Conduit.com místo google

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Maniacccc
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 09 Dub 2009 18:33

Conduit.com místo google

#1 Příspěvek od Maniacccc »

Zdravím,

ve FF občas vyhledávání používá conduit.com, místo google, který tam mám nastaven. Můžete mi prosím někdo mrknout, zda jsem někde nechytil nějakého bacila?

Díky :)

Logfile of random's system information tool 1.09 (written by random/random)
Run by Pepa at 2012-08-29 14:34:34
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 366 GB (38%) free of 954 GB
Total RAM: 8190 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:34:40, on 29.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Data\DAEMON Tools Pro\DTAgent.exe
C:\Data\VirtualCloneDrive\VCDDaemon.exe
C:\Data\Avast\AvastUI.exe
C:\Data\QIP 2012\qip.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Škola\Rockwell Software\Arena\Arena.exe
C:\Data\Mozilla Firefox\firefox.exe
C:\Data\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
C:\Program Files\trend micro\Pepa.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - (no file)
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Data\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: CStat - {DD92DE22-ED91-4560-B788-DEE2B26612E6} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Data\Avast\aswWebRepIE.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Data\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [avast] "C:\Data\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Data\DAEMON Tools Pro\DTAgent.exe" -autorun
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Pepa\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ADAA345-C8DD-4793-9D92-346471DE9AB5}: NameServer = 8.8.8.8,8.8.4.4
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Data\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\ProgramData\SystemExplorer\SystemExplorerService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Cisco AnyConnect Secure Mobility Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10196 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe"
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Data\Avast\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\System32\tcpsvcs.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Data\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\Data\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Data\Avast\AvastUI.exe" /nogui
WLIDSvcM.exe 3108
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d55f0f93-a1e7-484c-94b2-7d954a69bdb8 -SystemEventPortName:HostProcess-57a7bdc6-4558-4874-b333-64052dcfb5a8 -IoCancelEventPortName:HostProcess-15f198f3-a60c-496c-9196-18d599bd9b17 -NonStateChangingEventPortName:HostProcess-62ac565a-0c8f-4ba8-8a5f-cd32cebbc03a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1af886ef-f7bd-4200-9356-f20cd80b0348
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Data\QIP 2012\qip.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE"
C:\Windows\splwow64.exe 12288
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /Embedding
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Škola\Rockwell Software\Arena\Arena.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe82_ Global\UsGthrCtrlFltPipeMssGthrPipe82 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Data\Mozilla Firefox\firefox.exe"
"C:\Data\Mozilla Firefox\plugin-container.exe" --channel=4428.10d03880.2043480451 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll" CF9FABFC27F45837 -greomni "C:\Data\Mozilla Firefox\omni.ja" 4428 "\\.\pipe\gecko-crash-server-pipe.4428" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe" --proxy-stub-channel=Flash5240.5DB2EE30.41 --host-broker-channel=Flash5240.5DB2EE30.18467 --host-pid=5240 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe" --channel=4076.0034F568.1879271467 --proxy-stub-channel=Flash5240.5DB2EE30.41 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll" --host-npapi-version=27 --type=renderer
"C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548
"C:\Users\Pepa\Stažené soubory\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.igoogle.com"
prefs.js - "extensions.enabledItems" - "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2, foxmarks@kei.com:3.8.7, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... ource=2&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.270 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.270 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_270.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL

C:\Data\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Data\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Data\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll

C:\Data\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\
cs@dictionaries.addons.mozilla.org
foxmarks@kei.com
{687578b9-7132-4a7a-80e4-30ee31099e03}
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\searchplugins\
google-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Data\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-13 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-10-30 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-13 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Data\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-06-21 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD92DE22-ED91-4560-B788-DEE2B26612E6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Data\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Data\Avast\aswWebRepIE.dll [2012-03-07 1003704]
{687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"DAEMON Tools Pro Agent"=C:\Data\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2011-06-22 395392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-01-21 91520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cisco AnyConnect Secure Mobility Agent for Windows]
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2011-09-09 523216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EasyTuneVI]
C:\Program Files (x86)\GIGABYTE\ET6\ETcall.exe [2007-07-26 20480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OscarEditor]
C:\Program Files (x86)\OSCARK6\OscarEditor.exe [2008-10-14 2877952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFPrint]
C:\Program Files (x86)\PDF24\pdf24.exe [2012-05-22 160872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\pdfw]
C:\Program Files (x86)\Amic Utilities\PDF Writer Pro\pdfwload.exe [2004-03-24 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-08-18 8067616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Data\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-06-13 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\ProgramyFiles\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2011-06-22 2637824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update]
C:\Users\Pepa\Documents\SYS\winupdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Pepa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Jabbim.lnk]
C:\Data\Jabbim\jabbim.exe [2010-03-09 211968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Pepa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
C:\Data\MAGICD~1\MAGICD~1.EXE [2009-02-23 576000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Pepa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk]
C:\Data\Office\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-09-16 384512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Data\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"avast"=C:\Data\Avast\avastUI.exe [2012-03-07 4241512]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2012-03-07 249344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - "C:\Data\PSPad editor\PSPad.exe" "%1"

======List of files/folders created in the last 1 month======

2012-08-27 09:48:59 ----D---- C:\ProgramData\ATI
2012-08-27 09:48:56 ----D---- C:\Program Files (x86)\AMD APP
2012-08-15 03:03:18 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-08-15 03:03:18 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-15 03:03:17 ----A---- C:\Windows\SYSWOW64\url.dll
2012-08-15 03:03:17 ----A---- C:\Windows\system32\url.dll
2012-08-15 03:03:16 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-08-15 03:03:16 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-08-15 03:03:16 ----A---- C:\Windows\system32\urlmon.dll
2012-08-15 03:03:16 ----A---- C:\Windows\system32\iertutil.dll
2012-08-15 03:03:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-08-15 03:03:14 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-08-15 03:03:14 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-15 03:03:14 ----A---- C:\Windows\system32\ieui.dll
2012-08-15 03:03:13 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-08-15 03:03:13 ----A---- C:\Windows\system32\jscript9.dll
2012-08-15 03:03:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-08-15 03:03:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-08-15 03:03:12 ----A---- C:\Windows\system32\wininet.dll
2012-08-15 03:03:12 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-15 03:03:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-08-15 03:03:11 ----A---- C:\Windows\system32\jscript.dll
2012-08-15 03:03:10 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-08-15 03:03:08 ----A---- C:\Windows\system32\mshtml.dll
2012-08-15 03:03:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-08-15 03:03:07 ----A---- C:\Windows\system32\ieframe.dll
2012-08-15 02:43:40 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-08-15 02:43:40 ----A---- C:\Windows\system32\srcore.dll
2012-08-15 02:43:36 ----A---- C:\Windows\system32\win32k.sys
2012-08-15 02:43:34 ----A---- C:\Windows\system32\netapi32.dll
2012-08-15 02:43:34 ----A---- C:\Windows\system32\browser.dll
2012-08-15 02:43:34 ----A---- C:\Windows\system32\browcli.dll
2012-08-15 02:43:33 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-08-15 02:43:33 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-08-15 02:43:29 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-08-15 02:43:29 ----A---- C:\Windows\system32\win32spl.dll
2012-08-15 02:43:29 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-15 02:43:29 ----A---- C:\Windows\splwow64.exe
2012-08-15 02:43:26 ----A---- C:\Windows\system32\localspl.dll

======List of files/folders modified in the last 1 month======

2012-08-29 14:34:40 ----D---- C:\Windows\Temp
2012-08-29 14:34:40 ----D---- C:\Windows\Prefetch
2012-08-29 14:34:39 ----D---- C:\Program Files\trend micro
2012-08-29 12:49:01 ----D---- C:\Windows\system32\NDF
2012-08-29 09:52:09 ----D---- C:\Windows\system32\config
2012-08-29 09:38:39 ----D---- C:\Windows\system32\Tasks
2012-08-29 09:38:35 ----D---- C:\Windows\Tasks
2012-08-28 13:59:44 ----SHD---- C:\System Volume Information
2012-08-27 20:19:27 ----D---- C:\Windows
2012-08-27 20:17:11 ----D---- C:\Windows\SysWOW64
2012-08-27 20:17:11 ----D---- C:\Windows\System32
2012-08-27 10:17:19 ----D---- C:\Windows\system32\catroot
2012-08-27 09:48:59 ----D---- C:\ProgramData
2012-08-27 09:48:58 ----SHD---- C:\Windows\Installer
2012-08-27 09:48:56 ----RD---- C:\Program Files (x86)
2012-08-27 09:48:27 ----D---- C:\Program Files\ATI Technologies
2012-08-27 09:47:43 ----D---- C:\ProgramData\AMD
2012-08-27 09:44:23 ----D---- C:\Windows\system32\drivers
2012-08-27 09:44:21 ----D---- C:\Windows\system32\DriverStore
2012-08-27 09:44:21 ----D---- C:\Windows\inf
2012-08-27 09:43:56 ----D---- C:\Windows\system32\catroot2
2012-08-27 02:43:26 ----D---- C:\Users\Pepa\AppData\Roaming\CoreFTP
2012-08-26 22:49:45 ----D---- C:\utor
2012-08-26 20:31:42 ----D---- C:\Games
2012-08-21 22:16:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-08-21 13:36:58 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-08-15 10:48:10 ----D---- C:\Windows\winsxs
2012-08-15 03:05:52 ----RSD---- C:\Windows\Fonts
2012-08-15 03:05:52 ----D---- C:\Program Files (x86)\Internet Explorer
2012-08-15 03:05:51 ----D---- C:\Windows\SYSWOW64\migration
2012-08-15 03:05:51 ----D---- C:\Windows\system32\migration
2012-08-15 03:05:51 ----D---- C:\Program Files\Internet Explorer
2012-08-15 03:04:26 ----D---- C:\ProgramData\Microsoft Help
2012-08-15 03:00:30 ----A---- C:\Windows\system32\MRT.exe
2012-08-14 23:41:04 ----D---- C:\Users\Pepa\AppData\Roaming\Might & Magic Heroes VI
2012-08-05 12:17:26 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-04 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2012-04-25 275552]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2012-04-25 971360]
R0 vididr;Acronis Virtual Disk; C:\Windows\system32\DRIVERS\vididr.sys [2012-04-25 210016]
R0 vidsflt53;Acronis Disk Storage Filter (53); C:\Windows\system32\DRIVERS\vsflt53.sys [2012-04-25 141920]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-05-19 272448]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-18 34472]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R2 cpuz135;cpuz135; \??\C:\Windows\system32\drivers\cpuz135_x64.sys [2011-09-21 21992]
R3 acsock;acsock; C:\Windows\system32\DRIVERS\acsock64.sys [2011-09-09 106408]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-07-28 368640]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-08-18 1983264]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2010-07-07 34032]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-09 36352]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-06-26 303616]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-06-26 35328]
S3 AF9035HB;AF9035 Hybrid Device; C:\Windows\System32\Drivers\AF9035HB.sys [2011-04-13 900480]
S3 ALSysIO;ALSysIO; \??\C:\Users\Pepa\AppData\Local\Temp\ALSysIO64.sys []
S3 AODDriver;AODDriver; \??\C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [2009-02-23 14904]
S3 atidgllk;atidgllk; \??\C:\Program Files (x86)\Gigabyte\ET6\atidgllk.sys [2006-07-19 12048]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-07-28 10278912]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 cpuz130;cpuz130; \??\C:\Users\Pepa\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 etdrv;etdrv; \??\C:\Windows\etdrv.sys [2009-12-29 25640]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-04-09 25640]
S3 GenericMount;Generic Mount Driver; C:\Windows\system32\DRIVERS\GenericMount.sys [2009-09-21 54320]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2011-08-12 13352]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2011-08-12 27176]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2011-04-09 30528]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-07-17 201472]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\Windows\system32\DRIVERS\s115bus.sys [2007-04-23 108296]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 19720]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s115mdm.sys [2007-04-23 144648]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 126216]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s115obex.sys [2007-04-23 123656]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vpcuxd;Služba zástupné procedury virtualizace rozhraní USB; C:\Windows\system32\drivers\vpcuxd.sys [2010-11-20 16384]
S3 vpnva;Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64; C:\Windows\system32\DRIVERS\vpnva64.sys [2011-07-21 26536]
S3 VSPerfDrv100;Performance Tools Driver 10.0; \??\C:\Data\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2010-03-18 68440]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-07-28 239616]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-08-06 361984]
R2 avast! Antivirus;avast! Antivirus; C:\Data\Avast\AvastSvc.exe [2012-03-07 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-06-14 76888]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 157720]
R2 vpnagent;Cisco AnyConnect Secure Mobility Agent; C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2011-09-09 475088]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-03 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-03 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-18 113120]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2009-07-16 316664]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 SystemExplorerHelpService;System Explorer Service; C:\ProgramData\SystemExplorer\SystemExplorerService64.exe [2012-03-14 754832]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-10-30 1255736]
S4 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2011-06-22 1191656]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-05 250056]
S4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-12-17 1436424]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Conduit.com místo google

