Live Security Platinum

[Jarosovi2004]

Dobry den,
potreboval bych prosim poradit s timto problemem.. nejde otevrit zadna aplikace a zadna slozka.. U vseho to hlasi "infikovano" :(..
Dekuju.

[vyosek]

Zdravim, pekne nedelni dopoledne preji a vitam vas u nas na foru

Restartujte PC, mackejte F8 a zvolte Rezim nouze s praci v siti

Nabehne takovy, ne moc graficky hezky rezim, ale v nem by havet nemela otravovat

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/dl ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/dl ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/dl ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895

[Jarosovi2004]

Moc děkuju za rychlou reakci. Tady je log


Rkill 2.3.10 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 09/09/2012 11:35:59 AM in x64 mode.
Windows Version: Windows 7 Home Premium

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* Služba BFE (Base Filtering Engine) (BFE) is not Running.
Startup Type set to: Automatic

* Klient DHCP (Dhcp) is not Running.
Startup Type set to: Automatic

* Klient DNS (Dnscache) is not Running.
Startup Type set to: Automatic

* Systém událostí COM+ (EventSystem) is not Running.
Startup Type set to: Automatic

* Brána Windows Firewall (MpsSvc) is not Running.
Startup Type set to: Automatic

* Síťová připojení (Netman) is not Running.
Startup Type set to: Manual

* Služba rozhraní síťového úložiště (nsi) is not Running.
Startup Type set to: Automatic

* Windows Defender (WinDefend) is not Running.
Startup Type set to: Disabled

* Centrum zabezpečení (wscsvc) is not Running.
Startup Type set to: Disabled

* Windows Update (wuauserv) is not Running.
Startup Type set to: Disabled

* Ancillary Function Driver for Winsock (AFD) is not Running.
Startup Type set to: System

* Ovladač ověření brány Windows Firewall (mpsdrv) is not Running.
Startup Type set to: Manual

* NetBT (NetBT) is not Running.
Startup Type set to: System

* NSI proxy service driver. (nsiproxy) is not Running.
Startup Type set to: System

* Ovladač pro podporu zastaralého rozhraní TDI NetIO (tdx) is not Running.
Startup Type set to: System

Searching for Missing Digital Signatures:

* No issues found.

Program finished at: 09/09/2012 11:36:01 AM
Execution time: 0 hours(s), 0 minute(s), and 2 seconds(s)

[vyosek]

Prozatim neni zac, jeste poprosim o log.txt z RSIT

[Jarosovi2004]

RSIT spustit v Nouzaku a nebo mam restartovat ntb ??

[vyosek]

Zatim stale pracujte v nouzaku, jinak nas bude havet otravovat\blokovat

[Jarosovi2004]

Myslel jsem si to

Zde:

Logfile of random's system information tool 1.09 (written by random/random)
Run by admin at 2012-09-09 11:43:11
Microsoft Windows 7 Home Premium
System drive C: has 125 GB (43%) free of 290 GB
Total RAM: 3950 MB (86% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:43:11, on 9.9.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.17051)
Boot mode: Safe mode

Running processes:
C:\Program Files\trend micro\admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: BrowserPlugin - {7779203F-5667-AE84-25EC-7A58C6DC9FE0} - (no file)
O2 - BHO: BrowserPlugin - {895F4032-6445-5AA4-956B-F1FDA82D471A} - (no file)
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WeatherBugAlert] "C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe" /st
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\RunOnce: [7531CC920062C4694D8EF75EE56C34C7] C:\ProgramData\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: VAIO Care Performance Service (SampleCollector) - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14217 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
ctfmon.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\admin\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\h6h2lqrg.default

prefs.js - "browser.startup.homepage" - "google.com"
prefs.js - "extensions.enabledItems" - "{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.7, {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.1.2, plugin3@gameplaylabs.com:3.0, {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.2.1, {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29, {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.27"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... 2.0.1.2&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.271 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Nero.com/KM]
"Description"=
"Path"=C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.271 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files (x86)\Mozilla Firefox\plugins\
npdeployJava1.dll
npnul32.dll
nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\h6h2lqrg.default\extensions\
DTToolbar@toolbarnet.com
plugin3@gameplaylabs.com
{32a1fd71-835e-4b11-8e54-886fda0b4c89}
{800b5000-a755-47e1-992b-48a1c1357f07}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\h6h2lqrg.default\searchplugins\
daemon-search.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
qip-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7779203F-5667-AE84-25EC-7A58C6DC9FE0}]
BrowserPlugin

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{895F4032-6445-5AA4-956B-F1FDA82D471A}]
BrowserPlugin

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2011-10-12 142288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2010-03-25 1548096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D5D47440-0750-463D-BAEF-A47D02414806}
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-10-04 1049912]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-02-28 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-05-31 10775584]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-05-31 2040352]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2010-05-31 212480]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2918656]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"WeatherBugAlert"=C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe [2010-02-22 442368]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"7531CC920062C4694D8EF75EE56C34C7"=C:\ProgramData\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7 [2012-09-09 1872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus Photo RX585 Series]
C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICLE.EXE [2007-03-30 213504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.0\ICQ.exe [2011-01-05 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [2011-09-20 1493288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
C:\Users\admin\AppData\Roaming\QipGuard\QipGuard.exe /p []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~1\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-03-04 284696]
"ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2010-05-31 673136]
"PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [2010-06-01 600928]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-04-06 641664]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-06-24 269824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 290304]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145
"HideSCAHealth"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-09-09 11:14:40 ----A---- C:\Windows\ntbtlog.txt
2012-09-07 07:57:58 ----D---- C:\ProgramData\7531CC920062C4694D8EF75E4F147CE7
2012-09-07 07:52:25 ----D---- C:\ProgramData\TurboFLOORPLAN Dum & Interiér & Zahrada Pro
2012-09-06 18:32:06 ----D---- C:\Scenes
2012-09-06 18:31:35 ----A---- C:\Windows\SYSWOW64\drivers\eusk2par.sys
2012-09-06 18:31:34 ----D---- C:\KD
2012-08-20 23:54:57 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-08-20 11:42:43 ----A---- C:\Windows\system32\srcore.dll
2012-08-20 11:42:42 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-08-20 11:42:29 ----A---- C:\Windows\system32\win32spl.dll
2012-08-20 11:42:29 ----A---- C:\Windows\splwow64.exe
2012-08-20 11:42:28 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-08-20 11:42:28 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-20 11:42:18 ----A---- C:\Windows\system32\jscript.dll
2012-08-20 11:42:17 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-08-20 11:42:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-08-20 11:42:17 ----A---- C:\Windows\system32\vbscript.dll
2012-08-20 11:41:56 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-08-20 11:41:56 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-08-20 11:41:56 ----A---- C:\Windows\system32\netapi32.dll
2012-08-20 11:41:56 ----A---- C:\Windows\system32\browser.dll
2012-08-20 11:41:56 ----A---- C:\Windows\system32\browcli.dll
2012-08-20 11:41:48 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-08-20 11:41:47 ----A---- C:\Windows\system32\mshtml.dll
2012-08-20 11:41:41 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-08-20 11:41:39 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-08-20 11:41:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-08-20 11:41:37 ----A---- C:\Windows\system32\ieframe.dll
2012-08-20 11:41:36 ----A---- C:\Windows\system32\urlmon.dll
2012-08-20 11:41:35 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-08-20 11:41:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-08-20 11:41:35 ----A---- C:\Windows\system32\wininet.dll
2012-08-20 11:41:35 ----A---- C:\Windows\system32\iedkcs32.dll
2012-08-20 11:41:34 ----A---- C:\Windows\SYSWOW64\mstime.dll
2012-08-20 11:41:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-08-20 11:41:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-08-20 11:41:34 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\mstime.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\msfeeds.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\ieui.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\iertutil.dll
2012-08-20 11:41:34 ----A---- C:\Windows\system32\iepeers.dll
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\url.dll
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-08-20 11:41:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-08-20 11:41:33 ----A---- C:\Windows\system32\url.dll
2012-08-20 11:41:33 ----A---- C:\Windows\system32\msfeedssync.exe
2012-08-20 11:41:33 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-08-20 11:41:33 ----A---- C:\Windows\system32\licmgr10.dll
2012-08-20 11:41:33 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-20 11:41:27 ----A---- C:\Windows\system32\win32k.sys
2012-08-20 11:41:25 ----A---- C:\Windows\system32\localspl.dll

======List of files/folders modified in the last 1 month======

2012-09-09 11:43:11 ----D---- C:\Program Files\trend micro
2012-09-09 11:30:33 ----A---- C:\Windows\SYSWOW64\log.txt
2012-09-09 11:21:22 ----D---- C:\Windows\Prefetch
2012-09-09 11:19:16 ----D---- C:\Windows\system32\config
2012-09-09 11:19:13 ----D---- C:\Windows\temp
2012-09-09 11:17:49 ----D---- C:\Windows\System32
2012-09-09 11:17:49 ----D---- C:\Windows\inf
2012-09-09 11:17:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-09-09 11:14:40 ----D---- C:\Windows
2012-09-09 10:17:11 ----D---- C:\Windows\system32\Tasks
2012-09-07 08:02:23 ----SHD---- C:\System Volume Information
2012-09-07 07:57:58 ----D---- C:\ProgramData
2012-09-07 07:52:23 ----SHD---- C:\Windows\Installer
2012-09-07 07:52:23 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-09-06 18:32:45 ----D---- C:\Windows\SYSWOW64\drivers
2012-09-06 18:32:38 ----D---- C:\Windows\SysWOW64
2012-09-06 18:32:06 ----A---- C:\Windows\win.ini
2012-09-05 18:08:18 ----D---- C:\Users\admin\AppData\Roaming\Skype
2012-09-02 13:58:22 ----D---- C:\Windows\Minidump
2012-09-02 11:25:59 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-08-23 11:03:01 ----D---- C:\ProgramData\Skype
2012-08-21 10:17:46 ----D---- C:\Windows\system32\catroot2
2012-08-21 10:17:25 ----D---- C:\Windows\winsxs
2012-08-21 10:15:36 ----RSD---- C:\Windows\Fonts
2012-08-21 10:15:34 ----D---- C:\Windows\SYSWOW64\migration
2012-08-21 10:15:34 ----D---- C:\Program Files (x86)\Internet Explorer
2012-08-21 10:15:33 ----D---- C:\Windows\system32\migration
2012-08-21 10:15:33 ----D---- C:\Program Files\Internet Explorer
2012-08-21 10:15:31 ----D---- C:\Windows\system32\DriverStore
2012-08-21 10:15:30 ----D---- C:\Windows\system32\drivers
2012-08-20 23:55:03 ----D---- C:\Windows\system32\catroot
2012-08-20 23:51:46 ----A---- C:\Windows\system32\MRT.exe
2012-08-20 13:11:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-03-04 540696]
R0 NBVol;Nero Backup Volume Filter Driver; C:\Windows\system32\DRIVERS\NBVol.sys [2011-07-13 72240]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver; C:\Windows\system32\DRIVERS\NBVolUp.sys [2011-07-13 15920]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-29 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-06-19 213888]
R2 rimspci;rimspci; C:\Windows\system32\drivers\rimssne64.sys [2010-06-23 94208]
R2 risdsnpe;risdsnpe; C:\Windows\system32\drivers\risdsne64.sys [2010-06-23 78848]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\drivers\Apfiltr.sys [2010-05-31 299568]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-05-28 56344]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\drivers\SFEP.sys [2010-04-26 12032]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-27 834544]
S1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-12-21 141264]
S1 eusk2par;EUTRON SmartKey Parallel Driver; \??\C:\Windows\system32\Drivers\eusk2par.sys []
S1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-12-21 170640]
S2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 125296]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-08 6661120]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-10-08 195584]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-31 1573888]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-10-08 6661120]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552448]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-23 342056]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-06-23 102952]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-06-23 135720]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-06-23 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-06-23 21544]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-06-24 10326784]
S3 Impcd;Impcd; C:\Windows\system32\drivers\Impcd.sys [2010-05-28 158976]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-05-31 2357024]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-06-24 271872]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-07-06 25912]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2010-05-31 231328]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
S3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-10-08 202752]
S2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-06-09 952096]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-28 268824]
S2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-09-23 641832]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
S2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-06-01 367456]
S2 SampleCollector;VAIO Care Performance Service; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
S2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-28 2320920]
S2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [2010-05-31 217968]
S2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-06-21 575856]
S2 VSNService;VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2010-06-08 836608]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8; C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-20 250056]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 42360]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-07-28 867080]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-06-20 108400]
S3 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-06-18 423280]
S3 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-06-20 67952]
S3 SpfService;VAIO Entertainment Common Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2010-06-06 304496]
S3 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2010-06-17 851824]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-06-09 537456]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-06-09 384880]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-06-09 101232]
S3 VCService;VCService; C:\Program Files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update Common\VUAgent.exe [2012-01-13 1256040]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-26 1255736]
S4 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-07-06 366640]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

[vyosek]

Predpokladam, ze na ten NOD32 mate zakoupenou licenci?

Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy

Spustte HJT a provedeme fixnuti polozek

• HJT najdete zde C:\Program Files\trend micro\admin.exe
• Otevre se Vam okno, kliknete na Do a system scan only
• V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
• R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
  R3 - URLSearchHook: (no name) - - (no file)
• Kliknete na Fix checked (vlevo dole)
• HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

Poprosim o log z DDS

• Stahnete DDS odsud http://download.bleepingcomputer.com/sUBs/Beta/dds.exe a ulozte na plochu
• Spustte a kliknete na Start
• Po chvili vyskoci log, ten rad uvidim

[Jarosovi2004]

NOD32 mam zkusebni verzi. Po vyprseni budu instalovat asi Avast Free, pokud nemate neco lepsiho ? Dekuju


DDS (Ver_2011-09-30.01) - NTFS_AMD64 MINIMAL
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_29
Run by admin at 12:01:09 on 2012-09-09
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3950.3384 [GMT 2:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uProxyOverride = <local>
mURLSearchHooks: {855F3B16-6D32-4fe6-8A56-BBB695989046} - <orphaned>
mURLSearchHooks: <No Name>: - LocalServer32 - <no file>
dURLSearchHooks: {855F3B16-6D32-4fe6-8A56-BBB695989046} - <orphaned>
dURLSearchHooks: <No Name>: - LocalServer32 - <no file>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: BrowserPlugin: {7779203F-5667-AE84-25EC-7A58C6DC9FE0} - LocalServer32 - <no file>
BHO: BrowserPlugin: {895F4032-6445-5AA4-956B-F1FDA82D471A} - LocalServer32 - <no file>
BHO: Pomocná služba pro přihlášení ke službě Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: QIPBHO Class: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [WeatherBugAlert] "C:\Program Files (x86)\AWS\WeatherBug Alert\WeatherBugAlert.exe" /st
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRunOnce: [7531CC920062C4694D8EF75EE56C34C7] C:\ProgramData\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7.exe
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
uPolicies-Explorer: NoDrives = dword:0
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: HideSCAHealth = dword:1
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableSecureUIAPaths = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000
IE: WikiKomentáře Google... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files (x86)\ICQ7.0\ICQ.exe
IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940} : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\2456C6B696E6F5634666661623 : DHCPNameServer = 192.168.2.1
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\44D4D265C45465F4 : DHCPNameServer = 212.24.128.8 212.24.132.132
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\75966496 : DHCPNameServer = 192.168.2.1
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\75966696 : DHCPNameServer = 192.168.2.1
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\77966696D2050354E26626D696E236675747E236A7 : DHCPNameServer = 147.32.229.10
TCP: Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}\77966696D2056324E26626D696E236675747E236A7 : DHCPNameServer = 147.32.229.10
TCP: Interfaces\{9E19C038-DD7B-4829-B255-EDCC2483F5D9} : DHCPNameServer = 10.0.0.138
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
x64-TB: DAEMON Tools Toolbar: {32099AAC-C132-4136-9E9A-4E364A424E17} -
x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3
x64-Run: [Apoint] C:\Program Files (x86)\Apoint\Apoint.exe
x64-Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\h6h2lqrg.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - google.com
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.1.2&q=
FF - component: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\h6h2lqrg.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - plugin: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\npBrowserPlugin.dll
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
FF - Ext: Media Plugin: plugin3@gameplaylabs.com - %profile%\extensions\plugin3@gameplaylabs.com
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: DivX Plus Web Player HTML5 <video>: {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
.
============= SERVICES / DRIVERS ===============
.
R0 NBVol;Nero Backup Volume Filter Driver;C:\Windows\System32\drivers\NBVol.sys [2011-11-12 72240]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;C:\Windows\System32\drivers\NBVolUp.sys [2011-11-12 15920]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-7-28 55856]
R2 rimspci;rimspci;C:\Windows\System32\drivers\rimssne64.sys [2010-7-21 94208]
R2 risdsnpe;risdsnpe;C:\Windows\System32\drivers\risdsne64.sys [2010-7-21 78848]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-6-4 56344]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-6-2 12032]
S1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904]
S2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-4-6 202752]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]
S2 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2010-12-21 170640]
S2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-1-12 810144]
S2 epfwwfpr;epfwwfpr;C:\Windows\System32\drivers\epfwwfpr.sys [2010-12-21 125296]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-7-28 136176]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-7-21 13336]
S2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-9-23 641832]
S2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-6-1 367456]
S2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-12-4 259192]
S2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S2 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2010-7-28 104960]
S2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-7-28 2320920]
S2 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-7-28 575856]
S2 VSNService;VSNService;C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2010-7-28 836608]
S3 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-9 169312]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-5-30 250056]
S3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2010-10-8 6661120]
S3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2010-10-8 195584]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\System32\drivers\ArcSoftKsUFilter.sys [2010-7-28 19968]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-2-28 183560]
S3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2010-7-28 342056]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-7-28 39464]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2011-3-10 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-7-28 136176]
S3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-7-21 158976]
S3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-7-21 271872]
S3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2011-8-22 25912]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]
S3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]
S3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]
S3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]
S3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]
S3 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-6-20 108400]
S3 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-6-18 423280]
S3 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-6-20 67952]
S3 SpfService;VAIO Entertainment Common Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2010-6-6 304496]
S3 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2010-6-17 851824]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-6-9 537456]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-6-9 384880]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-6-9 101232]
S3 VCService;VCService;C:\Program Files\Sony\VAIO Care\VCService.exe [2011-6-6 44736]
S3 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update Common\VUAgent.exe [2012-1-13 1256040]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-14 17920]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-26 1255736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-7-21 402720]
S4 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-8-22 366640]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-09-07 05:57:58 -------- d-----w- C:\ProgramData\7531CC920062C4694D8EF75E4F147CE7
2012-09-07 05:52:25 -------- d-----w- C:\ProgramData\TurboFLOORPLAN Dum & Interiér & Zahrada Pro
2012-09-06 16:32:06 -------- d-----w- C:\Scenes
2012-09-06 16:31:35 24786 ----a-w- C:\Windows\SysWow64\drivers\eusk2par.sys
2012-09-06 16:31:34 -------- d-----w- C:\KD
2012-09-06 12:48:42 9310152 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4E92DA48-6F03-4E09-B3A8-2739F2D920E3}\mpengine.dll
2012-08-20 21:54:57 552448 ----a-w- C:\Windows\System32\drivers\bthport.sys
2012-08-20 09:42:43 503808 ----a-w- C:\Windows\System32\srcore.dll
2012-08-20 09:42:42 43008 ----a-w- C:\Windows\SysWow64\srclient.dll
2012-08-20 09:42:29 751104 ----a-w- C:\Windows\System32\win32spl.dll
2012-08-20 09:42:29 67584 ----a-w- C:\Windows\splwow64.exe
2012-08-20 09:42:28 559104 ----a-w- C:\Windows\System32\spoolsv.exe
2012-08-20 09:42:28 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll
2012-08-20 09:42:17 609792 ----a-w- C:\Windows\System32\vbscript.dll
2012-08-20 09:42:17 428032 ----a-w- C:\Windows\SysWow64\vbscript.dll
.
==================== Find3M ====================
.
2012-08-20 11:11:10 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-20 11:11:10 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-07-18 17:31:12 3146752 ----a-w- C:\Windows\System32\win32k.sys
2012-07-04 22:01:38 58880 ----a-w- C:\Windows\System32\browcli.dll
2012-07-04 22:01:38 136704 ----a-w- C:\Windows\System32\browser.dll
2012-07-04 21:23:55 41472 ----a-w- C:\Windows\SysWow64\browcli.dll
2012-06-27 07:03:25 1197568 ----a-w- C:\Windows\System32\wininet.dll
2012-06-27 06:59:12 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2012-06-27 06:03:21 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-06-27 06:01:19 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2012-06-27 05:41:43 482816 ----a-w- C:\Windows\System32\html.iec
2012-06-27 04:58:58 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2012-06-27 04:53:25 386048 ----a-w- C:\Windows\SysWow64\html.iec
2012-06-27 04:19:51 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-06-25 14:04:24 1394248 ----a-w- C:\Windows\SysWow64\msxml4.dll
2012-06-12 21:53:49 0 ----a-w- C:\Windows\SysWow64\sho5477.tmp
.
============= FINISH: 12:02:16,43 ===============

[vyosek]

Ale tu zkusebni verzi uz tam mate nejak dlouho ne, urcite vic jak 30 dni, coz je doba, kterou povoluji licencni podminky ESETu. Co vy na to Ja jsem pro postup, ze po ukonceni leceni, tam dame IHNED ten Avast Free - nelegalni bezpecnostni SW (coz nyni ted NOD je, jelikoz je tam v rozporu s lic. podminkami, ktere jste mimochodem odsouhlasil pri instalaci) tu netolerujem

[Jarosovi2004]

Urcite ano, omlouvam se. Ntb neni muj, je moji sestry a ta mi ho donesla se slovama ze to proste nejde. Nevim co tam mela, akorat vim ze tam ma/mela NOD32. Hned jak to pujde tam dame ten AVAST!

[vyosek]

OK

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[Jarosovi2004]

Mam problem s tim NODem, CF pise ze ma zapnutej rezidentni stit ale nikde ho nemuzu najit ze je ten NOD32 pustenej.. ani ho nekde nevidim ze by byl zapnutej.. mam pokracovat dal?

[Jarosovi2004]

Tak nevim proc, ale CF se sam rozjel aniz bych klikal na to "Ok".. kdyz dobehl tak system se nerestartoval a log zde:


