\DOSBox
2012-04-08 15:40 . 2012-04-08 15:56 -------- d-----w- c:\program files (x86)\DOSBox-0.74
2012-04-08 13:25 . 2012-04-08 13:25 -------- d-----w- c:\users\Jakub\AppData\Local\ElevatedDiagnostics
2012-04-08 12:43 . 2012-04-08 12:43 -------- d-----w- c:\users\Jakub\AppData\Local\CrashRpt
2012-04-07 12:47 . 2012-04-07 12:47 -------- d-----w- c:\users\Jakub\AppData\Roaming\Summer Athletics 2009
2012-04-07 12:10 . 2012-04-07 12:10 -------- d-----w- c:\program files (x86)\East West
2012-04-07 08:46 . 2012-04-07 08:46 -------- d-----w- c:\programdata\Winter Sports 2009
2012-04-02 20:37 . 2007-09-07 15:33 135168 ----a-w- c:\windows\SysWow64\EEBAPI.dll
2012-04-02 20:33 . 2012-04-02 20:33 -------- d-----w- c:\program files (x86)\EpsonNet
2012-04-02 20:31 . 2012-04-02 20:28 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2012-04-02 20:31 . 2012-04-02 20:28 118784 ----a-w- c:\windows\system32\E_ILMGCE.DLL
2012-04-02 20:31 . 2012-04-02 20:28 88064 ----a-w- c:\windows\system32\E_IBCBGCE.DLL
2012-04-02 20:30 . 2012-04-02 20:36 -------- d-----w- c:\programdata\EPSON
2012-04-02 20:30 . 2011-08-09 22:00 464384 ----a-w- c:\windows\system32\esxw2ud.dll
2012-04-02 20:30 . 2009-10-15 22:00 13824 ----a-w- c:\windows\system32\esxcdev.dll
2012-04-02 20:30 . 2009-10-15 22:00 132560 ----a-w- c:\windows\system32\esdevapp.exe
2012-04-02 20:30 . 2012-04-02 20:30 -------- d-----w- c:\program files (x86)\epson
2012-03-31 18:25 . 2012-03-31 18:38 -------- d-----w- c:\programdata\PassMark
2012-03-30 17:59 . 2012-03-30 17:59 -------- dc-h--w- c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}
2012-03-30 17:56 . 2012-03-30 17:57 -------- d-----w- c:\users\Jakub\ni
2012-03-30 14:27 . 2012-04-13 17:51 -------- d-----w- c:\users\Jakub\AppData\Local\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:41 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:38 -------- d-----w- c:\program files\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:34 -------- d-----w- c:\programdata\Native Instruments
2012-03-27 19:39 . 2012-03-27 19:39 -------- d-----w- c:\program files (x86)\Common Files\VST3
2012-03-27 19:37 . 2012-03-27 19:37 -------- d-----w- c:\programdata\VST3 Presets
2012-03-27 19:17 . 2012-03-27 19:17 -------- d-----w- c:\programdata\Steinberg
2012-03-27 19:16 . 2012-03-27 19:16 -------- d-----w- c:\program files (x86)\Common Files\Steinberg
2012-03-27 19:15 . 2012-03-27 19:44 -------- d-----w- c:\users\Jakub\AppData\Roaming\Steinberg
2012-03-24 20:43 . 2012-03-24 20:43 -------- d-----w- c:\users\Jakub\AppData\Local\Adobe
2012-03-24 20:39 . 2012-03-24 20:39 -------- d-----w- c:\programdata\McAfee
2012-03-24 20:38 . 2012-03-24 20:38 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-03-24 09:18 . 2012-03-24 09:18 1492 ----a-w- C:\user.js
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\users\Jakub\AppData\Roaming\Babylon
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\users\Jakub\AppData\Local\Babylon
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\programdata\Babylon
2012-03-22 19:57 . 2012-03-14 17:22 224048 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-03-22 19:57 . 2012-03-14 17:22 130864 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-13 08:46 . 2012-03-18 18:41 8917360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-04-02 08:44 . 2012-03-21 18:43 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2012-04-02 08:44 . 2012-03-21 18:43 122968 ----a-w- c:\windows\system32\OpenAL32.dll
2012-04-02 08:44 . 2012-03-21 18:43 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-04-02 08:44 . 2012-03-21 18:43 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-03-16 14:59 . 2012-03-16 15:00 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AD9E74FB-E6A8-46C9-9363-56450403A6BF}\gapaengine.dll
2012-03-14 17:23 . 2012-03-14 17:23 147248 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-03-14 17:22 . 2012-03-14 17:22 117040 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-03-10 08:04 . 2012-03-10 08:04 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-03-10 07:15 . 2012-03-10 07:15 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-10 07:10 . 2012-03-10 07:10 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-03-10 06:49 . 2012-03-10 06:49 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-10 06:44 . 2012-03-10 06:44 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 448512 ----a-w- c:\windows\system32\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 222208 ----a-w- c:\windows\system32\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 160256 ----a-w- c:\windows\system32\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 12288 ----a-w- c:\windows\system32\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 114176 ----a-w- c:\windows\system32\admparse.dll
2012-03-10 06:44 . 2012-03-10 06:44 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-03-10 06:42 . 2012-03-10 06:42 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-03-10 06:42 . 2012-03-10 06:42 4068864 ----a-w- c:\windows\system32\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 3181568 ----a-w- c:\windows\SysWow64\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-03-10 06:42 . 2012-03-10 06:42 257024 ----a-w- c:\windows\system32\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 229888 ----a-w- c:\windows\system32\XpsRasterService.dll
2012-03-10 06:42 . 2012-03-10 06:42 206848 ----a-w- c:\windows\system32\mfps.dll
2012-03-10 06:42 . 2012-03-10 06:42 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1863680 ----a-w- c:\windows\system32\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 144384 ----a-w- c:\windows\system32\cdd.dll
2012-03-10 06:42 . 2012-03-10 06:42 135168 ----a-w- c:\windows\SysWow64\XpsRasterService.dll
2012-03-10 06:31 . 2012-03-10 06:31 1008640 ----a-w- c:\windows\system32\BCMLogon.dll
2012-03-10 06:31 . 2012-03-10 06:31 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-03-10 06:31 . 2012-03-10 06:31 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2012-03-10 06:31 . 2012-03-10 06:31 459 ----a-w- c:\windows\SysWow64\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 22520 ----a-w- c:\windows\system32\drivers\bcm42rly.sys
2012-03-10 06:31 . 2012-03-10 06:31 7604224 ----a-w- c:\windows\system32\BCMWLCPL.CPL
2012-03-10 06:31 . 2012-03-10 06:31 73216 ----a-w- c:\windows\system32\wltrynt.dll
2012-03-10 06:31 . 2012-03-10 06:31 60416 ----a-w- c:\windows\system32\bcmwlrmt.dll
2012-03-10 06:31 . 2012-03-10 06:31 4961800 ----a-w- c:\windows\SysWow64\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 4420608 ----a-w- c:\windows\system32\bcmttls.dll
2012-03-10 06:31 . 2012-03-10 06:31 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2012-03-10 06:31 . 2012-03-10 06:31 3558128 ----a-w- c:\windows\system32\bcmihvui64.dll
2012-03-10 06:31 . 2012-03-10 06:31 3893488 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2012-03-10 06:31 . 2012-03-10 06:31 2978296 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2012-03-01 12:21 . 2012-03-16 09:01 8643640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{88C79FAE-9B42-443B-A413-C95286CE8448}\mpengine.dll
2012-02-15 06:27 . 2012-03-14 07:42 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-15 05:44 . 2012-03-14 07:42 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-15 04:47 . 2012-03-14 07:42 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-15 04:46 . 2012-03-14 07:42 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-15 03:48 . 2012-02-15 03:48 10856960 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-02-15 03:21 . 2012-02-15 03:21 25839104 ----a-w- c:\windows\system32\atio6axx.dll
2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-02-15 03:18 . 2012-02-15 03:18 791040 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-02-15 03:17 . 2012-02-15 03:17 957952 ----a-w- c:\windows\system32\aticfx64.dll
2012-02-15 03:13 . 2012-02-15 03:13 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-02-15 03:13 . 2012-02-15 03:13 496128 ----a-w- c:\windows\system32\atieclxx.exe
2012-02-15 03:13 . 2012-02-15 03:13 235520 ----a-w- c:\windows\system32\atiesrxx.exe
2012-02-15 03:11 . 2012-02-15 03:11 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-02-15 03:10 . 2012-02-15 03:10 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-02-15 03:10 . 2012-02-15 03:10 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-02-15 03:07 . 2012-02-15 03:07 6200320 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-02-15 02:52 . 2011-06-01 18:11 7646208 ----a-w- c:\windows\system32\atidxx64.dll
2012-02-15 02:41 . 2012-02-15 02:41 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2012-02-15 02:40 . 2012-02-15 02:40 4958208 ----a-w- c:\windows\system32\atiumd6a.dll
2012-02-15 02:34 . 2012-02-15 02:34 51200 ----a-w- c:\windows\system32\aticalrt64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPaired]
@="{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}"
[HKEY_CLASSES_ROOT\CLSID\{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPriority]
@="{6F1BB626-1107-4b82-B322-54C5E64461B8}"
[HKEY_CLASSES_ROOT\CLSID\{6F1BB626-1107-4b82-B322-54C5E64461B8}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoProblem]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2B}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2B}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSynced]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2A}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2A}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSyncing]
@="{7479C9AF-DA81-4944-92E5-23E49390BB29}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB29}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoUnavailable]
@="{66669544-5639-4922-99C8-CE7A86651364}"
[HKEY_CLASSES_ROOT\CLSID\{66669544-5639-4922-99C8-CE7A86651364}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 636032]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"Malwarebytes' Anti-Malware"="d:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AML Device Install.lnk - c:\program files (x86)\AMD AVT\bin\kdbsync.exe [2012-1-31 10752]
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-1-8 107720]
Trend Micro SafeSync.lnk - c:\program files\Trend Micro SafeSync\HrfsClient.exe [2012-4-14 1739536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0Partizan
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 Adobe Licensing Console;Adobe Licensing Console;c:\windows\SysWOW64\lnsecsl.exe [2012-04-21 905154]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 136176]
R2 wmcmgc;Windows Management Configuration;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 136176]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-14 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-01-03 55936]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-17 820768]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 MBAMService;MBAMService;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2011-04-07 5352960]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
S3 OnlineStorageService;OnlineStorageService;c:\program files\Trend Micro SafeSync\hrfscore.exe [2012-03-09 7588112]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - 68010102
*Deregistered* - 68010102
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
wmcmgc
.
Obsah adresáře 'Naplánované úlohy'
.
2012-04-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 07:11]
.
2012-04-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-10 07:11]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPaired]
@="{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}"
[HKEY_CLASSES_ROOT\CLSID\{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPriority]
@="{6F1BB626-1107-4b82-B322-54C5E64461B8}"
[HKEY_CLASSES_ROOT\CLSID\{6F1BB626-1107-4b82-B322-54C5E64461B8}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoProblem]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2B}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2B}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSynced]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2A}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2A}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSyncing]
@="{7479C9AF-DA81-4944-92E5-23E49390BB29}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB29}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoUnavailable]
@="{66669544-5639-4922-99C8-CE7A86651364}"
[HKEY_CLASSES_ROOT\CLSID\{66669544-5639-4922-99C8-CE7A86651364}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-25 10081312]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-02-25 877600]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-02-05 324608]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-03-17 496160]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe" [2012-03-10 4786688]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.babylon.com/?AF=108602&babsrc=HP_ss&mntrId=fa9a4bee00000000000078e4004edba0
mLocal Page = c:\windows\SysWOW64\blank.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-HL3 - d:\hl3\uninstall.exe
AddRemove-Traktor 2_is1 - d:\topcd\Traktor 2\unins000.exe
AddRemove-{43E7798A-248E-4A3D-9969-FEA63543A462} - c:\programdata\{5E4CAE11-3142-4132-BACC-8515F1910998}\Kontakt 4 Setup PC.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-3997867176-2451664295-1965468521-1000\Software\SecuROM\License information*]
"datasecu"=hex:0b,6e,55,b5,b3,a7,25,d1,59,6f,86,f7,44,25,eb,a2,a5,45,f1,a1,98,
76,24,55,ae,26,43,40,c5,2e,bd,17,3f,01,53,6a,e7,48,c3,8d,ef,ea,fa,b8,1c,69,\
"rkeysecu"=hex:e2,25,25,3b,69,80,87,fa,bc,17,53,24,d3,51,64,f7
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-04-21 13:40:05
ComboFix-quarantined-files.txt 2012-04-21 11:39
.
Před spuštěním: Volných bajtů: 22 308 139 008
Po spuštění: Volných bajtů: 24 067 395 584
.
- - End Of File - - 541D095A2A5BDA9BEA24340FD69C947D