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

:arrow: Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
  • Zaskrtnete okenko Pro vsechny uzivatele
  • Zaskrtnete okenko Kontrola na havet "LOP"
  • Zaskrtnete okenko Kontrola na havet "Purity"
  • Stari souboru zmente z 30 dnu na 7 dnu
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5 

*crack* /s
*keygen* /s
*loader* /s
  • Kliknete na tlacitko Prohledat
  • Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
  • Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku[
[/list]
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Maniacccc
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 09 Dub 2009 18:33

Re: Conduit.com místo google

#3 Příspěvek od Maniacccc »

Snažil jsem v přidat nebo odebrat programy najít ty lišty do prohlížečů, ale nerozeznal jsem je od ostatních věcí, abych nezabil hodiny brouzdáním, jste schopen je od oka poznat a říci, co mám vytlouct?

Sken mi nahlásil chybu "List index not found"

A logy z testu zde:
OTL logfile created on: 29.8.2012 19:45:19 - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Pepa\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

8,00 Gb Total Physical Memory | 5,51 Gb Available Physical Memory | 68,93% Memory free
16,00 Gb Paging File | 12,93 Gb Available in Paging File | 80,82% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,41 Gb Total Space | 357,01 Gb Free Space | 38,33% Space Free | Partition Type: NTFS
Drive D: | 423,82 Gb Total Space | 280,85 Gb Free Space | 66,27% Space Free | Partition Type: NTFS
Drive E: | 41,71 Gb Total Space | 41,52 Gb Free Space | 99,55% Space Free | Partition Type: FAT32
Unable to calculate disk information.
Drive M: | 1,31 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive N: | 1,31 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: MAINFRAME | User Name: Pepa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2012.08.29 19:41:26 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Pepa\Desktop\OTL.exe
PRC - [2012.08.05 12:17:26 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.07.18 21:28:28 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Data\Mozilla Firefox\firefox.exe
PRC - [2012.07.06 22:56:10 | 001,022,352 | ---- | M] (BitTorrent, Inc.) -- C:\utor\utorrent.exe
PRC - [2012.06.14 19:52:58 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012.03.07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Data\Avast\AvastUI.exe
PRC - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Data\Avast\AvastSvc.exe
PRC - [2011.10.12 19:35:24 | 007,097,296 | ---- | M] (QIP) -- C:\Data\QIP 2012\qip.exe
PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011.09.09 18:08:54 | 000,475,088 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
PRC - [2011.05.02 16:08:22 | 004,093,288 | ---- | M] (Rockwell Automation, Inc.) -- C:\Škola\Rockwell Software\Arena\Arena.exe
PRC - [2011.03.17 10:15:04 | 000,842,048 | ---- | M] (DT Soft Ltd) -- C:\Data\DAEMON Tools Pro\DTAgent.exe
PRC - [2011.03.15 17:59:32 | 000,312,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2009.06.17 13:44:11 | 000,085,160 | ---- | M] (Elaborate Bytes AG) -- C:\Data\VirtualCloneDrive\VCDDaemon.exe


========== Modules (No Company Name) ==========

MOD - [2012.08.05 12:17:25 | 009,465,032 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll
MOD - [2012.07.18 21:28:27 | 002,003,424 | ---- | M] () -- C:\Data\Mozilla Firefox\mozjs.dll
MOD - [2011.10.12 19:36:02 | 000,058,832 | ---- | M] () -- C:\Data\QIP 2012\Plugins\Win7Helper\Win7Helper.dll
MOD - [2011.10.12 19:36:02 | 000,057,808 | ---- | M] () -- C:\Data\QIP 2012\Plugins\cards\cards.dll
MOD - [2011.10.12 19:35:48 | 000,899,536 | ---- | M] () -- C:\Data\QIP 2012\Protos\Social\Social.dll
MOD - [2011.10.12 19:35:44 | 001,658,320 | ---- | M] () -- C:\Data\QIP 2012\Protos\MRA\mra.dll
MOD - [2011.10.12 19:35:44 | 000,049,104 | ---- | M] () -- C:\Data\QIP 2012\Protos\MRA\pics.dll
MOD - [2011.10.12 19:35:36 | 002,391,504 | ---- | M] () -- C:\Data\QIP 2012\Protos\InfICQ\inficq.dll
MOD - [2011.10.12 19:35:28 | 000,103,888 | ---- | M] () -- C:\Data\QIP 2012\Core\WebWindow.dll
MOD - [2011.10.12 19:35:26 | 004,660,176 | ---- | M] () -- C:\Data\QIP 2012\Core\voip.dll
MOD - [2010.01.09 21:18:18 | 004,254,560 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF


========== Services (SafeList) ==========

SRV:64bit: - [2012.08.06 12:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012.07.28 04:09:44 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2011.12.17 00:17:13 | 001,436,424 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.07.14 03:39:47 | 000,010,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\TCPSVCS.EXE -- (simptcp)
SRV - [2012.08.05 12:17:26 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.07.18 21:28:28 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.06.14 19:52:58 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012.03.14 15:22:23 | 000,754,832 | ---- | M] (Mister Group) [On_Demand | Stopped] -- C:\ProgramData\SystemExplorer\SystemExplorerService64.exe -- (SystemExplorerHelpService)
SRV - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Data\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011.09.09 18:08:54 | 000,475,088 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe -- (vpnagent)
SRV - [2011.06.29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [Disabled | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011.06.22 11:18:40 | 001,191,656 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2010.05.04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.07.16 18:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009.07.14 03:14:42 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\TCPSVCS.EXE -- (simptcp)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.07.28 06:07:44 | 010,278,912 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2012.07.28 06:07:44 | 010,278,912 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.07.28 03:14:46 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.06.26 15:35:34 | 000,303,616 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2012.06.26 15:35:10 | 000,035,328 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2012.05.14 08:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012.04.25 16:23:19 | 000,971,360 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2012.04.25 16:23:08 | 000,210,016 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vididr.sys -- (vididr)
DRV:64bit: - [2012.04.25 16:23:06 | 000,141,920 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsflt53.sys -- (vidsflt53)
DRV:64bit: - [2012.04.25 16:23:04 | 000,275,552 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2012.03.07 01:04:06 | 000,819,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.03.07 01:04:04 | 000,337,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.03.07 01:02:20 | 000,053,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.03.07 01:01:57 | 000,059,224 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.03.07 01:01:52 | 000,069,976 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.03.07 01:01:32 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.03.05 16:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2011.09.21 11:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2011.09.09 17:59:19 | 000,106,408 | R--- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\acsock64.sys -- (acsock)
DRV:64bit: - [2011.08.12 15:10:22 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:64bit: - [2011.08.12 15:10:22 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:64bit: - [2011.07.21 01:49:59 | 000,026,536 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpnva64.sys -- (vpnva)
DRV:64bit: - [2011.05.19 11:09:22 | 000,272,448 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2011.04.13 19:52:05 | 000,900,480 | ---- | M] (AfaTech ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AF9035HB.sys -- (AF9035HB)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:34:02 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
DRV:64bit: - [2010.11.20 15:34:02 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:35:32 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010.11.20 13:35:24 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd)
DRV:64bit: - [2010.11.20 13:35:20 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.07.07 00:11:07 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:64bit: - [2010.02.18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.12.18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009.10.01 22:03:40 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2009.09.30 16:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009.09.21 20:26:10 | 000,054,320 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GenericMount.sys -- (GenericMount)
DRV:64bit: - [2009.08.20 18:05:06 | 000,239,616 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.08.09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009.07.17 20:52:00 | 000,201,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.04 18:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:64bit: - [2009.04.03 07:39:58 | 000,034,872 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.02.24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2007.04.23 15:54:40 | 000,126,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s115mgmt.sys -- (s115mgmt)
DRV:64bit: - [2007.04.23 15:54:40 | 000,123,656 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s115obex.sys -- (s115obex)
DRV:64bit: - [2007.04.23 15:54:38 | 000,144,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s115mdm.sys -- (s115mdm)
DRV:64bit: - [2007.04.23 15:54:36 | 000,019,720 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s115mdfl.sys -- (s115mdfl)
DRV:64bit: - [2007.04.23 15:54:32 | 000,108,296 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s115bus.sys -- (s115bus)
DRV - [2011.04.09 11:17:42 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2011.04.09 11:17:26 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010.03.18 00:34:36 | 000,068,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Data\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys -- (VSPerfDrv100)
DRV - [2009.12.29 18:41:38 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.02.24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)
DRV - [2009.02.23 01:21:54 | 000,014,904 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys -- (AODDriver)
DRV - [2006.07.19 13:25:10 | 000,012,048 | R--- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Gigabyte\ET6\atidgllk.sys -- (atidgllk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {89D0EF7D-2254-4133-AAD8-29E20DF679DF}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0E DE 01 66 94 20 CB 01 [binary data]
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No CLSID value found
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes,DefaultScope = {BFC20756-9BFE-4510-9845-E07726C48774}
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes\{BFC20756-9BFE-4510-9845-E07726C48774}: "URL" = http://www.google.cz/search?q={searchTe ... {startPage}
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Google CZ"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.igoogle.com"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2
FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.8.7
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.as ... ource=2&q="
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_270.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Data\Avast\WebRep\FF [2012.04.02 19:04:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.01.23 15:39:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Data\Mozilla Firefox\components [2012.07.18 21:28:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Data\Mozilla Firefox\plugins [2012.08.18 22:10:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Components: C:\Data\Mozilla Thunderbird\components [2010.12.19 11:54:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.0.3\extensions\\Plugins: C:\Data\Mozilla Thunderbird\plugins [2012.08.18 22:10:21 | 000,000,000 | ---D | M]