ComboFix 12-09-09.02 - admin 09.09.2012 12:51:52.4.4 - x64 MINIMAL
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.420.1029.18.3950.3201 [GMT 2:00]
Spuštěný z: c:\users\admin\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Enabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\7531CC920062C4694D8EF75E4F147CE7
c:\programdata\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7
c:\programdata\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7.exe
c:\programdata\7531CC920062C4694D8EF75E4F147CE7\7531CC920062C4694D8EF75E4F147CE7.ico
c:\programdata\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
c:\programdata\Microsoft\Windows\Start Menu\Programs\Live Security Platinum\Live Security Platinum.lnk
c:\users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
c:\users\admin\Documents\~WRD1036.tmp
c:\windows\iun6002.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-08-09 do 2012-09-09 )))))))))))))))))))))))))))))))
.
.
2012-09-09 10:55 . 2012-09-09 10:55 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-09-09 10:55 . 2012-09-09 10:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-07 05:52 . 2012-09-07 05:52 -------- d-----w- c:\programdata\TurboFLOORPLAN Dum & Interiér & Zahrada Pro
2012-09-06 16:32 . 2012-09-06 16:32 -------- d-----w- C:\Scenes
2012-09-06 16:31 . 2004-11-18 10:49 24786 ----a-w- c:\windows\SysWow64\drivers\eusk2par.sys
2012-09-06 16:31 . 2012-09-06 16:35 -------- d-----w- C:\KD
2012-09-06 12:48 . 2012-08-23 08:26 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E92DA48-6F03-4E09-B3A8-2739F2D920E3}\mpengine.dll
2012-08-20 21:54 . 2012-07-06 19:58 552448 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-08-20 09:42 . 2012-05-05 08:30 503808 ----a-w- c:\windows\system32\srcore.dll
2012-08-20 09:42 . 2012-05-05 07:44 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2012-08-20 09:42 . 2012-02-11 06:36 751104 ----a-w- c:\windows\system32\win32spl.dll
2012-08-20 09:42 . 2012-02-11 06:29 67584 ----a-w- c:\windows\splwow64.exe
2012-08-20 09:42 . 2012-02-11 06:29 559104 ----a-w- c:\windows\system32\spoolsv.exe
2012-08-20 09:42 . 2012-02-11 05:44 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
2012-08-20 09:42 . 2012-06-16 05:25 850944 ----a-w- c:\windows\system32\jscript.dll
2012-08-20 09:42 . 2012-06-16 05:25 609792 ----a-w- c:\windows\system32\vbscript.dll
2012-08-20 09:42 . 2012-06-16 04:37 428032 ----a-w- c:\windows\SysWow64\vbscript.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-20 21:51 . 2011-01-06 17:19 62134624 ----a-w- c:\windows\system32\MRT.exe
2012-08-20 11:11 . 2012-05-30 17:15 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-08-20 11:11 . 2012-05-22 14:03 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-25 14:04 . 2012-06-25 14:04 1394248 ----a-w- c:\windows\SysWow64\msxml4.dll
2012-06-12 21:53 . 2012-06-12 21:53 0 ----a-w- c:\windows\SysWow64\sho5477.tmp
.
.
((((((((((((((((((((((((((((( SnapShot_2011-08-23_16.25.36 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-06-11 00:58 . 2011-06-11 00:58 51024 c:\windows\SysWOW64\vcomp100.dll
- 2010-07-21 00:51 . 2009-12-11 07:36 96768 c:\windows\SysWOW64\sspicli.dll
+ 2012-07-11 14:07 . 2012-06-02 04:42 96768 c:\windows\SysWOW64\sspicli.dll
- 2010-07-21 00:51 . 2009-12-11 07:39 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-07-11 14:07 . 2012-06-02 04:48 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-01-11 09:40 . 2011-11-19 14:06 67072 c:\windows\SysWOW64\packager.dll
+ 2011-10-25 20:21 . 2011-10-25 20:21 56832 c:\windows\SysWOW64\OVDecoder.dll
+ 2012-04-05 20:33 . 2012-04-05 20:33 56320 c:\windows\SysWOW64\OVDecode.dll
+ 2012-04-05 20:34 . 2012-04-05 20:34 64512 c:\windows\SysWOW64\OpenVideo.dll
+ 2012-04-05 20:32 . 2012-04-05 20:32 50176 c:\windows\SysWOW64\OpenCL.dll
+ 2005-10-14 09:56 . 2002-10-04 21:04 45056 c:\windows\SysWOW64\ogg.dll
+ 2012-08-20 09:41 . 2012-07-04 21:26 57344 c:\windows\SysWOW64\netapi32.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 67584 c:\windows\SysWOW64\mshtmled.dll
- 2011-08-10 19:11 . 2011-06-21 05:32 12800 c:\windows\SysWOW64\msfeedssync.exe
+ 2012-08-20 09:41 . 2012-06-27 05:58 12800 c:\windows\SysWOW64\msfeedssync.exe
+ 2012-08-20 09:41 . 2012-06-27 06:01 64512 c:\windows\SysWOW64\msfeedsbs.dll
- 2011-08-10 19:11 . 2011-06-21 05:35 64512 c:\windows\SysWOW64\msfeedsbs.dll
- 2011-08-10 19:11 . 2011-06-21 05:36 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-08-20 09:41 . 2012-06-27 06:03 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 81744 c:\windows\SysWOW64\mfcm100u.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 81744 c:\windows\SysWOW64\mfcm100.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 60752 c:\windows\SysWOW64\mfc100rus.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 60752 c:\windows\SysWOW64\mfc100rus.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 43344 c:\windows\SysWOW64\mfc100kor.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 43344 c:\windows\SysWOW64\mfc100kor.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 43856 c:\windows\SysWOW64\mfc100jpn.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 43856 c:\windows\SysWOW64\mfc100jpn.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 62288 c:\windows\SysWOW64\mfc100ita.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 62288 c:\windows\SysWOW64\mfc100ita.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 36176 c:\windows\SysWOW64\mfc100cht.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 36176 c:\windows\SysWOW64\mfc100cht.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 36176 c:\windows\SysWOW64\mfc100chs.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 36176 c:\windows\SysWOW64\mfc100chs.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 64336 c:\windows\SysWOW64\mfc100fra.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 64336 c:\windows\SysWOW64\mfc100fra.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 63824 c:\windows\SysWOW64\mfc100esn.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 63824 c:\windows\SysWOW64\mfc100esn.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 55120 c:\windows\SysWOW64\mfc100enu.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 55120 c:\windows\SysWOW64\mfc100enu.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 64336 c:\windows\SysWOW64\mfc100deu.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 64336 c:\windows\SysWOW64\mfc100deu.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 44544 c:\windows\SysWOW64\licmgr10.dll
- 2011-08-10 19:11 . 2011-06-21 05:35 44544 c:\windows\SysWOW64\licmgr10.dll
+ 2012-03-09 12:06 . 2012-03-09 12:06 24576 c:\windows\SysWOW64\kdbsdk32.dll
- 2011-08-10 19:11 . 2011-06-21 05:34 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2005-06-08 14:59 . 2005-06-08 14:59 48640 c:\windows\SysWOW64\inetwh32.dll
+ 2012-05-30 17:11 . 2012-05-15 18:00 79872 c:\windows\SysWOW64\ff_vfw.dll
+ 2011-10-20 23:26 . 2011-10-20 23:26 94208 c:\windows\SysWOW64\dpl100.dll
+ 2012-09-06 21:13 . 2012-09-06 21:13 13318 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2011-08-23 16:24 . 2011-08-23 16:24 13318 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
- 2009-07-14 04:54 . 2011-08-23 16:25 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-09-09 09:18 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-09-09 09:18 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-23 16:25 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-12-12 15:31 . 2012-05-21 11:24 80856 c:\windows\SysWOW64\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
+ 2012-08-20 09:41 . 2012-07-04 21:23 41472 c:\windows\SysWOW64\browcli.dll
- 2009-07-13 23:37 . 2009-07-14 01:15 41472 c:\windows\SysWOW64\browcli.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 28160 c:\windows\SysWOW64\atiuxpag.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 20480 c:\windows\SysWOW64\atiu9pag.dll
+ 2010-07-21 00:13 . 2010-10-08 06:55 52224 c:\windows\SysWOW64\atimpc32.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 12800 c:\windows\SysWOW64\atiglpxx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 14848 c:\windows\SysWOW64\atigktxx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 53248 c:\windows\SysWOW64\aticalrt.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 53248 c:\windows\SysWOW64\aticalcl.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 43520 c:\windows\SysWOW64\ati2edxx.dll
- 2011-07-28 21:33 . 2011-07-28 21:33 43520 c:\windows\SysWOW64\ati2edxx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 52224 c:\windows\SysWOW64\amdpcom32.dll
+ 2011-09-14 10:38 . 2011-09-14 10:38 37376 c:\windows\SysWOW64\amdoclcl.dll
+ 2012-06-19 08:14 . 2012-06-02 22:19 44056 c:\windows\system32\wups2.dll
+ 2012-06-19 08:13 . 2012-06-02 22:19 38424 c:\windows\system32\wups.dll
+ 2012-06-19 08:13 . 2012-06-02 22:15 99840 c:\windows\system32\wudriver.dll
+ 2012-06-19 08:14 . 2012-06-02 22:19 57880 c:\windows\system32\wuauclt.exe
+ 2012-06-19 08:13 . 2012-06-02 13:15 36864 c:\windows\system32\wuapp.exe
- 2009-07-14 00:34 . 2009-07-14 01:39 36864 c:\windows\system32\wuapp.exe
+ 2010-07-20 23:22 . 2012-09-09 09:20 57916 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-09-09 09:20 37128 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-11-19 08:51 . 2012-09-09 09:20 14246 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3944615385-2930902997-3159194493-1000_UserData.bin
+ 2011-06-11 00:15 . 2011-06-11 00:15 57168 c:\windows\system32\vcomp100.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 57168 c:\windows\system32\vcomp100.dll
+ 2012-01-12 19:20 . 2011-11-17 07:11 28672 c:\windows\system32\sspisrv.dll
- 2009-07-13 23:20 . 2009-07-14 01:41 28672 c:\windows\system32\sspisrv.dll
+ 2012-01-12 19:20 . 2011-11-17 07:11 28160 c:\windows\system32\secur32.dll
- 2009-07-13 23:50 . 2009-07-14 01:41 28160 c:\windows\system32\secur32.dll
- 2009-07-14 00:17 . 2009-07-14 01:41 76288 c:\windows\system32\rdpwsx.dll
+ 2012-06-13 20:19 . 2012-04-26 05:34 76288 c:\windows\system32\rdpwsx.dll
+ 2012-01-11 09:40 . 2011-11-19 15:07 77312 c:\windows\system32\packager.dll
+ 2011-10-25 20:21 . 2011-10-25 20:21 66560 c:\windows\system32\OVDecoder64.dll
+ 2012-04-05 20:33 . 2012-04-05 20:33 63488 c:\windows\system32\OVDecode64.dll
+ 2012-04-05 20:34 . 2012-04-05 20:34 74752 c:\windows\system32\OpenVideo64.dll
+ 2012-04-05 20:32 . 2012-04-05 20:32 54784 c:\windows\system32\OpenCL.dll
+ 2012-08-20 09:41 . 2012-07-04 22:04 73216 c:\windows\system32\netapi32.dll
+ 2012-08-20 09:41 . 2012-06-27 06:59 97792 c:\windows\system32\mshtmled.dll
+ 2012-08-20 09:41 . 2012-06-27 06:55 12288 c:\windows\system32\msfeedssync.exe
- 2011-08-10 19:11 . 2011-06-21 06:17 12288 c:\windows\system32\msfeedssync.exe
- 2011-08-10 19:11 . 2011-06-21 06:20 82944 c:\windows\system32\msfeedsbs.dll
+ 2012-08-20 09:41 . 2012-06-27 06:59 82944 c:\windows\system32\msfeedsbs.dll
+ 2012-08-20 09:41 . 2012-06-27 07:03 95232 c:\windows\system32\migration\WininetPlugin.dll
- 2011-08-10 19:11 . 2011-06-21 06:20 95232 c:\windows\system32\migration\WininetPlugin.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 93008 c:\windows\system32\mfcm100u.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 93008 c:\windows\system32\mfcm100.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 60752 c:\windows\system32\mfc100rus.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 60752 c:\windows\system32\mfc100rus.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 43344 c:\windows\system32\mfc100kor.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 43344 c:\windows\system32\mfc100kor.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 43856 c:\windows\system32\mfc100jpn.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 43856 c:\windows\system32\mfc100jpn.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 62288 c:\windows\system32\mfc100ita.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 62288 c:\windows\system32\mfc100ita.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 36176 c:\windows\system32\mfc100cht.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 36176 c:\windows\system32\mfc100cht.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 36176 c:\windows\system32\mfc100chs.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 36176 c:\windows\system32\mfc100chs.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 64336 c:\windows\system32\mfc100fra.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 64336 c:\windows\system32\mfc100fra.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 63824 c:\windows\system32\mfc100esn.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 63824 c:\windows\system32\mfc100esn.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 55120 c:\windows\system32\mfc100enu.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 55120 c:\windows\system32\mfc100enu.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 64336 c:\windows\system32\mfc100deu.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 64336 c:\windows\system32\mfc100deu.dll