[vyosek]

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}
  c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
  c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
  c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}
  c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}
  c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "SunJavaUpdateSched"=-
  "Adobe ARM"=-
  "LogMeIn Hamachi Ui"=-
  "Malwarebytes' Anti-Malware"=-
  
  Driver::
  gupdate
  gupdatem
  wmcmgc
  
  NetSvc::
  wmcmgc
  
  File::
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  DDS::
  uStart Page = hxxp://search.babylon.com/?AF=108602&ba ... e4004edba0
  
  RegNull::
  [HKEY_USERS\S-1-5-21-3997867176-2451664295-1965468521-1000\Software\SecuROM\License information*]
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  ClearJavaCache::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[corpop]

ComboFix 12-04-20.03 - Jakub 21.04.2012 22:40:26.2.3 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4094.2420 [GMT 2:00]
Spuštěný z: c:\users\Jakub\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jakub\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\instance.dat
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.dat
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.exe
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.msi
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.par
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.res
c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\mia.lib
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\instance.dat
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\mia.lib
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.dat
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.exe
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.msi
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.par
c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.res
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\instance.dat
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\mia.lib
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.dat
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.exe
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.msi
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.par
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.res
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.dat
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.exe
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.msi
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.par
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.res
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\instance.dat
c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\mia.lib
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.dat
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.exe
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.msi
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.par
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.res
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\instance.dat
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\mia.lib
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.dat
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.exe
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.msi
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.par
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.res
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\instance.dat
c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\mia.lib
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_wmcmgc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-03-21 do 2012-04-21 )))))))))))))))))))))))))))))))
.
.
2012-04-21 20:47 . 2012-04-21 20:47 -------- d-----w- c:\users\Guest\AppData\Local\temp
2012-04-21 20:47 . 2012-04-21 20:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-21 18:55 . 2012-04-21 18:55 -------- d-----w- c:\program files (x86)\Native Instruments
2012-04-21 18:49 . 2012-04-21 18:49 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-21 16:34 . 2012-04-13 08:46 8917360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E21A3B56-7D7D-4188-925A-93B869A4AAC3}\mpengine.dll
2012-04-21 09:26 . 2012-04-21 09:26 -------- d-----w- C:\rsit
2012-04-21 09:26 . 2012-04-21 09:26 -------- d-----w- c:\program files\trend micro
2012-04-21 09:01 . 2012-04-21 09:01 39184 ----a-w- c:\windows\SysWow64\Partizan.exe
2012-04-21 09:01 . 2012-04-21 09:01 35816 ----a-w- c:\windows\SysWow64\drivers\Partizan.sys
2012-04-21 09:01 . 2012-04-21 09:01 2 --shatr- c:\windows\winstart.bat
2012-04-21 09:01 . 2012-01-23 15:01 12800 ----a-w- c:\windows\SysWow64\drivers\UnHackMeDrv.sys
2012-04-21 09:00 . 2012-04-21 20:50 -------- d-----w- c:\program files (x86)\UnHackMe
2012-04-21 08:34 . 2012-04-21 08:34 -------- d-----w- c:\users\Jakub\AppData\Roaming\Malwarebytes
2012-04-21 08:33 . 2012-04-21 08:33 -------- d-----w- c:\programdata\Malwarebytes
2012-04-21 08:33 . 2011-12-10 13:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-21 08:18 . 2012-04-21 08:20 -------- d-----w- C:\flash
2012-04-21 08:18 . 2012-04-21 08:18 -------- d-----w- c:\program files (x86)\flash
2012-04-21 07:46 . 2012-04-21 18:49 -------- d-----w- c:\program files (x86)\Common Files\Native Instruments
2012-04-21 06:52 . 2009-09-15 09:14 1554944 ----a-w- c:\windows\SysWow64\vorbis.acm
2012-04-21 06:39 . 2012-04-21 06:39 905154 ----a-w- c:\windows\SysWow64\lnsecsl.exe
2012-04-19 09:04 . 2012-04-19 09:03 525544 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-19 09:03 . 2012-04-19 09:03 -------- d-----w- c:\program files\Java
2012-04-18 17:53 . 2012-04-18 17:53 -------- d-----w- c:\program files (x86)\Common Files\SWF Studio
2012-04-18 17:52 . 2001-09-05 01:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-04-18 17:52 . 2001-09-05 01:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-04-18 17:52 . 2001-09-05 01:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-04-18 17:52 . 2001-09-05 01:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-04-17 20:02 . 2012-04-17 20:40 -------- d-----w- c:\programdata\TmForever
2012-04-15 14:41 . 2012-04-15 14:43 -------- d-----w- c:\users\Jakub\AppData\Roaming\Notepad++
2012-04-15 14:41 . 2012-04-15 14:41 -------- d-----w- c:\program files (x86)\Notepad++
2012-04-14 19:16 . 2012-04-14 19:18 -------- d-----w- c:\programdata\TrackMania
2012-04-14 14:23 . 2012-04-14 14:23 -------- d-----w- c:\users\Jakub\.thinupload
2012-04-14 14:18 . 2012-04-21 08:49 -------- d-----r- c:\users\Jakub\SafeSync
2012-04-14 14:18 . 2012-04-14 14:18 -------- d-----w- c:\users\Jakub\AppData\Local\Trend Micro
2012-04-14 14:14 . 2012-04-14 14:14 -------- d-----w- c:\program files\Trend Micro SafeSync
2012-04-14 14:14 . 2012-04-14 14:14 -------- d-----w- c:\programdata\Trend Micro
2012-04-14 13:56 . 2012-04-14 13:56 -------- d-----w- c:\users\Jakub\AppData\Local\GHISLER
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\UC.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\RAR.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\NOCLOSE.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\LHA.PIF
2012-04-14 13:54 . 2012-02-24 05:57 545 ----a-w- c:\windows\ARJ.PIF
2012-04-14 13:54 . 2012-04-14 13:54 -------- d-----w- c:\users\Jakub\AppData\Roaming\GHISLER
2012-04-12 14:20 . 2012-03-06 05:59 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-04-12 14:20 . 2012-03-06 05:59 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-12 14:20 . 2012-03-01 06:54 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 14:20 . 2012-03-01 06:40 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 14:20 . 2012-03-01 05:45 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 14:20 . 2012-03-01 06:45 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 14:20 . 2012-03-01 06:35 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 14:20 . 2012-03-01 05:49 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 14:20 . 2012-03-01 05:40 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-12 13:13 . 2012-04-12 13:13 -------- d-----w- c:\program files (x86)\Minecraft ID Finder
2012-04-10 14:09 . 2008-10-15 04:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2012-04-10 14:09 . 2008-10-15 04:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2012-04-10 14:09 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2012-04-09 09:15 . 2012-04-09 09:15 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-04-09 07:52 . 2012-04-21 08:48 -------- d-----w- c:\users\Jakub\AppData\Local\LogMeIn Hamachi
2012-04-09 07:51 . 2012-04-09 07:51 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2012-04-09 07:08 . 2012-04-09 07:08 -------- d-----w- c:\users\Jakub\AppData\Roaming\Sierra Entertainment
2012-04-09 06:57 . 2012-04-09 06:57 -------- d-----w- c:\windows\system32\AGEIA
2012-04-09 06:56 . 2012-04-09 06:57 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2012-04-09 06:56 . 2012-04-09 06:56 -------- d-----w- c:\windows\SysWow64\AGEIA
2012-04-09 06:56 . 2012-04-09 06:56 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2012-04-08 15:40 . 2012-04-08 15:40 -------- d-----w- c:\users\Jakub\AppData\Local\DOSBox
2012-04-08 15:40 . 2012-04-08 15:56 -------- d-----w- c:\program files (x86)\DOSBox-0.74
2012-04-08 13:25 . 2012-04-08 13:25 -------- d-----w- c:\users\Jakub\AppData\Local\ElevatedDiagnostics
2012-04-08 12:43 . 2012-04-08 12:43 -------- d-----w- c:\users\Jakub\AppData\Local\CrashRpt
2012-04-07 12:47 . 2012-04-07 12:47 -------- d-----w- c:\users\Jakub\AppData\Roaming\Summer Athletics 2009
2012-04-07 12:10 . 2012-04-07 12:10 -------- d-----w- c:\program files (x86)\East West
2012-04-07 08:46 . 2012-04-07 08:46 -------- d-----w- c:\programdata\Winter Sports 2009
2012-04-02 20:37 . 2007-09-07 15:33 135168 ----a-w- c:\windows\SysWow64\EEBAPI.dll
2012-04-02 20:33 . 2012-04-02 20:33 -------- d-----w- c:\program files (x86)\EpsonNet
2012-04-02 20:31 . 2012-04-02 20:28 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2012-04-02 20:31 . 2012-04-02 20:28 118784 ----a-w- c:\windows\system32\E_ILMGCE.DLL
2012-04-02 20:31 . 2012-04-02 20:28 88064 ----a-w- c:\windows\system32\E_IBCBGCE.DLL
2012-04-02 20:30 . 2012-04-02 20:36 -------- d-----w- c:\programdata\EPSON
2012-04-02 20:30 . 2011-08-09 22:00 464384 ----a-w- c:\windows\system32\esxw2ud.dll
2012-04-02 20:30 . 2009-10-15 22:00 13824 ----a-w- c:\windows\system32\esxcdev.dll
2012-04-02 20:30 . 2009-10-15 22:00 132560 ----a-w- c:\windows\system32\esdevapp.exe
2012-04-02 20:30 . 2012-04-02 20:30 -------- d-----w- c:\program files (x86)\epson
2012-03-31 18:25 . 2012-03-31 18:38 -------- d-----w- c:\programdata\PassMark
2012-03-30 17:56 . 2012-03-30 17:57 -------- d-----w- c:\users\Jakub\ni
2012-03-30 14:27 . 2012-04-21 19:22 -------- d-----w- c:\users\Jakub\AppData\Local\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:41 -------- d-----w- c:\program files\Common Files\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:38 -------- d-----w- c:\program files\Native Instruments
2012-03-30 14:25 . 2012-04-13 17:34 -------- d-----w- c:\programdata\Native Instruments
2012-03-27 19:39 . 2012-03-27 19:39 -------- d-----w- c:\program files (x86)\Common Files\VST3
2012-03-27 19:37 . 2012-03-27 19:37 -------- d-----w- c:\programdata\VST3 Presets
2012-03-27 19:17 . 2012-03-27 19:17 -------- d-----w- c:\programdata\Steinberg
2012-03-27 19:16 . 2012-03-27 19:16 -------- d-----w- c:\program files (x86)\Common Files\Steinberg
2012-03-27 19:15 . 2012-03-27 19:44 -------- d-----w- c:\users\Jakub\AppData\Roaming\Steinberg
2012-03-24 20:43 . 2012-03-24 20:43 -------- d-----w- c:\users\Jakub\AppData\Local\Adobe
2012-03-24 20:39 . 2012-03-24 20:39 -------- d-----w- c:\programdata\McAfee
2012-03-24 20:38 . 2012-03-24 20:38 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2012-03-24 09:18 . 2012-03-24 09:18 1492 ----a-w- C:\user.js
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\users\Jakub\AppData\Roaming\Babylon
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\users\Jakub\AppData\Local\Babylon
2012-03-24 09:18 . 2012-03-24 09:18 -------- d-----w- c:\programdata\Babylon
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-13 08:46 . 2012-03-18 18:41 8917360 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-04-02 08:44 . 2012-03-21 18:43 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2012-04-02 08:44 . 2012-03-21 18:43 122968 ----a-w- c:\windows\system32\OpenAL32.dll
2012-04-02 08:44 . 2012-03-21 18:43 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-04-02 08:44 . 2012-03-21 18:43 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-03-16 14:59 . 2012-03-16 15:00 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AD9E74FB-E6A8-46C9-9363-56450403A6BF}\gapaengine.dll
2012-03-14 17:23 . 2012-03-14 17:23 147248 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-03-14 17:22 . 2012-03-22 19:57 130864 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2012-03-14 17:22 . 2012-03-14 17:22 117040 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-03-14 17:22 . 2012-03-22 19:57 224048 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-03-10 08:04 . 2012-03-10 08:04 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-03-10 07:15 . 2012-03-10 07:15 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-10 07:10 . 2012-03-10 07:10 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-03-10 06:49 . 2012-03-10 06:49 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-10 06:44 . 2012-03-10 06:44 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 448512 ----a-w- c:\windows\system32\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 222208 ----a-w- c:\windows\system32\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 160256 ----a-w- c:\windows\system32\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 12288 ----a-w- c:\windows\system32\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 114176 ----a-w- c:\windows\system32\admparse.dll