[2010.03.05 00:07:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Extensions
[2010.03.05 00:07:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.08.28 00:42:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions
[2012.08.28 00:42:28 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012.02.22 23:19:29 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.07.16 02:51:36 | 000,000,000 | ---D | M] (České slovníky pro kontrolu pravopisu) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\cs@dictionaries.addons.mozilla.org
[2012.08.18 13:14:31 | 000,000,000 | ---D | M] ("Xmarks") -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\foxmarks@kei.com
[2012.01.23 15:39:09 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5

========== Chrome ==========

CHR - homepage: http://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Data\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Data\Mozilla Firefox\plugins\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - Extension: YouTube = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: uTorrentControl2 = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\
CHR - Extension: Gmail = C:\Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.05.30 11:48:56 | 000,000,034 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Data\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Data\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (no name) - {DD92DE22-ED91-4560-B788-DEE2B26612E6} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Data\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Data\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast] C:\Data\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [VirtualCloneDrive] C:\Data\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
O4 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000..\Run: [DAEMON Tools Pro Agent] C:\Data\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 [2012.08.12 00:23:42 | 000,000,000 | ---D | M]
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Pepa\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Pepa\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5ADAA345-C8DD-4793-9D92-346471DE9AB5}: NameServer = 8.8.8.8,8.8.4.4
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18:64bit: - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.12.16 23:30:21 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2010.07.08 01:44:06 | 000,000,040 | R--- | M] () - M:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2010.07.08 01:44:06 | 000,000,040 | R--- | M] () - N:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.XVID - xvidvfw.dll ()
Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\SysWow64\lhacm.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2012.08.29 19:41:24 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\Pepa\Desktop\OTL.exe
[2012.08.27 09:48:59 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012.08.27 09:48:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.08.27 09:48:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012.08.26 20:34:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fire Department 3
[2012.08.24 11:30:59 | 000,000,000 | ---D | C] -- C:\Users\Pepa\Desktop\babuš
[2012.08.24 11:30:19 | 000,000,000 | ---D | C] -- C:\Users\Pepa\Desktop\fotky
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Pepa\Desktop\*.tmp files -> C:\Users\Pepa\Desktop\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2012.08.29 19:47:27 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.08.29 19:43:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.08.29 19:41:26 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Pepa\Desktop\OTL.exe
[2012.08.29 19:01:00 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.08.29 14:51:15 | 000,025,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.08.29 14:51:15 | 000,025,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.08.29 09:38:43 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2012.08.29 09:35:12 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.08.29 09:34:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.08.29 09:34:41 | 2146,295,807 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.28 00:56:08 | 000,293,380 | ---- | M] () -- C:\Users\Pepa\Documents\Řezníček dopis.pdf
[2012.08.27 01:37:55 | 000,084,522 | ---- | M] () -- C:\Users\Pepa\Documents\Pozitron services.pdf
[2012.08.27 01:37:42 | 000,023,814 | ---- | M] () -- C:\Users\Pepa\Documents\Pozitron services.odt
[2012.08.26 20:34:32 | 000,000,744 | ---- | M] () -- C:\Users\Public\Desktop\Fire Department 3.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Pepa\Desktop\*.tmp files -> C:\Users\Pepa\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.08.29 19:47:27 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.08.28 00:56:07 | 000,293,380 | ---- | C] () -- C:\Users\Pepa\Documents\Řezníček dopis.pdf
[2012.08.27 01:37:54 | 000,084,522 | ---- | C] () -- C:\Users\Pepa\Documents\Pozitron services.pdf
[2012.08.26 20:34:32 | 000,000,744 | ---- | C] () -- C:\Users\Public\Desktop\Fire Department 3.lnk
[2012.04.25 14:38:23 | 000,214,497 | ---- | C] () -- C:\ProgramData\LUInstall.LiveUpdate
[2012.03.09 14:06:14 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.02.29 04:12:07 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2012.02.19 21:45:38 | 018,775,886 | ---- | C] () -- C:\Users\Pepa\Brožura v7.8.rar
[2012.02.15 04:36:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.02.15 04:36:36 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.02.03 02:07:44 | 000,000,564 | ---- | C] () -- C:\Users\Pepa\AppData\Local\SRDownloader.err
[2012.01.14 02:30:07 | 000,298,280 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.01.14 02:30:05 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012.01.14 00:28:39 | 000,840,264 | ---- | C] () -- C:\Windows\SysWow64\pbsvc(1).exe
[2012.01.08 12:32:30 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012.01.08 12:32:30 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012.01.08 12:14:45 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011.12.28 16:34:14 | 000,000,715 | ---- | C] () -- C:\Program Files (x86)\Settings.ini
[2011.12.28 16:34:05 | 037,329,920 | ---- | C] () -- C:\Program Files (x86)\Office 2010 Toolkit.exe
[2011.12.22 19:15:43 | 000,020,138 | ---- | C] () -- C:\Users\Pepa\.recently-used.xbel
[2011.12.12 15:32:29 | 000,000,412 | ---- | C] () -- C:\Users\Pepa\AppData\Roaming\All CPU Meter_Settings.ini
[2011.11.22 23:26:43 | 000,000,600 | ---- | C] () -- C:\Users\Pepa\AppData\Local\PUTTY.RND
[2011.11.22 21:12:38 | 000,000,600 | ---- | C] () -- C:\Users\Pepa\AppData\Roaming\winscp.rnd
[2011.10.30 12:06:01 | 000,000,043 | ---- | C] () -- C:\Windows\rocksoft.ini
[2011.10.25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.07.23 18:15:44 | 000,000,093 | ---- | C] () -- C:\Windows\vypalovac.ini
[2011.07.03 20:08:36 | 000,000,001 | ---- | C] () -- C:\Windows\SysWow64\SI.bin
[2011.05.24 23:11:04 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011.05.24 23:11:04 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.05.24 23:11:04 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011.05.24 23:11:04 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.05.24 23:11:04 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.04.07 13:37:15 | 000,001,400 | ---- | C] () -- C:\Users\Pepa\AppData\Local\SRDownloader.nast
[2011.03.13 19:07:13 | 000,000,832 | ---- | C] () -- C:\Users\Pepa\AppData\Local\SRDownloader(2).err
[2011.03.13 18:49:27 | 000,000,864 | ---- | C] () -- C:\Users\Pepa\AppData\Local\SRDownloader(2).nast
[2011.02.15 15:09:56 | 001,791,676 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.12.19 17:37:54 | 000,007,620 | ---- | C] () -- C:\Users\Pepa\AppData\Local\Resmon.ResmonCfg
[2010.11.13 12:12:40 | 000,000,000 | ---- | C] () -- C:\Users\Pepa\.javafx_eula_accepted
[2010.09.19 02:36:05 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll

========== LOP Check ==========

[2012.06.18 13:18:23 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Acronis
[2011.12.17 01:19:52 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Autodesk
[2012.04.11 11:22:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.12.26 15:45:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Command and Conquer 4
[2012.08.27 02:43:26 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\CoreFTP
[2011.05.19 11:12:49 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\DAEMON Tools Pro
[2012.04.25 20:21:20 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\DVDVideoSoft
[2012.06.20 18:19:02 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\e-academy Inc
[2010.05.16 18:22:56 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Farm Mania 2
[2011.05.02 15:19:30 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Firaxis
[2012.02.18 19:00:38 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Friday's games
[2010.01.02 19:37:55 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\GetRightToGo
[2011.12.17 18:19:37 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\gtk-2.0
[2011.06.12 22:52:44 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\jabbim
[2011.06.20 21:11:14 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\JDeveloper
[2012.08.14 23:41:04 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Might & Magic Heroes VI
[2011.02.23 18:06:26 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Mount&Blade Warband
[2012.03.13 16:18:55 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\MySQL
[2010.09.06 00:17:13 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\NevoSoft Games
[2009.12.30 00:09:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\OpenOffice.org
[2011.12.10 13:35:21 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Quest Software
[2011.10.30 12:09:22 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Rockwell Software
[2012.01.06 12:50:41 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Sierra Entertainment
[2011.12.29 01:56:37 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\SoftGrid Client
[2011.01.01 16:41:02 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Sparx Systems
[2010.12.02 16:58:13 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\SQL Developer
[2011.05.04 16:52:50 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Stardock
[2010.07.07 00:34:43 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Teleca
[2010.03.05 00:07:44 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Thunderbird
[2011.10.29 14:07:12 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\TP
[2010.06.10 18:48:21 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Tropico 3
[2012.05.24 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\TS3Client
[2011.05.16 14:27:12 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\YoudaGames
[2012.08.29 09:38:43 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2012.08.08 14:12:15 | 000,032,526 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========





druhý report to nevytvořilo...
Nahoru
Maniacccc
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 09 Dub 2009 18:33