+ 2012-01-12 19:20 . 2011-11-17 07:05 31232 c:\windows\system32\lsass.exe
- 2009-07-13 23:20 . 2009-07-14 01:39 31232 c:\windows\system32\lsass.exe
+ 2012-05-08 00:31 . 2012-05-01 19:08 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
+ 2012-08-20 09:41 . 2012-06-27 06:59 57856 c:\windows\system32\licmgr10.dll
- 2011-08-10 19:11 . 2011-06-21 06:20 57856 c:\windows\system32\licmgr10.dll
+ 2012-03-09 12:07 . 2012-03-09 12:07 29184 c:\windows\system32\kdbsdk64.dll
- 2011-08-10 19:11 . 2011-06-21 06:19 64512 c:\windows\system32\jsproxy.dll
+ 2012-08-20 09:41 . 2012-06-27 06:58 64512 c:\windows\system32\jsproxy.dll
+ 2012-04-10 22:09 . 2012-03-01 06:40 80896 c:\windows\system32\imagehlp.dll
+ 2011-11-12 18:27 . 2011-07-13 12:59 15920 c:\windows\system32\DRVSTORE\NBVolUp_7E82B7DF40274E6D5CB1EF0F5F60CF7FA7B957E1\NBVolUp.sys
+ 2011-11-12 18:27 . 2011-07-13 12:59 72240 c:\windows\system32\DRVSTORE\NBVol_114747DF562392173FB8D35F38D728406FDBFD72\NBVol.sys
+ 2009-07-14 05:30 . 2012-08-21 08:15 86016 c:\windows\system32\DriverStore\infpub.dat
- 2009-07-14 05:30 . 2011-08-21 17:33 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2012-04-06 02:00 . 2012-04-06 02:00 64000 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\coinst.dll
+ 2012-04-06 01:09 . 2012-04-06 01:09 41984 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiuxpag.dll
+ 2012-04-06 01:09 . 2012-04-06 01:09 54784 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiuxp64.dll
+ 2012-04-06 01:09 . 2012-04-06 01:09 32256 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiu9pag.dll
+ 2012-04-06 01:09 . 2012-04-06 01:09 44544 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiu9p64.dll
+ 2012-04-06 01:16 . 2012-04-06 01:16 72704 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atisamu64.dll
+ 2012-04-06 01:16 . 2012-04-06 01:16 67584 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atisamu32.dll
+ 2009-06-22 15:34 . 2009-06-22 15:34 51200 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ATIODCLI.exe
+ 2012-04-06 02:14 . 2012-04-06 02:14 21504 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atimuixx.dll
+ 2012-04-06 01:06 . 2012-04-06 01:06 54784 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atimpc64.dll
+ 2012-04-06 01:06 . 2012-04-06 01:06 53760 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atimpc32.dll
+ 2012-04-06 01:11 . 2012-04-06 01:11 14848 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiglpxx.dll
+ 2012-04-06 01:10 . 2012-04-06 01:10 33280 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atigktxx.dll
+ 2012-04-06 01:11 . 2012-04-06 01:11 41984 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atig6txx.dll
+ 2012-04-06 01:11 . 2012-04-06 01:11 17408 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atig6pxx.dll
+ 2012-04-06 02:14 . 2012-04-06 02:14 59392 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiedu64.dll
+ 2012-04-06 01:30 . 2012-04-06 01:30 51200 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\aticalrt64.dll
+ 2012-04-06 01:30 . 2012-04-06 01:30 46080 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\aticalrt.dll
+ 2012-04-06 01:30 . 2012-04-06 01:30 44544 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\aticalcl64.dll
+ 2012-04-06 01:30 . 2012-04-06 01:30 44032 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\aticalcl.dll
+ 2012-04-06 01:09 . 2012-04-06 01:09 53248 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ati2erec.dll
+ 2012-04-06 02:14 . 2012-04-06 02:14 43520 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ati2edxx.dll
+ 2012-04-06 01:17 . 2012-04-06 01:17 71680 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\amdave64.dll
+ 2012-04-06 01:16 . 2012-04-06 01:16 72704 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\amdave32.dll
+ 2011-12-06 02:18 . 2011-12-06 02:18 58880 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\coinst.dll
+ 2011-12-06 02:11 . 2011-12-06 02:11 33280 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiuxpag.dll
+ 2011-12-06 02:11 . 2011-12-06 02:11 42496 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiuxp64.dll
+ 2011-12-06 02:11 . 2011-12-06 02:11 29696 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiu9pag.dll
+ 2011-12-06 02:11 . 2011-12-06 02:11 39936 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiu9p64.dll
+ 2009-06-22 16:34 . 2009-06-22 16:34 51200 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ATIODCLI.exe
+ 2011-12-06 03:09 . 2011-12-06 03:09 21504 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atimuixx.dll
+ 2011-12-06 02:10 . 2011-12-06 02:10 54784 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atimpc64.dll
+ 2011-12-06 02:10 . 2011-12-06 02:10 53760 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atimpc32.dll
+ 2011-12-06 02:12 . 2011-12-06 02:12 14336 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiglpxx.dll
+ 2011-12-06 02:12 . 2011-12-06 02:12 33280 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atigktxx.dll
+ 2011-12-06 02:12 . 2011-12-06 02:12 39936 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atig6txx.dll
+ 2011-12-06 02:12 . 2011-12-06 02:12 17408 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atig6pxx.dll
+ 2011-12-06 03:09 . 2011-12-06 03:09 59392 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiedu64.dll
+ 2011-12-06 02:34 . 2011-12-06 02:34 51200 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticalrt64.dll
+ 2011-12-06 02:34 . 2011-12-06 02:34 46080 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticalrt.dll
+ 2011-12-06 02:34 . 2011-12-06 02:34 44544 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticalcl64.dll
+ 2011-12-06 02:34 . 2011-12-06 02:34 44032 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticalcl.dll
+ 2011-12-06 02:10 . 2011-12-06 02:10 53248 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ati2erec.dll
+ 2011-12-06 03:09 . 2011-12-06 03:09 43520 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ati2edxx.dll
+ 2011-11-10 02:18 . 2011-11-10 02:18 58880 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\coinst.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 32256 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiuxpag.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 41984 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiuxp64.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 29184 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiu9pag.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 39424 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiu9p64.dll
+ 2009-06-22 16:34 . 2009-06-22 16:34 51200 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ATIODCLI.exe
+ 2011-11-10 03:09 . 2011-11-10 03:09 21504 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atimuixx.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 54784 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atimpc64.dll
+ 2011-11-10 02:11 . 2011-11-10 02:11 53760 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atimpc32.dll
+ 2011-11-10 02:13 . 2011-11-10 02:13 14336 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiglpxx.dll
+ 2011-11-10 02:12 . 2011-11-10 02:12 32768 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atigktxx.dll
+ 2011-11-10 02:13 . 2011-11-10 02:13 39936 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atig6txx.dll
+ 2011-11-10 02:13 . 2011-11-10 02:13 17408 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atig6pxx.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 59392 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiedu64.dll
+ 2011-11-10 02:34 . 2011-11-10 02:34 51200 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticalrt64.dll
+ 2011-11-10 02:34 . 2011-11-10 02:34 46080 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticalrt.dll
+ 2011-11-10 02:34 . 2011-11-10 02:34 44544 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticalcl64.dll
+ 2011-11-10 02:34 . 2011-11-10 02:34 44032 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticalcl.dll
+ 2011-11-10 02:10 . 2011-11-10 02:10 53248 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ati2erec.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 43520 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ati2edxx.dll
+ 2011-10-26 01:29 . 2011-10-26 01:29 58880 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\coinst.dll
+ 2011-10-26 01:21 . 2011-10-26 01:21 31744 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiuxpag.dll
+ 2011-10-26 01:21 . 2011-10-26 01:21 40960 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiuxp64.dll
+ 2011-10-26 01:20 . 2011-10-26 01:20 29184 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiu9pag.dll
+ 2011-10-26 01:21 . 2011-10-26 01:21 38912 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiu9p64.dll
+ 2009-06-22 15:34 . 2009-06-22 15:34 51200 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ATIODCLI.exe
+ 2011-10-26 01:58 . 2011-10-26 01:58 21504 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atimuixx.dll
+ 2011-10-26 01:16 . 2011-10-26 01:16 54784 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atimpc64.dll
+ 2011-10-26 01:15 . 2011-10-26 01:15 53760 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atimpc32.dll
+ 2011-10-26 01:22 . 2011-10-26 01:22 14336 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiglpxx.dll
+ 2011-10-26 01:22 . 2011-10-26 01:22 32768 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atigktxx.dll
+ 2011-10-26 01:22 . 2011-10-26 01:22 39936 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atig6txx.dll
+ 2011-10-26 01:22 . 2011-10-26 01:22 17408 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atig6pxx.dll
+ 2011-10-26 01:58 . 2011-10-26 01:58 59392 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiedu64.dll
+ 2011-10-26 01:38 . 2011-10-26 01:38 51200 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticalrt64.dll
+ 2011-10-26 01:38 . 2011-10-26 01:38 46080 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticalrt.dll
+ 2011-10-26 01:38 . 2011-10-26 01:38 44544 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticalcl64.dll
+ 2011-10-26 01:38 . 2011-10-26 01:38 44032 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticalcl.dll
+ 2011-10-26 01:20 . 2011-10-26 01:20 53248 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ati2erec.dll
+ 2011-10-26 01:58 . 2011-10-26 01:58 43520 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ati2edxx.dll
+ 2011-09-08 16:59 . 2011-09-08 16:59 58880 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\coinst.dll
+ 2011-09-08 16:51 . 2011-09-08 16:51 31744 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiuxpag.dll
+ 2011-09-08 16:52 . 2011-09-08 16:52 40960 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiuxp64.dll
+ 2011-09-08 16:51 . 2011-09-08 16:51 29184 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiu9pag.dll
+ 2011-09-08 16:51 . 2011-09-08 16:51 38912 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiu9p64.dll
+ 2009-06-22 15:34 . 2009-06-22 15:34 51200 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\ATIODCLI.exe
+ 2011-09-08 17:28 . 2011-09-08 17:28 21504 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atimuixx.dll
+ 2011-09-08 16:51 . 2011-09-08 16:51 54784 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atimpc64.dll
+ 2011-09-08 16:50 . 2011-09-08 16:50 53760 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atimpc32.dll
+ 2011-09-08 16:52 . 2011-09-08 16:52 13312 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiglpxx.dll
+ 2011-09-08 16:52 . 2011-09-08 16:52 32768 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atigktxx.dll
+ 2011-09-08 16:52 . 2011-09-08 16:52 39936 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atig6txx.dll
+ 2011-09-08 16:52 . 2011-09-08 16:52 15360 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atig6pxx.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 59392 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiedu64.dll
+ 2011-09-08 17:09 . 2011-09-08 17:09 51200 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticalrt64.dll
+ 2011-09-08 17:09 . 2011-09-08 17:09 46080 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticalrt.dll
+ 2011-09-08 17:09 . 2011-09-08 17:09 44544 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticalcl64.dll
+ 2011-09-08 17:09 . 2011-09-08 17:09 44032 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticalcl.dll