2012-03-10 06:44 . 2012-03-10 06:44 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-03-10 06:42 . 2012-03-10 06:42 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-03-10 06:42 . 2012-03-10 06:42 4068864 ----a-w- c:\windows\system32\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 3181568 ----a-w- c:\windows\SysWow64\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-03-10 06:42 . 2012-03-10 06:42 257024 ----a-w- c:\windows\system32\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 229888 ----a-w- c:\windows\system32\XpsRasterService.dll
2012-03-10 06:42 . 2012-03-10 06:42 206848 ----a-w- c:\windows\system32\mfps.dll
2012-03-10 06:42 . 2012-03-10 06:42 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1863680 ----a-w- c:\windows\system32\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 144384 ----a-w- c:\windows\system32\cdd.dll
2012-03-10 06:42 . 2012-03-10 06:42 135168 ----a-w- c:\windows\SysWow64\XpsRasterService.dll
2012-03-10 06:31 . 2012-03-10 06:31 1008640 ----a-w- c:\windows\system32\BCMLogon.dll
2012-03-10 06:31 . 2012-03-10 06:31 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-03-10 06:31 . 2012-03-10 06:31 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2012-03-10 06:31 . 2012-03-10 06:31 459 ----a-w- c:\windows\SysWow64\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 22520 ----a-w- c:\windows\system32\drivers\bcm42rly.sys
2012-03-10 06:31 . 2012-03-10 06:31 7604224 ----a-w- c:\windows\system32\BCMWLCPL.CPL
2012-03-10 06:31 . 2012-03-10 06:31 73216 ----a-w- c:\windows\system32\wltrynt.dll
2012-03-10 06:31 . 2012-03-10 06:31 60416 ----a-w- c:\windows\system32\bcmwlrmt.dll
2012-03-10 06:31 . 2012-03-10 06:31 4961800 ----a-w- c:\windows\SysWow64\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 4420608 ----a-w- c:\windows\system32\bcmttls.dll
2012-03-10 06:31 . 2012-03-10 06:31 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2012-03-10 06:31 . 2012-03-10 06:31 3558128 ----a-w- c:\windows\system32\bcmihvui64.dll
2012-03-10 06:31 . 2012-03-10 06:31 3893488 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2012-03-10 06:31 . 2012-03-10 06:31 2978296 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2012-03-01 12:21 . 2012-03-16 09:01 8643640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{88C79FAE-9B42-443B-A413-C95286CE8448}\mpengine.dll
2012-02-15 06:27 . 2012-03-14 07:42 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-15 05:44 . 2012-03-14 07:42 826368 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-15 04:47 . 2012-03-14 07:42 204800 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-15 04:46 . 2012-03-14 07:42 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-15 03:48 . 2012-02-15 03:48 10856960 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-02-15 03:21 . 2012-02-15 03:21 25839104 ----a-w- c:\windows\system32\atio6axx.dll
2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-02-15 03:18 . 2012-02-15 03:18 791040 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-02-15 03:17 . 2012-02-15 03:17 957952 ----a-w- c:\windows\system32\aticfx64.dll
2012-02-15 03:13 . 2012-02-15 03:13 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-02-15 03:13 . 2012-02-15 03:13 496128 ----a-w- c:\windows\system32\atieclxx.exe
2012-02-15 03:13 . 2012-02-15 03:13 235520 ----a-w- c:\windows\system32\atiesrxx.exe
2012-02-15 03:11 . 2012-02-15 03:11 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-02-15 03:10 . 2012-02-15 03:10 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-02-15 03:10 . 2012-02-15 03:10 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-02-15 03:07 . 2012-02-15 03:07 6200320 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-02-15 02:52 . 2011-06-01 18:11 7646208 ----a-w- c:\windows\system32\atidxx64.dll
2012-02-15 02:41 . 2012-02-15 02:41 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-21_11.19.49 )))))))))))))))))))))))))))))))))))))))))
.
- 2012-04-21 07:49 . 2007-07-27 11:25 61440 c:\windows\SysWOW64\NI_DFD_1_5.dll
+ 2008-05-29 19:07 . 2008-05-29 19:07 61440 c:\windows\SysWOW64\NI_DFD_1_5.dll
- 2009-07-14 04:54 . 2012-04-21 08:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-04-21 20:49 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-04-21 20:49 81920 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:53 81920 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-04-21 08:24 . 2012-04-21 20:52 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012042120120422\index.dat
- 2012-04-21 08:24 . 2012-04-21 09:05 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012042120120422\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-21 20:49 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-04-21 08:25 . 2012-04-21 20:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
- 2012-04-21 08:25 . 2012-04-21 08:51 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
+ 2012-03-10 06:18 . 2012-04-21 18:59 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-03-10 06:18 . 2012-04-21 08:22 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-03-10 06:18 . 2012-04-21 18:59 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2012-03-10 06:18 . 2012-04-21 08:22 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-21 18:59 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:22 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-04-21 08:47 . 2012-04-21 08:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-04-21 20:48 . 2012-04-21 20:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-21 08:47 . 2012-04-21 08:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-21 20:48 . 2012-04-21 20:48 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-21 20:49 . 2012-04-21 20:49 372736 c:\windows\Temp\mrt901E.tmp\stdrt.exe
+ 2012-04-21 20:49 . 2012-04-21 20:49 307200 c:\windows\Temp\mrt901E.tmp\mmfs2.dll
+ 2008-05-29 19:10 . 2008-05-29 19:10 233472 c:\windows\SysWOW64\REX Shared Library.dll
- 2012-04-21 07:53 . 2007-08-27 12:02 233472 c:\windows\SysWOW64\REX Shared Library.dll
+ 2008-05-29 19:07 . 2008-05-29 19:07 393216 c:\windows\SysWOW64\NI_IRC_1_2.dll
- 2012-04-21 07:49 . 2007-07-27 11:25 393216 c:\windows\SysWOW64\NI_IRC_1_2.dll
+ 2012-04-21 08:23 . 2012-04-21 20:53 112671 c:\windows\SysWOW64\key.dat
- 2009-07-14 02:36 . 2012-04-21 07:57 618108 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-04-21 12:54 618108 c:\windows\system32\perfh009.dat
+ 2009-07-14 15:18 . 2012-04-21 12:54 633392 c:\windows\system32\perfh005.dat
- 2009-07-14 15:18 . 2012-04-21 07:57 633392 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-04-21 12:54 107388 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-04-21 07:57 107388 c:\windows\system32\perfc009.dat
+ 2009-07-14 15:18 . 2012-04-21 12:54 122914 c:\windows\system32\perfc005.dat
- 2009-07-14 15:18 . 2012-04-21 07:57 122914 c:\windows\system32\perfc005.dat
- 2012-03-23 20:43 . 2012-04-21 08:47 527792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2012-03-23 20:43 . 2012-04-21 20:48 527792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2009-07-14 05:01 . 2012-04-21 08:47 232492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-04-21 20:48 232492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2012-03-10 08:29 . 2012-04-21 08:19 878096 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3997867176-2451664295-1965468521-1000-12288.dat
+ 2012-03-10 08:29 . 2012-04-21 20:48 878096 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3997867176-2451664295-1965468521-1000-12288.dat
+ 2012-04-21 08:47 . 2012-04-21 20:48 233260 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
- 2012-04-21 08:47 . 2012-04-21 08:47 233260 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
+ 2012-04-21 17:03 . 2006-11-09 13:20 2111096 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
+ 2008-05-29 19:10 . 2008-05-29 19:10 2045952 c:\windows\SysWOW64\bconvert.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPaired]
@="{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}"
[HKEY_CLASSES_ROOT\CLSID\{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPriority]
@="{6F1BB626-1107-4b82-B322-54C5E64461B8}"
[HKEY_CLASSES_ROOT\CLSID\{6F1BB626-1107-4b82-B322-54C5E64461B8}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoProblem]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2B}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2B}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSynced]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2A}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2A}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSyncing]
@="{7479C9AF-DA81-4944-92E5-23E49390BB29}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB29}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoUnavailable]
@="{66669544-5639-4922-99C8-CE7A86651364}"
[HKEY_CLASSES_ROOT\CLSID\{66669544-5639-4922-99C8-CE7A86651364}]
2012-03-09 22:24 1112848 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 636032]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AML Device Install.lnk - c:\program files (x86)\AMD AVT\bin\kdbsync.exe [2012-1-31 10752]
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-1-8 107720]
Trend Micro SafeSync.lnk - c:\program files\Trend Micro SafeSync\HrfsClient.exe [2012-4-14 1739536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0Partizan\0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 Adobe Licensing Console;Adobe Licensing Console;c:\windows\SysWOW64\lnsecsl.exe [2012-04-21 905154]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-14 361984]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-01-03 55936]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-03-03 325200]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2010-03-17 820768]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
S2 MBAMService;MBAMService;d:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2011-04-07 5352960]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 OnlineStorageService;OnlineStorageService;c:\program files\Trend Micro SafeSync\hrfscore.exe [2012-03-09 7588112]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPaired]
@="{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}"
[HKEY_CLASSES_ROOT\CLSID\{A203F945-39E9-4286-AFA2-F3ADFCD5FAAA}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoPriority]
@="{6F1BB626-1107-4b82-B322-54C5E64461B8}"
[HKEY_CLASSES_ROOT\CLSID\{6F1BB626-1107-4b82-B322-54C5E64461B8}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoProblem]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2B}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2B}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSynced]
@="{7479C9AF-DA81-4944-92E5-23E49390BB2A}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB2A}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoSyncing]
@="{7479C9AF-DA81-4944-92E5-23E49390BB29}"
[HKEY_CLASSES_ROOT\CLSID\{7479C9AF-DA81-4944-92E5-23E49390BB29}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00HumyoUnavailable]
@="{66669544-5639-4922-99C8-CE7A86651364}"
[HKEY_CLASSES_ROOT\CLSID\{66669544-5639-4922-99C8-CE7A86651364}]
2012-03-09 22:24 1633552 ----a-w- c:\program files\Trend Micro SafeSync\HrfsShellExtension.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-25 10081312]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-02-25 877600]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-02-05 324608]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-03-17 496160]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe" [2012-03-10 4786688]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"combofix"="c:\combofix\CF29749.3XE" [2009-07-14 344576]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Native Instruments Controller Editor - c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.exe
AddRemove-Native Instruments Guitar Rig 5 - c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.exe
AddRemove-O - c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.exe
AddRemove-Native Instruments Kontakt 5 - c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.exe
AddRemove-Native Instruments Rig Kontrol 3 - c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.exe
AddRemove-Native Instruments Service Center - c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.exe
AddRemove-SkiRegionSimulator2012EN_is1 - d:\program files (x86)\Ski Region Simulator 2012\unins000.exe
AddRemove-{01D57CF6-B5BC-4D03-AFF5-7960CFBD05A9} - c:\programdata\{9327ACE9-CC82-4A33-9B33-291ACA1E267B}\Guitar Rig 5 Setup PC.exe
AddRemove-{0886900B-B2F3-452C-B580-60F1253F7F80} - c:\programdata\{DCC412E7-393B-4016-91FB-9307F059AFB6}\Controller Editor Setup PC.exe
AddRemove-{0B8565BA-BAD5-4732-B122-5FD78EFC50A9} - c:\programdata\{49FAB1E7-7D4E-4015-BBCA-E52669133FB7}\Service Center Setup PC.exe
AddRemove-{5552453B-BB76-45E3-973D-F95E458ED780} - c:\programdata\{3FF56E78-3AAB-4596-A1AC-32869EB9463A}\Kontakt 5 Setup PC.exe
AddRemove-{7930FB47-6452-4476-BF16-D77F748646DB} - c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\Guitar Rig Session IO Setup PC.exe
AddRemove-{B962AD08-335F-46f7-A182-257D37672E5C} - c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\Rig Kontrol 3 Setup PC.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\windows\TEMP\mrt901E.tmp\stdrt.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\UnHackMe\hackmon.exe
.
**************************************************************************
.
Celkový čas: 2012-04-21 22:56:20 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-04-21 20:56
ComboFix2.txt 2012-04-21 11:40
.
Před spuštěním: Volných bajtů: 22 161 530 880
Po spuštění: Volných bajtů: 23 146 688 512
.
- - End Of File - - 306CE0E0320AD38CC362BE666CD1E0AC

[vyosek]

Jak se chova PC

[corpop]

je rychlejší ale stdrt zůstává po restartu a využívá ram a cpu a net.

[vyosek]

Dalsi skript pro ComboFix - postup stejny

Kód: Vybrat vše

KillAll::

Collect::
c:\windows\Temp\mrt901E.tmp\stdrt.exe
c:\windows\Temp\mrt901E.tmp\mmfs2.dll

Folder::
c:\windows\Temp\mrt901E.tmp

Suspect::
c:\windows\winstart.bat

Reboot::

[corpop]

ComboFix 12-05-22.01 - Jakub 22.05.2012 9:14.3.3 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.4094.2886 [GMT 2:00]
Spuštěný z: c:\users\Jakub\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jakub\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\msvcsv60.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-04-22 do 2012-05-22 )))))))))))))))))))))))))))))))
.
.
2012-05-22 07:27 . 2012-05-22 07:27 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-05-22 07:27 . 2012-05-22 07:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-05-22 06:55 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7A1BF1EA-2D30-4AF3-8795-7F66CDFEDB96}\mpengine.dll
2012-05-21 17:33 . 2012-05-08 17:02 8955792 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-05-20 10:40 . 2012-05-20 10:40 -------- d-----w- c:\program files (x86)\EVGA Precision X
2012-05-18 23:31 . 2012-05-18 23:31 -------- d-----w- c:\users\Jakub\AppData\Roaming\Pogo
2012-05-18 23:31 . 2012-05-18 23:31 -------- d-----w- c:\programdata\Pogo
2012-05-18 23:11 . 2012-05-18 23:19 -------- d-----w- c:\program files (x86)\DOSBox-0.74
2012-05-15 18:04 . 2012-05-15 18:04 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2012-05-15 18:04 . 2012-05-19 18:07 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-05-15 18:04 . 2012-05-15 18:04 -------- d-----w- c:\users\Jakub\AppData\Local\PunkBuster
2012-05-14 19:21 . 2012-05-14 19:21 -------- d-----w- c:\program files\Microsoft Silverlight
2012-05-14 19:21 . 2012-05-14 19:21 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2012-05-13 13:43 . 2012-05-13 15:04 -------- d-----w- c:\users\Jakub\AppData\Local\NFS Underground 2
2012-05-11 20:15 . 2012-05-11 20:15 -------- d-----w- c:\users\Jakub\AppData\Roaming\ABBYY
2012-05-11 20:05 . 2012-05-11 20:05 -------- d-----w- c:\users\Jakub\AppData\Local\ABBYY
2012-05-11 20:05 . 2012-05-11 20:05 -------- d-----w- c:\programdata\ABBYY
2012-05-11 18:22 . 2012-03-03 06:29 1541120 ----a-w- c:\windows\system32\DWrite.dll
2012-05-11 18:22 . 2012-03-03 05:40 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-05-11 18:22 . 2012-03-03 06:29 320512 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-05-11 18:22 . 2012-03-03 06:29 1837568 ----a-w- c:\windows\system32\d3d10warp.dll
2012-05-11 18:22 . 2012-03-03 06:29 902656 ----a-w- c:\windows\system32\d2d1.dll
2012-05-11 18:22 . 2012-03-03 05:40 1170944 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2012-05-11 18:22 . 2012-03-03 05:40 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2012-05-11 18:22 . 2012-03-03 05:40 218624 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2012-05-11 18:22 . 2012-03-03 06:29 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2012-05-11 18:22 . 2012-03-03 05:40 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2012-05-11 18:21 . 2012-04-02 05:34 5504880 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-11 18:21 . 2012-04-02 03:01 3143680 ----a-w- c:\windows\system32\win32k.sys
2012-05-11 18:21 . 2012-04-02 04:46 3902320 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-11 18:21 . 2012-04-02 04:46 3958128 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-11 18:21 . 2012-03-17 07:55 75632 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-11 18:21 . 2012-03-30 11:09 1895280 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-11 18:21 . 2012-04-02 05:26 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-05-11 18:21 . 2012-04-02 05:24 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-11 18:21 . 2012-04-02 04:40 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-11 18:21 . 2012-04-02 05:24 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-05-11 18:21 . 2012-04-02 05:24 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-05-10 20:53 . 2012-05-10 20:53 -------- d-----w- c:\program files (x86)\Research In Motion
2012-05-10 20:44 . 2012-05-10 20:45 -------- d-----w- c:\program files\Oracle
2012-05-10 20:43 . 2012-04-04 16:33 955800 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-05-10 20:34 . 2012-05-22 06:46 -------- d-----w- c:\users\Jakub\AppData\Local\Akamai
2012-05-08 21:52 . 2012-05-08 21:52 338432 ----a-w- c:\windows\SysWow64\REX Shared Library.dll
2012-05-08 21:49 . 2012-05-08 21:52 -------- d-----w- c:\programdata\Propellerhead Software
2012-05-08 21:49 . 2012-05-08 22:00 -------- d-----w- c:\users\Jakub\AppData\Roaming\Propellerhead Software
2012-05-07 19:20 . 2004-08-18 08:34 442368 ----a-r- c:\windows\SysWow64\vp6vfw.dll
2012-05-06 20:23 . 2008-10-15 04:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2012-05-06 20:23 . 2008-10-15 04:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2012-05-06 20:23 . 2008-10-15 04:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2012-05-06 19:07 . 2012-05-06 19:22 -------- d-----w- c:\users\Jakub\AppData\Roaming\Audacity
2012-05-06 08:38 . 2012-05-06 08:38 -------- d-----w- c:\program files (x86)\Common Files\Steam
2012-05-05 21:58 . 2012-05-05 21:58 -------- d-----w- c:\programdata\DigitalChocolate
2012-05-05 21:57 . 2012-05-05 21:57 -------- d-----w- c:\windows\Tower Bloxx Deluxe
2012-05-05 21:57 . 2012-05-05 21:57 -------- d-----w- c:\program files (x86)\Tower Bloxx Deluxe
2012-05-05 19:23 . 2012-05-05 19:23 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-05-05 19:22 . 2012-05-05 19:22 -------- d-----w- c:\program files (x86)\Common Files\Microsoft Games
2012-05-05 19:10 . 2012-05-05 19:10 -------- d-----w- c:\windows\PCHEALTH
2012-05-02 19:01 . 2012-05-20 16:13 -------- d-----w- c:\users\Jakub\AppData\Roaming\.techniclauncher
2012-05-02 12:36 . 2012-05-02 12:36 -------- d-----w- c:\users\Jakub\AppData\Roaming\Milestone
2012-05-01 18:41 . 2012-05-22 07:31 -------- d-----w- c:\users\Jakub\AppData\Roaming\Skype
2012-05-01 18:41 . 2012-05-01 18:41 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-05-01 18:41 . 2012-05-01 18:41 -------- d-----r- c:\program files (x86)\Skype
2012-05-01 18:37 . 2012-05-01 18:41 -------- d-----w- c:\programdata\Skype
2012-04-30 22:41 . 2003-11-10 16:14 729088 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iKernel.dll
2012-04-30 22:41 . 2003-11-10 16:13 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\ctor.dll
2012-04-30 22:41 . 2003-11-10 16:12 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iscript.dll
2012-04-30 22:41 . 2003-11-10 16:12 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iuser.dll
2012-04-30 22:41 . 2003-11-10 16:11 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\DotNetInstaller.exe
2012-04-30 22:41 . 2012-04-30 22:41 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\setup.dll
2012-04-30 22:41 . 2012-04-30 22:41 188548 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\iGdi.dll
2012-04-29 18:50 . 2012-04-29 18:53 -------- d-----w- c:\users\Jakub\AppData\Roaming\SpinTires
2012-04-24 19:01 . 2012-04-24 19:01 -------- d-----w- c:\program files (x86)\Sony Ericsson
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-06 09:17 . 2012-03-21 18:43 122904 ----a-w- c:\windows\system32\OpenAL32.dll
2012-05-06 09:17 . 2012-03-21 18:43 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2012-04-21 18:49 . 2012-04-21 18:49 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-04-21 09:01 . 2012-04-21 09:01 2 -----tw- c:\windows\winstart.bat
2012-04-21 06:39 . 2012-04-21 06:39 905154 ----a-w- c:\windows\SysWow64\lnsecsl.exe
2012-04-04 16:33 . 2012-04-19 09:04 839056 ----a-w- c:\windows\system32\deployJava1.dll
2012-04-02 20:28 . 2012-04-02 20:31 10752 ----a-w- c:\windows\system32\E_GCINST.DLL
2012-04-02 20:28 . 2012-04-02 20:31 118784 ----a-w- c:\windows\system32\E_ILMGCE.DLL
2012-04-02 20:28 . 2012-04-02 20:31 88064 ----a-w- c:\windows\system32\E_IBCBGCE.DLL
2012-04-02 08:44 . 2012-03-21 18:43 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2012-04-02 08:44 . 2012-03-21 18:43 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2012-03-20 18:44 . 2011-04-27 14:25 98688 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2012-03-20 18:44 . 2011-04-18 12:18 203888 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2012-03-16 14:59 . 2012-03-16 15:00 927800 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AD9E74FB-E6A8-46C9-9363-56450403A6BF}\gapaengine.dll
2012-03-14 17:23 . 2012-03-14 17:23 147248 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2012-03-14 17:22 . 2012-03-22 19:57 130864 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2012-03-14 17:22 . 2012-03-14 17:22 117040 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2012-03-14 17:22 . 2012-03-22 19:57 224048 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2012-03-10 08:04 . 2012-03-10 08:04 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2012-03-10 07:15 . 2012-03-10 07:15 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-10 07:10 . 2012-03-10 07:10 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-03-10 06:49 . 2012-03-10 06:49 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-03-10 06:44 . 2012-03-10 06:44 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-03-10 06:44 . 2012-03-10 06:44 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-03-10 06:44 . 2012-03-10 06:44 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-03-10 06:44 . 2012-03-10 06:44 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-03-10 06:44 . 2012-03-10 06:44 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-10 06:44 . 2012-03-10 06:44 448512 ----a-w- c:\windows\system32\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-03-10 06:44 . 2012-03-10 06:44 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-03-10 06:44 . 2012-03-10 06:44 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-03-10 06:44 . 2012-03-10 06:44 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-03-10 06:44 . 2012-03-10 06:44 222208 ----a-w- c:\windows\system32\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-03-10 06:44 . 2012-03-10 06:44 160256 ----a-w- c:\windows\system32\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-03-10 06:44 . 2012-03-10 06:44 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-03-10 06:44 . 2012-03-10 06:44 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-03-10 06:44 . 2012-03-10 06:44 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 12288 ----a-w- c:\windows\system32\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-03-10 06:44 . 2012-03-10 06:44 114176 ----a-w- c:\windows\system32\admparse.dll
2012-03-10 06:44 . 2012-03-10 06:44 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-03-10 06:44 . 2012-03-10 06:44 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-03-10 06:44 . 2012-03-10 06:44 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-03-10 06:42 . 2012-03-10 06:42 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-03-10 06:42 . 2012-03-10 06:42 4068864 ----a-w- c:\windows\system32\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 3181568 ----a-w- c:\windows\SysWow64\mf.dll
2012-03-10 06:42 . 2012-03-10 06:42 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-03-10 06:42 . 2012-03-10 06:42 257024 ----a-w- c:\windows\system32\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 229888 ----a-w- c:\windows\system32\XpsRasterService.dll
2012-03-10 06:42 . 2012-03-10 06:42 206848 ----a-w- c:\windows\system32\mfps.dll
2012-03-10 06:42 . 2012-03-10 06:42 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2012-03-10 06:42 . 2012-03-10 06:42 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1863680 ----a-w- c:\windows\system32\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2012-03-10 06:42 . 2012-03-10 06:42 1495040 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2012-03-10 06:42 . 2012-03-10 06:42 144384 ----a-w- c:\windows\system32\cdd.dll
2012-03-10 06:42 . 2012-03-10 06:42 135168 ----a-w- c:\windows\SysWow64\XpsRasterService.dll
2012-03-10 06:31 . 2012-03-10 06:31 1008640 ----a-w- c:\windows\system32\BCMLogon.dll
2012-03-10 06:31 . 2012-03-10 06:31 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2012-03-10 06:31 . 2012-03-10 06:31 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2012-03-10 06:31 . 2012-03-10 06:31 459 ----a-w- c:\windows\SysWow64\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 22520 ----a-w- c:\windows\system32\drivers\bcm42rly.sys
2012-03-10 06:31 . 2012-03-10 06:31 7604224 ----a-w- c:\windows\system32\BCMWLCPL.CPL
2012-03-10 06:31 . 2012-03-10 06:31 73216 ----a-w- c:\windows\system32\wltrynt.dll
2012-03-10 06:31 . 2012-03-10 06:31 60416 ----a-w- c:\windows\system32\bcmwlrmt.dll
2012-03-10 06:31 . 2012-03-10 06:31 4961800 ----a-w- c:\windows\SysWow64\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 4420608 ----a-w- c:\windows\system32\bcmttls.dll
2012-03-10 06:31 . 2012-03-10 06:31 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2012-03-10 06:31 . 2012-03-10 06:31 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2012-03-10 06:31 . 2012-03-10 06:31 95472 ----a-w- c:\windows\system32\bcmwlcoi.dll
2012-03-10 06:31 . 2012-03-10 06:31 3558128 ----a-w- c:\windows\system32\bcmihvui64.dll
2012-03-10 06:31 . 2012-03-10 06:31 3893488 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2012-03-10 06:31 . 2012-03-10 06:31 2978296 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2012-03-01 12:21 . 2012-03-16 09:01 8643640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{88C79FAE-9B42-443B-A413-C95286CE8448}\mpengine.dll
2012-03-01 06:54 . 2012-04-12 14:20 22896 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-03-01 06:45 . 2012-04-12 14:20 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-03-01 06:40 . 2012-04-12 14:20 80896 ----a-w- c:\windows\system32\imagehlp.dll
2012-03-01 06:35 . 2012-04-12 14:20 5120 ----a-w- c:\windows\system32\wmi.dll
2012-03-01 05:49 . 2012-04-12 14:20 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-03-01 05:45 . 2012-04-12 14:20 158720 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-03-01 05:40 . 2012-04-12 14:20 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-02-28 06:56 . 2012-04-12 14:21 2311168 ----a-w- c:\windows\system32\jscript9.dll
2012-02-28 06:49 . 2012-04-12 14:21 1390080 ----a-w- c:\windows\system32\wininet.dll
2012-02-28 06:48 . 2012-04-12 14:21 1493504 ----a-w- c:\windows\system32\inetcpl.cpl
2012-02-28 06:42 . 2012-04-12 14:21 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-02-28 01:18 . 2012-04-12 14:21 1799168 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-02-28 01:11 . 2012-04-12 14:21 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-21_11.19.49 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-05-14 19:26 . 2007-01-30 00:03 65536 c:\windows\SysWOW64\tx14_wnd.dll
+ 2009-07-20 07:34 . 2009-07-20 07:34 70936 c:\windows\SysWOW64\PhysXLoader.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 24344 c:\windows\SysWOW64\PhysXDevice.dll
- 2012-04-21 07:49 . 2007-07-27 11:25 61440 c:\windows\SysWOW64\NI_DFD_1_5.dll
+ 2008-05-29 19:07 . 2008-05-29 19:07 61440 c:\windows\SysWOW64\NI_DFD_1_5.dll
+ 2002-02-04 00:43 . 2002-02-04 00:43 82432 c:\windows\SysWOW64\msxml4r.dll
+ 2012-05-14 19:26 . 2000-10-19 17:05 25088 c:\windows\SysWOW64\msxml3a.dll
+ 2012-05-07 18:52 . 2012-05-12 07:01 76967 c:\windows\SysWOW64\key.dat
+ 2009-07-14 04:54 . 2012-05-22 07:29 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-05-07 17:22 . 2012-05-07 19:28 98304 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012050720120508\index.dat
+ 2012-05-06 15:46 . 2012-05-06 15:46 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012041620120423\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-05-22 07:29 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-04-21 08:25 . 2012-04-21 08:51 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
+ 2012-04-21 08:25 . 2012-05-12 01:38 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelTraditionalChinese.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelSwedish.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelSpanish.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelSimplifiedChinese.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelPortugese.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelKorean.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelJapanese.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelGerman.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 58648 c:\windows\SysWOW64\AgCPanelFrench.dll
+ 2009-07-14 05:10 . 2012-05-06 15:47 38476 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:30 . 2012-05-06 20:09 86016 c:\windows\system32\DriverStore\infpub.dat
- 2009-07-14 05:30 . 2012-04-14 14:02 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-04-06 07:13 . 2009-04-06 07:13 27176 c:\windows\system32\DriverStore\FileRepository\ggsemc.inf_amd64_neutral_978c370d1898e08a\Amd64\ggsemc.sys
+ 2009-04-06 07:13 . 2009-04-06 07:13 13352 c:\windows\system32\DriverStore\FileRepository\ggsemc.inf_amd64_neutral_978c370d1898e08a\Amd64\ggflt.sys
+ 2009-04-06 07:13 . 2009-04-06 07:13 27176 c:\windows\system32\drivers\ggsemc.sys
+ 2009-04-06 07:13 . 2009-04-06 07:13 13352 c:\windows\system32\drivers\ggflt.sys
- 2012-03-10 06:18 . 2012-04-21 08:22 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-03-10 06:18 . 2012-05-15 17:58 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2012-03-10 06:18 . 2012-04-21 08:22 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-03-10 06:18 . 2012-05-15 17:58 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-05-15 17:58 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-21 08:22 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:46 . 2012-04-15 17:38 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 04:46 . 2012-05-12 08:30 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2011-12-15 12:01 . 2011-12-15 12:01 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-04-12 14:25 . 2012-04-12 14:25 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-04-11 02:55 . 2012-04-11 02:55 41472 c:\windows\Installer\b584995.msi
+ 2012-05-08 08:43 . 2012-05-08 08:43 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2012-05-08 08:42 . 2012-05-08 08:42 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2012-05-05 19:23 . 2012-05-05 19:23 32768 c:\windows\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}\icon.exe
+ 2012-05-11 13:47 . 2012-05-11 13:47 10134 c:\windows\Installer\{010ED82A-DCDF-4613-85CD-DFC6FDDAF60A}\SystemFolder_msiexec.exe
+ 2012-05-12 01:26 . 2012-05-12 01:26 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
+ 2012-05-12 01:26 . 2012-05-12 01:26 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
+ 2012-05-12 01:25 . 2012-05-12 01:25 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
+ 2012-05-12 01:17 . 2012-05-12 01:17 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
+ 2012-05-12 01:17 . 2012-05-12 01:17 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\cf409e6576e3acec611838a755293418\System.Windows.Presentation.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\99c48948cadbb09df96bfe36edf60511\System.Web.DynamicData.Design.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\ecc5750e8d62675bf59eb202eeeeacbe\PresentationFontCache.ni.exe
+ 2012-05-12 01:39 . 2012-05-12 01:39 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\cc29df25d166ceed89d259b00e2bba9e\PresentationCFFRasterizer.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\dd71ed714dc374e3d85824c17795e706\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\b8dac004fdabbb2dc12830dcd22fed29\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\6b86a80d8cb8fb51252e0cd8fe697f9f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\64c811070a4d05e238e27d2a6e9bed25\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4eaff8355f942bb1a95300aeb2882602\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\3453bb2216048726659887ecaf5cce4a\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\12abdc966e63bcb3077c71c6483762c3\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-12 01:37 . 2012-05-12 01:37 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e0e2b0cdfa700bc21e09ddac3a9b46cc\Microsoft.VisualC.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c341c5df5ab35bb87765f39688c1e7ec\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\62299472064bb88c63cdfa740cc34f1d\LoadMxf.ni.exe
+ 2012-05-12 01:52 . 2012-05-12 01:52 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\4ba55ae7274a85c8ae32a36aa8bcbfc5\ehiUPnP.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\f9bd420501d5877ff7dd7fe308663935\ehiTVMSMusic.ni.dll
+ 2012-05-12 01:51 . 2012-05-12 01:51 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\c1ba413fc8eb57b417a2de4cf678e4f6\dfsvc.ni.exe
+ 2012-05-12 01:38 . 2012-05-12 01:38 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\0bc383bf9841cca7654fe938399b3a07\Accessibility.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\68b5806af0df6ce86027bacb7dc37233\UIAutomationProvider.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\b0b664ed5c18ac51259abb7902671370\System.Windows.Presentation.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4171538a927bfd6882f7d5a21619e2a1\System.Web.DynamicData.Design.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\bdf3aabfa0a15d557aec32505a5eaaee\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-12 01:45 . 2012-05-12 01:45 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\99bb6d93ce5daed24761530fa32ed5f4\System.AddIn.Contract.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b0cdc419b6f2b0ddf0cda5f157e67516\PresentationFontCache.ni.exe
+ 2012-05-12 01:43 . 2012-05-12 01:43 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\8ac4be1ad8f1aae0c23366c9ce0724e0\PresentationCFFRasterizer.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\1af767233028c3165de880775391c53f\napcrypt.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\b9935982ad038d7a02f7931a8ee2977b\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ea54c98d0fa82cdb0bf5ec9b50463d75\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ddf3add57c84af5d63b3a2398ed5e1a4\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bd26bb6b78c6c02df886f26342b5e76a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a491bf821cc13223f288eb72176ffc7\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a1cb87d9cb795b53eab2c57e2d7db48\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e634be25913db13e84a26296cee020\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\5c234eea7e7d54a466ad00d9ac238e6a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\dc44431123bc3e6b39dbea49ac1f1963\Microsoft.Vsa.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\b69ac98f94e80b659eac618c6142ea9b\Microsoft.VisualC.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\6ddfa12f22ada63da088e98223858b69\Microsoft.Build.Framework.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2f7754efa196f832b12b4133f0eae060\Microsoft.Build.Framework.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\094c7076aed91bda969c01f72d4bb63a\ehiUserXp.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\3c44431071abcaba099902fb72392688\dfsvc.ni.exe
+ 2012-05-12 01:43 . 2012-05-12 01:43 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\34f340b0c113f7216a55dd7c82a69cc2\Accessibility.ni.dll
+ 2012-05-05 19:16 . 2012-05-05 19:16 92496 c:\windows\assembly\GAC_32\Microsoft.FlightSimulator.SimConnect\10.0.60905.0__31bf3856ad364e35\Microsoft.FlightSimulator.SimConnect.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2012-03-21 19:05 . 2012-05-22 07:28 3384 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2012-03-10 06:23 . 2012-05-06 15:47 8730 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3997867176-2451664295-1965468521-1000_UserData.bin
+ 2012-05-22 07:29 . 2012-05-22 07:29 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-21 08:47 . 2012-04-21 08:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-21 08:47 . 2012-04-21 08:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-05-22 07:29 . 2012-05-22 07:29 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-29 18:43 . 2012-04-29 18:43 9662 c:\windows\Installer\{EA25A1D4-0CFB-4863-9B42-3E7EBD879644}\_9F875DD90CE8D0248D6820.exe
+ 2012-04-29 18:43 . 2012-04-29 18:43 9662 c:\windows\Installer\{EA25A1D4-0CFB-4863-9B42-3E7EBD879644}\_8C4881482354DBD8076130.exe
+ 2012-04-29 18:43 . 2012-04-29 18:43 9662 c:\windows\Installer\{EA25A1D4-0CFB-4863-9B42-3E7EBD879644}\_6FEFF9B68218417F98F549.exe
+ 2012-04-29 18:43 . 2012-04-29 18:43 9662 c:\windows\Installer\{EA25A1D4-0CFB-4863-9B42-3E7EBD879644}\_6E6E357E7ADA5AFD179A16.exe
+ 2012-05-15 17:57 . 2012-05-15 17:57 3262 c:\windows\Installer\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}\nfs_icon.exe
+ 2012-05-12 01:31 . 2012-05-12 01:31 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-05-05 21:57 . 2012-05-05 21:57 577024 c:\windows\Tower Bloxx Deluxe\uninstall.exe
+ 2012-05-22 07:29 . 2012-05-22 07:29 372736 c:\windows\Temp\mrt93D5.tmp\stdrt.exe
+ 2012-05-22 07:29 . 2012-05-22 07:29 307200 c:\windows\Temp\mrt93D5.tmp\mmfs2.dll
+ 2012-05-14 19:26 . 2008-01-20 23:35 385024 c:\windows\SysWOW64\tx14_xml.dll
+ 2012-05-14 19:26 . 2008-01-15 01:01 217088 c:\windows\SysWOW64\tx14_tls.dll
+ 2012-05-14 19:26 . 2008-01-21 03:20 552960 c:\windows\SysWOW64\tx14_rtf.dll
+ 2012-05-14 19:26 . 2007-11-20 23:22 610304 c:\windows\SysWOW64\tx14_pdf.dll
+ 2012-05-14 19:26 . 2007-01-29 23:22 327680 c:\windows\SysWOW64\tx14_obj.dll
+ 2012-05-14 19:26 . 2008-01-15 01:31 131072 c:\windows\SysWOW64\tx14_ic.dll
+ 2012-05-14 19:26 . 2008-01-18 00:36 249856 c:\windows\SysWOW64\tx14_htm.dll
+ 2012-05-14 19:26 . 2008-01-15 03:10 667648 c:\windows\SysWOW64\tx14_doc.dll
+ 2012-05-14 19:26 . 2007-12-10 00:05 331776 c:\windows\SysWOW64\tx14_css.dll
+ 2012-05-14 19:26 . 2008-03-07 22:16 765952 c:\windows\SysWOW64\tx14.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 197912 c:\windows\SysWOW64\physxcudart_20.dll
+ 2009-06-19 18:06 . 2009-06-19 18:06 288024 c:\windows\SysWOW64\PhysXCplUI.exe
+ 2009-06-19 18:06 . 2009-06-19 18:06 288024 c:\windows\SysWOW64\PhysXCompatCplUI.exe
+ 2008-05-29 19:07 . 2008-05-29 19:07 393216 c:\windows\SysWOW64\NI_IRC_1_2.dll
- 2012-04-21 07:49 . 2007-07-27 11:25 393216 c:\windows\SysWOW64\NI_IRC_1_2.dll
+ 2012-05-12 01:38 . 2012-05-12 07:00 147456 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012051220120513\index.dat
+ 2012-05-07 17:22 . 2012-05-07 17:22 163840 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012043020120507\index.dat
+ 2009-06-19 18:06 . 2009-06-19 18:06 116977 c:\windows\SysWOW64\AGEIA\AG1021\diag.bin
+ 2009-06-19 18:06 . 2009-06-19 18:06 214629 c:\windows\SysWOW64\AGEIA\AG1021\app.bin
+ 2009-06-19 18:06 . 2009-06-19 18:06 119473 c:\windows\SysWOW64\AGEIA\AG1011\diag.bin
+ 2009-06-19 18:06 . 2009-06-19 18:06 199885 c:\windows\SysWOW64\AGEIA\AG1011\app.bin
+ 2012-03-11 06:48 . 2012-05-22 06:45 290778 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2012-03-11 01:05 . 2012-05-12 07:00 252264 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2009-07-14 02:36 . 2012-04-21 07:57 618108 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-05-21 07:56 618108 c:\windows\system32\perfh009.dat
- 2009-07-14 15:18 . 2012-04-21 07:57 633392 c:\windows\system32\perfh005.dat
+ 2009-07-14 15:18 . 2012-05-21 07:56 633392 c:\windows\system32\perfh005.dat
- 2009-07-14 02:36 . 2012-04-21 07:57 107388 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2012-05-21 07:56 107388 c:\windows\system32\perfc009.dat
+ 2009-07-14 15:18 . 2012-05-21 07:56 122914 c:\windows\system32\perfc005.dat
- 2009-07-14 15:18 . 2012-04-21 07:57 122914 c:\windows\system32\perfc005.dat
+ 2012-05-10 20:43 . 2012-04-04 16:33 268680 c:\windows\system32\javaws.exe
+ 2012-05-10 20:43 . 2012-05-10 20:42 189384 c:\windows\system32\javaw.exe
+ 2012-05-10 20:43 . 2012-05-10 20:42 188872 c:\windows\system32\java.exe
+ 2009-07-14 04:45 . 2012-05-12 01:35 275072 c:\windows\system32\FNTCACHE.DAT
- 2009-07-14 05:30 . 2012-04-14 14:02 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-05-06 20:09 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2012-04-14 14:02 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2009-07-14 05:30 . 2012-05-06 20:09 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2012-03-23 20:43 . 2012-05-22 07:28 670112 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2009-07-14 05:01 . 2012-05-22 07:28 240548 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-04-21 08:47 . 2012-05-22 07:28 473532 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
+ 2011-12-15 12:01 . 2011-12-15 12:01 226600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 156440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2012-05-11 18:21 . 2012-04-06 00:45 172128 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
+ 2012-05-11 18:21 . 2012-01-04 02:48 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-05-11 18:21 . 2012-04-06 00:49 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 996112 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-04-12 14:26 . 2012-04-12 14:26 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-07-12 10:16 . 2009-07-12 10:16 223232 c:\windows\Installer\fd7f18.msi
+ 2012-05-10 20:45 . 2012-05-10 20:45 514048 c:\windows\Installer\15a36464.msi
+ 2012-05-10 20:43 . 2012-05-10 20:43 440832 c:\windows\Installer\15a36460.msi
+ 2012-05-10 20:40 . 2012-05-10 20:40 471040 c:\windows\Installer\15a36455.msi

[corpop]

+ 2012-05-11 20:10 . 2012-05-11 20:10 663552 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\ICON_FineReader.exe
+ 2012-05-11 20:10 . 2012-05-11 20:10 315392 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\ICON_Bonus.Screenshotreader.exe
+ 2012-05-11 20:10 . 2012-05-11 20:10 663552 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\ARPPRODUCTICON.exe
+ 2012-05-11 20:10 . 2012-05-11 20:10 274432 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\_SHCT_PDFImageToMS_F9797B2E22604CD99C00232F4BA00184.exe
+ 2012-05-11 20:10 . 2012-05-11 20:10 335872 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\_SHCT_Guide_DADCE0BA41E043BB9E16E4E8DC7653BA.exe
+ 2012-05-11 20:10 . 2012-05-11 20:10 663552 c:\windows\Installer\{F1100000-0011-0000-0001-074957833700}\_SHCT_FineReader_1_3E36FF39D91C47F89277D9CEE94684B9.exe
+ 2012-05-01 18:42 . 2012-05-01 18:42 371272 c:\windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
+ 2012-04-26 17:25 . 2012-04-26 17:25 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\SCEP.exe
+ 2012-04-26 17:25 . 2012-04-26 17:25 123352 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\MSE.exe
+ 2012-04-26 17:25 . 2012-04-26 17:25 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\INTUNE.exe
+ 2012-04-26 17:25 . 2012-04-26 17:25 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\FEP.exe
+ 2012-04-26 17:25 . 2012-04-26 17:25 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\EPP.exe
+ 2012-05-05 19:31 . 2012-05-05 19:31 126976 c:\windows\Installer\{9527A496-5DF9-412A-ADC7-168BA5379CA6}\ARPPRODUCTICON.exe
+ 2010-03-18 12:16 . 2010-03-18 12:16 181096 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_X86.dll
+ 2010-03-18 13:27 . 2010-03-18 13:27 225640 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_AMD64.dll
+ 2012-05-12 01:26 . 2012-05-12 01:26 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\65f25960625d91ca79a40f9067adc021\WindowsFormsIntegration.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\fb43d84bc59b21e8a7f3e36d616eea90\UIAutomationTypes.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\26f12a0a3baed2a227cf30aaeae03913\UIAutomationProvider.ni.dll
+ 2012-05-12 01:26 . 2012-05-12 01:26 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\1c3c298326e9ac14796516ac1da09a16\UIAutomationClient.ni.dll
+ 2012-05-12 01:20 . 2012-05-12 01:20 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\307eea660f877dc40ae90882ce554757\System.Xml.Linq.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\b4afa252d0f0e27b0b5e8fcb2cc5b3a7\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\8c0ee7b970cc4e8c2986c7898af71661\System.Transactions.ni.dll
+ 2012-05-12 01:25 . 2012-05-12 01:25 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\85810fe277a718273eb946a460ae8010\System.ServiceProcess.ni.dll
+ 2012-05-12 01:25 . 2012-05-12 01:25 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\eb4fb369926faaffede7aaf317fd6532\System.ServiceModel.Channels.ni.dll
+ 2012-05-12 01:25 . 2012-05-12 01:25 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e5ab3c37897bb578bdbfe6b7e0558ad8\System.ServiceModel.Routing.ni.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\e48b6a8c491a96d1bc601795532af605\System.Security.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\7590828d50338d512b11a4d3f87d69a2\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\21d5b44ef01ccfa69e79674a51707de0\System.Runtime.Remoting.ni.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\5f2bfb0585061dc256ee9587d430959f\System.Numerics.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\6996a415485a84fef2d2556b0462336f\System.Net.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\a3849a373beeb3509d8c22d5751dfad3\System.Messaging.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\92d266f677605e5475b7f39c063c4a9d\System.Management.Instrumentation.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\07a0e1efc063042be3e8faf62b413a12\System.IO.Log.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\7fd39b9a208214e6e5eba4e9396409f1\System.IdentityModel.Selectors.ni.dll
+ 2012-05-12 01:21 . 2012-05-12 01:21 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\521f5bccf74318a4777597b0c01fda1e\System.Dynamic.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6a8bd7d373c988a585e90bb61c5ec8cc\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-12 01:24 . 2012-05-12 01:24 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\78dd02d104bb15bc3820c06bd2876239\System.Device.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\97d1aaf3733b107ecdbecb9d21050ff4\System.Data.DataSetExtensions.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c3d7a7ff58ff502887d8f1b77e61adbc\System.Configuration.Install.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\a4f91f2dfd1656ef2e42917963f6bf50\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 871936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\b1c67ee2e0e6e78c31985069fbc82596\System.AddIn.ni.dll
+ 2012-05-12 01:22 . 2012-05-12 01:22 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\c69fb0f955adc7ca80cd5f2fd730edea\System.Activities.DurableInstancing.ni.dll
+ 2012-05-12 01:17 . 2012-05-12 01:17 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\11fc863fa4f5092fca4f2ce25a9ac361\SMSvcHost.ni.exe
+ 2012-05-12 01:21 . 2012-05-12 01:21 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\50e8e826488639e549589ba34666933e\SMDiagnostics.ni.dll
+ 2012-05-12 01:20 . 2012-05-12 01:20 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\722c0236432dd5ccc047481d3ebbd49e\PresentationFramework.Royale.ni.dll
+ 2012-05-12 01:20 . 2012-05-12 01:20 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\6739c3715c9e38dbdfbfd57b424a3094\PresentationFramework.Aero.ni.dll
+ 2012-05-12 01:20 . 2012-05-12 01:20 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3e7359f5f0fb68565314f88f6ec2d67a\PresentationFramework.Luna.ni.dll
+ 2012-05-12 01:20 . 2012-05-12 01:20 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\263748f3d18955b9e467710da1e8546f\PresentationFramework.Classic.ni.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 289280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\798505dff98cafa6debc659b9030cd51\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-12 01:18 . 2012-05-12 01:18 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\6480551111832c83ee88bcf756a72533\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-12 01:17 . 2012-05-12 01:17 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\0e81a3996f7cbff23fc01bea4185a918\CustomMarshalers.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ede3b9144bc31da0eaaf86c7b6a9eaaa\WindowsFormsIntegration.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\7a9f70fa774076a7ec19bc03e7064d0d\UIAutomationClient.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\4837a5c6204d53e7aa4f7dd94b98207c\System.Xml.Linq.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\c477bbff1e4662263255a1bf17bd9c2a\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\35da2da22db8fde344d9e17b20a91816\System.ServiceProcess.ni.dll
+ 2012-05-12 01:31 . 2012-05-12 01:31 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dc86fe1c7a6e3a7ce9e9c1f13d9b1e8e\System.ServiceModel.Routing.ni.dll
+ 2012-05-12 01:09 . 2012-05-12 01:09 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\5a3beae8b211b91bfc620c029cf4c2d4\System.Security.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 762880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\65f0d70169a0e73b45307dddbd86f92b\System.Runtime.Remoting.ni.dll
+ 2012-05-12 01:08 . 2012-05-12 01:08 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\dd25ddcfa0417d40e3f1385e30abcd6f\System.Net.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\87f2fdf92547c337644f4db30caa63e3\System.Messaging.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\08397796343d5730a29f42e61c7f6ee7\System.Management.Instrumentation.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ff1250d2409bd16283c423650d6fd3f6\System.IO.Log.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e60675d3ba7fa94924489dc8466ebff5\System.IdentityModel.Selectors.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
+ 2012-05-12 01:09 . 2012-05-12 01:09 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a9b1e597aaa263dea2cf8754440bd271\System.Dynamic.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e41e86da56bb60523251e0e08210a77b\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94d45f7f28d81304d7fa83bcea849141\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-12 01:30 . 2012-05-12 01:30 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4c50d8a951546d6dffdc8bcb23f47a7b\System.Device.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\7803f4398a527a87d5cace8023e93e8b\System.Data.DataSetExtensions.ni.dll
+ 2012-05-12 01:09 . 2012-05-12 01:09 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\977c7c2badf6a9059ba8371a0f645fc8\System.Configuration.Install.ni.dll
+ 2012-05-12 01:09 . 2012-05-12 01:09 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\877ef74350e6d374ca8f80b489a8cc8e\System.ComponentModel.Composition.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4330e93f9d0ef85f1a972e11c2ac5156\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0c67d9fc14856eb7d8b4e405aef79960\System.AddIn.ni.dll
+ 2012-05-12 01:29 . 2012-05-12 01:29 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\2b046f2d5f056b906d7b25b75ca23575\System.Activities.DurableInstancing.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\4847f66153121ec4ed532909f7c152be\SMSvcHost.ni.exe
+ 2012-05-12 01:28 . 2012-05-12 01:28 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
+ 2012-05-12 01:13 . 2012-05-12 01:13 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ef6e3eb351fe12a5766be7c956c35d95\PresentationFramework.Classic.ni.dll
+ 2012-05-12 01:13 . 2012-05-12 01:13 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e49a124fdad0f1db135f03a49f18fb48\PresentationFramework.Royale.ni.dll
+ 2012-05-12 01:13 . 2012-05-12 01:13 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
+ 2012-05-12 01:13 . 2012-05-12 01:13 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\141f0a8fbfb83604fa3dd43dbe8fa0f4\PresentationFramework.Luna.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 219136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\14787aa1858178027c8b729209e5f0f8\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\01c5ff7a1ea0463414736df5d449e0a9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-12 01:28 . 2012-05-12 01:28 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\3fbaee209e13d65183d2d802cf053f10\WsatConfig.ni.exe
+ 2012-05-12 01:57 . 2012-05-12 01:57 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\886c50212ca6df7af595db7a064dcf5f\WindowsFormsIntegration.ni.dll
+ 2012-05-12 01:38 . 2012-05-12 01:38 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\f0e602dd94327e6eea126e72cb24c4a3\UIAutomationTypes.ni.dll
+ 2012-05-12 01:38 . 2012-05-12 01:38 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\ef1cc397129c81ecb60431633b7d6f94\UIAutomationProvider.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\2adb36011c54ef24dff70bef5e31a71a\UIAutomationClient.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\c7f75a753decf48756decba7a49bb76c\TaskScheduler.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\b0bc5a1ed5648bbe61d4ceb1b4bde03d\System.Xml.Linq.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\589c5c722cae4122c8643c9b028d3212\System.Web.Routing.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\9a541383d78143dc386512b092cb58a9\System.Web.RegularExpressions.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\0db8a7c8fae88d5e8d3fae1787f01c43\System.Web.Entity.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\793107042814869ffcf96bb21af5a5c1\System.Web.Entity.Design.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\a40d32e42e3aab08e4bc2fc2cddcee24\System.Web.DynamicData.ni.dll
+ 2012-05-12 01:56 . 2012-05-12 01:56 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\74564af483830e4898d9acf98b14aaa1\System.Web.Abstractions.ni.dll
+ 2012-05-12 01:41 . 2012-05-12 01:41 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\348482b8eb60eb9595a313ed706fa074\System.Transactions.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\71f666396537e860a5ebccc6923b99cd\System.ServiceProcess.ni.dll
+ 2012-05-12 01:38 . 2012-05-12 01:38 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\3fbac653667adb06ac98561f57049751\System.Security.ni.dll
+ 2012-05-12 01:39 . 2012-05-12 01:39 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\3805923cd6a0d7c9c4c872c1ede4619d\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\c944f6d1355c8e02be1b6adb9022efd8\System.Net.ni.dll
+ 2012-05-12 01:51 . 2012-05-12 01:51 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d52b2623571f82c20cc8c6fe8e162a4a\System.Messaging.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\27bb4472bb5e4fe714126010e7c615ca\System.Management.Instrumentation.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\beb72e4d0964165386096323e4494003\System.IO.Log.ni.dll
+ 2012-05-12 01:51 . 2012-05-12 01:51 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\0e83d3c8f7e6295055548caa2a1a3743\System.IdentityModel.Selectors.ni.dll
+ 2012-05-12 01:41 . 2012-05-12 01:41 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\b48bd4bfbc25e5fb2b6bbc0627bb7aad\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\b7b3b4681359f5ced9d65e88d09a81f6\System.Drawing.Design.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3d2da45f50b57ab5871ff32fa9a0fa71\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\c1999d1e18a7c62be8765f97398c1b7c\System.Data.Services.Design.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\2e18ba464979573aa3dcf04e07e79d87\System.Data.DataSetExtensions.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\58d7e28f550aa89ebc5046b960525b46\System.Configuration.Install.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\3de11837ee6fc7bda6f50bdc8eed68ce\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-12 01:45 . 2012-05-12 01:45 890880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\eb850c90fad10f90fa495be2efa5d8ec\System.AddIn.ni.dll
+ 2012-05-12 01:45 . 2012-05-12 01:45 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\236fe667af3ca016ae66a5b08fb94bd8\System.AddIn.Contract.ni.dll
+ 2012-05-12 01:57 . 2012-05-12 01:57 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\9cf7f4430b8c379ca9bfe4428932af5e\sysglobl.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\510283052ba3df05080787d71eb6fa31\SMSvcHost.ni.exe
+ 2012-05-12 01:51 . 2012-05-12 01:51 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\97ef3ca694f50f101c0b369e3c3528cc\SMDiagnostics.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\dc82ea5f368056cb5340c270bb75becb\PresentationFramework.Classic.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\76933856fb4dd9f9cf17136aac2ca38c\PresentationFramework.Luna.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\5a95213214431ffa96c6e4dbfa36345e\PresentationFramework.Aero.ni.dll
+ 2012-05-12 01:42 . 2012-05-12 01:42 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\57138d0d992b152869c9bb250e9d3735\PresentationFramework.Royale.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\7a6aa6677bc211e2099940c2e7efb750\napsnap.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\9f0fd74c37ad79dc7d5cd30026223c97\napinit.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\4a034fcf374482db0b2cb8a7f661608c\naphlpr.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\41854d8487d49fad7f177425b6c781f7\napcrypt.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\02fa94543dd6ba737d98562e9a42e519\MSBuild.ni.exe
+ 2012-05-12 01:53 . 2012-05-12 01:53 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\85e4c8805347480c7a1b97f3fba54293\MMCFxCommon.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\d4a321be6b1775b27e878d5866ac9b6d\Microsoft.WSMan.Management.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\bdfc36a270290eeff2dfa72949ff20ca\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-12 01:54 . 2012-05-12 01:54 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\915c41bb932618c4abf94b123df9ceae\Microsoft.Vsa.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\b90d3fa08fb2f482ec06283b20bf4525\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f50a903783750e4c093cbf105f334ead\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\65d6ad0aa6d85a25d2840ab5f7d7405c\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-12 01:55 . 2012-05-12 01:55 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3acefb890be23403069123754db8a8d1\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-12 01:54 . 2012-05-12 01:54 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\2708d6ea3f3db7891db1a609018064d8\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\fe529847ae6fd62b1ef4e0ce5ab14569\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\62e3cbb17abebaf9ea084cffb9fab0b7\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\4817b5f63709e4dbf02cfa2f1fbf68dd\Microsoft.MediaCenter.Interop.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\29c42a85dce9c813e64c8c7e7c1a713c\Microsoft.MediaCenter.Playback.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\14b89978817f3f74a7f5964f21d78ef0\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-05-12 01:54 . 2012-05-12 01:54 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\10492ed390f72165b7701b0b209f41b1\Microsoft.MediaCenter.Mheg.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\0e7cbd0361f32288ba6d9010608fffb9\Microsoft.MediaCenter.iTv.Media.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 797696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\982b45a798752360cc28a6bd40b439fa\Microsoft.ManagementConsole.ni.dll
+ 2012-05-12 01:54 . 2012-05-12 01:54 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\6f1c7692333bbe4aba03d4c68cd56210\Microsoft.Build.Utilities.ni.dll
+ 2012-05-12 01:54 . 2012-05-12 01:54 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\05ab0f916af911347d5b7fda20fab3e3\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\a92742de12c5358a722d9b81f4c93f8b\Microsoft.Build.Framework.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\4d843288146d5c6ddcd942e1d68b510b\Microsoft.Build.Framework.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\9435c4788924ed688417b3087ff5cdd2\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 107008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\a9dfffd80c488893b4c34451173f188c\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\d0c9c13cbeb5e9d29c3300c7dc6ad18f\Mcx2Dvcs.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\b65913a9eb492b4ec40363f59badb1cb\mcupdate.ni.exe
+ 2012-05-12 01:52 . 2012-05-12 01:52 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\6de88da68ff92581d1bce3deaa25d9c0\mcstoredb.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\d77784d57cde949b3d0314f70b724120\mcplayerinterop.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\c35cda7fc41b48607b9c85a956fc39d6\mcGlidHostObj.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\07d8613ab03648bcfed976e469523541\MCESidebarCtrl.ni.dll
+ 2012-05-12 01:53 . 2012-05-12 01:53 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\6ac6c70eca79dc3d803241ae6b8c4911\EventViewer.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\80ae3deb3ce5b39e8134838689f5e616\ehRecObj.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\81a510ea5fd14aa30ff41d4fc7f74161\ehiWUapi.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\608233581ceee7892045ebae25b48248\ehiwmp.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\0ff5bc978a9279d484cdf59d919e60df\ehiUserXp.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\75957f1e4c465eb8053fb9f235c5c696\ehiiTv.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\165c31078ab64ffe338512b778f3a645\ehiExtens.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\097208918b41f71a55e52cf2e8a14b9e\ehiBmlDataCarousel.ni.dll
+ 2012-05-12 01:52 . 2012-05-12 01:52 125440 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\01b2b2f884349644dd1b1b4e4ac5f47a\ehiActivScp.ni.dll
+ 2012-05-12 01:51 . 2012-05-12 01:51 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\31d694b6e7f85c1ef3548b8b8e643dfd\ehExtHost.ni.exe
+ 2012-05-12 01:51 . 2012-05-12 01:51 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\f5cd36f9696a44997ffb61cc38067006\ehCIR.ni.dll
+ 2012-05-12 01:51 . 2012-05-12 01:51 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\e7e8991e9dfce879c22b2647edb72287\CustomMarshalers.ni.dll
+ 2012-05-12 01:50 . 2012-05-12 01:50 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\bad60d21de09740f3c2a498fa4aaa7b0\ComSvcConfig.ni.exe
+ 2012-05-12 01:50 . 2012-05-12 01:50 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\a7fd2038556fca7f411cf6f0a62c1671\BDATunePIA.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2aac794e7890acc1a1430e065e16b31a\WsatConfig.ni.exe
+ 2012-05-12 01:49 . 2012-05-12 01:49 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\38c7b1199d544eeec3e4df39e1b8125a\WindowsFormsIntegration.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\5e398c245811fe932ce6bcf68664e307\UIAutomationTypes.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\42378a09ba2a003848de7d2cfeb1c56a\UIAutomationClient.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\816210dd625e1f83fdc4c390c05eaa39\TaskScheduler.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\496033ebd93c3381e4ba09486bf23cc3\System.Xml.Linq.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fd3d5330dcbb6008e561c8e08dda3f3b\System.Web.Routing.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\e6a25bb61babf2ad6d6fa3256a2ea41a\System.Web.RegularExpressions.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\521b21223611de894d88c24d70bfec1e\System.Web.Extensions.Design.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\11b452b0f0e9e6c5b84cbf4b9e0b2906\System.Web.Entity.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\287413c3a7948acc8b32770f738ac24d\System.Web.Entity.Design.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c7b032f865f68d8ed7134d15f5f9ff18\System.Web.DynamicData.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\2f6d1381e071c6d15efe6b33a762817a\System.Web.Abstractions.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\61fbbd8bc7d76972115b292b132ff2d1\System.Transactions.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\49ed832fa09c702258b6ed873c485428\System.ServiceProcess.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\61af058c2bc079f28397a29ed145fbc7\System.Security.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\35fcbda2532ece23d09a044aa2ef62a4\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0c00b1a8336dd4c1bd1ebce7780f20b4\System.Runtime.Remoting.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\cd8ad97063680071342f13d12376fd17\System.Net.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\44cdbda89fda50d3ae4ef0062d871d7e\System.Messaging.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\3f9dee1ce0ccb42145293a5bfcbe7205\System.Management.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\c9986072b91eb63728d4843ae798e121\System.Management.Instrumentation.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\870427539c6829f750490719470bfa22\System.IO.Log.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\f93d41cf41160cc660aea5eb8be181d6\System.IdentityModel.Selectors.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\558fa6c6131f14af258f94291a5d19d6\System.EnterpriseServices.Wrapper.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\558fa6c6131f14af258f94291a5d19d6\System.EnterpriseServices.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aad1941e0b3bd9cf27abd9a5c6aa4e43\System.Drawing.Design.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\bbede691e8386ac49379edad37eb7e3c\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77fb2ee5038b95bb20353a305918df9e\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\4c7d1e5492f79ac7217577e45a06f559\System.Data.Services.Client.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\35dfab6426c2a64cae53944e19623dca\System.Data.Services.Design.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\71d6318c39c6ee8abb7c3ae61cf2fd4f\System.Data.Entity.Design.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4f1cef2fd7b12da72654f2522f169d2e\System.Data.DataSetExtensions.ni.dll
+ 2012-05-12 01:43 . 2012-05-12 01:43 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb079eab134fd1a752ad91db13274110\System.Configuration.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f96bc91c85c7aafc6cc0f04742359564\System.Configuration.Install.ni.dll
+ 2012-05-12 01:45 . 2012-05-12 01:45 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\db477bc003958f524c72bc30040f0899\System.AddIn.ni.dll
+ 2012-05-12 01:49 . 2012-05-12 01:49 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\51f227c6d989cd851b46ac157df263a3\sysglobl.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4bc345ee664ca736a30a7fafd8c5a16c\SMSvcHost.ni.exe
+ 2012-05-12 01:46 . 2012-05-12 01:46 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\26a852935ab27c328a148effb43a76bf\SMDiagnostics.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fcdfda3443709bbe8d0a44cf2e0e1660\PresentationFramework.Classic.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fc626095c194be137bceb219934b06a7\PresentationFramework.Aero.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d85fc1508cff1e635f87b4afb4f4cc9a\PresentationFramework.Luna.ni.dll
+ 2012-05-12 01:44 . 2012-05-12 01:44 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\056f7ed4e914569f97b47631c0ade534\PresentationFramework.Royale.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\c06cabe7cc72d1f18bb454f6f4e1c124\napsnap.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\7ca76665c67d005c42b36ee5fa780eee\napinit.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\5de0fa9a3f84bad3c0827c3f77387c25\naphlpr.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\b31fec98f29b3530a72c044d36c88cfa\MSBuild.ni.exe
+ 2012-05-12 01:47 . 2012-05-12 01:47 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\2c915521c7e4dbe76780d123d1f8d259\MMCFxCommon.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\530aebd2f4fb78e463e4622b53fa1d29\Microsoft.WSMan.Management.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0329bf8cfafd687cee2b2d682d182ce9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ec25dcf853949dc1b1055f0a8d3d3817\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d664a2c965541177d610a2deffd28a29\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d3719732987a18c70428002240fa0271\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\83032d78b29cd09caf0ef69d05d33cd3\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-12 01:48 . 2012-05-12 01:48 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\6140e4423431468afff328b69276bd43\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\56c4103033df8fc653ada2246689cecc\Microsoft.ManagementConsole.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a3163f28829b22e3ae962dbaa9216028\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4e130bab9541f548007f649552225772\Microsoft.Build.Utilities.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c617adec91d29b55d0690ace389d1b46\Microsoft.Build.Engine.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\aa7fe29b3123fc147df14c38b18aed9d\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\6b3830a6c3f619389a49d05164a9306f\mcstoredb.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\30b555c6b4d92466e6b08b3f23044af1\EventViewer.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\44cb15eb402bd0ca508daca85020225a\ehRecObj.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\e4ac05c2ec50bf546e050f2d8b28b630\ehiVidCtl.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\f627a0274101e3dae80ddcde40885795\ehiProxy.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\b052b90444da59b2ebd1d6485cf49605\ehiExtens.ni.dll
+ 2012-05-12 01:47 . 2012-05-12 01:47 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\237b3740b5aa69cf33124f3d7623b706\ehExtHost32.ni.exe
+ 2012-05-12 01:47 . 2012-05-12 01:47 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\1435db5dea878f59191dc112a40e2185\CustomMarshalers.ni.dll
+ 2012-05-12 01:46 . 2012-05-12 01:46 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\1d948af5bf966ad1277936a6e30f91e3\ComSvcConfig.ni.exe
+ 2012-05-12 01:46 . 2012-05-12 01:46 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\7ac2fa31914eca722b63ebd994550211\BDATunePIA.ni.dll
- 2009-07-13 21:10 . 2009-06-10 21:14 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-11 18:21 . 2012-04-06 00:49 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-11 18:21 . 2012-04-06 00:49 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2009-07-14 00:35 . 2009-06-10 21:14 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-05-11 18:21 . 2012-04-06 00:45 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2009-07-14 01:01 . 2009-06-10 20:30 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-11 18:21 . 2012-04-06 00:49 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2009-07-14 00:35 . 2009-06-10 21:14 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-05 19:31 . 2012-05-05 19:31 103832 c:\windows\assembly\GAC_32\Microsoft.FlightSimulator.SimConnect\10.0.61242.0__31bf3856ad364e35\Microsoft.FlightSimulator.SimConnect.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-04-17 19:58 . 2012-04-17 19:58 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-05-15 19:34 . 2012-05-15 19:34 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2012-04-17 19:59 . 2012-04-17 19:59 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2012-05-14 19:26 . 2008-01-21 23:00 1056768 c:\windows\SysWOW64\tx14_dox.dll
+ 2009-07-20 22:05 . 2009-07-20 22:05 1348432 c:\windows\SysWOW64\msxml4.dll
+ 2012-04-21 17:03 . 2006-11-09 13:20 2111096 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
+ 2009-07-14 04:54 . 2012-05-22 07:29 1949696 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-05-29 19:10 . 2008-05-29 19:10 2045952 c:\windows\SysWOW64\bconvert.dll
- 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
+ 2012-05-11 18:21 . 2012-04-02 05:24 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
+ 2008-03-27 14:51 . 2008-03-27 14:51 1490656 c:\windows\system32\DriverStore\FileRepository\ggsemc.inf_amd64_neutral_978c370d1898e08a\Amd64\WdfCoInstaller01007.dll
- 2009-07-14 04:45 . 2012-04-12 17:18 3799596 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2012-05-12 01:38 3799596 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2012-03-10 08:29 . 2012-05-22 07:28 2106160 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3997867176-2451664295-1965468521-1000-12288.dat
+ 2012-01-19 11:08 . 2012-01-19 11:08 1369872 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 11:08 . 2012-01-19 11:08 6429992 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 11:52 . 2012-01-19 11:52 3825952 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 5029160 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 1512712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
- 2011-11-21 22:57 . 2011-11-21 22:57 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2012-05-11 18:21 . 2012-04-06 00:45 2255952 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
+ 2012-05-11 18:21 . 2012-03-21 22:28 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
- 2012-03-11 15:44 . 2011-03-29 22:26 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
+ 2012-05-11 18:21 . 2012-01-04 02:48 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
- 2012-03-11 15:36 . 2011-10-31 23:16 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2012-05-11 18:21 . 2012-01-04 02:48 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
- 2012-03-11 15:45 . 2011-07-08 22:32 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-05-11 18:21 . 2012-01-04 02:48 1577744 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
+ 2012-05-11 18:21 . 2012-01-04 02:48 1765136 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
+ 2012-01-19 11:08 . 2012-01-19 11:08 1369872 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 11:08 . 2012-01-19 11:08 6429992 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 11:08 . 2012-01-19 11:08 3790112 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 5029160 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
- 2011-11-21 21:31 . 2011-11-21 21:31 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-05-11 18:21 . 2012-04-06 00:49 1737296 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2012-05-11 18:21 . 2012-03-21 22:29 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2012-03-11 15:44 . 2011-03-29 22:31 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2012-03-11 15:36 . 2011-10-31 23:17 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 5917456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2012-05-11 18:21 . 2012-01-04 02:51 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2012-03-11 15:45 . 2011-07-08 22:35 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 5029160 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-12 01:12 . 2012-05-12 01:12 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-12 14:25 . 2012-04-12 14:25 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-12 01:11 . 2012-05-12 01:11 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2010-05-22 15:39 . 2010-05-22 15:39 5289984 c:\windows\Installer\f163179.msi
+ 2009-07-20 22:29 . 2009-07-20 22:29 6057984 c:\windows\Installer\8ca7421.msi
+ 2008-09-30 19:07 . 2008-09-30 19:07 6042112 c:\windows\Installer\8ca741a.msi
+ 2012-03-19 12:27 . 2012-03-19 12:27 1944064 c:\windows\Installer\3307fae2.msi
+ 2012-01-19 14:51 . 2012-01-19 14:51 8075264 c:\windows\Installer\1aaacea5.msi
+ 2012-03-26 17:21 . 2012-03-26 17:21 7622656 c:\windows\Installer\19049d83.msi
+ 2012-05-10 20:52 . 2012-05-10 20:52 1592832 c:\windows\Installer\15a36468.msi
+ 2007-10-27 01:40 . 2007-10-27 01:40 2084352 c:\windows\Installer\12f03f85.msi