Re: Conduit.com místo google

#4 Příspěvek od Maniacccc »

========== Custom Scans ==========

< >

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\ERDNT\cache64\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\ERDNT\cache86\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache86\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\ERDNT\cache64\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\ERDNT\cache64\services.exe
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\ERDNT\cache86\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\ERDNT\cache64\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 07:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2011.09.29 19:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.06.21 08:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
[2010.06.14 08:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2012.03.30 12:19:17 | 001,877,872 | ---- | M] (Microsoft Corporation) MD5=5EFD096DEF47F8B88EF591DA92143440 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21178_none_0faa5514992a39a7\tcpip.sys
[2011.04.25 07:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2012.03.30 13:09:53 | 001,895,280 | ---- | M] (Microsoft Corporation) MD5=624C5B3AA4C99B3184BB922D9ECE3FF0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16986_none_0f140fa780164fde\tcpip.sys
[2012.03.30 12:26:36 | 001,901,424 | ---- | M] (Microsoft Corporation) MD5=885B202006EE17AE99B9FBCEC9AF88C9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21954_none_11a27a8e9643d23a\tcpip.sys
[2010.06.14 08:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\ERDNT\cache64\tcpip.sys
[2010.06.14 08:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011.04.25 07:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011.06.21 08:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2011.09.29 18:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
[2012.03.30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\SysNative\drivers\tcpip.sys
[2012.03.30 13:35:47 | 001,918,320 | ---- | M] (Microsoft Corporation) MD5=ACB82BDA8F46C84F465C1AFA517DC4B9 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17802_none_114ceccb7cff740d\tcpip.sys
[2011.04.25 08:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.06.21 08:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
[2011.06.21 08:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
[2011.09.29 18:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
[2011.09.29 18:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\ERDNT\cache86\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\ERDNT\cache64\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\ERDNT\cache64\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[12 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[13 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[9 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[59 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.06.18 13:18:23 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Acronis
[2012.04.11 12:59:47 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Adobe
[2009.12.28 23:43:18 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\AdobeUM
[2009.12.23 22:38:20 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\ATI
[2011.12.17 01:19:52 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Autodesk
[2012.04.11 11:22:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.12.26 15:45:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Command and Conquer 4
[2012.08.27 02:43:26 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\CoreFTP
[2011.05.19 11:12:49 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\DAEMON Tools Pro
[2010.12.19 19:39:30 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\DivX
[2011.03.21 13:59:44 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\dvdcss
[2012.04.25 20:21:20 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\DVDVideoSoft
[2012.06.20 18:19:02 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\e-academy Inc
[2010.05.16 18:22:56 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Farm Mania 2
[2011.05.02 15:19:30 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Firaxis
[2012.02.18 19:00:38 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Friday's games
[2010.01.02 19:37:55 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\GetRightToGo
[2011.12.17 18:19:37 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\gtk-2.0
[2009.12.23 22:06:53 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Identities
[2010.02.09 20:39:34 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\InstallShield
[2011.06.12 22:52:44 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\jabbim
[2011.06.20 21:11:14 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\JDeveloper
[2009.12.23 22:14:40 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Macromedia
[2011.12.03 13:59:38 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\MathWorks
[2009.07.14 17:36:58 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Media Center Programs
[2012.05.13 13:32:31 | 000,000,000 | --SD | M] -- C:\Users\Pepa\AppData\Roaming\Microsoft
[2011.02.15 16:38:45 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Microsoft Corporation
[2011.02.15 20:47:24 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Microsoft FxCop
[2011.01.30 14:54:24 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Microsoft Games
[2012.08.14 23:41:04 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Might & Magic Heroes VI
[2011.02.23 18:06:26 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Mount&Blade Warband
[2009.12.23 22:23:30 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Mozilla
[2012.03.13 16:18:55 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\MySQL
[2011.07.23 18:37:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Nero
[2011.03.21 18:37:30 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Nerocode
[2010.09.06 00:17:13 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\NevoSoft Games
[2009.12.30 00:09:57 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\OpenOffice.org
[2011.12.10 13:35:21 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Quest Software
[2010.12.19 11:54:49 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Real
[2011.10.30 12:09:22 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Rockwell Software
[2010.02.04 17:42:59 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\SecuROM
[2012.01.06 12:50:41 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Sierra Entertainment
[2012.06.28 01:25:56 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Skype
[2011.10.15 01:04:39 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\skypePM
[2011.12.29 01:56:37 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\SoftGrid Client
[2010.07.07 00:32:43 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Sony Ericsson
[2011.01.01 16:41:02 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Sparx Systems
[2010.12.02 16:58:13 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\SQL Developer
[2011.05.04 16:52:50 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Stardock
[2012.04.25 14:41:49 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Symantec
[2010.09.22 19:09:02 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\teamspeak2
[2010.07.07 00:34:43 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Teleca
[2010.03.05 00:07:44 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Thunderbird
[2011.10.29 14:07:12 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\TP
[2010.06.10 18:48:21 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\Tropico 3
[2012.05.24 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\TS3Client
[2010.05.08 20:53:14 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\U3
[2009.12.29 15:47:37 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\WinRAR
[2011.05.16 14:27:12 | 000,000,000 | ---D | M] -- C:\Users\Pepa\AppData\Roaming\YoudaGames

< %APPDATA%\*.exe /s >
[2012.04.11 11:08:06 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Pepa\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
[2011.12.10 13:46:28 | 000,013,312 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{2CAF0576-1BAD-4C3E-A1DB-D6D585495DED}\IconCC89C359.exe
[2011.12.10 13:46:28 | 000,033,280 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{2CAF0576-1BAD-4C3E-A1DB-D6D585495DED}\IconD7519A321.exe
[2011.12.10 13:46:28 | 000,008,192 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{2CAF0576-1BAD-4C3E-A1DB-D6D585495DED}\IconD7519A322.exe
[2011.12.10 13:46:28 | 000,008,192 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{2CAF0576-1BAD-4C3E-A1DB-D6D585495DED}\IconD7519A323.exe
[2012.06.20 18:19:03 | 000,009,662 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{6CEF2BC6-8929-44EE-8360-175513E1A49A}\_112D608FD02CD87FDC7735.exe
[2012.06.20 18:19:03 | 000,009,662 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{6CEF2BC6-8929-44EE-8360-175513E1A49A}\_853F67D554F05449430E7E.exe
[2012.06.20 18:19:03 | 000,009,662 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{6CEF2BC6-8929-44EE-8360-175513E1A49A}\_D741DE45EC951A9C783889.exe
[2012.03.10 10:47:37 | 000,010,134 | R--- | M] () -- C:\Users\Pepa\AppData\Roaming\Microsoft\Installer\{DA2737A4-B639-96F4-1CC2-30D2919EE1FB}\ARPPRODUCTICON.exe
[2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Pepa\AppData\Roaming\U3\0000168307700B34\cleanup.exe
[2007.10.23 09:22:56 | 003,350,528 | ---- | M] (SanDisk Corporation) -- C:\Users\Pepa\AppData\Roaming\U3\0000168307700B34\Launchpad Removal.exe
[2007.10.23 10:14:38 | 004,632,576 | ---- | M] () -- C:\Users\Pepa\AppData\Roaming\U3\0000168307700B34\LaunchPad.exe
[2007.10.23 09:44:48 | 000,054,584 | ---- | M] () -- C:\Users\Pepa\AppData\Roaming\U3\0000168307700B34\U3AccessGrant.exe
[2007.10.23 09:27:20 | 000,110,592 | ---- | M] () -- C:\Users\Pepa\AppData\Roaming\U3\temp\cleanup.exe
[2007.10.23 09:22:56 | 003,350,528 | -H-- | M] (SanDisk Corporation) -- C:\Users\Pepa\AppData\Roaming\U3\temp\Launchpad Removal.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2012.08.29 19:43:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.08.29 09:38:43 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2012.08.29 09:35:12 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012.08.29 20:01:05 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.20 15:25:17 | 001,475,584 | ---- | M] (Microsoft Corporation)
"DAEMON Tools Pro Agent" = "C:\Data\DAEMON Tools Pro\DTAgent.exe" -autorun -- [2011.03.17 10:15:04 | 000,842,048 | ---- | M] (DT Soft Ltd)