+ 2011-09-08 16:51 . 2011-09-08 16:51 53248 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\ati2erec.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 43520 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\ati2edxx.dll
+ 2011-07-13 14:32 . 2011-04-28 03:58 80384 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_b39fd144c3c86206\BTHUSB.SYS
+ 2009-07-14 00:06 . 2009-07-14 00:06 41984 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_b39fd144c3c86206\bthenum.sys
- 2009-07-14 00:16 . 2009-07-14 00:16 23552 c:\windows\system32\drivers\tdtcp.sys
+ 2012-03-14 18:58 . 2012-02-15 04:46 23552 c:\windows\system32\drivers\tdtcp.sys
+ 2011-10-01 07:30 . 2011-10-01 07:30 22376 c:\windows\system32\drivers\Sftvollh.sys
- 2009-12-02 21:23 . 2009-12-02 21:23 22376 c:\windows\system32\drivers\Sftvollh.sys
+ 2011-10-01 07:30 . 2011-10-01 07:30 25960 c:\windows\system32\drivers\Sftredirlh.sys
- 2009-12-02 21:23 . 2009-12-02 21:23 25960 c:\windows\system32\drivers\Sftredirlh.sys
+ 2010-07-28 12:36 . 2011-11-29 02:28 55856 c:\windows\system32\drivers\PxHlpa64.sys
+ 2012-05-13 13:00 . 2012-03-17 07:55 75632 c:\windows\system32\drivers\partmgr.sys
+ 2011-11-12 18:27 . 2011-07-13 12:59 15920 c:\windows\system32\drivers\NBVolUp.sys
+ 2011-11-12 18:27 . 2011-07-13 12:59 72240 c:\windows\system32\drivers\NBVol.sys
+ 2012-07-11 14:07 . 2012-06-02 05:38 95088 c:\windows\system32\drivers\ksecdd.sys
+ 2012-04-10 22:09 . 2012-03-01 06:54 22896 c:\windows\system32\drivers\fs_rec.sys
+ 2010-10-08 06:55 . 2010-10-08 06:55 53248 c:\windows\system32\drivers\ati2erec.dll
- 2011-07-28 20:52 . 2011-07-28 20:52 53248 c:\windows\system32\drivers\ati2erec.dll
+ 2011-12-14 10:42 . 2011-10-26 05:19 43520 c:\windows\system32\csrsrv.dll
- 2009-07-13 23:19 . 2009-07-14 01:40 43520 c:\windows\system32\csrsrv.dll
- 2010-07-28 12:26 . 2011-08-22 20:51 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-07-28 12:26 . 2012-09-09 09:21 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-07-28 12:26 . 2012-09-09 09:21 98304 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-07-28 12:26 . 2011-08-22 20:51 98304 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-09-09 09:21 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-22 20:51 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-10-08 06:55 . 2010-10-08 06:55 55296 c:\windows\system32\coinst.dll
+ 2012-08-20 09:41 . 2012-07-04 22:01 58880 c:\windows\system32\browcli.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 36864 c:\windows\system32\atiuxp64.dll
+ 2012-04-06 01:09 . 2010-10-08 06:55 28160 c:\windows\system32\atiu9p64.dll
- 2009-06-22 15:34 . 2009-06-22 15:34 51200 c:\windows\system32\ATIODCLI.exe
+ 2010-10-08 06:55 . 2010-10-08 06:55 51200 c:\windows\system32\ATIODCLI.exe
+ 2010-10-08 06:55 . 2010-10-08 06:55 12288 c:\windows\system32\atimuixx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 53248 c:\windows\system32\atimpc64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 12800 c:\windows\system32\atiglpxx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 16384 c:\windows\system32\atig6txx.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 14848 c:\windows\system32\atig6pxx.dll
- 2011-07-28 21:33 . 2011-07-28 21:33 59392 c:\windows\system32\atiedu64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 59392 c:\windows\system32\atiedu64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 43008 c:\windows\system32\aticalrt64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 39936 c:\windows\system32\aticalcl64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 53248 c:\windows\system32\amdpcom64.dll
+ 2011-09-14 10:38 . 2011-09-14 10:38 44032 c:\windows\system32\amdoclcl64.dll
- 2010-07-28 12:26 . 2010-02-02 08:39 49664 c:\windows\servicing\GC64\tzupd.exe
+ 2011-08-24 16:03 . 2011-07-09 05:16 49664 c:\windows\servicing\GC64\tzupd.exe
- 2010-12-25 08:23 . 2011-08-23 16:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-25 08:23 . 2012-09-07 05:29 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2012-08-23 08:36 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2010-12-25 08:23 . 2012-09-07 05:29 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-12-25 08:23 . 2011-08-23 16:26 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-12-25 08:23 . 2012-09-07 05:29 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-12-25 08:23 . 2011-08-23 16:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-19 10:12 . 2012-09-09 09:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-19 10:12 . 2011-08-23 16:26 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-19 10:12 . 2011-08-23 16:26 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-19 10:12 . 2012-09-09 09:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-04-06 14:48 . 2011-04-06 14:48 11120 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Xml.Serialization.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-05-17 08:08 . 2011-05-17 08:08 53072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\Culture.dll
- 2010-03-18 13:27 . 2010-03-18 13:27 53072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\Culture.dll
+ 2012-01-10 20:39 . 2011-12-26 19:08 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
+ 2011-04-06 14:48 . 2011-04-06 14:48 11120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-05-17 07:27 . 2011-05-17 07:27 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
- 2010-03-18 12:16 . 2010-03-18 12:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
+ 2012-01-10 20:39 . 2011-12-26 19:13 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2011-08-11 01:04 . 2011-08-11 01:04 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-14 01:12 . 2012-06-14 01:12 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-06-14 01:12 . 2012-06-14 01:12 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-06-14 01:12 . 2012-06-14 01:12 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-06-14 01:12 . 2012-06-14 01:12 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-08-11 01:04 . 2011-08-11 01:04 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-07-22 15:34 . 2012-07-22 15:34 25600 c:\windows\Installer\e3dd7e.msi
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{FA9827E1-8A8E-C176-4923-0840A67ED4DE}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{E93FF166-DF14-2537-8FB4-96BB5810A96C}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{D81E9069-3CCC-4405-3751-71E4AFEACC52}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{D544AE4C-4152-225B-A897-6756C8986B14}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{D04CE005-D1D2-80F3-84C8-B3524FCD39C3}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{CFC2CB60-5654-05A7-4D30-C661800A3A92}\ARPPRODUCTICON.exe
+ 2012-02-02 07:04 . 2012-02-02 07:04 88102 c:\windows\Installer\{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-02-02 07:04 . 2012-02-02 07:04 88102 c:\windows\Installer\{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-02-02 07:04 . 2012-02-02 07:04 88102 c:\windows\Installer\{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-02-02 07:04 . 2012-02-02 07:04 88102 c:\windows\Installer\{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{BB7C2A56-9706-43B8-5A8C-210AF5816106}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{BABF7852-C2DD-6A8A-9956-101720C715C7}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{A1BD938B-F006-6E6D-70B2-47E1DD56F7DE}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{9DC939DC-B7A4-D0E2-C582-A442DF1B3EBE}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{924FBAC4-60D2-7981-3C3E-979DF9CBB346}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{91CB5B8B-4EC8-DBA1-A88D-99FD480567B0}\ARPPRODUCTICON.exe
- 2011-03-01 21:29 . 2011-03-01 21:29 89952 c:\windows\Installer\{90140000-006D-0405-1000-0000000FF1CE}\cvhicon.exe
+ 2012-02-16 18:33 . 2012-02-16 18:33 89952 c:\windows\Installer\{90140000-006D-0405-1000-0000000FF1CE}\cvhicon.exe
+ 2012-08-20 21:55 . 2012-08-20 21:55 34632 c:\windows\Installer\{90120000-0020-0405-0000-0000000FF1CE}\O12ConvIcon.exe
- 2011-06-17 01:05 . 2011-06-17 01:05 34632 c:\windows\Installer\{90120000-0020-0405-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{8E19F2AF-7145-51DE-E395-7729A9374973}\ARPPRODUCTICON.exe
+ 2011-03-10 17:21 . 2012-05-19 14:42 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2011-03-10 17:21 . 2011-06-17 01:03 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-11-12 18:36 . 2011-11-12 18:36 75048 c:\windows\Installer\{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}\ScWaveEditorStartM_3939FC794F8E448CB7E44465B4F58E0D.exe
+ 2011-11-12 18:36 . 2011-11-12 18:36 75048 c:\windows\Installer\{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}\ScWaveEditorStartM_26B4783C804B4FB5A3F971DB42EFCAE3.exe
+ 2011-11-12 18:36 . 2011-11-12 18:36 75048 c:\windows\Installer\{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}\ARPPRODUCTICON.exe
+ 2012-09-07 05:52 . 2012-09-07 05:52 65536 c:\windows\Installer\{74F541C8-EB78-4606-8234-0955ED803787}\NewShortcut3_99B5473DDBE6455C982652637EFD0070.exe
+ 2012-09-07 05:52 . 2012-09-07 05:52 65536 c:\windows\Installer\{74F541C8-EB78-4606-8234-0955ED803787}\NewShortcut2_134EBDCB6A6746A3B8ED1C73ECC39A89.exe
+ 2012-09-07 05:52 . 2012-09-07 05:52 65536 c:\windows\Installer\{74F541C8-EB78-4606-8234-0955ED803787}\NewShortcut1_BA0585F5FEB14A4FAC3FEF6E7B203F24.exe
+ 2012-09-07 05:52 . 2012-09-07 05:52 25214 c:\windows\Installer\{74F541C8-EB78-4606-8234-0955ED803787}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{6B39BE0F-0F5E-A8FA-33E4-8481AE39D96C}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{66B79AE1-C6E2-B958-689C-D0812DE86BAB}\ARPPRODUCTICON.exe
+ 2011-08-23 17:36 . 2011-08-23 17:36 10134 c:\windows\Installer\{65CCE260-0877-4DC2-9432-AFA29FB8534E}\callmsi.exe
+ 2011-11-12 18:37 . 2011-11-12 18:37 69632 c:\windows\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{63CE6C32-1EB3-4C51-89FC-9FD96A661A9C}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{60F34FDF-267C-408F-290E-EC90D841C8CB}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{60E5022D-FA4B-C6A2-1E80-B46EC39096F3}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{5C763682-4C40-86DA-9C46-31924D7D2C34}\ARPPRODUCTICON.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{5831C6D6-309D-DBB5-14F7-FEE57086CEE7}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{5710DAC2-8F2A-503C-CFC2-A973ADE0EA4C}\ARPPRODUCTICON.exe
+ 2011-12-04 10:19 . 2011-12-04 10:19 88102 c:\windows\Installer\{52FB2985-F3AD-DAA7-7645-4E38A5B96E17}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-04 10:19 . 2011-12-04 10:19 88102 c:\windows\Installer\{52FB2985-F3AD-DAA7-7645-4E38A5B96E17}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-04 10:19 . 2011-12-04 10:19 88102 c:\windows\Installer\{52FB2985-F3AD-DAA7-7645-4E38A5B96E17}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-04 10:19 . 2011-12-04 10:19 88102 c:\windows\Installer\{52FB2985-F3AD-DAA7-7645-4E38A5B96E17}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 10134 c:\windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
- 2011-08-21 17:34 . 2011-08-21 17:34 10134 c:\windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{4DC37F33-7AEC-A4CB-56B1-69A402828763}\ARPPRODUCTICON.exe
+ 2012-05-22 06:56 . 2012-05-22 06:56 88102 c:\windows\Installer\{4B271648-43CB-DD31-FF24-E7B06D3EE72A}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{4725833D-4325-5C34-57D4-1FE23E5AE578}\ARPPRODUCTICON.exe
+ 2011-11-12 18:08 . 2011-11-12 18:08 88102 c:\windows\Installer\{44E3AB6B-453B-8DAE-9777-1C48F5AB8965}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-11-12 18:08 . 2011-11-12 18:08 88102 c:\windows\Installer\{44E3AB6B-453B-8DAE-9777-1C48F5AB8965}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-11-12 18:08 . 2011-11-12 18:08 88102 c:\windows\Installer\{44E3AB6B-453B-8DAE-9777-1C48F5AB8965}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-11-12 18:08 . 2011-11-12 18:08 88102 c:\windows\Installer\{44E3AB6B-453B-8DAE-9777-1C48F5AB8965}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{337788D1-43D1-9A0F-9787-DD00DB512D41}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{2E8D6204-D656-8355-1ED3-2988AC52EB0F}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{2D35BC33-7D08-D529-DF91-8A15FBF2600E}\ARPPRODUCTICON.exe
+ 2011-11-12 12:25 . 2011-11-12 12:25 65536 c:\windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
+ 2011-11-12 12:25 . 2011-11-12 12:25 65536 c:\windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{1C373820-B9C8-0F7F-8F84-FC1B76A85F27}\ARPPRODUCTICON.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{19D614EB-D62A-AEE7-2391-E74126601D59}\ARPPRODUCTICON.exe
+ 2011-12-11 10:50 . 2011-12-11 10:50 59232 c:\windows\Installer\{13EC74A6-4707-4D26-B9B9-E173403F3B08}\ARPPRODUCTICON.exe

[Jarosovi2004]

+ 2012-05-22 06:58 . 2012-05-22 06:58 88102 c:\windows\Installer\{119B2F5A-2A06-DB96-FF28-992EC2A10BDF}\ARPPRODUCTICON.exe
+ 2011-12-19 06:30 . 2011-12-19 06:30 88102 c:\windows\Installer\{0BD776F3-057D-4C11-020C-4FA9B13D04F9}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-19 06:30 . 2011-12-19 06:30 88102 c:\windows\Installer\{0BD776F3-057D-4C11-020C-4FA9B13D04F9}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-19 06:30 . 2011-12-19 06:30 88102 c:\windows\Installer\{0BD776F3-057D-4C11-020C-4FA9B13D04F9}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2011-12-19 06:30 . 2011-12-19 06:30 88102 c:\windows\Installer\{0BD776F3-057D-4C11-020C-4FA9B13D04F9}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-05-22 06:58 . 2012-05-22 06:58 10134 c:\windows\Installer\{03D4C700-2BFE-43E0-A0B4-9512B43C5B9F}\ARPPRODUCTICON.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 73624 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\wow_helper.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\ViewerPS.dll
+ 2011-06-06 10:55 . 2011-06-06 10:55 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\reader_sl.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 88992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\PDFPrevHndlr.dll
+ 2011-06-06 10:55 . 2011-06-06 10:55 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\eula.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 64952 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\armsvc.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\acrotextextractor.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\AcroRd32Info.exe
+ 2011-06-06 10:55 . 2011-06-06 10:55 63912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\acroiehelpershim.dll
+ 2011-06-06 10:55 . 2011-06-06 10:55 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\AcroIEHelper.dll
+ 2011-06-06 10:55 . 2011-06-06 10:55 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0100000010\10.1.0\Acrofx32.dll
+ 2012-05-22 07:06 . 2012-05-22 07:06 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
+ 2012-05-22 07:06 . 2012-05-22 07:06 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
+ 2012-05-22 07:06 . 2012-05-22 07:06 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
+ 2012-05-22 07:04 . 2012-05-22 07:04 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
+ 2012-05-21 17:57 . 2012-05-21 17:57 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
+ 2012-05-21 17:56 . 2012-05-21 17:56 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
+ 2012-05-21 17:56 . 2012-05-21 17:56 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
+ 2012-05-21 11:22 . 2012-05-21 11:22 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-05-21 17:43 . 2012-05-21 17:43 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-05-21 17:43 . 2012-05-21 17:43 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-05-21 17:43 . 2012-05-21 17:43 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-05-21 11:22 . 2012-05-21 11:22 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-05-21 11:22 . 2012-05-21 11:22 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-05-21 11:21 . 2012-05-21 11:21 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-05-21 17:55 . 2012-05-21 17:55 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\cf409e6576e3acec611838a755293418\System.Windows.Presentation.ni.dll
+ 2012-06-14 01:14 . 2012-06-14 01:14 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\3bbe5b6379da8576fd0789fe3ab3219f\System.Web.DynamicData.Design.ni.dll
+ 2012-06-14 01:37 . 2012-06-14 01:37 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\0e8a192d6df9aa905653ddce81fa3895\System.Web.DynamicData.Design.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\ecc5750e8d62675bf59eb202eeeeacbe\PresentationFontCache.ni.exe
+ 2012-05-19 19:15 . 2012-05-19 19:15 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\cc29df25d166ceed89d259b00e2bba9e\PresentationCFFRasterizer.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\dd71ed714dc374e3d85824c17795e706\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\b8dac004fdabbb2dc12830dcd22fed29\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\6b86a80d8cb8fb51252e0cd8fe697f9f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\64c811070a4d05e238e27d2a6e9bed25\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4eaff8355f942bb1a95300aeb2882602\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\3453bb2216048726659887ecaf5cce4a\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-21 17:54 . 2012-05-21 17:54 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\12abdc966e63bcb3077c71c6483762c3\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-19 19:13 . 2012-05-19 19:13 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e0e2b0cdfa700bc21e09ddac3a9b46cc\Microsoft.VisualC.ni.dll
+ 2012-05-21 17:45 . 2012-05-21 17:45 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c341c5df5ab35bb87765f39688c1e7ec\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-05-21 17:46 . 2012-05-21 17:46 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\62299472064bb88c63cdfa740cc34f1d\LoadMxf.ni.exe
+ 2012-05-21 17:45 . 2012-05-21 17:45 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\4ba55ae7274a85c8ae32a36aa8bcbfc5\ehiUPnP.ni.dll
+ 2012-05-21 17:45 . 2012-05-21 17:45 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\f9bd420501d5877ff7dd7fe308663935\ehiTVMSMusic.ni.dll
+ 2012-05-21 17:45 . 2012-05-21 17:45 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\c1ba413fc8eb57b417a2de4cf678e4f6\dfsvc.ni.exe
+ 2012-05-19 19:14 . 2012-05-19 19:14 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\0bc383bf9841cca7654fe938399b3a07\Accessibility.ni.dll
+ 2012-06-14 01:38 . 2012-06-14 01:38 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\a1bbbe7f5659a9a4abd70ad06ac3efd6\WindowsLiveWriter.ni.exe
+ 2012-05-21 11:19 . 2012-05-21 11:19 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\727ca1f963e5ccc727c30f2985f8069f\WindowsLiveWriter.ni.exe
+ 2012-05-21 11:19 . 2012-05-21 11:19 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dfe1496c2a27c01b1e24cd9bae3ccf8c\WindowsLive.Writer.Passport.ni.dll
+ 2012-05-19 19:17 . 2012-05-19 19:17 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\68b5806af0df6ce86027bacb7dc37233\UIAutomationProvider.ni.dll
+ 2012-05-21 11:21 . 2012-05-21 11:21 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\b0b664ed5c18ac51259abb7902671370\System.Windows.Presentation.ni.dll
+ 2012-06-14 08:58 . 2012-06-14 08:58 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\f5c5517bf252bf6c4d8de833d2111309\System.Web.DynamicData.Design.ni.dll
+ 2012-06-14 01:17 . 2012-06-14 01:17 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\9ada32b6ebedcd33d8db530e5c2b22a7\System.Web.DynamicData.Design.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\bdf3aabfa0a15d557aec32505a5eaaee\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-19 19:18 . 2012-05-19 19:18 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\99bb6d93ce5daed24761530fa32ed5f4\System.AddIn.Contract.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b0cdc419b6f2b0ddf0cda5f157e67516\PresentationFontCache.ni.exe
+ 2012-05-19 19:17 . 2012-05-19 19:17 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\8ac4be1ad8f1aae0c23366c9ce0724e0\PresentationCFFRasterizer.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\1af767233028c3165de880775391c53f\napcrypt.ni.dll
+ 2012-05-21 11:19 . 2012-05-21 11:19 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\MusicDataAccessIF\ed7287ff2b36c63013463c5d6b84bdde\MusicDataAccessIF.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\b9935982ad038d7a02f7931a8ee2977b\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ea54c98d0fa82cdb0bf5ec9b50463d75\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ddf3add57c84af5d63b3a2398ed5e1a4\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bd26bb6b78c6c02df886f26342b5e76a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a491bf821cc13223f288eb72176ffc7\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6a1cb87d9cb795b53eab2c57e2d7db48\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e634be25913db13e84a26296cee020\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\5c234eea7e7d54a466ad00d9ac238e6a\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-20 18:16 . 2012-05-20 18:16 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\dc44431123bc3e6b39dbea49ac1f1963\Microsoft.Vsa.ni.dll
+ 2012-05-19 19:17 . 2012-05-19 19:17 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\b69ac98f94e80b659eac618c6142ea9b\Microsoft.VisualC.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\6ddfa12f22ada63da088e98223858b69\Microsoft.Build.Framework.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2f7754efa196f832b12b4133f0eae060\Microsoft.Build.Framework.ni.dll
+ 2012-05-20 18:16 . 2012-05-20 18:16 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\324e702f2ed99ff0d0c92ad4bf5841f3\IAStorDataMgrSvc.ni.exe
+ 2012-05-21 11:20 . 2012-05-21 11:20 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\094c7076aed91bda969c01f72d4bb63a\ehiUserXp.ni.dll
+ 2012-05-21 11:20 . 2012-05-21 11:20 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\3c44431071abcaba099902fb72392688\dfsvc.ni.exe
+ 2012-05-19 19:17 . 2012-05-19 19:17 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\34f340b0c113f7216a55dd7c82a69cc2\Accessibility.ni.dll
+ 2012-04-10 22:09 . 2012-03-01 05:40 5120 c:\windows\SysWOW64\wmi.dll
- 2009-07-14 00:19 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wmi.dll
- 2010-12-25 17:44 . 2010-10-27 04:32 2048 c:\windows\SysWOW64\tzres.dll
+ 2011-12-14 10:40 . 2011-11-05 04:30 2048 c:\windows\SysWOW64\tzres.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 2023 c:\windows\SysWOW64\atipblag.dat
- 2009-07-14 00:41 . 2009-07-14 01:33 5120 c:\windows\system32\wmi.dll
+ 2012-04-10 22:09 . 2012-03-01 06:35 5120 c:\windows\system32\wmi.dll
+ 2011-01-16 21:23 . 2012-06-14 01:39 5298 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2011-01-16 09:32 . 2012-05-23 05:58 1566 c:\windows\system32\wdi\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
+ 2011-12-14 10:40 . 2011-11-05 05:17 2048 c:\windows\system32\tzres.dll
- 2010-12-25 17:44 . 2010-10-27 05:06 2048 c:\windows\system32\tzres.dll
+ 2012-06-13 20:19 . 2012-04-26 05:28 9216 c:\windows\system32\rdrmemptylst.exe
+ 2011-11-22 14:34 . 2011-11-22 14:34 9560 c:\windows\system32\NetworkList\Icons\{F4873E4D-C184-4107-BE28-947912702375}_48.bin
+ 2011-11-22 14:34 . 2011-11-22 14:34 4280 c:\windows\system32\NetworkList\Icons\{F4873E4D-C184-4107-BE28-947912702375}_32.bin
+ 2011-11-22 14:34 . 2011-11-22 14:34 2456 c:\windows\system32\NetworkList\Icons\{F4873E4D-C184-4107-BE28-947912702375}_24.bin
+ 2011-12-22 07:19 . 2011-12-22 07:19 9560 c:\windows\system32\NetworkList\Icons\{E9190384-15D9-4737-8371-C33B65B04FBB}_48.bin
+ 2011-12-22 07:19 . 2011-12-22 07:19 4280 c:\windows\system32\NetworkList\Icons\{E9190384-15D9-4737-8371-C33B65B04FBB}_32.bin
+ 2011-12-22 07:19 . 2011-12-22 07:19 2456 c:\windows\system32\NetworkList\Icons\{E9190384-15D9-4737-8371-C33B65B04FBB}_24.bin
+ 2011-11-23 11:54 . 2011-11-23 11:54 9560 c:\windows\system32\NetworkList\Icons\{CD9026CB-6028-4335-8D40-B2B58F9B73E6}_48.bin
+ 2011-11-23 11:54 . 2011-11-23 11:54 4280 c:\windows\system32\NetworkList\Icons\{CD9026CB-6028-4335-8D40-B2B58F9B73E6}_32.bin
+ 2011-11-23 11:54 . 2011-11-23 11:54 2456 c:\windows\system32\NetworkList\Icons\{CD9026CB-6028-4335-8D40-B2B58F9B73E6}_24.bin
+ 2011-09-27 07:39 . 2011-09-27 07:39 9560 c:\windows\system32\NetworkList\Icons\{A69CA103-F119-4069-B331-CB4049D92BD6}_48.bin
+ 2011-09-27 07:39 . 2011-09-27 07:39 4280 c:\windows\system32\NetworkList\Icons\{A69CA103-F119-4069-B331-CB4049D92BD6}_32.bin
+ 2011-09-27 07:39 . 2011-09-27 07:39 2456 c:\windows\system32\NetworkList\Icons\{A69CA103-F119-4069-B331-CB4049D92BD6}_24.bin
+ 2011-11-26 11:58 . 2011-11-26 11:58 9560 c:\windows\system32\NetworkList\Icons\{A3063A11-C65C-4421-B9C0-38C3AE134F8B}_48.bin
+ 2011-11-26 11:58 . 2011-11-26 11:58 4280 c:\windows\system32\NetworkList\Icons\{A3063A11-C65C-4421-B9C0-38C3AE134F8B}_32.bin
+ 2011-11-26 11:58 . 2011-11-26 11:58 2456 c:\windows\system32\NetworkList\Icons\{A3063A11-C65C-4421-B9C0-38C3AE134F8B}_24.bin
+ 2011-10-25 13:30 . 2011-10-25 13:30 9560 c:\windows\system32\NetworkList\Icons\{98F394C8-1D9C-4BDD-9A0A-431757B9CACB}_48.bin
+ 2011-10-25 13:30 . 2011-10-25 13:30 4280 c:\windows\system32\NetworkList\Icons\{98F394C8-1D9C-4BDD-9A0A-431757B9CACB}_32.bin
+ 2011-10-25 13:30 . 2011-10-25 13:30 2456 c:\windows\system32\NetworkList\Icons\{98F394C8-1D9C-4BDD-9A0A-431757B9CACB}_24.bin
+ 2011-11-03 09:01 . 2011-11-03 09:01 9560 c:\windows\system32\NetworkList\Icons\{808EC704-9A58-4567-B4C3-F77C9EFF6CAB}_48.bin
+ 2011-11-03 09:01 . 2011-11-03 09:01 4280 c:\windows\system32\NetworkList\Icons\{808EC704-9A58-4567-B4C3-F77C9EFF6CAB}_32.bin
+ 2011-11-03 09:01 . 2011-11-03 09:01 2456 c:\windows\system32\NetworkList\Icons\{808EC704-9A58-4567-B4C3-F77C9EFF6CAB}_24.bin
+ 2011-09-26 17:13 . 2011-09-26 17:13 9560 c:\windows\system32\NetworkList\Icons\{6904EE9B-2DB5-485F-A8C7-CE67A4E1DD76}_48.bin
+ 2011-09-26 17:13 . 2011-09-26 17:13 4280 c:\windows\system32\NetworkList\Icons\{6904EE9B-2DB5-485F-A8C7-CE67A4E1DD76}_32.bin
+ 2011-09-26 17:13 . 2011-09-26 17:13 2456 c:\windows\system32\NetworkList\Icons\{6904EE9B-2DB5-485F-A8C7-CE67A4E1DD76}_24.bin
+ 2011-11-01 14:05 . 2011-11-01 14:05 9560 c:\windows\system32\NetworkList\Icons\{52F93066-836F-417B-8556-162A5CA06637}_48.bin
+ 2011-11-01 14:05 . 2011-11-01 14:05 4280 c:\windows\system32\NetworkList\Icons\{52F93066-836F-417B-8556-162A5CA06637}_32.bin
+ 2011-11-01 14:05 . 2011-11-01 14:05 2456 c:\windows\system32\NetworkList\Icons\{52F93066-836F-417B-8556-162A5CA06637}_24.bin
+ 2012-05-20 15:02 . 2012-05-20 15:02 9560 c:\windows\system32\NetworkList\Icons\{0F3817AC-0DAA-4507-A55D-444268BBAE54}_48.bin
+ 2012-05-20 15:02 . 2012-05-20 15:02 4280 c:\windows\system32\NetworkList\Icons\{0F3817AC-0DAA-4507-A55D-444268BBAE54}_32.bin
+ 2012-05-20 15:02 . 2012-05-20 15:02 2456 c:\windows\system32\NetworkList\Icons\{0F3817AC-0DAA-4507-A55D-444268BBAE54}_24.bin
+ 2011-10-11 11:48 . 2011-10-11 11:48 9560 c:\windows\system32\NetworkList\Icons\{0E20AC52-500C-48B8-A556-D87A3C8073CA}_48.bin
+ 2011-10-11 11:48 . 2011-10-11 11:48 4280 c:\windows\system32\NetworkList\Icons\{0E20AC52-500C-48B8-A556-D87A3C8073CA}_32.bin
+ 2011-10-11 11:48 . 2011-10-11 11:48 2456 c:\windows\system32\NetworkList\Icons\{0E20AC52-500C-48B8-A556-D87A3C8073CA}_24.bin
+ 2011-09-29 09:45 . 2011-09-29 09:45 9560 c:\windows\system32\NetworkList\Icons\{059ABA4C-1EF3-49B9-92F6-B3BDA059AE43}_48.bin
+ 2011-09-29 09:45 . 2011-09-29 09:45 4280 c:\windows\system32\NetworkList\Icons\{059ABA4C-1EF3-49B9-92F6-B3BDA059AE43}_32.bin