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2012.06.29 03:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation) MD5=93569D46D79F9756ED077156496AFE23 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2012.08.18 00:28:57 | 001,229,848 | ---- | M] (Google Inc.) MD5=2339760B238226DAD9ED03F939D92323 -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.08.29 19:47:27 | 000,000,512 | ---- | M] () MD5=3B082767DAAF5B4D0D7ABD10060CEB5B -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2010.07.08 10:42:32 | 000,062,238 | ---- | M] () -- \Data\GIMP-2.0\share\gimp\2.0\patterns\cracked.pat
[2003.12.05 15:52:40 | 000,000,796 | ---- | M] () -- \Games\GTA-SanAndreas\data\Decision\Craig\crack1.ped
[2006.09.21 15:21:18 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_1
[2006.09.21 15:21:16 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_2
[2006.09.21 15:21:18 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_3
[2006.09.21 15:21:16 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack3x2_4
[2006.09.26 13:04:34 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_1
[2006.09.21 15:21:14 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_2
[2006.09.27 19:47:30 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_3
[2006.09.26 13:04:36 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack5x3_4
[2006.09.21 15:21:16 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x2_1
[2006.09.27 16:23:02 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x4_1
[2006.09.21 15:21:12 | 000,017,493 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Lava\Lavacracks\Lavacrack7x5_1
[2006.09.21 13:29:28 | 000,017,494 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce01
[2006.09.21 13:29:32 | 000,017,494 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce02
[2006.09.21 13:29:40 | 000,017,494 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce03
[2006.09.21 13:29:28 | 000,017,494 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce04
[2006.09.21 13:29:28 | 000,017,494 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedSpruce05
[2006.09.21 13:29:38 | 000,017,490 | ---- | M] () -- \Games\Heroes of Might and Magic V\Editor\IconCache\AdvMapObjectLink\MapObjects\_(AdvMapObjectLink)\Objects-Snow\Trees\CrackedTree
[2009.01.19 14:27:44 | 000,083,645 | ---- | M] () -- \Games\Mount&Blade Warband\Sounds\Fire_Small_Crackle_Slick_op.ogg
[2005.10.15 03:04:04 | 000,001,956 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Assets\Sounds\Units\CrackNeck-000.wav
[2005.10.15 03:04:04 | 000,003,588 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Assets\Sounds\Units\CrackNeck-001.wav
[2005.10.15 03:04:04 | 000,004,776 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Assets\Sounds\Units\CrackNeck-002.wav
[2005.10.15 03:04:04 | 000,005,072 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Assets\Sounds\Units\CrackNeck-003.wav
[2005.10.15 03:04:04 | 000,002,692 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Assets\Sounds\Units\CrackNeck-004.wav
[2008.06.04 18:03:06 | 013,994,408 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Beyond the Sword\Civ4BeyondSwordNoCrack.exe
[2007.06.02 05:59:14 | 000,022,000 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Shadow_Wall_2_cracked.dds
[2007.06.02 05:59:14 | 000,111,092 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Wall_2_cracked.nif
[2007.06.02 05:59:14 | 000,174,904 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Wall_2_cracked_DIFF.dds
[2006.11.21 14:13:30 | 000,018,152 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-000.wav
[2006.11.21 14:13:30 | 000,019,748 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-001.wav
[2006.11.21 14:13:30 | 000,020,140 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-002.wav
[2006.11.21 14:13:30 | 000,020,184 | ---- | M] () -- \Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-003.wav
[2005.03.15 15:15:38 | 000,174,928 | ---- | M] () -- \Games\Stronghold 2\meshes\Buildings\castle_wall_crack.DDS
[2005.03.18 21:32:18 | 000,524,416 | ---- | M] () -- \Games\Stronghold 2\meshes\Buildings\castle_wall_crack.heightmap.DDS
[2005.06.13 13:47:10 | 000,699,180 | ---- | M] () -- \Games\Stronghold 2\meshes\Buildings\castle_wall_crack.normalmap.DDS
[2005.03.07 16:28:46 | 000,043,832 | ---- | M] () -- \Games\Stronghold 2\terrain\cracked_peat.dds
[2 \Games\Zoo tycoon\ZT2\*.tmp files -> \Games\Zoo tycoon\ZT2\*.tmp -> ]
[2007.06.02 05:59:14 | 000,022,000 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Shadow_Wall_2_cracked.dds
[2007.06.02 05:59:14 | 000,111,092 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Wall_2_cracked.nif
[2007.06.02 05:59:14 | 000,174,904 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Beyond the Sword\Mods\Afterworld\Assets\Art\Terrain\Features\AfterworldWalls\Wall_2_cracked_DIFF.dds
[2006.11.21 14:13:30 | 000,018,152 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-000.wav
[2006.11.21 14:13:30 | 000,019,748 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-001.wav
[2006.11.21 14:13:30 | 000,020,140 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-002.wav
[2006.11.21 14:13:30 | 000,020,184 | ---- | M] () -- \Program Files (x86)\Firaxis Games\Sid Meier's Civilization 4\Warlords\Assets\Sounds\Units\FirecrackerExplode-003.wav
[2011.03.03 18:42:04 | 001,159,409 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS5.5\Support Files\Presets\Image - Special Effects\Cracked Tiles.ffx
[2010.03.19 04:08:20 | 000,006,551 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushes\fun\cracks.mel
[2010.03.19 04:08:20 | 000,006,093 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushes\fun\cracks.mel.icon
[2010.03.19 04:08:40 | 000,007,002 | ---- | M] () -- \Program Files\Autodesk\Maya2011\brushImages\hexcrack.jpg
[2010.03.19 04:07:36 | 001,304,706 | ---- | M] () -- \Program Files\Autodesk\Maya2011\presets\nParticles\examples\CrackEgg.ma
[2010.03.19 04:07:36 | 000,001,303 | ---- | M] () -- \Program Files\Autodesk\Maya2011\presets\nParticles\examples\.mayaSwatches\CrackEgg.ma.swatch
[2010.03.19 04:27:00 | 000,002,651 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\scripts\crackShatter.res.mel
[2010.03.19 04:21:06 | 000,069,068 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\crackShatter.mel
[2010.03.19 04:21:06 | 000,002,558 | ---- | M] () -- \Program Files\Autodesk\Maya2011\scripts\others\crackShatter.res.mel
[2012.02.25 11:28:02 | 006,146,716 | ---- | M] () -- \Users\Pepa\Downloads\Wargame.European.Escalation.Crack.Only-3DM.rar
[2012.07.01 20:12:54 | 477,351,936 | ---- | M] () -- \Users\Pepa\Stažené soubory\ophcrack-livecd-1.2.2.iso
[2011.05.24 18:48:31 | 011,263,276 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\lord-of-the-rings-battle-for-middle-earth-nodvd-crack.rar
[2011.12.03 00:07:32 | 003,660,377 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\Mount-and-blade-Warband-multiplayer-crack-1.134Keler500.rar.rar
[2010.03.03 20:21:22 | 000,960,462 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\Starcraft 2\SC2 AI V 3.0 (STARCRACK).rar
[2010.02.22 18:34:21 | 001,894,427 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\Stronghold 2 patch+crack\Crack_Stronghold_2_Deluxe_Uploaded_By_de.lion.rar
[2010.02.22 18:30:44 | 000,020,360 | ---- | M] () -- \utor\Stronghold 2 patch+crack.torrent
[2012.02.25 11:27:46 | 000,007,637 | ---- | M] () -- \utor\Wargame.European.Escalation.Crack.Only-3DM.rar.torrent
[2012.02.28 18:20:09 | 000,013,461 | ---- | M] () -- \utor\Wargame.European.Escalation.Crack.Only.SKIDROW.torrent
Nahoru
Maniacccc
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 09 Dub 2009 18:33

Re: Conduit.com místo google

#5 Příspěvek od Maniacccc »

< *keygen* /s >
[2010.10.02 11:07:38 | 000,109,056 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\bin\ssh-keygen.exe
[2009.04.09 01:31:58 | 000,015,784 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\security\spec\RSAKeyGenParameterSpec.html
[2009.04.09 01:29:44 | 000,006,397 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\security\spec\class-use\RSAKeyGenParameterSpec.html
[2009.04.09 01:32:10 | 000,026,617 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\jce10\javax\crypto\KeyGenerator.html
[2009.04.09 01:28:22 | 000,013,948 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\jce10\javax\crypto\KeyGeneratorSpi.html
[2009.04.09 01:31:04 | 000,008,837 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\jce10\javax\crypto\class-use\KeyGenerator.html
[2009.04.09 01:27:42 | 000,007,553 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\jce10\javax\crypto\class-use\KeyGeneratorSpi.html
[2009.04.09 01:31:10 | 000,015,083 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\security\spec\RSAKeyGenParameterSpec.html
[2009.04.09 01:28:18 | 000,005,914 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\security\spec\class-use\RSAKeyGenParameterSpec.html
[2012.05.16 16:48:12 | 000,242,688 | ---- | M] () -- \Games\Wargame- European Escalation\keygen.exe
[2012.05.30 11:48:36 | 005,518,848 | ---- | M] () -- \Users\Pepa\Stažené soubory\Adobe-After-Effects-CS5-Keygen.exe

< *loader* /s >
[2010.09.17 19:33:36 | 000,011,436 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\AutoLoader.pm
[2010.09.17 19:33:36 | 000,012,953 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\SelfLoader.pm
[2009.02.28 11:58:38 | 000,001,277 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\Locale\Maketext\GutsLoader.pm
[2010.09.17 19:33:36 | 000,000,727 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\msys\ByteLoader.pm
[2010.09.17 19:33:36 | 000,028,961 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\msys\DynaLoader.pm
[2010.09.17 19:33:36 | 000,010,818 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\msys\XSLoader.pm
[2010.09.17 19:33:36 | 000,000,000 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\msys\auto\ByteLoader\ByteLoader.bs
[2010.09.17 19:33:36 | 000,021,504 | ---- | M] () -- \$RECYCLE.BIN\S-1-5-21-4254656596-101261429-3511760784-1000\$R7L1VRI\lib\perl5\5.8.8\msys\auto\ByteLoader\ByteLoader.dll
[2010.02.07 22:40:00 | 000,000,543 | ---- | M] () -- \Data\GIMP-2.0\etc\gtk-2.0\gdk-pixbuf.loaders
[2009.12.15 18:58:18 | 000,017,056 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2009.12.15 18:58:20 | 000,018,592 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2009.12.15 18:58:24 | 000,026,272 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2009.12.15 18:58:26 | 000,012,960 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-icns.dll
[2009.12.15 18:58:28 | 000,017,568 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2009.12.15 18:58:56 | 000,019,616 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2009.12.15 18:59:04 | 000,015,008 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2009.12.15 18:59:06 | 000,019,104 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2009.12.15 18:59:10 | 000,017,056 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2009.12.15 18:59:14 | 000,012,448 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2009.12.15 18:59:16 | 000,016,544 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2009.12.15 18:59:20 | 000,016,544 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2009.12.15 18:59:22 | 000,011,936 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2009.12.15 18:59:24 | 000,013,984 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2009.12.15 18:59:28 | 000,028,320 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2009.05.01 20:42:00 | 000,009,880 | ---- | M] () -- \Data\GIMP-2.0\lib\gtk-2.0\2.10.0\loaders\svg_loader.dll
[2010.03.08 19:39:42 | 000,005,632 | ---- | M] () -- \Data\Jabbim\_win32sysloader.pyd
[2010.03.19 00:21:56 | 000,063,312 | ---- | M] () -- \Data\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.dll
[2010.03.18 02:57:18 | 000,001,373 | ---- | M] () -- \Data\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.dll.manifest
[2010.03.18 01:17:14 | 000,004,096 | ---- | M] () -- \Data\Microsoft Visual Studio 10.0\Common7\IDE\coloader80.tlb
[2009.08.31 05:51:22 | 000,001,648 | ---- | M] () -- \Data\Microsoft Visual Studio 10.0\VC\atlmfc\include\afxribboninfoloader.h
[2009.08.31 05:51:22 | 000,004,525 | ---- | M] () -- \Data\Microsoft Visual Studio 10.0\VC\atlmfc\src\mfc\afxribboninfoloader.cpp
[2011.03.31 14:01:08 | 000,001,635 | ---- | M] () -- \Data\NAVIGON Fresh\etc\Fresh\UploaderSettings.xml
[2010.08.03 04:08:53 | 000,000,483 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\config\Modules\org-netbeans-modules-j2ee-ddloaders.xml
[2010.11.13 12:12:50 | 002,549,382 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\modules\org-netbeans-modules-j2ee-ddloaders.jar
[2010.11.13 12:12:44 | 000,029,853 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\modules\locale\org-netbeans-modules-j2ee-ddloaders_ca.jar
[2010.11.13 12:12:43 | 000,030,750 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\modules\locale\org-netbeans-modules-j2ee-ddloaders_gl_ES.jar
[2010.11.13 12:12:45 | 000,036,281 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\modules\locale\org-netbeans-modules-j2ee-ddloaders_ru.jar
[2010.11.13 12:12:43 | 000,026,360 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\modules\locale\org-netbeans-modules-j2ee-ddloaders_zh_TW.jar
[2010.11.13 12:13:04 | 000,000,431 | ---- | M] () -- \Data\NetBeans 6.9.1\enterprise\update_tracking\org-netbeans-modules-j2ee-ddloaders.xml
[2010.08.03 01:28:51 | 000,000,484 | ---- | M] () -- \Data\NetBeans 6.9.1\ergonomics\config\Modules\org-netbeans-modules-j2ee-ddloaders.xml
[2010.08.03 04:08:53 | 000,000,526 | ---- | M] () -- \Data\NetBeans 6.9.1\ergonomics\config\Modules\org-netbeans-modules-visualweb-extension-openide-loaders.xml
[2010.08.03 04:09:07 | 000,019,348 | ---- | M] () -- \Data\NetBeans 6.9.1\javacard\JCDK3.0.2_ConnectedEdition\docs\api\spi\com\sun\javacard\spi\cardmgmt\DeploymentUnitLoader.html
[2010.07.15 10:53:16 | 000,079,972 | ---- | M] () -- \Data\NetBeans 6.9.1\javafx\javafx-sdk\docs\api\javafx.fxd\javafx.fxd.FXDLoader.html
[2010.11.13 12:12:02 | 000,003,090 | ---- | M] () -- \Data\NetBeans 6.9.1\javafx\javafx-sdk\emulator\mobile\toolkit-lib\process\memory-profiler\code\memprof-loader.jar
[2010.11.13 12:12:29 | 000,542,740 | ---- | M] () -- \Data\NetBeans 6.9.1\javafx\javafx-sdk\lib\desktop\fxdloader.jar
[2009.04.09 01:30:54 | 000,004,261 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\apps\SVGDemo\src\com\sun\perseus\demo\ImageLoader.java
[2009.04.09 01:27:28 | 000,075,179 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\lang\ClassLoader.html
[2009.04.09 01:29:26 | 000,025,070 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\lang\class-use\ClassLoader.html
[2009.04.09 01:31:18 | 000,035,485 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\net\URLClassLoader.html
[2009.04.09 01:29:48 | 000,008,749 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\net\class-use\URLClassLoader.html
[2009.04.09 01:27:10 | 000,021,745 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\security\SecureClassLoader.html
[2009.04.09 01:29:42 | 000,007,912 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\cdc-1.1\java\security\class-use\SecureClassLoader.html
[2009.04.09 01:31:22 | 000,075,257 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\lang\ClassLoader.html
[2009.04.09 01:27:52 | 000,025,144 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\lang\class-use\ClassLoader.html
[2009.04.09 01:27:30 | 000,035,559 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\net\URLClassLoader.html
[2009.04.09 01:29:28 | 000,008,823 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\net\class-use\URLClassLoader.html
[2009.04.09 01:30:48 | 000,021,827 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\security\SecureClassLoader.html
[2009.04.09 01:27:10 | 000,007,986 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\fp-1.1\java\security\class-use\SecureClassLoader.html
[2009.04.09 01:31:58 | 000,073,570 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\lang\ClassLoader.html
[2009.04.09 01:30:02 | 000,027,469 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\lang\class-use\ClassLoader.html
[2009.04.09 01:27:34 | 000,034,597 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\net\URLClassLoader.html
[2009.04.09 01:28:20 | 000,008,293 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\net\class-use\URLClassLoader.html
[2009.04.09 01:28:00 | 000,021,104 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\security\SecureClassLoader.html
[2009.04.09 01:31:02 | 000,007,466 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\docs\api\pbp11\java\security\class-use\SecureClassLoader.html
[2010.11.13 12:13:24 | 000,002,977 | ---- | M] () -- \Data\NetBeans 6.9.1\mobility\Java_ME_platform_SDK_3.0\toolkit-lib\process\memory-profiler\code\memprof-loader.jar
[2010.08.03 04:09:12 | 000,002,941 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2010.08.03 04:09:11 | 000,000,411 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\config\Modules\org-openide-loaders.xml
[2010.11.13 12:09:23 | 001,330,310 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\org-openide-loaders.jar
[2010.11.13 12:09:15 | 000,005,570 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_ar_SA.jar
[2010.11.13 12:09:18 | 000,006,458 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_ca.jar
[2010.11.13 12:09:19 | 000,006,576 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_cs.jar
[2010.11.13 12:09:18 | 000,006,444 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_de.jar
[2010.11.13 12:09:18 | 000,006,470 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_es.jar
[2010.11.13 12:09:18 | 000,006,502 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_fr.jar
[2010.11.13 12:09:14 | 000,006,356 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_gl_ES.jar
[2010.11.13 12:09:15 | 000,006,277 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_in_ID.jar
[2010.11.13 12:09:18 | 000,006,399 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_it.jar
[2010.11.13 12:09:19 | 000,006,824 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_ko.jar
[2010.11.13 12:09:16 | 000,006,368 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_nl_NL.jar
[2010.11.13 12:09:18 | 000,006,563 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_pl.jar
[2010.11.13 12:09:15 | 000,005,579 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_pt_PT.jar
[2010.11.13 12:09:19 | 000,006,407 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_ro.jar
[2010.11.13 12:09:19 | 000,007,577 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_ru.jar
[2010.11.13 12:09:18 | 000,005,553 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_sq.jar
[2010.11.13 12:09:19 | 000,006,254 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_sv.jar
[2010.11.13 12:09:18 | 000,006,524 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_tr.jar
[2010.11.13 12:09:15 | 000,005,827 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\modules\locale\org-openide-loaders_zh_TW.jar
[2010.11.13 12:10:50 | 000,000,464 | ---- | M] () -- \Data\NetBeans 6.9.1\platform\update_tracking\org-openide-loaders.xml
[2010.08.03 04:09:15 | 000,002,734 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\nb_autospec_loader.rb
[2010.08.03 04:09:15 | 000,002,944 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\nb_autotest_loader.rb
[2010.08.03 04:09:29 | 000,002,307 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.8\irb\ext\loader.rb
[2010.08.03 04:09:29 | 000,001,363 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.8\irb\ext\use-loader.rb
[2010.08.03 04:09:28 | 000,003,224 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.8\soap\httpconfigloader.rb
[2010.08.03 04:09:16 | 000,002,238 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.9\irb\ext\loader.rb
[2010.08.03 04:09:16 | 000,001,296 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.9\irb\ext\use-loader.rb
[2010.08.03 04:09:16 | 000,000,110 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.9\rake\rake_test_loader.rb
[2010.08.03 04:09:16 | 000,000,296 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\1.9\yaml\loader.rb
[2010.08.03 04:09:25 | 000,000,046 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\actionmailer-2.3.8\lib\action_mailer\vendor\tmail-1.2.7\tmail\loader.rb
[2010.08.03 04:09:21 | 000,001,542 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\actionpack-2.3.8\lib\action_controller\reloader.rb
[2010.08.03 04:09:19 | 000,003,161 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\actionpack-2.3.8\test\controller\reloader_test.rb
[2010.08.03 04:09:24 | 000,003,028 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\rack-1.1.0\lib\rack\reloader.rb
[2010.08.03 04:09:19 | 000,006,935 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\rails-2.3.8\lib\rails\plugin\loader.rb
[2010.08.03 04:09:28 | 000,000,110 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\rake-0.8.7\lib\rake\rake_test_loader.rb
[2010.08.03 04:09:27 | 000,000,892 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\jruby-1.5.1\lib\ruby\gems\1.8\gems\rake-0.8.7\test\test_makefile_loader.rb
[2010.08.03 04:09:15 | 000,000,480 | ---- | M] () -- \Data\NetBeans 6.9.1\ruby\rubystubs\1.8.7-p72\stub_loaderror.rb
[2009.09.16 23:33:50 | 000,006,308 | ---- | M] () -- \Data\Office\OpenOffice.org 3\Basis\program\pythonloader.py
[2010.05.06 01:23:51 | 000,005,413 | ---- | M] () -- \Data\Office\OpenOffice.org 3\Basis\program\pythonloader.pyc
[2009.09.16 16:22:08 | 000,022,528 | ---- | M] () -- \Data\Office\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2009.09.17 21:12:18 | 000,000,171 | ---- | M] () -- \Data\Office\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2009.09.11 17:36:38 | 000,029,696 | ---- | M] () -- \Data\Office\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2009.09.16 16:00:48 | 000,003,872 | ---- | M] () -- \Data\Office\OpenOffice.org 3\URE\java\unoloader.jar
[2007.08.20 15:32:46 | 000,450,560 | R--- | M] () -- \Data\Sony Ericsson\Mobile2\Sync Manager\NotesPimAdaptorLoader.dll
[2009.06.02 02:16:58 | 000,114,688 | ---- | M] () -- \Data\WinRAR\RarExtLoader.exe
[2010.06.01 18:08:38 | 000,001,764 | ---- | M] () -- \Games\Farm Craft 2 - Global Vegetable Crisis\data\scripts\interfaces\loader.txt
[2011.09.02 17:51:51 | 000,228,352 | ---- | M] () -- \Games\Might & Magic Heroes VI\ubiorbitapi_r2_loader.dll
[2011.08.24 17:15:10 | 000,002,134 | ---- | M] () -- \Games\Might & Magic Heroes VI\Data\html\dynapi\examples\dynapi.functions.imageloader.html
[2012.08.29 12:46:03 | 000,031,224 | ---- | M] () -- \Games\StarCraft II\Logs\Downloader.log
[2010.08.07 02:23:17 | 002,643,520 | ---- | M] () -- \Games\StarCraft II\Support\BlizzardDownloader.exe
[2011.06.20 19:33:42 | 000,000,000 | ---- | M] () -- \Oracle\Middleware\jdeveloper\netbeans\bridge\config\Modules\org-openide-loaders.xml_hidden
[2010.09.09 11:38:58 | 000,002,941 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2010.09.09 11:38:58 | 000,000,411 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2010.09.09 11:38:58 | 001,138,236 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\modules\org-openide-loaders.jar
[2010.07.29 05:32:18 | 000,007,002 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2010.07.29 05:32:20 | 000,006,658 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2010.09.09 11:39:00 | 000,000,456 | ---- | M] () -- \Oracle\Middleware\jdk160_24\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2011.06.20 19:33:30 | 000,060,908 | ---- | M] () -- \Oracle\Middleware\modules\com.bea.core.utils.classloaders_1.9.0.0.jar
[2011.06.20 19:34:58 | 000,000,816 | ---- | M] () -- \Oracle\Middleware\oracle_common\common\wsadmin\OracleMWConfigLoader.py
[2011.06.20 19:34:53 | 000,468,126 | ---- | M] () -- \Oracle\Middleware\oracle_common\modules\oracle.classloader_11.1.1.jar
[2011.03.02 21:35:42 | 005,299,048 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\Photodownloader.exe
[2011.03.02 18:57:10 | 000,011,161 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\de_de\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\en_us\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\es_es\Photodownloader.ini
[2011.03.02 18:57:10 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\it_it\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\no_no\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2011.03.02 18:57:12 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2011.03.02 18:57:14 | 000,000,308 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2011.03.02 18:57:14 | 000,000,011 | ---- | M] () -- \Program Files (x86)\Adobe\Adobe Bridge CS5.1\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2011.09.09 18:09:21 | 000,656,336 | ---- | M] () -- \Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpndownloader.exe
[2011.09.09 18:09:21 | 000,656,336 | ---- | M] () -- \Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpndownloader.exe
[2012.08.29 12:45:58 | 000,000,194 | ---- | M] () -- \Program Files (x86)\Common Files\Blizzard Entertainment\BlizzardDownloader.ini
[2010.03.19 00:21:56 | 000,063,312 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.dll
[2010.03.18 01:17:14 | 000,004,096 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7Debug\coloader80.tlb
[2011.06.09 03:28:44 | 000,265,552 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2011.06.09 03:28:44 | 000,018,264 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2011.06.21 13:03:19 | 000,007,664 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\demo\jvmti\hprof\src\hprof_loader.c
[2011.06.21 13:03:19 | 000,002,141 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\demo\jvmti\hprof\src\hprof_loader.h
[2011.06.21 13:03:08 | 000,002,941 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2011.06.21 13:03:08 | 000,000,411 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\config\Modules\org-openide-loaders.xml
[2011.06.21 13:03:08 | 001,138,236 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\modules\org-openide-loaders.jar
[2011.06.21 13:03:08 | 000,007,002 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar
[2011.06.21 13:03:08 | 000,006,658 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2011.06.21 13:03:08 | 000,000,456 | ---- | M] () -- \Program Files (x86)\Java\jdk1.6.0_26\lib\visualvm\platform\update_tracking\org-openide-loaders.xml
[2009.07.22 10:17:52 | 000,019,992 | ---- | M] () -- \Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\SqlResourceLoader.dll
[2011.06.30 16:14:36 | 000,001,702 | ---- | M] () -- \Program Files (x86)\Sony Ericsson\Update Engine\licenses\loaderbinarylegal.txt
[2012.07.24 11:07:50 | 000,329,056 | ---- | M] () -- \Program Files (x86)\Ubisoft\Ubisoft Game Launcher\ubiorbitapi_r2_loader.dll
[2011.05.07 05:11:56 | 000,105,984 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS5.5\Support Files\MXF_SDK_MetaMetadata_BinaryLoader_4.3.4.dll
[2011.05.07 05:11:56 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS5.5\Support Files\MXF_SDK_MetaMetadata_XSDLoader2_4.3.4.dll
[2011.05.07 05:11:56 | 000,144,896 | ---- | M] () -- \Program Files\Adobe\Adobe After Effects CS5.5\Support Files\MXF_SDK_MetaMetadata_XSDLoader_4.3.4.dll
[2011.03.15 11:23:50 | 000,105,984 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_BinaryLoader_4.3.4.dll
[2011.03.15 11:23:50 | 000,196,608 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_XSDLoader2_4.3.4.dll
[2011.03.15 11:23:50 | 000,144,896 | ---- | M] () -- \Program Files\Adobe\Adobe Media Encoder CS5.5\MXF_SDK_MetaMetadata_XSDLoader_4.3.4.dll
[2010.03.19 06:57:52 | 000,666,624 | ---- | M] () -- \Program Files\Autodesk\Maya2011\bin\plug-ins\OpenEXRLoader.mll
[2006.05.11 15:51:48 | 000,002,605 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\ExternalWebBrowser\Windows\src\PlugIn\gecko-sdk\idl\mozIJSSubScriptLoader.idl
[2006.05.11 15:52:44 | 000,002,832 | ---- | M] () -- \Program Files\Autodesk\Maya2011\devkit\ExternalWebBrowser\Windows\src\PlugIn\gecko-sdk\include\mozIJSSubScriptLoader.h
[2010.03.19 04:28:52 | 000,001,623 | ---- | M] () -- \Program Files\Autodesk\Maya2011\resources\l10n\ja_JP\plug-ins\OpenEXRLoader.pres.mel
[2011.06.09 03:28:44 | 000,387,408 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2011.06.09 03:28:44 | 000,018,264 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2010.10.30 19:52:40 | 000,007,664 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\demo\jvmti\hprof\src\hprof_loader.c
[2010.10.30 19:52:40 | 000,002,141 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\demo\jvmti\hprof\src\hprof_loader.h
[2010.10.30 19:52:25 | 000,000,456 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\lib\visualvm\platform11\config\Modules\org-openide-loaders.xml
[2010.10.30 19:52:26 | 001,058,536 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\lib\visualvm\platform11\modules\org-openide-loaders.jar
[2010.10.30 19:52:26 | 000,006,088 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\lib\visualvm\platform11\modules\locale\org-openide-loaders_ja.jar
[2010.10.30 19:52:26 | 000,005,789 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\lib\visualvm\platform11\modules\locale\org-openide-loaders_zh_CN.jar
[2010.10.30 19:52:26 | 000,000,373 | ---- | M] () -- \Program Files\Java\jdk1.6.0_22\lib\visualvm\platform11\update_tracking\org-openide-loaders.xml
[2009.07.22 10:17:50 | 000,027,672 | ---- | M] () -- \Program Files\Microsoft SQL Server\100\Tools\Binn\SqlResourceLoader.dll
[2009.07.22 10:17:50 | 000,027,672 | ---- | M] () -- \Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SqlResourceLoader.dll
[2010.04.08 23:06:05 | 001,077,904 | ---- | M] () -- \Program Files\World of Warcraft – kopie\BackgroundDownloader.exe
[2010.04.09 10:07:23 | 002,199,272 | ---- | M] () -- \Program Files\World of Warcraft – kopie\WoW-3.2.0-enGB-downloader.exe
[2010.04.08 23:06:05 | 001,077,904 | ---- | M] () -- \Program Files\World of Warcraft\BackgroundDownloader.exe
[2010.04.09 10:07:23 | 002,199,272 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.2.0-enGB-downloader.exe
[2010.03.11 23:09:41 | 002,167,496 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.2.0-enUS-downloader.exe
[2010.04.09 10:31:02 | 002,391,456 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.3.0.10958-enGB-downloader.exe
[2010.03.11 23:46:58 | 002,379,336 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.3.0.10958-enUS-downloader.exe
[2010.04.09 11:01:55 | 002,336,112 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.0.10958-to-3.3.0.11159-enGB-downloader.exe
[2010.03.12 00:07:44 | 002,336,072 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.0.10958-to-3.3.0.11159-enUS-downloader.exe
[2010.04.09 11:02:22 | 002,350,144 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.0.11159-to-3.3.2.11403-enGB-downloader.exe
[2010.03.12 00:08:18 | 002,348,440 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.0.11159-to-3.3.2.11403-enUS-downloader.exe
[2010.04.09 11:13:31 | 002,654,392 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.2.11403-to-3.3.3.11685-enGB-downloader.exe
[2010.03.23 13:37:22 | 002,651,696 | ---- | M] () -- \Program Files\World of Warcraft\WoW-3.3.2.11403-to-3.3.3.11685-enUS-downloader.exe
[2006.04.10 19:22:00 | 000,037,888 | ---- | M] () -- \Program Files\World of Warcraft\BWH\Loader.exe
[2005.09.16 15:52:56 | 000,037,376 | ---- | M] () -- \Program Files\World of Warcraft\BWHold\bwh_loader.exe
[2005.06.05 05:18:53 | 000,003,058 | ---- | M] () -- \Program Files\World of Warcraft\BWHold\source\bwh_loader\bwh_loader.rc
[2005.05.04 20:11:05 | 000,000,909 | ---- | M] () -- \Program Files\World of Warcraft\BWHold\source\bwh_loader\bwh_loader.sln
[2005.06.12 20:28:17 | 000,005,398 | ---- | M] () -- \Program Files\World of Warcraft\BWHold\source\bwh_loader\bwh_loader.vcproj
[2005.06.13 22:27:08 | 000,023,860 | ---- | M] () -- \Program Files\World of Warcraft\BWHold\source\bwh_loader\silentloader.asm
[2010.04.08 22:56:23 | 000,003,026 | ---- | M] () -- \Program Files\World of Warcraft\Data\enGB\Documentation\Troubleshooting\(Mac)BlizzardDownloaderProblems.html
[2010.04.08 22:56:23 | 000,004,261 | ---- | M] () -- \Program Files\World of Warcraft\Data\enGB\Documentation\Troubleshooting\(PC)BlizzardDownloaderProblems.html
[2010.06.19 00:55:46 | 000,016,273 | ---- | M] () -- \Program Files\World of Warcraft\Logs\Downloader.log
[2009.12.03 01:22:06 | 000,468,118 | ---- | M] () -- \Škola\sqldeveloper\modules\oracle.classloader_11.1.1.jar
[2012.01.26 15:32:12 | 000,000,195 | ---- | M] () -- \Team\Steam\steamapps\common\america's army 3\Binaries\aa3loader.ini
[2012.01.06 02:23:55 | 000,004,463 | ---- | M] () -- \Team\Steam\steamapps\common\america's army 3\Binaries\LoaderData\AA3Loader.htm
[2010.01.10 01:10:45 | 000,068,688 | ---- | M] () -- \Team\Steam\steamapps\common\america's army 3\Binaries\PhysXLocal\PhysXLoader.dll
[2012.07.07 00:13:27 | 003,244,032 | ---- | M] () -- \Team\Steam\steamapps\common\Binaries\AA3Loader.exe
[2012.07.07 00:06:33 | 000,000,195 | ---- | M] () -- \Team\Steam\steamapps\common\Binaries\aa3loader.ini
[2012.07.07 00:13:15 | 000,004,463 | ---- | M] () -- \Team\Steam\steamapps\common\Binaries\LoaderData\AA3Loader.htm
[2012.07.07 00:06:39 | 000,004,564 | ---- | M] () -- \Team\Steam\steamapps\common\Binaries\LoaderData\AA3LoaderStyle2.htm
[2012.07.07 00:06:32 | 000,068,688 | ---- | M] () -- \Team\Steam\steamapps\common\Binaries\PhysXLocal\PhysXLoader.dll
[2006.01.02 11:10:42 | 000,049,152 | ---- | M] () -- \Temp\Futuremark\3DMark06\PhysXLoader.dll
[2010.04.27 18:30:38 | 000,004,050 | ---- | M] () -- \Temp\joomla\libraries\loader.php
[2010.04.27 18:30:38 | 000,000,584 | ---- | M] () -- \Temp\joomla\media\system\images\mootree_loader.gif
[2010.04.27 18:30:38 | 000,008,747 | ---- | M] () -- \Temp\joomla\media\system\js\uploader.js
[2010.04.27 18:30:38 | 000,001,615 | ---- | M] () -- \Temp\joomla\media\system\swf\uploader.swf
[2010.07.01 17:30:56 | 000,001,702 | ---- | M] () -- \Temp\Sony Ericsson\Update Service\licenses\loaderbinarylegal.txt
[2011.06.21 12:49:48 | 000,000,483 | ---- | M] () -- \Users\Pepa\.netbeans\6.9\config\Modules\org-netbeans-modules-j2ee-ddloaders.xml
[2011.03.13 20:42:10 | 000,000,832 | ---- | M] () -- \Users\Pepa\AppData\Local\SRDownloader(2).err
[2011.03.14 03:44:34 | 000,000,864 | ---- | M] () -- \Users\Pepa\AppData\Local\SRDownloader(2).nast
[2012.04.02 10:02:10 | 000,000,564 | ---- | M] () -- \Users\Pepa\AppData\Local\SRDownloader.err
[2012.04.02 10:26:31 | 000,001,400 | ---- | M] () -- \Users\Pepa\AppData\Local\SRDownloader.nast
[2012.07.20 16:26:42 | 000,000,673 | ---- | M] () -- \Users\Pepa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\Media\ajax-loader.gif
[2012.07.23 12:24:15 | 000,000,673 | ---- | M] () -- \Users\Pepa\AppData\Local\Chromium\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\Media\ajax-loader.gif
[2012.08.29 12:45:59 | 000,030,818 | ---- | M] () -- \Users\Pepa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KH3RVQZF\sc2downloader[1].jpg
[2011.10.14 13:40:41 | 000,652,240 | ---- | M] () -- \Users\Pepa\AppData\Local\Temp\8BCC.tmp\vpndownloader.exe
[2011.11.07 19:41:38 | 000,656,336 | ---- | M] () -- \Users\Pepa\AppData\Local\Temp\9181.tmp\vpndownloader.exe
[2011.09.09 18:09:21 | 000,656,336 | ---- | M] () -- \Users\Pepa\AppData\Local\Temp\install\15EF88B\vpndownloader.exe
[2011.06.20 21:38:06 | 000,000,762 | ---- | M] () -- \Users\Pepa\AppData\Local\Temp\wlstTempPepa\packages\com.bea.core.utils.classloaders_1.9.0.0.pkc
[2012.06.07 21:16:04 | 000,010,145 | ---- | M] () -- \Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\conduitCommon\modules\3.13.0.6\ExternalLibraryLoader.jsm
[2012.08.27 17:56:10 | 000,010,145 | ---- | M] () -- \Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\modules\ExternalLibraryLoader.jsm
[2011.12.12 18:25:51 | 000,792,704 | ---- | M] () -- \Users\Pepa\Downloads\amddriverdownloader.exe
[2012.03.12 17:27:57 | 000,904,192 | ---- | M] () -- \Users\Pepa\Stažené soubory\SRDownloader.exe
[2011.12.12 19:06:14 | 000,792,704 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\amddriverdownloader.exe
[2011.02.06 03:10:31 | 000,421,888 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\Downloader_for_Visual_Studio_2010_Premium_(x86)_-_DVD_en.exe
[2011.03.13 18:47:36 | 000,995,328 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\SRDownloader(2).exe
[2011.03.13 18:40:22 | 000,995,328 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\SRDownloader.exe
[2010.03.11 20:17:12 | 002,167,496 | ---- | M] () -- \Users\Pepa\Stažené soubory\Taky stažené\www.vendetta-online.eu_-_WoW-3.2.0-enUS-downloader.exe
[2011.05.24 19:26:14 | 000,033,447 | ---- | M] () -- \Users\Public\Documents\Blizzard Entertainment\World of Warcraft\Logs\Downloader.log
[2009.10.22 02:01:42 | 000,018,248 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4734\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.923C1899_09AE_418B_B39D_A7A9EB6A7951
[2009.10.22 02:01:42 | 000,249,672 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4734\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.923C1899_09AE_418B_B39D_A7A9EB6A7951
[2009.10.22 02:24:38 | 000,018,248 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4734\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2009.10.22 02:01:42 | 000,018,248 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4734\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2009.10.22 02:24:38 | 000,370,504 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4734\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2009.10.22 02:01:42 | 000,249,672 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00004109A20000000100000000F01FEC\14.0.4734\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2012.08.29 12:46:03 | 000,092,438 | ---- | M] () -- \Windows\Prefetch\BLIZZARDDOWNLOADER.EXE-7A2DE006.pf
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2007.03.26 11:45:18 | 000,071,208 | ---- | M] () -- \Windows\System32\PhysXLoader.dll
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2007.03.26 11:45:18 | 000,071,208 | ---- | M] () -- \Windows\SysWOW64\PhysXLoader.dll
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 07:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 17:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 17:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 17:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 17:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 17:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012.03.18 01:26:14 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012.03.18 01:26:14 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012.03.18 01:26:14 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012.03.18 01:26:15 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012.03.18 01:26:15 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 07:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

Ale je to jen obsah jednoho souboru, ten druhý report to nevytvořilo...
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Conduit.com místo google

#6 Příspěvek od vyosek »

A ma cenu lecit PC, ktere si s prominutim zase*e uzivatel vlastni blbosti kdyz tam cpe cracky, keygeny a podobne dobroty...To polecime a havet je za chvili zpatky :?:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Maniacccc
Návštěvník
Návštěvník
Příspěvky: 11
Registrován: 09 Dub 2009 18:33

Re: Conduit.com místo google

#7 Příspěvek od Maniacccc »

Takhle, je fakt, že počítač používáme dva, ale her je tu pár a většinu originální (snad až na world of warcraft - ten je stahovaný, ale bez cracku a možná i civilization, protože to je domácí úchylka a na internetu bývá dříve, než na pultech)...
Crackovaný software tu byl Autodesk Maya (trial nevyšel o 10 dní, kdy bylo potřeba udělat semestrální práci), Toad Data Modeler (roční školní licence zkončila akorát před psaním bakalářské práce) a možná Entrprise Architekt a ještě jedna hra (ale to jen protože standardní licence prostě nefungovala). A všechny tyhle věci tu byly, ale smazal jsem.

Takže takhle - pokud nebudou mít příští semestr ve škole další požadavky, tak se žádné další cracky neobjeví a já bych byl pro to vyčistit. Pokud je tam bordelu až hrůza, tak to řekněte a já přeformátuji disk.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Conduit.com místo google

#8 Příspěvek od vyosek »

:arrow: Pokud se tam priste najde zase takova sbirka, tak bude pomoc odmitnuta

:arrow: Spustte znovu OTL
  • Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

  • Kód: Vybrat vše

    :otl
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {89D0EF7D-2254-4133-AAD8-29E20DF679DF}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0E DE 01 66 94 20 CB 01 [binary data]
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No CLSID value found
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes,DefaultScope = {BFC20756-9BFE-4510-9845-E07726C48774}
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\SearchScopes\{BFC20756-9BFE-4510-9845-E07726C48774}: "URL" = http://www.google.cz/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.2
FF - prefs.js..extensions.enabledItems: foxmarks@kei.com:3.8.7
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q="
FF - prefs.js..network.proxy.type: 4
[2012.08.28 00:42:28 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012.02.22 23:19:29 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.08.18 13:14:31 | 000,000,000 | ---D | M] ("Xmarks") -- C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\7x52zeap.default\extensions\foxmarks@kei.com
O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O2 - BHO: (no name) - {DD92DE22-ED91-4560-B788-DEE2B26612E6} - No CLSID value found.
O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-4254656596-101261429-3511760784-1000\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[12 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[13 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[9 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[2012.08.29 19:43:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2012.08.29 09:38:43 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
[2012.08.29 09:35:12 | 000,000,944 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2012.08.29 20:01:05 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

:services
gupdate
gupdatem

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5.5ServiceManager]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=-
"AMD AVT"=-
"Adobe ARM"=-

:files
C:\Users\Pepa\Documents\SYS
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[EMPTYJAVA]
  • Nasledne kliknete na Opravit
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Conduit.com místo google

#9 Příspěvek od vyosek »

Jak to tu vypada :???:

Pokud nebude zde vyvijena nejaka cinnost - bude tema na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“