+ 2011-09-29 09:45 . 2011-09-29 09:45 2456 c:\windows\system32\NetworkList\Icons\{059ABA4C-1EF3-49B9-92F6-B3BDA059AE43}_24.bin
+ 2012-02-18 11:58 . 2012-02-18 11:58 9560 c:\windows\system32\NetworkList\Icons\{03CC485A-1392-4A4E-926E-25DE0664F2C8}_48.bin
+ 2012-02-18 11:58 . 2012-02-18 11:58 4280 c:\windows\system32\NetworkList\Icons\{03CC485A-1392-4A4E-926E-25DE0664F2C8}_32.bin
+ 2012-02-18 11:58 . 2012-02-18 11:58 2456 c:\windows\system32\NetworkList\Icons\{03CC485A-1392-4A4E-926E-25DE0664F2C8}_24.bin
+ 2011-09-12 22:06 . 2011-09-12 22:06 3917 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atipblag.dat
+ 2011-09-12 23:06 . 2011-09-12 23:06 3917 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atipblag.dat
+ 2011-09-12 23:06 . 2011-09-12 23:06 3917 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atipblag.dat
+ 2011-09-12 22:06 . 2011-09-12 22:06 3917 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atipblag.dat
+ 2011-03-17 17:51 . 2011-03-17 17:51 3929 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atipblag.dat
+ 2010-10-08 06:55 . 2010-10-08 06:55 2023 c:\windows\system32\atipblag.dat
- 2011-08-23 16:25 . 2011-08-23 16:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-09-09 09:31 . 2012-09-09 09:31 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-09-09 09:31 . 2012-09-09 09:31 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-08-23 16:25 . 2011-08-23 16:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-05-21 17:43 . 2012-05-21 17:43 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
+ 2012-05-21 11:21 . 2012-05-21 11:21 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-05-30 17:11 . 2011-06-24 14:44 243200 c:\windows\SysWOW64\xvidvfw.dll
+ 2005-10-14 09:56 . 2011-06-24 14:28 650752 c:\windows\SysWOW64\xvidcore.dll
+ 2005-10-14 09:56 . 2004-02-10 09:15 344064 c:\windows\SysWOW64\xvid.dll
+ 2012-04-10 22:09 . 2012-03-01 05:49 172544 c:\windows\SysWOW64\wintrust.dll
- 2011-08-10 19:11 . 2011-06-21 05:36 981504 c:\windows\SysWOW64\wininet.dll
+ 2012-08-20 09:41 . 2012-06-27 06:03 981504 c:\windows\SysWOW64\wininet.dll
+ 2012-01-12 19:20 . 2011-11-17 05:39 314368 c:\windows\SysWOW64\webio.dll
- 2010-12-25 17:43 . 2010-10-16 04:36 314368 c:\windows\SysWOW64\webio.dll
+ 2008-09-05 00:22 . 2008-09-05 00:22 447752 c:\windows\SysWOW64\vp6vfw.dll
+ 2005-10-14 09:56 . 2002-10-04 21:04 921600 c:\windows\SysWOW64\VorbisEnc.dll
+ 2005-10-14 09:56 . 2002-10-04 21:04 188416 c:\windows\SysWOW64\vorbis.dll
+ 2012-08-20 09:41 . 2012-06-27 06:03 132096 c:\windows\SysWOW64\url.dll
- 2011-08-10 19:11 . 2011-06-21 05:36 132096 c:\windows\SysWOW64\url.dll
+ 2005-10-14 09:56 . 2011-03-02 10:43 175616 c:\windows\SysWOW64\unrar.dll
+ 2009-09-14 18:05 . 2009-09-14 18:05 374064 c:\windows\SysWOW64\twnlib4.dll
+ 2012-01-23 11:29 . 2012-01-23 11:29 122880 c:\windows\SysWOW64\SlotMaximizerAg.dll
+ 2012-07-11 14:07 . 2012-06-02 04:48 225280 c:\windows\SysWOW64\schannel.dll
+ 2012-03-14 18:58 . 2012-02-15 05:44 826368 c:\windows\SysWOW64\rdpcore.dll
- 2009-07-14 00:01 . 2009-07-14 01:16 826368 c:\windows\SysWOW64\rdpcore.dll
- 2009-07-14 00:03 . 2009-07-14 01:16 514560 c:\windows\SysWOW64\qdvd.dll
+ 2012-01-11 09:40 . 2011-10-26 04:28 514560 c:\windows\SysWOW64\qdvd.dll
+ 2011-10-14 19:46 . 2011-08-17 04:26 465408 c:\windows\SysWOW64\psisdecd.dll
- 2010-07-21 00:49 . 2009-12-13 09:30 465408 c:\windows\SysWOW64\psisdecd.dll
+ 2011-10-14 08:46 . 2011-08-27 04:43 571904 c:\windows\SysWOW64\oleaut32.dll
- 2011-06-16 18:54 . 2010-12-18 05:31 571904 c:\windows\SysWOW64\oleaut32.dll
- 2009-07-13 23:26 . 2009-07-14 01:16 233472 c:\windows\SysWOW64\oleacc.dll
+ 2011-10-14 08:46 . 2011-08-27 04:43 233472 c:\windows\SysWOW64\oleacc.dll
+ 2005-10-14 09:56 . 2002-10-06 16:42 237568 c:\windows\SysWOW64\OggDS.dll
+ 2011-12-06 03:10 . 2011-12-06 03:10 278528 c:\windows\SysWOW64\Oemdspif.dll
- 2011-07-28 21:33 . 2011-07-28 21:33 278528 c:\windows\SysWOW64\Oemdspif.dll
+ 2012-02-16 13:56 . 2012-01-04 09:03 442880 c:\windows\SysWOW64\ntshrui.dll
- 2009-07-13 23:41 . 2009-07-14 01:16 442880 c:\windows\SysWOW64\ntshrui.dll
- 2009-07-13 23:33 . 2009-07-14 01:16 219136 c:\windows\SysWOW64\ncrypt.dll
+ 2012-07-11 14:07 . 2012-06-02 04:47 219136 c:\windows\SysWOW64\ncrypt.dll
+ 2012-02-16 13:56 . 2011-12-16 07:59 690688 c:\windows\SysWOW64\msvcrt.dll
- 2009-07-13 23:12 . 2009-07-14 01:15 690688 c:\windows\SysWOW64\msvcrt.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 773968 c:\windows\SysWOW64\msvcr100.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 421200 c:\windows\SysWOW64\msvcp100.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 421200 c:\windows\SysWOW64\msvcp100.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 606208 c:\windows\SysWOW64\mstime.dll
- 2011-08-10 19:11 . 2011-06-21 05:35 606208 c:\windows\SysWOW64\mstime.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 627200 c:\windows\SysWOW64\msfeeds.dll
+ 2012-08-20 11:11 . 2012-08-20 11:11 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe
+ 2012-08-20 10:11 . 2012-08-20 10:11 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.exe
+ 2012-08-20 10:11 . 2012-08-20 10:11 466632 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_ActiveX.dll
+ 2012-05-30 17:15 . 2012-08-20 11:11 250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
+ 2012-08-20 09:42 . 2012-06-16 04:36 717824 c:\windows\SysWOW64\jscript.dll
+ 2011-10-29 09:01 . 2011-10-03 03:06 157472 c:\windows\SysWOW64\javaws.exe
- 2011-05-10 13:06 . 2011-04-14 03:08 157472 c:\windows\SysWOW64\javaws.exe
- 2011-05-10 13:06 . 2011-04-14 03:08 145184 c:\windows\SysWOW64\javaw.exe
+ 2011-10-29 09:01 . 2011-10-03 03:06 145184 c:\windows\SysWOW64\javaw.exe
- 2011-05-10 13:06 . 2011-04-14 03:08 145184 c:\windows\SysWOW64\java.exe
+ 2011-10-29 09:01 . 2011-10-03 03:06 145184 c:\windows\SysWOW64\java.exe
+ 2011-09-14 08:23 . 2011-07-27 04:30 361472 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
- 2009-07-13 23:26 . 2009-07-14 01:15 361472 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
+ 2009-09-14 18:05 . 2009-09-14 18:05 808240 c:\windows\SysWOW64\imagxra7.dll
+ 2009-09-14 18:05 . 2009-09-14 18:05 263472 c:\windows\SysWOW64\imagxr7.dll
+ 2009-09-14 18:04 . 2009-09-14 18:04 497296 c:\windows\SysWOW64\imagxpr7.dll
+ 2012-04-10 22:09 . 2012-03-01 05:45 158720 c:\windows\SysWOW64\imagehlp.dll
- 2011-08-10 19:11 . 2011-06-21 05:34 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-08-20 09:41 . 2012-06-27 06:01 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-08-20 09:41 . 2012-06-27 06:00 185856 c:\windows\SysWOW64\iepeers.dll
- 2011-08-10 19:11 . 2011-06-21 05:34 185856 c:\windows\SysWOW64\iepeers.dll
+ 2012-08-20 09:41 . 2012-06-27 06:00 381440 c:\windows\SysWOW64\iedkcs32.dll
- 2011-08-10 19:11 . 2011-06-21 05:34 381440 c:\windows\SysWOW64\iedkcs32.dll
- 2011-03-09 14:13 . 2010-12-23 05:28 534528 c:\windows\SysWOW64\EncDec.dll
+ 2011-12-14 10:40 . 2011-10-15 05:48 534528 c:\windows\SysWOW64\EncDec.dll
+ 2011-07-14 19:02 . 2011-07-14 19:02 324728 c:\windows\SysWOW64\elevator.exe
- 2009-06-02 13:23 . 2009-06-02 13:23 324728 c:\windows\SysWOW64\elevator.exe
+ 2010-02-19 19:27 . 2010-02-19 19:27 843776 c:\windows\SysWOW64\divx_xx16.dll
+ 2010-02-19 19:27 . 2010-02-19 19:27 847872 c:\windows\SysWOW64\divx_xx0a.dll
+ 2010-02-19 19:27 . 2010-02-19 19:27 720384 c:\windows\SysWOW64\DivX.dll
- 2010-07-28 13:01 . 2011-04-14 03:07 472808 c:\windows\SysWOW64\deployJava1.dll
+ 2010-07-28 13:01 . 2011-10-03 03:06 472808 c:\windows\SysWOW64\deployJava1.dll
+ 2011-11-12 18:22 . 2010-05-26 10:41 248672 c:\windows\SysWOW64\d3dx11_43.dll
+ 2011-11-12 18:22 . 2010-05-26 10:41 470880 c:\windows\SysWOW64\d3dx10_43.dll
+ 2012-05-13 13:01 . 2012-03-03 05:40 218624 c:\windows\SysWOW64\d3d10_1core.dll
- 2011-01-12 15:22 . 2010-11-02 04:35 218624 c:\windows\SysWOW64\d3d10_1core.dll
- 2011-06-16 18:54 . 2011-01-17 05:38 161792 c:\windows\SysWOW64\d3d10_1.dll
+ 2012-05-13 13:01 . 2012-03-03 05:40 161792 c:\windows\SysWOW64\d3d10_1.dll
+ 2012-05-13 13:01 . 2012-03-03 05:40 739840 c:\windows\SysWOW64\d2d1.dll
- 2011-03-09 14:13 . 2011-02-19 05:32 739840 c:\windows\SysWOW64\d2d1.dll
+ 2012-06-13 20:18 . 2012-04-24 04:47 139264 c:\windows\SysWOW64\cryptsvc.dll
+ 2012-06-13 20:18 . 2012-04-24 04:47 103936 c:\windows\SysWOW64\cryptnet.dll
+ 2011-06-11 00:58 . 2011-06-11 00:58 138056 c:\windows\SysWOW64\atl100.dll
- 2010-03-18 08:15 . 2010-03-18 08:15 138056 c:\windows\SysWOW64\atl100.dll
+ 2012-04-06 01:29 . 2012-04-06 01:29 204952 c:\windows\SysWOW64\ativvsvl.dat
+ 2012-04-06 01:29 . 2012-04-06 01:29 157144 c:\windows\SysWOW64\ativvsva.dat
+ 2010-07-21 00:13 . 2010-10-08 06:55 356352 c:\windows\SysWOW64\atipdlxx.dll
- 2010-07-21 00:13 . 2011-07-28 21:33 356352 c:\windows\SysWOW64\atipdlxx.dll
+ 2011-07-28 21:40 . 2010-10-08 06:55 489472 c:\windows\SysWOW64\aticfx32.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 237568 c:\windows\SysWOW64\atiadlxy.dll
+ 2012-06-19 08:13 . 2012-06-02 13:19 186752 c:\windows\system32\wuwebv.dll
+ 2012-06-19 08:13 . 2012-06-02 22:19 701976 c:\windows\system32\wuapi.dll
+ 2012-04-10 22:09 . 2012-03-01 06:45 220672 c:\windows\system32\wintrust.dll
- 2010-07-21 00:49 . 2009-12-29 08:03 220672 c:\windows\system32\wintrust.dll
+ 2012-01-12 19:20 . 2011-11-17 07:12 395776 c:\windows\system32\webio.dll
- 2010-12-25 17:43 . 2010-10-16 05:19 395776 c:\windows\system32\webio.dll
+ 2010-12-25 17:29 . 2012-08-31 07:22 450082 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2010-11-19 08:47 . 2012-09-09 09:08 477226 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2011-08-10 19:11 . 2011-06-21 06:20 134144 c:\windows\system32\url.dll
+ 2012-08-20 09:41 . 2012-06-27 07:03 134144 c:\windows\system32\url.dll
+ 2012-01-12 19:20 . 2011-11-17 07:11 136192 c:\windows\system32\sspicli.dll
- 2009-07-13 23:20 . 2009-07-14 01:41 136192 c:\windows\system32\sspicli.dll
+ 2012-01-23 11:15 . 2012-01-23 11:15 122880 c:\windows\system32\SlotMaximizerAg.dll
+ 2012-07-11 14:07 . 2012-06-02 05:27 340992 c:\windows\system32\schannel.dll
- 2010-12-25 17:43 . 2010-08-21 06:36 340992 c:\windows\system32\schannel.dll
+ 2012-06-13 20:19 . 2012-04-26 05:34 149504 c:\windows\system32\rdpcorekmts.dll
- 2009-07-14 00:17 . 2009-07-14 01:41 149504 c:\windows\system32\rdpcorekmts.dll
+ 2012-01-11 09:40 . 2011-10-26 05:22 366592 c:\windows\system32\qdvd.dll
- 2009-07-14 00:18 . 2009-07-14 01:41 366592 c:\windows\system32\qdvd.dll
- 2010-07-21 00:49 . 2009-12-13 09:46 613888 c:\windows\system32\psisdecd.dll
+ 2011-10-14 19:46 . 2011-08-17 05:32 613888 c:\windows\system32\psisdecd.dll
+ 2012-06-13 20:19 . 2012-05-02 05:32 208896 c:\windows\system32\profsvc.dll
+ 2009-07-14 02:36 . 2012-09-09 09:17 616484 c:\windows\system32\perfh009.dat
+ 2010-07-20 23:34 . 2012-09-09 09:17 631728 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2012-09-09 09:17 106606 c:\windows\system32\perfc009.dat
+ 2010-07-20 23:34 . 2012-09-09 09:17 122124 c:\windows\system32\perfc005.dat
+ 2011-10-14 08:46 . 2011-08-27 05:40 861184 c:\windows\system32\oleaut32.dll
- 2011-06-16 18:54 . 2010-12-18 06:13 861184 c:\windows\system32\oleaut32.dll
- 2009-07-13 23:39 . 2009-07-14 01:41 331776 c:\windows\system32\oleacc.dll
+ 2011-10-14 08:46 . 2011-08-27 05:40 331776 c:\windows\system32\oleacc.dll
- 2009-07-13 23:57 . 2009-07-14 01:41 509952 c:\windows\system32\ntshrui.dll
+ 2012-02-16 13:56 . 2012-01-04 09:58 509952 c:\windows\system32\ntshrui.dll
+ 2012-07-11 14:07 . 2012-06-02 05:27 307200 c:\windows\system32\ncrypt.dll
- 2009-07-13 23:49 . 2009-07-14 01:41 307200 c:\windows\system32\ncrypt.dll
+ 2012-02-16 13:56 . 2011-12-16 08:42 634368 c:\windows\system32\msvcrt.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 829264 c:\windows\system32\msvcr100.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 608080 c:\windows\system32\msvcp100.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 608080 c:\windows\system32\msvcp100.dll
+ 2012-08-20 09:41 . 2012-06-27 06:59 736256 c:\windows\system32\msfeeds.dll
+ 2010-12-29 21:08 . 2012-05-31 10:25 279656 c:\windows\system32\MpSigStub.exe
+ 2012-08-20 11:11 . 2012-08-20 11:11 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_271_Plugin.exe
+ 2012-08-20 10:11 . 2012-08-20 10:11 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_271_ActiveX.exe
+ 2012-08-20 10:11 . 2012-08-20 10:11 513224 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_271_ActiveX.dll
+ 2012-08-20 09:41 . 2012-05-14 05:20 956416 c:\windows\system32\localspl.dll
- 2009-07-13 23:40 . 2009-07-14 01:41 546304 c:\windows\system32\IME\IMEJP10\IMJPAPI.DLL
+ 2011-09-14 08:23 . 2011-07-27 05:31 546304 c:\windows\system32\IME\IMEJP10\IMJPAPI.DLL
+ 2012-08-20 09:41 . 2012-06-27 06:58 247808 c:\windows\system32\ieui.dll
- 2011-08-10 19:11 . 2011-06-21 06:19 247808 c:\windows\system32\ieui.dll
- 2011-08-10 19:11 . 2011-06-21 06:19 256000 c:\windows\system32\iepeers.dll
+ 2012-08-20 09:41 . 2012-06-27 06:58 256000 c:\windows\system32\iepeers.dll
- 2011-08-10 19:11 . 2011-06-21 06:19 445952 c:\windows\system32\iedkcs32.dll
+ 2012-08-20 09:41 . 2012-06-27 06:58 445952 c:\windows\system32\iedkcs32.dll
+ 2009-07-14 04:45 . 2012-08-21 08:17 361608 c:\windows\system32\FNTCACHE.DAT
+ 2011-12-14 10:40 . 2011-10-15 06:25 723456 c:\windows\system32\EncDec.dll
- 2009-07-14 05:30 . 2011-08-21 17:33 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-08-21 08:15 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2011-08-21 17:32 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2009-07-14 05:30 . 2012-08-21 08:15 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2012-04-06 01:29 . 2012-04-06 01:29 204952 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ativvsvl.dat
+ 2012-04-06 01:29 . 2012-04-06 01:29 157144 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ativvsva.dat
+ 2012-04-06 02:14 . 2012-04-06 02:14 120320 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atitmm64.dll
+ 2010-08-27 18:33 . 2010-08-27 18:33 332800 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ATIODE.exe
+ 2012-04-06 01:10 . 2012-04-06 01:10 343040 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atikmpag.sys
+ 2012-01-10 21:10 . 2012-01-10 21:10 601728 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiicdxx.dat
+ 2012-04-06 02:16 . 2012-04-06 02:16 236544 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiesrxx.exe
+ 2012-04-06 02:16 . 2012-04-06 02:16 503808 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atieclxx.exe
+ 2012-04-06 02:16 . 2012-04-06 02:16 442368 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\ATIDEMGX.dll
+ 2012-04-06 02:21 . 2012-04-06 02:21 909312 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\aticfx32.dll
+ 2009-05-11 21:35 . 2009-05-11 21:35 118784 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atibtmon.exe
+ 2012-04-06 02:22 . 2012-04-06 02:22 159744 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiapfxx.exe
+ 2012-04-06 01:11 . 2012-04-06 01:11 360448 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiadlxy.dll
+ 2012-04-06 01:11 . 2012-04-06 01:11 514560 c:\windows\system32\DriverStore\FileRepository\c7137813.inf_amd64_neutral_320292ee1f7728c6\B136646\atiadlxx.dll
+ 2011-12-06 03:10 . 2011-12-06 03:10 278528 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\Oemdspif.dll
+ 2011-12-06 02:35 . 2011-12-06 02:35 204960 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ativvsvl.dat
+ 2011-12-06 02:35 . 2011-12-06 02:35 157152 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ativvsva.dat
+ 2011-12-06 03:10 . 2011-12-06 03:10 120320 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atitmm64.dll
+ 2011-12-06 03:10 . 2011-12-06 03:10 360448 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atipdlxx.dll
+ 2011-12-06 03:10 . 2011-12-06 03:10 423424 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atipdl64.dll
+ 2010-08-27 19:33 . 2010-08-27 19:33 332800 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ATIODE.exe
+ 2011-12-06 02:12 . 2011-12-06 02:12 327168 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atikmpag.sys
+ 2011-11-14 19:47 . 2011-11-14 19:47 608507 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiicdxx.dat
+ 2011-12-06 03:11 . 2011-12-06 03:11 235520 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiesrxx.exe
+ 2011-12-06 03:12 . 2011-12-06 03:12 494080 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atieclxx.exe
+ 2011-12-06 03:12 . 2011-12-06 03:12 466944 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\ATIDEMGX.dll
+ 2011-12-06 03:16 . 2011-12-06 03:16 933888 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticfx64.dll
+ 2011-12-06 03:17 . 2011-12-06 03:17 778752 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\aticfx32.dll
+ 2009-05-11 22:35 . 2009-05-11 22:35 118784 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atibtmon.exe
+ 2011-12-06 03:17 . 2011-12-06 03:17 159744 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiapfxx.exe
+ 2011-12-06 02:12 . 2011-12-06 02:12 356352 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiadlxy.dll
+ 2011-12-06 02:13 . 2011-12-06 02:13 509952 c:\windows\system32\DriverStore\FileRepository\c7132104.inf_amd64_neutral_a91d704c133e4d29\B129753\atiadlxx.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 278528 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\Oemdspif.dll
+ 2011-11-10 02:36 . 2011-11-10 02:36 204960 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ativvsvl.dat
+ 2011-11-10 02:36 . 2011-11-10 02:36 157152 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ativvsva.dat
+ 2011-11-10 03:10 . 2011-11-10 03:10 120320 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atitmm64.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 360448 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atipdlxx.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 423424 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atipdl64.dll
+ 2010-08-27 19:33 . 2010-08-27 19:33 332800 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ATIODE.exe
+ 2011-11-10 02:12 . 2011-11-10 02:12 325632 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atikmpag.sys
+ 2011-10-21 19:30 . 2011-10-21 19:30 243168 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiicdxx.dat
+ 2011-11-10 03:11 . 2011-11-10 03:11 204288 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiesrxx.exe
+ 2011-11-10 03:12 . 2011-11-10 03:12 516608 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atieclxx.exe
+ 2011-11-10 03:12 . 2011-11-10 03:12 466944 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\ATIDEMGX.dll
+ 2011-11-10 03:15 . 2011-11-10 03:15 927232 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticfx64.dll
+ 2011-11-10 03:16 . 2011-11-10 03:16 774656 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\aticfx32.dll
+ 2009-05-11 22:35 . 2009-05-11 22:35 118784 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atibtmon.exe
+ 2011-11-10 03:17 . 2011-11-10 03:17 159744 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiapfxx.exe
+ 2011-11-10 02:13 . 2011-11-10 02:13 348160 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiadlxy.dll
+ 2011-11-10 02:13 . 2011-11-10 02:13 494592 c:\windows\system32\DriverStore\FileRepository\c7129966.inf_amd64_neutral_3c97db890d19275a\B128376\atiadlxx.dll
+ 2011-10-26 01:59 . 2011-10-26 01:59 278528 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\Oemdspif.dll
+ 2011-10-26 01:38 . 2011-10-26 01:38 204952 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ativvsvl.dat
+ 2011-10-26 01:38 . 2011-10-26 01:38 157144 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ativvsva.dat
+ 2011-10-26 01:59 . 2011-10-26 01:59 120320 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atitmm64.dll
+ 2011-10-26 01:59 . 2011-10-26 01:59 356352 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atipdlxx.dll
+ 2011-10-26 01:59 . 2011-10-26 01:59 423424 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atipdl64.dll
+ 2010-08-27 18:33 . 2010-08-27 18:33 332800 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ATIODE.exe
+ 2011-10-26 01:21 . 2011-10-26 01:21 326656 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atikmpag.sys
+ 2011-08-30 14:33 . 2011-08-30 14:33 239869 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiicdxx.dat
+ 2011-10-26 02:00 . 2011-10-26 02:00 204288 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiesrxx.exe
+ 2011-10-26 02:01 . 2011-10-26 02:01 517120 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atieclxx.exe
+ 2011-10-26 02:01 . 2011-10-26 02:01 466944 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\ATIDEMGX.dll
+ 2011-10-26 02:04 . 2011-10-26 02:04 892416 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticfx64.dll
+ 2011-10-26 02:05 . 2011-10-26 02:05 748544 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\aticfx32.dll
+ 2009-05-11 21:35 . 2009-05-11 21:35 118784 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atibtmon.exe
+ 2011-10-26 02:06 . 2011-10-26 02:06 159744 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiapfxx.exe
+ 2011-10-26 01:22 . 2011-10-26 01:22 339968 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiadlxy.dll
+ 2011-10-26 01:22 . 2011-10-26 01:22 486912 c:\windows\system32\DriverStore\FileRepository\c7128243.inf_amd64_neutral_e8689e621d43b823\B127441\atiadlxx.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 278528 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\Oemdspif.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 120320 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atitmm64.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 356352 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atipdlxx.dll
+ 2011-09-08 17:28 . 2011-09-08 17:28 423424 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atipdl64.dll
+ 2010-08-27 18:33 . 2010-08-27 18:33 332800 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\ATIODE.exe
+ 2011-09-08 16:52 . 2011-09-08 16:52 310784 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atikmpag.sys
+ 2011-08-26 14:34 . 2011-08-26 14:34 239869 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiicdxx.dat
+ 2011-09-08 17:29 . 2011-09-08 17:29 204288 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiesrxx.exe
+ 2011-09-08 17:30 . 2011-09-08 17:30 486912 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atieclxx.exe
+ 2011-09-08 17:30 . 2011-09-08 17:30 466944 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\ATIDEMGX.dll
+ 2011-09-08 17:32 . 2011-09-08 17:32 862720 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticfx64.dll
+ 2011-09-08 17:34 . 2011-09-08 17:34 732672 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\aticfx32.dll
+ 2009-05-11 21:35 . 2009-05-11 21:35 118784 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atibtmon.exe
+ 2011-09-08 17:34 . 2011-09-08 17:34 151552 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiapfxx.exe
+ 2011-09-08 16:53 . 2011-09-08 16:53 270336 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiadlxy.dll
+ 2011-09-08 16:53 . 2011-09-08 16:53 381952 c:\windows\system32\DriverStore\FileRepository\c7125030.inf_amd64_neutral_6597b0934774b2df\B125297\atiadlxx.dll
+ 2009-07-14 00:06 . 2009-07-14 01:39 229376 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_b39fd144c3c86206\fsquirt.exe
+ 2012-08-20 21:54 . 2012-07-06 19:58 552448 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_b39fd144c3c86206\bthport.sys
- 2009-07-14 05:31 . 2011-07-31 16:00 399360 c:\windows\system32\DriverStore\drvindex.dat
+ 2009-07-14 05:31 . 2012-08-21 08:15 399360 c:\windows\system32\DriverStore\drvindex.dat
+ 2011-10-01 07:30 . 2011-10-01 07:30 268648 c:\windows\system32\drivers\Sftplaylh.sys
+ 2011-10-01 07:30 . 2011-10-01 07:30 764264 c:\windows\system32\drivers\Sftfslh.sys
+ 2012-06-13 20:19 . 2012-04-28 03:50 204800 c:\windows\system32\drivers\rdpwd.sys
- 2009-07-14 00:16 . 2009-07-14 00:16 204800 c:\windows\system32\drivers\rdpwd.sys
+ 2012-07-11 14:07 . 2012-06-02 05:38 152432 c:\windows\system32\drivers\ksecpkg.sys
+ 2010-12-21 11:47 . 2010-12-21 11:47 125296 c:\windows\system32\drivers\epfwwfpr.sys
+ 2010-12-21 13:04 . 2010-12-21 13:04 141264 c:\windows\system32\drivers\ehdrv.sys
- 2010-07-29 11:31 . 2010-07-29 11:31 141264 c:\windows\system32\drivers\ehdrv.sys
+ 2010-12-21 13:04 . 2010-12-21 13:04 170640 c:\windows\system32\drivers\eamonm.sys
+ 2012-07-11 14:07 . 2012-06-02 05:37 459216 c:\windows\system32\drivers\cng.sys
+ 2010-10-08 06:55 . 2010-10-08 06:55 195584 c:\windows\system32\drivers\atikmpag.sys
+ 2012-02-16 13:56 . 2011-12-28 03:59 499200 c:\windows\system32\drivers\afd.sys
+ 2012-05-13 13:01 . 2012-03-03 06:29 320512 c:\windows\system32\d3d10_1core.dll
- 2011-01-12 15:22 . 2010-11-02 05:12 320512 c:\windows\system32\d3d10_1core.dll
- 2011-06-16 18:54 . 2011-01-17 06:17 197120 c:\windows\system32\d3d10_1.dll
+ 2012-05-13 13:01 . 2012-03-03 06:29 197120 c:\windows\system32\d3d10_1.dll
- 2011-03-09 14:13 . 2011-02-19 06:36 902656 c:\windows\system32\d2d1.dll
+ 2012-05-13 13:01 . 2012-03-03 06:29 902656 c:\windows\system32\d2d1.dll
+ 2012-06-13 20:18 . 2012-04-24 05:59 182272 c:\windows\system32\cryptsvc.dll
+ 2012-06-13 20:18 . 2012-04-24 05:59 140288 c:\windows\system32\cryptnet.dll
+ 2009-07-14 05:38 . 2012-05-08 00:31 262144 c:\windows\system32\config\systemprofile\ntuser.dat
- 2009-07-14 05:38 . 2010-11-19 08:10 262144 c:\windows\system32\config\systemprofile\ntuser.dat
- 2009-07-14 05:12 . 2011-06-30 08:39 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 05:12 . 2012-07-22 15:48 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2012-04-05 20:34 . 2012-04-05 20:34 187392 c:\windows\system32\clinfo.exe
+ 2012-08-20 09:41 . 2012-07-04 22:01 136704 c:\windows\system32\browser.dll
+ 2011-06-11 00:15 . 2011-06-11 00:15 158536 c:\windows\system32\atl100.dll
- 2011-01-07 13:02 . 2011-01-07 13:02 158536 c:\windows\system32\atl100.dll
+ 2012-04-06 01:29 . 2012-04-06 01:29 204952 c:\windows\system32\ativvsvl.dat
+ 2012-04-06 01:29 . 2012-04-06 01:29 157144 c:\windows\system32\ativvsva.dat
+ 2010-10-08 06:55 . 2010-10-08 06:55 120320 c:\windows\system32\atitmm64.dll
- 2011-07-28 21:34 . 2011-07-28 21:34 120320 c:\windows\system32\atitmm64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 421376 c:\windows\system32\atipdl64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 332288 c:\windows\system32\ATIODE.exe
+ 2010-10-08 06:55 . 2010-10-08 06:55 202234 c:\windows\system32\atiicdxx.dat
+ 2012-04-06 02:16 . 2010-10-08 06:55 202752 c:\windows\system32\atiesrxx.exe
+ 2012-04-06 02:16 . 2010-10-08 06:55 455168 c:\windows\system32\atieclxx.exe
+ 2012-04-06 02:16 . 2010-10-08 06:55 446464 c:\windows\system32\ATIDEMGX.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 553472 c:\windows\system32\aticfx64.dll
+ 2010-10-08 06:55 . 2010-10-08 06:55 143360 c:\windows\system32\atiapfxx.exe
+ 2012-04-06 01:11 . 2010-10-08 06:55 334336 c:\windows\system32\atiadlxx.dll
- 2010-12-26 15:06 . 2011-04-16 01:27 262144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2010-12-26 15:06 . 2012-02-18 11:59 262144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2011-11-26 11:30 . 2012-02-18 12:33 262144 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 05:01 . 2012-09-09 09:30 339644 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-15 12:01 . 2011-12-15 12:01 226600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-04-06 14:48 . 2011-04-06 14:48 236880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Net.dll
+ 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 156440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
+ 2011-12-15 12:01 . 2011-12-15 12:01 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2011-12-26 04:47 . 2011-12-26 04:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
+ 2011-05-17 08:08 . 2011-05-17 08:08 578896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
- 2010-03-18 13:27 . 2010-03-18 13:27 578896 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
+ 2012-05-13 13:01 . 2012-04-06 00:45 172128 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
+ 2012-01-10 20:39 . 2011-12-26 19:08 745232 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
+ 2012-06-13 20:19 . 2012-04-23 22:38 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-05-13 13:01 . 2012-01-04 02:48 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-04-06 14:48 . 2011-04-06 14:48 236880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Net.dll
+ 2012-04-21 09:03 . 2012-04-21 09:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-26 03:39 . 2011-12-26 03:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2011-05-17 07:27 . 2011-05-17 07:27 413520 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 11:08 . 2011-12-15 11:08 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-05-13 13:01 . 2012-04-06 00:49 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2012-01-10 20:39 . 2011-12-26 19:13 437008 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2012-06-13 20:19 . 2012-04-23 22:37 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-05-13 13:01 . 2012-01-04 02:51 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-05-13 13:01 . 2012-01-04 02:51 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2012-05-13 13:01 . 2012-01-04 02:51 996112 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2011-08-11 01:04 . 2011-08-11 01:04 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-06-14 01:11 . 2012-06-14 01:11 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll