prosím o kontrolu.občas se mírně seká notebook

[Márty84]

Dejte novy log z RSIT

[xtoncekx]

Logfile of random's system information tool 1.09 (written by random/random)
Run by ACER at 2014-03-23 16:18:08
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 44 GB (30%) free of 148 GB
Total RAM: 3066 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:18:25, on 23.3.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16540)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\conime.exe
C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\Explorer.exe
C:\Users\ACER\Desktop\RSIT.exe
C:\Program Files\trend micro\ACER.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - HKUS\S-1-5-21-1955701762-1772253553-2218349715-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1955701762-1772253553-2218349715-1003\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1955701762-1772253553-2218349715-1003\..\RunOnce: [AcerScrSav] C:\Windows\Acer\run_NB.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
O20 - Winlogon Notify: spba - C:\Program Files\Common Files\SPBA\homefus2.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: DokanMounter - Unknown owner - C:\Program Files\Dokan\DokanLibrary\mounter.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
O23 - Service: IMPI Updater - Unknown owner - C:\Program Files\IMPI\ExtensionUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton AntiVirus - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 8387 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\f5zpykzg.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{17E113E6-CD0E-4045-B154-65F0E57959EF}"=C:\Program Files\IMPI\Firefox
"{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader Peppe rFlash Video Shim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51]
"Description"=RealPlayer Download Plugin
"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@realnetworks.com/npdlplugin;version=1]
"Description"=RealDownloader Plugin
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll


C:\Program Files\Mozilla Firefox\plugins\
libdivx.dll
npdivx32.dll
npdivx32.xpt
nppl3260.dll
nppl3260.xpt
nprpplugin.dll
ssldivx.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\IPSBHO.DLL [2013-02-21 107896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]
ShowBarObj Class - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-05-14 312880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-05-14 142896]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2013-12-27 295512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2008-05-07 6139904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Real\RealPlayer\update\realsched.exe [2013-12-27 295512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2013-12-13 831488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acer VCM.lnk]
C:\PROGRA~1\Acer\ACERVC~1\AcerVCM.exe [2008-03-05 1216512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AVer HID Receiver.lnk]
C:\PROGRA~1\COMMON~1\AVERME~1\AVERQU~1\AVERHI~1.EXE [2008-04-08 163840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AVerQuick.lnk]
C:\PROGRA~1\COMMON~1\AVERME~1\AVERQU~1\AVERQU~1.EXE [2008-04-10 593920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2008-04-23 727592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AWinNotifyVitaKey MC3000]
C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll [2008-12-16 3197952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\spba]
C:\Program Files\Common Files\SPBA\homefus2.dll [2008-03-25 567560]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableCAD"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr"
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe"="C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.sl_anet"=sl_anet.acm
"msacm.divxa32"=divxa32.acm
"vidc.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"VIDC.MKVC"=KMVIDC32.DLL
"wave4"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-03-23 13:21:25 ----A---- C:\ComboFix.txt
2014-03-23 13:15:19 ----D---- C:\$RECYCLE.BIN
2014-03-23 12:59:33 ----A---- C:\Windows\zip.exe
2014-03-23 12:59:33 ----A---- C:\Windows\SWSC.exe
2014-03-23 12:59:33 ----A---- C:\Windows\SWREG.exe
2014-03-23 12:59:33 ----A---- C:\Windows\sed.exe
2014-03-23 12:59:33 ----A---- C:\Windows\PEV.exe
2014-03-23 12:59:33 ----A---- C:\Windows\NIRCMD.exe
2014-03-23 12:59:33 ----A---- C:\Windows\MBR.exe
2014-03-23 12:59:33 ----A---- C:\Windows\grep.exe
2014-03-23 12:59:23 ----D---- C:\Qoobox
2014-03-23 12:58:54 ----D---- C:\Windows\erdnt
2014-03-17 18:25:35 ----D---- C:\AdwCleaner
2014-03-17 17:58:46 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-03-15 17:05:16 ----D---- C:\rsit
2014-03-15 01:50:01 ----A---- C:\Windows\system32\drivers\tStLib.sys
2014-03-12 17:05:53 ----A---- C:\Windows\system32\mshtmled.dll
2014-03-12 17:05:52 ----A---- C:\Windows\system32\vbscript.dll
2014-03-12 17:05:50 ----A---- C:\Windows\system32\ieui.dll
2014-03-12 17:05:49 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-12 17:05:48 ----A---- C:\Windows\system32\wininet.dll
2014-03-12 17:05:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-12 17:05:48 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-12 17:05:47 ----A---- C:\Windows\system32\jscript.dll
2014-03-12 17:05:46 ----A---- C:\Windows\system32\url.dll
2014-03-12 17:05:46 ----A---- C:\Windows\system32\jscript9.dll
2014-03-12 17:05:45 ----A---- C:\Windows\system32\iertutil.dll
2014-03-12 17:05:43 ----A---- C:\Windows\system32\urlmon.dll
2014-03-12 17:05:41 ----A---- C:\Windows\system32\ieframe.dll
2014-03-12 17:05:38 ----A---- C:\Windows\system32\mshtml.dll
2014-03-11 22:24:54 ----A---- C:\Windows\system32\win32k.sys
2014-03-11 22:24:51 ----A---- C:\Windows\system32\qedit.dll
2014-03-11 22:24:49 ----A---- C:\Windows\system32\wer.dll
2014-03-11 22:24:36 ----A---- C:\Windows\system32\tzres.dll
2014-02-26 16:55:33 ----D---- C:\Windows\Migration
2014-02-25 18:35:55 ----HD---- C:\Program Files\Common Files\EAInstaller
2014-02-24 20:55:08 ----D---- C:\ProgramData\Boss Media

======List of files/folders modified in the last 1 month======

2014-03-23 16:18:21 ----D---- C:\Windows\Prefetch
2014-03-23 16:18:11 ----D---- C:\Program Files\trend micro
2014-03-23 16:18:06 ----D---- C:\Windows\temp
2014-03-23 13:21:29 ----D---- C:\Windows\system32\drivers
2014-03-23 13:15:47 ----D---- C:\Windows
2014-03-23 13:15:47 ----A---- C:\Windows\system.ini
2014-03-23 13:15:14 ----D---- C:\Windows\system32\drivers\etc
2014-03-23 13:15:09 ----D---- C:\Windows\inf
2014-03-23 13:15:04 ----D---- C:\Windows\system32\Tasks
2014-03-23 13:08:29 ----D---- C:\Windows\System32
2014-03-23 13:08:29 ----D---- C:\Windows\AppPatch
2014-03-23 13:08:27 ----D---- C:\Program Files\Common Files
2014-03-23 13:00:23 ----SHD---- C:\System Volume Information
2014-03-21 18:56:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-19 19:58:03 ----D---- C:\Program Files
2014-03-18 20:57:21 ----D---- C:\Windows\system32\MRT
2014-03-18 20:53:59 ----D---- C:\Windows\Debug
2014-03-18 20:53:55 ----A---- C:\Windows\system32\mrt.exe
2014-03-18 20:41:22 ----D---- C:\Windows\Driver Cache
2014-03-18 15:17:10 ----D---- C:\Windows\system32\LogFiles
2014-03-17 18:26:54 ----D---- C:\Program Files\Mozilla Firefox
2014-03-15 16:54:26 ----D---- C:\Hry
2014-03-15 16:54:22 ----D---- C:\ProgramData\Electronic Arts
2014-03-12 17:41:35 ----D---- C:\Windows\rescache
2014-03-12 17:23:16 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-12 17:21:42 ----D---- C:\Windows\system32\migration
2014-03-12 17:21:38 ----D---- C:\Program Files\Internet Explorer
2014-03-12 17:07:06 ----D---- C:\Windows\winsxs
2014-03-12 17:06:29 ----D---- C:\Windows\system32\catroot
2014-03-12 17:06:26 ----D---- C:\Windows\system32\catroot2
2014-03-12 17:05:35 ----SHD---- C:\Windows\Installer
2014-03-12 17:03:26 ----D---- C:\Windows\system32\cs-CZ
2014-03-11 21:18:22 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-03-10 15:48:41 ----D---- C:\Windows\SoftwareDistribution
2014-03-04 20:30:29 ----D---- C:\Program Files\Full Tilt Poker
2014-03-01 10:19:18 ----D---- C:\Users\ACER\AppData\Roaming\DAEMON Tools Lite
2014-03-01 10:19:14 ----D---- C:\Windows\Logs
2014-02-27 06:51:23 ----D---- C:\Windows\Microsoft.NET
2014-02-26 16:57:09 ----D---- C:\Windows\system32\en-US
2014-02-26 16:55:33 ----SD---- C:\ProgramData\Microsoft
2014-02-25 20:09:05 ----D---- C:\ProgramData\Origin
2014-02-25 18:35:12 ----RSD---- C:\Windows\assembly
2014-02-24 20:55:08 ----D---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AlfaFF;AlfaFF File System mini-filter; C:\Windows\system32\Drivers\AlfaFF.sys [2008-12-16 42608]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-07-20 324120]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\Windows\System32\drivers\prohlp02.sys [2004-08-09 114016]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\Windows\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PSDFilter;PSDFilter; C:\Windows\system32\DRIVERS\psdfilter.sys [2008-05-14 18992]
R0 sfhlp01;StarForce Protection Helper Driver; C:\Windows\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NAV\1000000.07D\SYMEFA.SYS [2013-02-21 309296]
R0 UBHelper;UBHelper; C:\Windows\system32\drivers\UBHelper.sys [2008-01-30 13824]
R1 BHDrvx86;Symantec Heuristics Driver; \??\C:\Windows\system32\drivers\NAV\1000000.07D\BHDrvx86.sys [2013-02-21 254512]
R1 ccHP;Symantec Hash Provider; \??\C:\Windows\system32\drivers\NAV\1000000.07D\ccHPx86.sys [2013-02-21 362544]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-12-01 243128]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2013-12-24 376920]
R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20140321.001\IDSvix86.sys [2014-02-25 395992]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-08-09 53920]
R1 SRTSPX;SRTSPX; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SRTSPX.SYS [2013-02-21 43696]
R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2013-02-21 25136]
R1 SYMTDI;SYMTDI; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SYMTDI.SYS [2013-02-21 198192]
R1 tStLib;tStLib; C:\Windows\system32\drivers\tStLib.sys [2014-03-15 55232]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [2008-07-18 61424]
R2 Dokan;Dokan; \??\C:\Windows\system32\drivers\dokan.sys [2011-01-10 95744]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2007-01-26 69632]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 50704]
R2 NTIPPKernel;NTIPPKernel; \??\C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368]
R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-05-14 16944]
R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-05-14 60464]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
R3 AVerBDA6x;AVerBDA6x service; C:\Windows\system32\DRIVERS\AVerBDA716x.sys [2008-03-13 932864]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-11-19 108120]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-03-25 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-03-25 207872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-07 2134424]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2009-08-05 48640]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20140322.002\NAVENG.SYS [2014-03-07 93272]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20140322.002\NAVEX15.SYS [2014-03-07 1612376]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2012-07-03 149352]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-12-29 8904632]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2008-06-23 62464]
R3 SRTSP;SRTSP; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SRTSP.SYS [2013-02-21 305712]
R3 SYMDNS;SYMDNS; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SYMDNS.SYS [2013-02-21 12976]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-02-21 124464]
R3 SYMFW;SYMFW; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SYMFW.SYS [2013-02-21 89904]
R3 SYMNDISV;SYMNDISV; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SYMNDISV.SYS [2013-02-21 40496]
R3 SYMREDRV;SYMREDRV; \??\C:\Windows\system32\drivers\NAV\1000000.07D\SYMREDRV.SYS [2013-02-21 24752]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-04-25 199472]
R3 TcUsb;TC USB Kernel Driver; C:\Windows\System32\Drivers\tcusb.sys [2008-04-28 50576]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-03-25 661504]
R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S1 prodrv03;Star Force copy protection driver v3; C:\Windows\System32\drivers\prodrv03.sys [2012-01-03 115968]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-05-19 912384]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BthPort;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-02-14 80424]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-07-16 80936]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-07-16 16168]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 mbr;mbr; \??\C:\Users\ACER\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVerRemote;AVerRemote; C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe [2008-04-08 348160]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-04-08 393216]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-01-16 81504]
R2 DokanMounter;DokanMounter; C:\Program Files\Dokan\DokanLibrary\mounter.exe [2011-01-10 14848]
R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-05-14 500784]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-06-02 24576]
R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-10-16 860160]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-07-20 354840]
R2 IGBASVC;iGroupTec Service; C:\Program Files\Acer\Acer Bio Protection\BASVC.exe [2008-12-16 3602432]
R2 IMPI Updater;IMPI Updater; C:\Program Files\IMPI\ExtensionUpdaterService.exe [2013-02-05 185856]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592]
R2 Norton AntiVirus;Norton AntiVirus; C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe [2013-02-21 115560]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-12-29 639928]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-29 1260472]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-12-28 66872]
R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-10-16 466944]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2008-01-10 233472]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2008-12-22 104944]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 Folding@home-CPU-[1];Folding@home-CPU-[1]; C:\Folding@HomeCPU\1\Fah.exe [2012-01-25 422400]
S4 Folding@home-CPU-[2];Folding@home-CPU-[2]; C:\Folding@HomeCPU\2\Fah.exe [2012-01-25 422400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2007-01-09 272024]

-----------------EOF-----------------

[Márty84]

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

[xtoncekx]

OTL Extras logfile created on: 23.3.2014 16:59:35 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\ACER\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,99 Gb Total Physical Memory | 1,68 Gb Available Physical Memory | 55,98% Memory free
6,19 Gb Paging File | 4,90 Gb Available in Paging File | 79,26% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,04 Gb Total Space | 43,15 Gb Free Space | 29,96% Space Free | Partition Type: NTFS
Drive D: | 140,50 Gb Total Space | 30,06 Gb Free Space | 21,40% Space Free | Partition Type: NTFS

Computer Name: ACER-PC | User Name: ACER | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_USERS\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu -- (Egis Incorporated.)
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption -- ( Egis Incorporated.)
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption -- ( Egis Incorporated.)
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr -- (Egis Incorporated.)
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu -- (Egis Incorporated.)
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr
"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe" = C:\Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr -- (Egis Incorporated.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{13EB63FB-36D5-4D5B-B476-3AEB36FB8CE2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2B6AA5C9-6DA7-499C-9AD7-4BA146B2CB3E}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{3455632F-E59F-4754-8D37-273145A5D89D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3AF8FB9D-43A8-4729-ABFF-9E3BF3FF35D8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3F31B14E-8F7C-498B-BEED-61F8B98B6C26}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{578E291A-D02C-4C0D-B5A2-A177AFC63258}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6A6C01C5-0776-40AB-883D-3ACC51F41F9C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{7F4FA67E-4990-40FE-A7EF-D6D6AE664906}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{81859850-7045-438A-BCBC-AE5774C0D49D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8E763FC9-7C38-4DBC-BB09-E8CE9DA49DA7}" = rport=10243 | protocol=6 | dir=out | app=system |
"{9AF032D2-D3A6-43CE-820F-883C150C32BE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9C98711D-8DB3-42C4-A683-56EA61191525}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{A31F21EB-FA52-40F0-934D-D1C106DA26D2}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A9228241-00C4-4544-9B7B-F47A1FAA1342}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{AD13F6F7-73EA-4CF7-8413-2B41641A5616}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{BAD482D1-1708-49EC-BFCC-7DDF8DD8ECE2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CB00D187-01A2-4B4F-AAAF-ED386BAFA42A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0046F00E-E21F-4442-9E2D-2DDF5C90FD82}" = dir=in | app=c:\program files\acer\acer vcm\vc.exe |
"{048D9AE0-099C-4D3A-A145-8E9338A356A4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{090819E2-D5F9-4D46-9375-7088455D0D6A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0E5EDB4A-ACE1-4EB8-82B3-A953874EE4D1}" = dir=in | app=c:\program files\acer arcade deluxe\acer arcade deluxe\acer arcade deluxe.exe |
"{165DB2A2-74BC-4611-B309-BEA0540F0847}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{22F97E53-AC38-4F88-A420-C87CE43B18C9}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{271C58B4-69CF-4A21-91E8-74AD6A52C38C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{3423C451-F561-4622-B302-22EA2448413D}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{365D05F4-BAF9-4D58-A273-C1042B492594}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{370DDA7B-BA9F-4C96-A92B-610B15273EE5}" = dir=in | app=c:\program files\acer arcade deluxe\playmovie\playmovie.exe |
"{3A1E83FA-DF92-48BC-8A27-A8D901F9D4AE}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{3ED18CE1-9B42-4DC9-A618-5F9786C8946C}" = dir=in | app=c:\program files\file type assistant\tsassist.exe |
"{48080FE5-837E-4AC8-AA22-36D71DEAD0BB}" = protocol=6 | dir=in | app=c:\program files\rockstar games\gta san andreas\gta_sa.exe |
"{4F16E349-74E0-44F8-823E-E1A62C70824D}" = protocol=6 | dir=in | app=c:\program files\rockstar games\gta san andreas\samp.exe |
"{4FA80849-9C82-4B82-A5EF-7140A64797CE}" = protocol=6 | dir=out | app=system |
"{5241056F-36A0-46A5-ABB6-CBB0B64EF83B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{5A49DEF4-46C3-4A62-8ABC-F49C921E6CAA}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"{659D87B3-4D5F-4A18-A89B-377DF7A2C370}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6B0E3D81-2A8D-4AB1-AE18-C8B3C74AC976}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{79F5970B-9571-4773-81EB-69ED9D64099B}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{8B7ADFF0-14C5-4600-A5C0-BDE69C5EE978}" = dir=in | app=c:\program files\file type assistant\tsassist.exe |
"{A0225218-98B3-4262-B56F-8485A5A2AD38}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AF64DB95-5682-450C-B02D-5A367ED8BF54}" = protocol=17 | dir=in | app=c:\program files\rockstar games\gta san andreas\samp.exe |
"{B836FA60-5FF8-43B0-9B10-4F706D0C84A0}" = dir=in | app=c:\program files\acer arcade deluxe\playmovie\pmvservice.exe |
"{C79F959B-D316-4F93-BC93-799EEFF468FE}" = dir=in | app=c:\program files\acer arcade deluxe\homemedia\homemedia.exe |
"{D3843862-4FB2-4A8A-B6DC-619C52DCDCE9}" = protocol=17 | dir=in | app=c:\program files\rockstar games\gta san andreas\gta_sa.exe |
"{D73FDF8E-033A-43D4-86E1-0657D1135F2A}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{DBA19A34-2F2C-4E9D-8AA4-F76A99ED6FFF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DF42727B-69FC-42B1-8FEA-DE40D5E302B9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E2A6389A-25F4-4869-8C0A-756E539D7C48}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{E5938B41-1ED8-473C-BB69-C42DF638E872}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{EC02A872-6C9E-40FE-A029-D2E57A8F9B34}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{ED226DDB-78BD-4752-BFF9-0E36A598A812}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{F300F8D2-9B15-467F-B6E6-1AEBFC45F0E7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F8D21454-CD4C-4B19-99FC-6DE335D0C1CD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{FB4F7650-6038-4B03-B8C8-F48C3958C87A}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{FE7CBFC0-C7F8-4BC8-81F7-6FE8EAE425A8}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"TCP Query User{278EA3BB-283F-4FF6-BEBE-C72FD3C386C3}C:\windows\system32\dplaysvr.exe" = protocol=6 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"TCP Query User{29F8CFA2-A58E-467F-879B-5BEC3886B3E6}E:\unrealtournament\system\unrealtournament.exe" = protocol=6 | dir=in | app=e:\unrealtournament\system\unrealtournament.exe |
"TCP Query User{3B2BBD7D-12CB-47EE-B730-581870A89BD0}E:\return to castle wolfenstein\wolfmp.exe" = protocol=6 | dir=in | app=e:\return to castle wolfenstein\wolfmp.exe |
"TCP Query User{71514AB3-FD07-4445-81B7-78024C964D37}G:\age of empires iii\age3x.exe" = protocol=6 | dir=in | app=g:\age of empires iii\age3x.exe |
"TCP Query User{812970F0-1F5A-4AD9-B318-A11D7D70D3AF}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{84D52B8E-2C14-4DD9-8967-65440E38DC75}F:\doom3.exe" = protocol=6 | dir=in | app=f:\doom3.exe |
"TCP Query User{A032C1BA-ADAD-486A-A82A-A2EC677264F0}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{B596A220-FE80-42A0-A82A-717BF434B20F}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"TCP Query User{B96CFBD8-B908-4897-87E7-D6FB06842E20}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{094233F8-C68C-4596-80F6-45BFC5FD79F0}C:\windows\system32\dplaysvr.exe" = protocol=17 | dir=in | app=c:\windows\system32\dplaysvr.exe |
"UDP Query User{2F2DB2F9-EA1D-450B-82D9-DCA4354F0D71}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{306ED702-5145-496F-8FE9-A1446C3EF7FD}E:\unrealtournament\system\unrealtournament.exe" = protocol=17 | dir=in | app=e:\unrealtournament\system\unrealtournament.exe |
"UDP Query User{4ECB4A6E-27D4-4FEB-83DB-B533AFBA6106}E:\return to castle wolfenstein\wolfmp.exe" = protocol=17 | dir=in | app=e:\return to castle wolfenstein\wolfmp.exe |
"UDP Query User{64780329-E1C9-4D1C-82B0-791E9F62F40E}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |
"UDP Query User{68A1B91F-72BA-4942-915D-638E7B95161C}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe |
"UDP Query User{7F9060E0-A175-41E4-A09C-7304DC0E2A76}G:\age of empires iii\age3x.exe" = protocol=17 | dir=in | app=g:\age of empires iii\age3x.exe |
"UDP Query User{B9363FE8-63CF-463A-888E-CA38587498C5}F:\doom3.exe" = protocol=17 | dir=in | app=f:\doom3.exe |
"UDP Query User{EB3E751E-4BE3-4774-B497-09D34BF15458}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = WIDCOMM Bluetooth Software 6.0.1.6400
"{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{10F498FF-5392-4DF3-8F73-FE172A9F3800}" = Winbond CIR Device Drivers
"{11316260-6666-467B-AC34-183FCB5D4335}" = Acer Mobility Center Plug-In
"{123F4E9B-80E6-3A84-BDD4-3CB3AC59ABF0}" = Microsoft .NET Framework 4.5.1 (CSY)
"{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
"{13D85C14-2B85-419F-AC41-C7F21E68B25D}" = Acer eSettings Management
"{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"{17E113E6-CD0E-4045-B154-65F0E57959EF}_is1" = IMPI 2.0.0.429
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812}_is1" = World of Tanks
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Acer Arcade Deluxe
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 16
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 45
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{35C0A1E4-D02A-412C-841F-266DBB116ABB}" = Software Intel(R) PROSet/Wireless WiFi
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5454083B-1308-4485-BF17-1110000B8301}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000B8302}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8302}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8303}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8304}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8305}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8306}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8307}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8308}" = Grand Theft Auto IV
"{57265292-228A-41FA-9AEC-4620CBCC2739}" = Acer eAudio Management
"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management
"{5B63A470-9334-44D1-AF61-6CE2DB565AE9}" = Orion
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6AE22174-4FFA-4572-B692-31F0C386ED38}" = Consolas Font Family
"{6F9D5A0B-202C-4161-BC7F-0664EA39E7E7}" = NVIDIA PhysX (Legacy)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}" = Zuma Deluxe
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111118433}" = Mystery Case Files - Huntsville
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111324990}" = Kick N Rush
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111692950}" = Mahjongg Artifacts
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111771833}" = Jewel Quest Solitaire
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}" = Mystery Solitaire - Secret Island
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology
"{8F5A0981-5CDC-41D0-BCA2-AD3B777FC358}" = Thrustmaster Force Feedback Driver
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{0B7A4B67-2A38-42B1-9857-662FAB361E08}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{FDF9A959-241A-4662-A8DE-7DED9C22D160}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_HOMESTUDENTR_{A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_HOMESTUDENTR_{3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management
"{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}" = Acer Crystal Eye Webcam 2.0.8
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 310.90
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 310.90
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.3.18.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" = TuneUp Utilities 2013
"{C73B5B3B-F974-48CA-8B91-3E8A432AEA5B}" = Microsoft Works
"{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}" = RealDownloader
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DD73CA82-EA82-38AA-863D-9A24A018DC96}" = Microsoft .NET Framework 3.5 Language Pack SP1 - csy
"{E0363CCC-3535-4BAA-9F2C-200F548675D6}" = TuneUp Utilities Language Pack (cs-CZ)
"{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{ECCD28B2-8798-4D16-8126-625D728294A1}" = SPBA 5.8
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}" = Vista Codec Package
"Acer Acer Bio Protection 6.0.00.17" = Acer Bio Protection

AAU 6.0.00.17
"Acer GameZone Console_is1" = Acer GameZone Console 2.0.1.1
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE
"AVerMedia HC82 Express-Card Hybrid Analog" = AVerMedia HC82 Express-Card Hybrid Analog 1.3.0.41
"AVerMedia MCE Encoder x86" = AVerMedia MCE Encoder x86 3.2.1.84
"AVerMedia Media Center Plug-ins" = AVerMedia Media Center Plug-ins
"AviSynth" = AviSynth 2.5
"CCleaner" = CCleaner
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"DAEMON Tools Lite" = DAEMON Tools Lite
"DokanLibrary" = Dokan Library 0.6.0
"Explorer Suite_is1" = Explorer Suite III
"GridVista" = Acer GridVista
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
"InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
"InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Acer Arcade Deluxe
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"InstallShield_{E28B1E6F-E0AA-4228-AB89-DB4A0C89D426}" = AVerTV
"KLiteCodecPack_is1" = K-Lite Codec Pack 9.8.0 (Basic)
"LManager" = Launch Manager
"LogonStudio Vista" = LogonStudio Vista
"Microsoft .NET Framework 3.5 Language Pack SP1 - csy" = Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 27.0.1 (x86 cs)" = Mozilla Firefox 27.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mp3 Knife_is1" = Mp3 Knife 3.2
"NAV" = Norton AntiVirus
"Plus500" = Plus500
"PokerStars" = PokerStars
"Port Royale 2" = Port Royale 2
"ProInst" = Intel PROSet Wireless
"PunkBusterSvc" = PunkBuster Services
"RealPlayer 16.0" = RealPlayer
"Room Arranger" = Room Arranger
"Scorpions WinCheater 2.07 (s databází 129)_is1" = Scorpions WinCheater
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR
"ZonerPhotoStudio16_CZ_is1" = Zoner Photo Studio 16

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22.3.2014 12:23:26 | Computer Name = ACER-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.3.2014 2:36:15 | Computer Name = ACER-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.3.2014 7:12:20 | Computer Name = ACER-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.3.2014 8:14:57 | Computer Name = ACER-PC | Source = WinMgmt | ID = 10
Description =

Error - 23.3.2014 8:16:38 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.3.2014 8:16:38 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.3.2014 8:20:43 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.3.2014 8:20:43 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.3.2014 8:21:37 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error - 23.3.2014 8:21:37 | Computer Name = ACER-PC | Source = SideBySide | ID = 16842785
Description = Generování kontextu aktivace pro C:\Windows\Installer\{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}\recordingmanager.exe
se nezdařilo. Závislé sestavení rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"
nelze najít. Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

[ System Events ]
Error - 23.3.2014 7:12:20 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7026
Description =

Error - 23.3.2014 8:00:50 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 23.3.2014 8:02:06 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 23.3.2014 8:02:06 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 23.3.2014 8:02:06 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 23.3.2014 8:02:06 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 23.3.2014 8:02:10 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 23.3.2014 8:08:16 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 23.3.2014 8:13:07 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 23.3.2014 8:14:58 | Computer Name = ACER-PC | Source = Service Control Manager | ID = 7026
Description =


< End of report >

[xtoncekx]

OTL logfile created on: 23.3.2014 16:59:35 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\ACER\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,99 Gb Total Physical Memory | 1,68 Gb Available Physical Memory | 55,98% Memory free
6,19 Gb Paging File | 4,90 Gb Available in Paging File | 79,26% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,04 Gb Total Space | 43,15 Gb Free Space | 29,96% Space Free | Partition Type: NTFS
Drive D: | 140,50 Gb Total Space | 30,06 Gb Free Space | 21,40% Space Free | Partition Type: NTFS

Computer Name: ACER-PC | User Name: ACER | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.03.23 16:57:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ACER\Desktop\OTL.exe
PRC - [2014.02.15 10:59:43 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.02.21 20:07:05 | 000,115,560 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
PRC - [2013.02.05 16:50:10 | 000,185,856 | ---- | M] () -- C:\Program Files\IMPI\ExtensionUpdaterService.exe
PRC - [2012.12.29 11:26:54 | 001,260,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012.12.29 09:26:22 | 001,822,136 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012.12.29 09:26:22 | 000,873,400 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2011.01.10 13:49:52 | 000,014,848 | ---- | M] () -- C:\Program Files\Dokan\DokanLibrary\mounter.exe
PRC - [2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008.12.16 16:58:17 | 003,520,512 | ---- | M] (Arachnoid Biometrics Identification Group Corp.) -- C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
PRC - [2008.12.16 16:58:08 | 003,602,432 | ---- | M] () -- C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
PRC - [2008.10.16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe
PRC - [2008.10.16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2008.07.20 10:45:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008.06.02 09:25:40 | 000,024,576 | ---- | M] () -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
PRC - [2008.05.14 16:05:30 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
PRC - [2008.04.08 18:03:29 | 000,393,216 | R--- | M] () -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2008.04.08 15:03:19 | 000,348,160 | R--- | M] (AVerMedia) -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2008.03.25 15:25:06 | 000,050,952 | ---- | M] (UPEK Inc.) -- C:\Program Files\Common Files\SPBA\upeksvr.exe
PRC - [2008.01.16 18:35:02 | 000,081,504 | ---- | M] () -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
PRC - [2008.01.10 17:03:00 | 000,233,472 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer VCM\RS_Service.exe
PRC - [2007.12.06 15:15:28 | 000,110,592 | ---- | M] () -- C:\ACER\Mobility Center\MobilityService.exe


========== Modules (No Company Name) ==========

MOD - [2014.02.15 10:59:41 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2008.10.11 22:18:46 | 000,319,488 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2008.09.16 20:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Services (SafeList) ==========

SRV - [2014.03.11 21:18:22 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.02.15 10:59:42 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.02.21 20:07:05 | 000,115,560 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe -- (Norton AntiVirus)
SRV - [2013.02.05 16:50:10 | 000,185,856 | ---- | M] () [Auto | Running] -- C:\Program Files\IMPI\ExtensionUpdaterService.exe -- (IMPI Updater)
SRV - [2012.12.29 11:26:54 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.01.25 12:09:25 | 000,422,400 | ---- | M] () [2]) Folding@home-CPU-[2] [Disabled | Stopped] -- C:\Folding@HomeCPU\2\Fah.exe -- (Folding@home-CPU-[2])
SRV - [2012.01.25 12:09:25 | 000,422,400 | ---- | M] () [1]) Folding@home-CPU-[1] [Disabled | Stopped] -- C:\Folding@HomeCPU\1\Fah.exe -- (Folding@home-CPU-[1])
SRV - [2011.01.10 13:49:52 | 000,014,848 | ---- | M] () [Auto | Running] -- C:\Program Files\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)
SRV - [2008.12.22 10:52:16 | 000,104,944 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2008.12.16 16:58:08 | 003,602,432 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Acer Bio Protection\BASVC.exe -- (IGBASVC)
SRV - [2008.10.16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2008.10.16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2008.07.20 10:45:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008.06.02 09:25:40 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe -- (ETService)
SRV - [2008.05.14 16:05:30 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008.04.08 18:03:29 | 000,393,216 | R--- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2008.04.08 15:03:19 | 000,348,160 | R--- | M] (AVerMedia) [Auto | Running] -- C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2008.04.07 08:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.01.16 18:35:02 | 000,081,504 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe -- (CLHNService)
SRV - [2008.01.10 17:03:00 | 000,233,472 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer VCM\RS_Service.exe -- (RS_Service)
SRV - [2007.12.06 15:15:28 | 000,110,592 | ---- | M] () [Auto | Running] -- C:\ACER\Mobility Center\MobilityService.exe -- (MobilityService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\ACER\AppData\Local\Temp\mbr.sys -- (mbr)
DRV - File not found [Kernel | On_Demand | Running] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014.03.15 01:50:01 | 000,055,232 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\tStLib.sys -- (tStLib)
DRV - [2014.03.07 02:06:08 | 001,612,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20140322.002\navex15.sys -- (NAVEX15)
DRV - [2014.03.07 02:06:08 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20140322.002\naveng.sys -- (NAVENG)
DRV - [2014.02.25 00:56:11 | 000,395,992 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20140321.001\IDSvix86.sys -- (IDSVix86)
DRV - [2013.12.24 11:07:36 | 000,376,920 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2013.12.01 13:49:32 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2013.11.19 11:52:33 | 000,108,120 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2013.02.21 20:34:07 | 000,124,464 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2013.02.21 20:07:05 | 000,362,544 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\ccHPx86.sys -- (ccHP)
DRV - [2013.02.21 20:07:05 | 000,309,296 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\SymEFA.sys -- (SymEFA)
DRV - [2013.02.21 20:07:05 | 000,305,712 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\srtsp.sys -- (SRTSP)
DRV - [2013.02.21 20:07:05 | 000,254,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\BHDrvx86.sys -- (BHDrvx86)
DRV - [2013.02.21 20:07:05 | 000,198,192 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\symtdi.sys -- (SYMTDI)
DRV - [2013.02.21 20:07:05 | 000,089,904 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\symfw.sys -- (SYMFW)
DRV - [2013.02.21 20:07:05 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\srtspx.sys -- (SRTSPX)
DRV - [2013.02.21 20:07:05 | 000,040,496 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\symndisv.sys -- (SYMNDISV)
DRV - [2013.02.21 20:07:05 | 000,025,136 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM)
DRV - [2013.02.21 20:07:05 | 000,024,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\symredrv.sys -- (SYMREDRV)
DRV - [2013.02.21 20:07:05 | 000,012,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NAV\1000000.07D\symdns.sys -- (SYMDNS)
DRV - [2012.12.29 11:26:54 | 008,904,632 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012.07.03 16:25:17 | 000,149,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2012.01.03 19:34:42 | 000,115,968 | ---- | M] (Protection Technology Co.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\prodrv03.sys -- (prodrv03)
DRV - [2011.01.10 13:49:54 | 000,095,744 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\System32\drivers\dokan.sys -- (Dokan)
DRV - [2010.01.27 03:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2009.08.05 06:18:22 | 000,048,640 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1E60x86.sys -- (L1E)
DRV - [2009.03.31 08:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008.12.16 16:58:03 | 000,042,608 | ---- | M] (Alfa Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AlfaFF.sys -- (AlfaFF)
DRV - [2008.11.17 07:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
DRV - [2008.07.18 16:05:10 | 000,061,424 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl -- ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796})
DRV - [2008.05.19 12:42:56 | 000,912,384 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008.03.13 08:18:34 | 000,932,864 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVerBDA716x.sys -- (AVerBDA6x)
DRV - [2008.01.16 18:35:08 | 000,122,368 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys -- (NTIPPKernel)
DRV - [2007.10.18 23:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007.03.28 06:51:40 | 000,043,008 | ---- | M] (Winbond Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winbondcir.sys -- (winbondcir)
DRV - [2007.01.26 07:32:18 | 000,069,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15)
DRV - [2004.08.09 12:33:26 | 000,114,016 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.08.09 12:29:28 | 000,053,920 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004.07.19 15:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp01.sys -- (sfhlp01)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=i ... lz=1I7ACAW


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded =
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache =
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=i ... 1I7GGLL_cs
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{7EE49D67-F07A-42E8-9247-328332D89466}: "URL" = http://start.funmoods.com/results.php?f ... earchTerms}
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1003\..\SearchScopes,DefaultScope =

========== FireFox ==========

FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledAddons: %7BDF153AFF-6948-45d7-AC98-4FC4AF8A08E2%7D:1.3.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{17E113E6-CD0E-4045-B154-65F0E57959EF}: C:\Program Files\IMPI\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013.12.27 06:34:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.12.27 06:33:47 | 000,000,000 | ---D | M]

[2011.05.03 19:10:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Extensions
[2011.05.03 19:10:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Extensions\songbird@songbirdnest.com
[2014.03.21 18:10:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Firefox\Profiles\f5zpykzg.default\extensions
[2013.08.27 18:41:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Firefox\Profilesf5zpykzg.default\extensions
[2013.08.27 18:41:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Firefox\Profilesf5zpykzg.default\extensions\staged
[2014.03.23 13:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.05.17 16:28:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014.02.15 10:59:43 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014.02.15 09:30:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\updated\extensions
[2014.02.15 09:30:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\updated\browser\extensions
[2014.02.15 09:31:09 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\updated\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.12.27 06:34:33 | 000,000,000 | ---D | M] (RealDownloader) -- C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT
[2013.12.27 06:33:35 | 000,124,504 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll

O1 HOSTS File: ([2014.03.23 13:15:14 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE (ZONER software)
O4 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1003..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1003..\RunOnce: [AcerScrSav] C:\Windows\ACER\run_NB.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1955701762-1772253553-2218349715-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe ()
O9 - Extra 'Tools' menuitem : Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 10.45.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.37 213.46.172.36
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{03BB6E8D-7203-4CF3-A613-33F736C22555}: DhcpNameServer = 213.46.172.37 213.46.172.36
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53ADFF44-7CED-4415-973C-870525686BCA}: DhcpNameServer = 213.46.172.37 213.46.172.36
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AWinNotifyVitaKey MC3000: DllName - (C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll) - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
O20 - Winlogon\Notify\spba: DllName - (C:\Program Files\Common Files\SPBA\homefus2.dll) - C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
O24 - Desktop WallPaper: C:\Users\ACER\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta galerie Windows Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\ACER\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta galerie Windows Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.divxa32 - C:\Windows\System32\divxa32.acm (Kristal StudioDFileDescription)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\Windows\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.MKVC - C:\Windows\System32\KMVIDC32.DLL ()
Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.03.23 16:57:56 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\ACER\Desktop\OTL.exe
[2014.03.23 13:21:27 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\temp
[2014.03.23 13:15:19 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2014.03.23 12:59:33 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014.03.23 12:59:33 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014.03.23 12:59:33 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014.03.23 12:59:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014.03.23 12:58:54 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2014.03.23 12:52:08 | 005,190,773 | R--- | C] (Swearware) -- C:\Users\ACER\Desktop\ComboFix.exe
[2014.03.17 18:25:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.03.15 17:05:16 | 000,000,000 | ---D | C] -- C:\rsit
[2014.03.15 01:50:01 | 000,055,232 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\tStLib.sys
[2014.03.12 17:05:54 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014.03.12 17:05:50 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014.03.12 17:05:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014.03.12 17:05:48 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014.03.12 17:05:48 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014.03.12 17:05:46 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014.03.12 17:05:46 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014.03.12 17:05:42 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014.03.11 22:24:54 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014.03.11 22:24:51 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2014.03.11 22:24:49 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2014.03.11 22:24:36 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014.02.26 16:55:33 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014.02.25 20:08:35 | 000,000,000 | ---D | C] -- C:\Users\ACER\Documents\FIFA 14
[2014.02.25 18:35:55 | 000,000,000 | -H-D | C] -- C:\Program Files\Common Files\EAInstaller
[2014.02.24 20:55:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Boss Media
[2014.02.24 20:55:07 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\Boss Media
[2014.02.22 09:58:08 | 000,000,000 | ---D | C] -- C:\Program Files\R.G. Catalyst

========== Files - Modified Within 30 Days ==========

[2014.03.23 17:01:51 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.03.23 16:57:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ACER\Desktop\OTL.exe
[2014.03.23 16:56:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.03.23 16:17:59 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.03.23 15:14:37 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014.03.23 15:14:37 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014.03.23 13:15:14 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2014.03.23 13:14:57 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2014.03.23 13:14:32 | 3215,847,424 | -HS- | M] () -- C:\hiberfil.sys
[2014.03.23 13:13:22 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2014.03.23 12:52:31 | 005,190,773 | R--- | M] (Swearware) -- C:\Users\ACER\Desktop\ComboFix.exe
[2014.03.21 18:56:39 | 000,645,348 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2014.03.21 18:56:39 | 000,634,512 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014.03.21 18:56:39 | 000,137,986 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2014.03.21 18:56:39 | 000,120,078 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014.03.20 19:34:35 | 003,943,424 | ---- | M] () -- C:\Users\ACER\Desktop\RogueKiller.exe
[2014.03.17 18:24:48 | 001,950,720 | ---- | M] () -- C:\Users\ACER\Desktop\adwcleaner.exe
[2014.03.17 17:59:52 | 001,647,712 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014.03.15 17:04:58 | 000,781,383 | ---- | M] () -- C:\Users\ACER\Desktop\RSIT.exe
[2014.03.15 01:50:01 | 000,055,232 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\tStLib.sys
[2014.03.11 21:18:22 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014.03.11 21:18:21 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014.03.10 15:52:11 | 000,010,862 | ---- | M] () -- C:\Users\ACER\Documents\cc_20140310_155155.reg
[2014.03.07 22:41:28 | 000,000,702 | ---- | M] () -- C:\Users\ACER\Desktop\Plus500.lnk
[2014.02.23 06:47:19 | 001,806,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014.02.23 06:39:28 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014.02.23 06:38:15 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014.02.23 06:38:08 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014.02.23 06:38:08 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014.02.23 06:37:12 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014.02.23 06:36:22 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014.02.23 06:35:49 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll

========== Files Created - No Company Name ==========

[2014.03.23 17:01:51 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.03.23 12:59:33 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2014.03.23 12:59:33 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2014.03.23 12:59:33 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2014.03.23 12:59:33 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2014.03.23 12:59:33 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2014.03.19 20:00:04 | 003,943,424 | ---- | C] () -- C:\Users\ACER\Desktop\RogueKiller.exe
[2014.03.17 18:24:45 | 001,950,720 | ---- | C] () -- C:\Users\ACER\Desktop\adwcleaner.exe
[2014.03.17 17:58:46 | 001,647,712 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2014.03.15 17:04:56 | 000,781,383 | ---- | C] () -- C:\Users\ACER\Desktop\RSIT.exe
[2014.03.10 15:52:08 | 000,010,862 | ---- | C] () -- C:\Users\ACER\Documents\cc_20140310_155155.reg
[2013.12.01 15:35:47 | 000,201,802 | ---- | C] () -- C:\Windows\System32\poclbm130302GeForce 9300M GSv1w256l4.bin
[2013.12.01 15:35:37 | 000,000,000 | ---- | C] () -- C:\Users\ACER\regbcm
[2013.05.15 20:41:43 | 000,000,270 | RHS- | C] () -- C:\Users\ACER\ntuser.pol
[2013.01.04 16:12:27 | 000,024,576 | ---- | C] () -- C:\Windows\UniFISH.exe
[2012.12.24 12:45:45 | 000,000,036 | ---- | C] () -- C:\Windows\Tiny_Run.ini
[2012.12.23 18:35:35 | 000,047,104 | ---- | C] () -- C:\Windows\System32\KMVIDC32.DLL
[2009.12.28 18:00:50 | 000,022,328 | ---- | C] () -- C:\Users\ACER\AppData\Roaming\PnkBstrK.sys
[2008.12.24 04:34:42 | 000,023,863 | ---- | C] () -- C:\Users\ACER\AppData\Roaming\UserTile.png
[2008.12.16 22:13:17 | 000,099,840 | ---- | C] () -- C:\Users\ACER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.12.16 16:19:48 | 000,000,680 | ---- | C] () -- C:\Users\ACER\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006.11.02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2008.12.16 17:30:58 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Acer
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Acer GameZone Console
[2013.12.01 13:59:07 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Ascaron Entertainment
[2009.02.25 11:45:04 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Ashampoo
[2014.03.01 10:19:18 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\DAEMON Tools Lite
[2008.12.16 22:13:50 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\eSobi
[2009.03.03 20:57:26 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\FloodLightGames
[2009.02.25 21:31:27 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Leadertech
[2011.12.27 16:02:37 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Mount&Blade Warband
[2012.01.25 13:09:02 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Origin
[2010.04.09 17:03:52 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PC Suite
[2008.12.24 04:34:42 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PeerNetworking
[2012.12.22 23:17:57 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Philips-Songbird
[2012.02.13 20:19:48 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PokeRclock
[2009.07.30 12:24:34 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PowerCinema
[2010.04.09 16:54:30 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Samsung
[2011.12.16 20:50:15 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\ValuSoft
[2013.09.22 18:33:15 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\wargaming.net
[2013.04.17 20:39:19 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\XRay Engine
[2013.08.27 18:35:51 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Youtube to MP3 Converter
[2014.01.06 18:27:58 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Zoner
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\Acer GameZone Console
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\Acer GameZone Console
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\Acer GameZone Console
[2012.07.16 16:25:43 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\PowerCinema
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\UpdatusUser\AppData\Roaming\Acer GameZone Console

========== Purity Check ==========



========== Custom Scans ==========

< >
[2006.11.02 14:01:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2006.11.02 14:01:49 | 000,032,632 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2014.02.05 20:18:28 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: AGP440.SYS >
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\erdnt\cache\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008.01.21 03:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006.11.02 10:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009.04.11 07:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\erdnt\cache\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\drivers\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008.01.21 03:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006.11.02 10:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.04.11 07:27:20 | 000,643,072 | ---- | M] (Microsoft Corporation) MD5=10761177A6EBE45843F443E99509F5E7 -- C:\Windows\System32\autochk.exe
[2009.04.11 07:27:20 | 000,643,072 | ---- | M] (Microsoft Corporation) MD5=10761177A6EBE45843F443E99509F5E7 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6002.18005_none_e3df6655bee2ee3b\autochk.exe
[2008.01.21 03:24:45 | 000,642,560 | ---- | M] (Microsoft Corporation) MD5=2FC5BE79B51714B479809358E4908FC3 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.0.6001.18000_none_e1f3ed49c1c122ef\autochk.exe

< MD5 for: CDROM.SYS >
[2008.01.21 03:23:02 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_a29e71c6\cdrom.sys
[2008.01.21 03:23:02 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=1EC25CEA0DE6AC4718BF89F9E1778B57 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6001.18000_none_5fa95be2a3c76a4a\cdrom.sys
[2009.04.11 05:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\drivers\cdrom.sys
[2009.04.11 05:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_c949a5b6\cdrom.sys
[2009.04.11 05:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=6B4BFFB9BECD728097024276430DB314 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.0.6002.18005_none_6194d4eea0e93596\cdrom.sys
[2006.11.02 09:51:44 | 000,067,072 | ---- | M] (Microsoft Corporation) MD5=8D1866E61AF096AE8B582454F5E4D303 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_e487f727\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\erdnt\cache\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006.11.02 10:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2013.10.03 14:16:48 | 000,135,168 | ---- | M] (Microsoft Corporation) MD5=165E9D93A84A7F55EBEEB1B554110680 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.23235_none_78542a95b127239a\cryptsvc.dll
[2013.04.24 05:00:30 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=3EDE4C1F9672C972479201544969ADCB -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18831_none_77c6b0b4980cf0e4\cryptsvc.dll
[2013.04.17 13:30:06 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=58CEF2D243575512657452B9E89A2E1F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18827_none_77d7825c97ff6cfd\cryptsvc.dll
[2013.07.08 05:16:55 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=684C130BBC6DB681BAD4920A4C944AA5 -- C:\Windows\erdnt\cache\cryptsvc.dll
[2013.07.08 05:16:55 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=684C130BBC6DB681BAD4920A4C944AA5 -- C:\Windows\System32\cryptsvc.dll
[2013.07.08 05:16:55 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=684C130BBC6DB681BAD4920A4C944AA5 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18881_none_7790a11898357c99\cryptsvc.dll
[2008.01.21 03:24:35 | 000,128,000 | ---- | M] (Microsoft Corporation) MD5=6DE363F9F99334514C46AEC02D3E3678 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6001.18000_none_75ff99649acf4de9\cryptsvc.dll
[2013.07.08 03:50:53 | 000,135,168 | ---- | M] (Microsoft Corporation) MD5=828805E2E7F529B24849AD52740288DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.23154_none_783d888db13844fe\cryptsvc.dll
[2013.04.17 12:28:51 | 000,135,168 | ---- | M] (Microsoft Corporation) MD5=CC8E2C87016A07892B5448D764BF8A30 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.23097_none_781547d5b15603a0\cryptsvc.dll
[2012.06.02 12:09:26 | 000,135,168 | ---- | M] (Microsoft Corporation) MD5=DD9CCF40ED80DD0D62F1B607A1EA4449 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.22869_none_7837de25b13bb212\cryptsvc.dll
[2012.06.02 01:02:32 | 000,133,120 | ---- | M] (Microsoft Corporation) MD5=F1E8C34892336D33EDDCDFE44E474F64 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18643_none_77bddd9098134535\cryptsvc.dll
[2009.04.11 07:28:18 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=FB27772BEAF8E1D28CCD825C09DA939B -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.18005_none_77eb127097f11935\cryptsvc.dll
[2013.04.24 04:46:45 | 000,135,168 | ---- | M] (Microsoft Corporation) MD5=FBE051C07C3D2B9011ECB1C7A73120C1 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.0.6002.23101_none_7870974bb1126d44\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2007.01.12 22:30:08 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\Cyberlink\PowerDirector\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2008.10.29 07:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008.10.29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008.10.30 04:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\erdnt\cache\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008.10.28 03:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008.01.21 03:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: HAL.DLL >
[2009.04.11 07:32:46 | 000,177,128 | ---- | M] (Microsoft Corporation) MD5=B8D52005181A15D7D1470CBF2AF214DD -- C:\Windows\System32\hal.dll

< MD5 for: IASTOR.SYS >
[2008.07.20 10:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\ACER\Preload\Autorun\DRV\Intel Robson RBSMDL2G\Winall\Driver\IaStor.sys
[2008.07.20 10:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver\IaStor.sys
[2008.07.20 16:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Windows\System32\drivers\iaStor.sys
[2008.07.20 10:44:44 | 000,324,120 | ---- | M] (Intel Corporation) MD5=707C1692214B1C290271067197F075F6 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_7b6e77f6\iaStor.sys
[2008.07.20 10:44:54 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\ACER\Preload\Autorun\DRV\Intel Robson RBSMDL2G\Winall\Driver64\IaStor.sys
[2008.07.20 10:44:54 | 000,402,456 | ---- | M] (Intel Corporation) MD5=FC28E90F2204D8FD147FA9BFA8A51C01 -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys

< MD5 for: IASTORV.SYS >
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008.01.21 03:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006.11.02 10:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2006.11.02 10:50:24 | 000,047,208 | ---- | M] (Microsoft Corporation) MD5=350FCA7E73CF65BCEF43FAE1E4E91293 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\isapnp.sys
[2008.01.21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\System32\drivers\isapnp.sys
[2008.01.21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\isapnp.sys
[2008.01.21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\isapnp.sys
[2008.01.21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\isapnp.sys
[2008.01.21 03:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) MD5=6C70698A3E5C4376C6AB5C7C17FB0614 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.06.15 13:51:56 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=203D86EBD6D8E4C8501B222421E81506 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\lsass.exe
[2009.09.10 15:44:14 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=2D3AC5E7AC01E905F3ABD2D745FE3A9B -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a80213731ca5a7\lsass.exe
[2009.06.15 13:48:49 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=3978F3540329E16C0AC3BCF677E5669F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\lsass.exe
[2009.02.13 08:26:04 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=59DE082968FDD257FFF0D209B9A5B460 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975\lsass.exe
[2012.06.01 23:37:38 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=613DEB66A91820F0A41915B40BB8833F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22869_none_a882cf8373379c5f\lsass.exe
[2009.06.15 14:03:38 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=6F1F23D3599EAE17734451936B7F17C6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\lsass.exe
[2011.11.16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A3E186B4B935905B829219502557314E -- C:\Windows\erdnt\cache\lsass.exe
[2011.11.16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A3E186B4B935905B829219502557314E -- C:\Windows\System32\lsass.exe
[2011.11.16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A3E186B4B935905B829219502557314E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18541_none_a806cc745a10ffad\lsass.exe
[2011.11.16 15:12:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A3E186B4B935905B829219502557314E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18643_none_a808ceee5a0f2f82\lsass.exe
[2009.06.15 13:57:59 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=A911ECAC81F94ADEAFBE8E3F7873EDB0 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\lsass.exe
[2009.02.13 05:58:37 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=AFF8A58280863629CA4FFA9E0B259F1E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090\lsass.exe
[2009.06.15 13:59:08 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=BA9A67672E025078C77967731BCFC560 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\lsass.exe
[2009.06.15 14:10:12 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=C731B1FE449D4E9CEA358C9D55B69BE9 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\lsass.exe
[2009.09.09 12:09:38 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=CB7E838C140B4087B2DA323F2D4523C5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d1618975e9b345\lsass.exe
[2009.09.10 15:47:51 | 000,007,680 | ---- | M] (Microsoft Corporation) MD5=D09A5DA84B7C9CA9B02EBCD7FAE41C8D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd285578ce285b\lsass.exe
[2008.01.21 03:24:15 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\lsass.exe
[2008.01.21 03:24:15 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\lsass.exe
[2008.01.21 03:24:15 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=DCF733788C7D088D814E5F80EB4B3E0F -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18005_none_a83603ce59ed0382\lsass.exe
[2011.11.16 14:57:04 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=EBFAEB786C46B407930811F94F08877D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22742_none_a8916b6f732db5f5\lsass.exe
[2009.02.13 09:20:29 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=F4C62B07E5BF96F1FDCA9DB393ECED22 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2def\lsass.exe

< MD5 for: NDIS.SYS >
[2009.04.11 07:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\erdnt\cache\ndis.sys
[2009.04.11 07:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\System32\drivers\ndis.sys
[2009.04.11 07:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) MD5=1357274D1883F68300AEADD15D7BBB42 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6002.18005_none_a9b2a4d31930d864\ndis.sys
[2008.01.21 03:23:50 | 000,529,464 | ---- | M] (Microsoft Corporation) MD5=9BDC71790FA08F0A0B5F10462B1BD0B1 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.0.6001.18000_none_a7c72bc71c0f0d18\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\erdnt\cache\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009.04.11 07:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008.01.21 03:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVRAID.SYS >
[2008.01.21 03:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) MD5=2EDF9E7751554B42CBB60116DE727101 -- C:\Windows\System32\drivers\nvraid.sys
[2008.01.21 03:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) MD5=2EDF9E7751554B42CBB60116DE727101 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvraid.sys
[2008.01.21 03:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) MD5=2EDF9E7751554B42CBB60116DE727101 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvraid.sys
[2006.11.02 10:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) MD5=E69E946F80C1C31C53003BFBF50CBB7C -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2006.11.02 10:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008.01.21 03:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008.01.21 03:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\erdnt\cache\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009.04.11 07:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

< MD5 for: SMSS.EXE >
[2013.07.08 02:18:50 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=18CE0D0DCB7AF0D3E67ECF12BDE1382D -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.23154_none_ae7897262f9a96cf\smss.exe
[2013.03.09 02:16:53 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=44A40B18D9F6315D35F4539A41ECDE0D -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.23076_none_ae64f5fc2fa90438\smss.exe
[2008.01.21 03:23:50 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=6701DDAF68BEDE6BBEEA9D514D73A35B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6001.18000_none_ac3aa7fd19319fba\smss.exe
[2009.04.11 07:28:04 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=98AF15A94CD6AC37248E72E5FE789B35 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe
[2013.05.02 02:27:42 | 000,064,512 | ---- | M] (Microsoft Corporation) MD5=AF2F8F104F119DD10AFA8B54A006F1B6 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.23103_none_aeada6782f72f1c3\smss.exe
[2013.03.09 02:28:08 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=BE7480C91E89EB82FC080F772C220AE4 -- C:\Windows\System32\smss.exe
[2013.03.09 02:28:08 | 000,064,000 | ---- | M] (Microsoft Corporation) MD5=BE7480C91E89EB82FC080F772C220AE4 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18805_none_ae2630391653543e\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.01.21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\erdnt\cache\svchost.exe
[2008.01.21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\System32\svchost.exe
[2008.01.21 03:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.26 09:08:16 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=01EC1E92595F839BEE70D439C46796E3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22167_none_b36dd19b7fae39c7\tcpip.sys
[2013.05.08 04:40:36 | 000,914,792 | ---- | M] (Microsoft Corporation) MD5=078218D74C4EFC2CE7E4C6DF22A94F2F -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.23106_none_b59411ab7ca4df04\tcpip.sys
[2009.04.11 07:33:02 | 000,897,000 | ---- | M] (Microsoft Corporation) MD5=0E6B0885C3D5E4643ED2D043DE3433D8 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18005_none_b5098b5e63880c42\tcpip.sys
[2011.09.20 22:02:55 | 000,913,280 | ---- | M] (Microsoft Corporation) MD5=16731B631F28F63CD9F4CB60940E7DDD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22719_none_b58c64c97caa1c43\tcpip.sys
[2009.12.08 21:52:30 | 000,897,624 | ---- | M] (Microsoft Corporation) MD5=1ACBB7A47E78F4CC82D2EFFB72901528 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18377_none_b2d96a966698ad63\tcpip.sys
[2009.08.15 22:30:53 | 000,816,640 | ---- | M] (Microsoft Corporation) MD5=2512B4D1353370D6688B1AF1F5AFA1CF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21108_none_6030d425ab49af00\tcpip.sys
[2009.08.14 18:01:55 | 000,900,168 | ---- | M] (Microsoft Corporation) MD5=2608E71AAD54564647D4BB984E1925AA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys
[2011.06.17 21:13:55 | 000,905,104 | ---- | M] (Microsoft Corporation) MD5=2756186E287139310997090797E0182B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18484_none_b4b2134c63c9c70f\tcpip.sys
[2012.03.30 13:39:11 | 000,905,600 | ---- | M] (Microsoft Corporation) MD5=27D470DABC77BC60D0A3B0E4DEB6CB91 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18604_none_b50896786388e1d5\tcpip.sys
[2010.02.18 12:51:51 | 000,818,688 | ---- | M] (Microsoft Corporation) MD5=2C1F7005AA3B62721BFDB307BD5F5010 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21226_none_6019359fab5bb15b\tcpip.sys
[2010.02.18 15:49:38 | 000,898,952 | ---- | M] (Microsoft Corporation) MD5=2EAE4500984C2F8DACFB977060300A15 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18427_none_b30f7c1866701ed5\tcpip.sys
[2009.08.14 15:24:47 | 000,813,568 | ---- | M] (Microsoft Corporation) MD5=300208927321066EA53761FDC98747C6 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16908_none_5fa75f38922bdbf4\tcpip.sys
[2013.01.04 12:28:19 | 000,914,792 | ---- | M] (Microsoft Corporation) MD5=3535CD93F944C00F098E73E12EE7FEB6 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.23013_none_b5863efb7cafb1c9\tcpip.sys
[2009.12.08 21:15:00 | 000,907,832 | ---- | M] (Microsoft Corporation) MD5=46E6685F3E92AEC743773ADD4CD54F57 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22283_none_b53aaa1b7ce8560d\tcpip.sys
[2010.02.18 15:07:16 | 000,904,576 | ---- | M] (Microsoft Corporation) MD5=48CBE6D53632D0067C2D6B20F90D84CA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18209_none_b50d905263846bec\tcpip.sys
[2010.02.18 13:05:37 | 000,815,104 | ---- | M] (Microsoft Corporation) MD5=4A82FA8F0DF67AA354580C3FAAF8BDE3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.17021_none_5f8a957c924295b7\tcpip.sys
[2013.05.08 05:37:21 | 000,905,576 | ---- | M] (Microsoft Corporation) MD5=548E198BAE21EFC21F8B5F0C1728AD27 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18835_none_b4e92aca63a0494d\tcpip.sys
[2009.12.08 21:37:09 | 000,900,696 | ---- | M] (Microsoft Corporation) MD5=5653230D480A9C54D169E1B080B72CF5 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22577_none_b36309477fb64a54\tcpip.sys
[2010.06.16 16:55:58 | 000,902,032 | ---- | M] (Microsoft Corporation) MD5=6216A954ED7045B62880A92D6C9B9FC7 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys
[2009.08.14 17:27:34 | 000,904,776 | ---- | M] (Microsoft Corporation) MD5=65877AA1B6A7CB797488E831698973E9 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18091_none_b4a43aea63d4a25f\tcpip.sys
[2011.06.17 21:13:55 | 000,913,296 | ---- | M] (Microsoft Corporation) MD5=6647FCE6FC4970DAAFE5C64C794513D3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22662_none_b54f51417cd8f970\tcpip.sys
[2010.06.16 17:39:32 | 000,912,776 | ---- | M] (Microsoft Corporation) MD5=6A10AFCE0B38371064BE41C1FBFD3C6B -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22425_none_b57d8e037cb5db63\tcpip.sys
[2013.07.05 04:20:37 | 000,914,880 | ---- | M] (Microsoft Corporation) MD5=6D0D344F643E28B31262AC2682109A3C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.23152_none_b55a00e77cd1055d\tcpip.sys
[2013.01.04 12:28:18 | 000,905,576 | ---- | M] (Microsoft Corporation) MD5=74E2D020C47BB2B2FCCBA29A518A7EB4 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18764_none_b4c7b8d663b986a2\tcpip.sys
[2010.06.16 16:59:54 | 000,898,952 | ---- | M] (Microsoft Corporation) MD5=782568AB6A43160A159B6215B70BCCE9 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18493_none_b2bfcb7c66ac7d10\tcpip.sys
[2011.09.20 22:02:55 | 000,905,088 | ---- | M] (Microsoft Corporation) MD5=814A1C66FBD4E1B310A517221F1456BF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18519_none_b502c618638c7f52\tcpip.sys
[2008.04.26 09:26:49 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=82E266BEE5F0167E41C6ECFDD2A79C02 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18063_none_b2e033a8669434a1\tcpip.sys
[2009.12.08 18:58:13 | 000,813,568 | ---- | M] (Microsoft Corporation) MD5=8734BD051FFDCBF8425CF222141C3741 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16973_none_5f56ae52926920d8\tcpip.sys
[2009.08.14 18:07:56 | 000,897,608 | ---- | M] (Microsoft Corporation) MD5=8A7AD2A214233F684242F289ED83EBC3 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18311_none_b3144862666d6db3\tcpip.sys
[2010.02.18 18:36:50 | 000,902,024 | ---- | M] (Microsoft Corporation) MD5=93A5655CD9CD2F080EF1CB71A3666215 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys
[2010.06.16 17:04:57 | 000,905,088 | ---- | M] (Microsoft Corporation) MD5=A474879AFA4A596B3A531F3E69730DBF -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18272_none_b4baded863c37e22\tcpip.sys
[2009.12.08 18:45:32 | 000,816,640 | ---- | M] (Microsoft Corporation) MD5=CA3A5756672013A66BB9D547A5A62DCA -- C:\Windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.21175_none_5fe223d3ab852692\tcpip.sys
[2013.07.05 05:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) MD5=D18D53974FD715D50FC76F9FFE1C830D -- C:\Windows\erdnt\cache\tcpip.sys
[2013.07.05 05:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) MD5=D18D53974FD715D50FC76F9FFE1C830D -- C:\Windows\System32\drivers\tcpip.sys
[2013.07.05 05:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) MD5=D18D53974FD715D50FC76F9FFE1C830D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18880_none_b4ae19bc63cd564f\tcpip.sys
[2010.02.18 15:22:11 | 000,910,216 | ---- | M] (Microsoft Corporation) MD5=D9F5DD5BBC8348E8F8220CCBF14C022E -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22341_none_b563eb1d7cc9b0c2\tcpip.sys
[2009.12.08 21:01:08 | 000,904,776 | ---- | M] (Microsoft Corporation) MD5=DA467E7619AE5F4588E6262C13C8940A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.18160_none_b4c3ac4a63bd325c\tcpip.sys
[2012.03.30 13:39:11 | 000,914,304 | ---- | M] (Microsoft Corporation) MD5=EE7E10BED85C312C1D5D30C435BDDA9F -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22828_none_b58096797cb31c04\tcpip.sys
[2008.01.21 03:25:03 | 000,891,448 | ---- | M] (Microsoft Corporation) MD5=FC6E2835D667774D409C7C7021EAF9C4 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.18000_none_b31e1252666640f6\tcpip.sys
[2009.08.14 17:33:50 | 000,905,784 | ---- | M] (Microsoft Corporation) MD5=FF71856BD4CD6D4367F9FD84BE79A874 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6002.22200_none_b58e289d7caa2a80\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\erdnt\cache\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008.01.21 03:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\erdnt\cache\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009.04.11 07:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008.01.21 03:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WS2_32.DLL >
[2008.01.21 03:24:48 | 000,179,200 | ---- | M] (Microsoft Corporation) MD5=B304D47D5744BA20FCB99FB8B2C07B0B -- C:\Windows\erdnt\cache\ws2_32.dll
[2008.01.21 03:24:48 | 000,179,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\ws2_32.dll
[2008.01.21 03:24:48 | 000,179,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.0.6001.18000_none_f2b7b0c2ce5605c4\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[8 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2008.12.16 17:30:58 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Acer
[2008.08.06 09:04:33 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Acer GameZone Console
[2012.01.17 13:03:20 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Adobe
[2013.12.01 13:59:07 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Ascaron Entertainment
[2009.02.25 11:45:04 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Ashampoo
[2014.01.06 18:18:00 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\CyberLink
[2014.03.01 10:19:18 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\DAEMON Tools Lite
[2008.12.16 22:13:50 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\eSobi
[2009.03.03 20:57:26 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\FloodLightGames
[2009.01.02 02:46:00 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Google
[2008.12.16 16:21:27 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Identities
[2008.12.16 16:28:13 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\InstallShield
[2012.01.22 15:09:57 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Intel
[2009.02.25 21:31:27 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Leadertech
[2008.12.16 17:31:34 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Macromedia
[2013.02.17 14:34:56 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Malwarebytes
[2006.11.02 13:37:34 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Media Center Programs
[2012.12.23 11:17:49 | 000,000,000 | --SD | M] -- C:\Users\ACER\AppData\Roaming\Microsoft
[2012.01.04 19:09:26 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Microsoft Games
[2011.12.27 16:02:37 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Mount&Blade Warband
[2009.01.13 18:39:36 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Mozilla
[2011.03.19 21:08:04 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Mozilla-Cache
[2013.10.10 15:52:22 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\NVIDIA
[2012.01.25 13:09:02 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Origin
[2010.04.09 17:03:52 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PC Suite
[2008.12.24 04:34:42 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PeerNetworking
[2012.12.22 23:17:57 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Philips-Songbird
[2012.02.13 20:19:48 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PokeRclock
[2009.07.30 12:24:34 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\PowerCinema
[2013.12.27 06:34:59 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Real
[2010.04.09 16:54:30 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Samsung
[2013.03.24 15:56:04 | 000,000,000 | RH-D | M] -- C:\Users\ACER\AppData\Roaming\SecuROM
[2011.12.16 20:50:15 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\ValuSoft
[2013.09.22 18:33:15 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\wargaming.net
[2008.12.24 06:07:45 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\WinRAR
[2013.04.17 20:39:19 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\XRay Engine
[2013.08.27 18:35:51 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Youtube to MP3 Converter
[2014.01.06 18:27:58 | 000,000,000 | ---D | M] -- C:\Users\ACER\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2013.08.09 12:09:59 | 000,010,134 | R--- | M] () -- C:\Users\ACER\AppData\Roaming\Microsoft\Installer\{6AE22174-4FFA-4572-B692-31F0C386ED38}\ARPPRODUCTICON.exe
[2012.01.25 02:49:54 | 000,010,134 | R--- | M] () -- C:\Users\ACER\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
[2010.11.20 01:23:30 | 000,380,416 | ---- | M] () -- C:\Users\ACER\AppData\Roaming\Philips-Songbird\Profiles\oi4pkjx8.default\extensions\philips-branding@philips.com\chrome\content\autolauncher\PhilipsDeviceListener.exe
[2010.11.20 01:23:30 | 000,062,464 | ---- | M] (Philips) -- C:\Users\ACER\AppData\Roaming\Philips-Songbird\Profiles\oi4pkjx8.default\extensions\philips-branding@philips.com\chrome\content\autolauncher\RunNonElevated32.exe
[2010.11.20 01:23:30 | 000,063,488 | ---- | M] (Philips) -- C:\Users\ACER\AppData\Roaming\Philips-Songbird\Profiles\oi4pkjx8.default\extensions\philips-branding@philips.com\chrome\content\autolauncher\RunNonElevated64.exe
[2010.11.11 11:22:14 | 000,102,400 | ---- | M] () -- C:\Users\ACER\AppData\Roaming\Philips-Songbird\Profiles\oi4pkjx8.default\extensions\philips-branding@philips.com\payload\gogear@songbirdnest.com\platform\WINNT_x86-msvc\lib\sbACMEFirmwareRPCServer.exe
[2010.04.09 17:03:45 | 001,448,960 | ---- | M] (Samsung Electronics Co., Ltd. ) -- C:\Users\ACER\AppData\Roaming\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2008.01.21 04:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008.01.21 04:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008.01.21 04:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006.11.02 11:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006.11.02 11:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2014.03.23 17:14:37 | 000,003,216 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014.03.23 17:14:37 | 000,003,216 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014.03.23 13:14:41 | 000,000,147 | ---- | M] () -- C:\Windows\system32\agent.log
[2014.03.23 13:14:57 | 000,000,000 | ---- | M] () -- C:\Windows\system32\LogConfigTemp.xml
[2014.03.21 18:56:39 | 000,137,986 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2014.03.21 18:56:39 | 000,120,078 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2014.03.21 18:56:39 | 000,645,348 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2014.03.21 18:56:39 | 000,634,512 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2014.03.21 18:56:39 | 001,532,914 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Zoner Photo Studio Autoupdate" = "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE" -- [2013.12.13 16:36:06 | 000,831,488 | ---- | M] (ZONER software)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.03.23 17:01:51 | 000,000,512 | ---- | M] () MD5=D1F6E27B16AC7203B0E70DC9DC52F1A5 -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2014.02.05 18:41:19 | 000,213,184 | ---- | M] () -- \Games\World_of_Tanks\res\audio\objects_ice_crack.fsb
[2008.08.06 08:54:49 | 001,815,511 | ---- | M] () -- \Program Files\Acer GameZone\Agatha Christie Death on the Nile\gameres\images\bonus_rosary\bead_crack.png
[2003.12.05 14:52:40 | 000,000,796 | ---- | M] () -- \Program Files\Rockstar Games\GTA San Andreas\data\Decision\Craig\crack1.ped

< *keygen* /s >

[xtoncekx]

< *AntiWPA* /s >

< *loader* /s >
[2012.01.09 14:13:44 | 000,002,485 | ---- | M] () -- \AdwCleaner\Quarantine\C\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\f5zpykzg.default\Extensions\ffxtlbr@funmoods.com\content\loader.xul.vir
[2009.06.08 12:02:34 | 000,069,492 | ---- | M] () -- \Folding@HomeCPU\FAHStatsUploader.exe
[2012.12.07 10:08:57 | 000,071,208 | ---- | M] () -- \Games\World_of_Tanks\PhysXLoader.dll
[2014.02.05 18:41:19 | 000,001,508 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\eulaversionloader.pyc
[2014.02.05 18:41:19 | 000,002,209 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\graphicspresetsloader.pyc
[2014.02.05 18:41:19 | 000,007,130 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\guicolorsloader.pyc
[2014.02.05 18:41:19 | 000,003,955 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\guisoundsloader.pyc
[2014.02.05 18:41:19 | 000,006,579 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\logindataloader.pyc
[2014.02.05 18:41:19 | 000,002,753 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\doc_loaders\windowsstoreddataloader.pyc
[2014.02.05 18:41:19 | 000,001,502 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\scaleform\framework\entities\abstract\loadermanagermeta.pyc
[2014.02.05 18:41:19 | 000,006,582 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\scaleform\framework\managers\loaders.pyc
[2014.02.05 18:41:19 | 000,003,649 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\helpers\rssdownloader.pyc
[2014.02.05 18:41:19 | 000,006,995 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\tutorial\loader.pyc
[2014.02.05 18:41:19 | 000,011,286 | ---- | M] () -- \Games\World_of_Tanks\res_bw\scripts\common\lib\unittest\loader.pyc
[2008.07.24 15:54:36 | 000,010,481 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\System\KernelCtrl\ImageLoader.kc
[2008.07.24 15:54:36 | 000,003,482 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Widget\langloader.kc
[2008.07.24 15:54:36 | 000,012,741 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Widget\layoutloader.kc
[2008.01.16 18:35:44 | 000,011,710 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\HomeMedia\mm\MediaCtrl\ImageLoader.kc
[2008.01.16 18:35:58 | 000,003,489 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\HomeMedia\widget\langloader.kc
[2008.01.16 18:35:58 | 000,012,539 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\HomeMedia\widget\layoutloader.kc
[2008.07.18 16:04:42 | 000,010,765 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\PlayMovie\mm\MediaCtrl\ImageLoader.kc
[2008.07.18 16:04:46 | 000,003,482 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\PlayMovie\widget\langloader.kc
[2008.07.18 16:04:46 | 000,012,785 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\PlayMovie\widget\layoutloader.kc
[2007.11.20 05:14:58 | 000,004,960 | ---- | M] () -- \Program Files\Acer GameZone\Zuma Deluxe\images\LoaderBar.gif
[2007.11.20 05:15:00 | 000,001,064 | ---- | M] () -- \Program Files\Acer GameZone\Zuma Deluxe\images\_LoaderBar.gif
[2008.08.06 08:52:50 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20080806.log
[2008.12.16 16:21:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081216.log
[2008.12.17 11:54:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081217.log
[2008.12.18 18:01:34 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081218.log
[2008.12.22 12:41:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081222.log
[2008.12.24 03:16:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081224.log
[2008.12.25 13:21:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081225.log
[2008.12.29 22:51:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20081229.log
[2009.01.01 16:15:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090101.log
[2009.01.02 00:04:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090102.log
[2009.01.04 21:30:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090104.log
[2009.01.05 22:03:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090105.log
[2009.01.06 23:19:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090106.log
[2009.01.13 14:08:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090113.log
[2009.01.14 20:38:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090114.log
[2009.02.12 16:57:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090212.log
[2009.02.25 09:28:09 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090225.log
[2009.02.28 01:34:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090228.log
[2009.03.03 19:13:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090303.log
[2009.03.04 19:17:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090304.log
[2009.03.05 17:00:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090305.log
[2009.03.19 12:13:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090319.log
[2009.03.24 21:51:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090324.log
[2009.03.30 21:30:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090330.log
[2009.04.08 11:41:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090408.log
[2009.04.20 18:01:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090420.log
[2009.04.27 15:31:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090427.log
[2009.04.28 06:42:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090428.log
[2009.04.29 10:40:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090429.log
[2009.05.06 20:38:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090506.log
[2009.05.14 13:58:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090514.log
[2009.05.20 08:22:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090520.log
[2009.05.31 22:40:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090531.log
[2009.06.01 14:05:13 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090601.log
[2009.06.04 21:42:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090604.log
[2009.06.12 13:35:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090612.log
[2009.06.15 12:58:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090615.log
[2009.06.16 18:20:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090616.log
[2009.06.22 07:54:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090622.log
[2009.06.25 02:41:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090625.log
[2009.06.27 16:19:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090627.log
[2009.07.09 23:37:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090710.log
[2009.07.14 14:48:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090714.log
[2009.07.15 07:49:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090715.log
[2009.07.22 11:04:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090722.log
[2009.07.30 12:02:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090730.log
[2009.08.12 09:09:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090812.log
[2009.08.19 19:33:50 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090819.log
[2009.09.02 07:28:02 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090902.log
[2009.09.09 20:08:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090909.log
[2009.09.12 12:09:18 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20090912.log
[2009.10.02 10:35:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091002.log
[2009.10.08 21:47:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091008.log
[2009.10.12 15:13:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091012.log
[2009.10.15 10:31:17 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091015.log
[2009.10.19 13:19:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091019.log
[2009.10.21 14:00:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091021.log
[2009.10.26 20:02:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091026.log
[2009.11.06 09:16:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091106.log
[2009.11.09 18:30:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091109.log
[2009.11.11 09:00:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091111.log
[2009.11.15 16:48:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091115.log
[2009.11.20 17:02:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091120.log
[2009.11.21 19:32:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091121.log
[2009.11.24 11:23:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091124.log
[2009.11.29 16:10:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091129.log
[2009.12.01 19:03:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091201.log
[2009.12.02 15:44:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091202.log
[2009.12.12 22:32:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091212.log
[2009.12.13 01:29:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091213.log
[2009.12.27 16:32:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091227.log
[2009.12.28 00:13:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20091228.log
[2010.01.07 18:42:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100107.log
[2010.02.09 13:50:23 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100209.log
[2010.02.24 18:40:41 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100224.log
[2010.03.17 12:02:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100317.log
[2010.03.30 16:01:17 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100330.log
[2010.04.09 16:30:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100409.log
[2010.04.11 00:18:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100411.log
[2010.05.21 18:46:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100521.log
[2010.05.23 18:06:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100523.log
[2010.06.28 18:38:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100628.log
[2010.07.01 12:30:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100701.log
[2010.07.28 11:44:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100728.log
[2010.08.07 17:23:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100807.log
[2010.08.08 12:44:57 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100808.log
[2010.08.12 17:35:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100812.log
[2010.08.23 14:17:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100823.log
[2010.08.26 13:52:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100826.log
[2010.08.27 15:30:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100827.log
[2010.08.28 00:10:48 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100828.log
[2010.08.29 12:20:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100829.log
[2010.08.30 15:39:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100830.log
[2010.08.31 14:04:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100831.log
[2010.09.01 14:23:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100901.log
[2010.09.02 15:05:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100902.log
[2010.09.03 17:22:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100903.log
[2010.09.04 09:20:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100904.log
[2010.09.17 09:59:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20100917.log
[2010.12.19 15:50:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20101219.log
[2010.12.20 04:19:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20101220.log
[2010.12.21 13:23:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20101221.log
[2010.12.24 17:41:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20101224.log
[2010.12.27 05:18:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20101227.log
[2011.01.08 17:05:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110108.log
[2011.02.04 18:39:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110204.log
[2011.02.05 18:27:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110205.log
[2011.02.06 10:05:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110206.log
[2011.03.13 22:38:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110313.log
[2011.03.14 17:00:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110314.log
[2011.03.15 10:44:41 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110315.log
[2011.03.16 17:53:28 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110316.log
[2011.03.17 13:57:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110317.log
[2011.03.18 13:03:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110318.log
[2011.03.19 12:29:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110319.log
[2011.03.20 08:21:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110320.log
[2011.03.21 19:16:55 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110321.log
[2011.03.22 18:44:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110322.log
[2011.03.23 19:08:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110323.log
[2011.03.24 17:30:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110324.log
[2011.03.25 19:33:34 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110325.log
[2011.03.26 15:33:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110326.log
[2011.03.27 16:10:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110327.log
[2011.03.29 18:45:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110329.log
[2011.03.30 16:09:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110330.log
[2011.03.31 18:32:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110331.log
[2011.04.08 16:49:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110408.log
[2011.04.10 05:07:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110410.log
[2011.04.14 17:07:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110414.log
[2011.04.16 03:11:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110416.log
[2011.04.17 22:05:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110417.log
[2011.05.03 19:07:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110503.log
[2011.06.23 11:57:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110623.log
[2011.06.25 09:33:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110625.log
[2011.06.26 03:20:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110626.log
[2011.06.28 13:58:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110628.log
[2011.06.29 14:33:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110629.log
[2011.07.04 20:59:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110704.log
[2011.07.18 19:47:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110718.log
[2011.07.27 18:34:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110727.log
[2011.08.17 11:59:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110817.log
[2011.08.26 14:16:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110826.log
[2011.08.28 07:50:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110828.log
[2011.08.29 08:25:57 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110829.log
[2011.08.30 09:47:57 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110830.log
[2011.08.31 09:34:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110831.log
[2011.09.01 10:46:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110901.log
[2011.09.02 11:17:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110902.log
[2011.09.04 16:37:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110904.log
[2011.09.05 18:44:55 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110905.log
[2011.09.07 05:09:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110907.log
[2011.09.08 18:32:48 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110908.log
[2011.09.09 09:09:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110909.log
[2011.09.10 04:57:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110910.log
[2011.09.11 02:54:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110911.log
[2011.09.12 10:39:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110912.log
[2011.09.13 09:03:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110913.log
[2011.09.14 06:41:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110914.log
[2011.09.15 11:06:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110915.log
[2011.09.16 02:51:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110916.log
[2011.09.17 08:16:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110917.log
[2011.09.18 07:29:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110918.log
[2011.09.19 15:38:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110919.log
[2011.09.20 20:29:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110920.log
[2011.09.21 15:45:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110921.log
[2011.09.22 20:21:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110922.log
[2011.09.23 11:02:43 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110923.log
[2011.09.26 15:59:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110926.log
[2011.09.27 16:03:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110927.log
[2011.09.28 10:39:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110928.log
[2011.09.29 16:25:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110929.log
[2011.09.30 15:17:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20110930.log
[2011.10.01 08:10:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111001.log
[2011.10.02 07:42:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111002.log
[2011.10.03 09:08:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111003.log
[2011.10.04 10:14:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111004.log
[2011.10.05 08:34:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111005.log
[2011.10.06 14:09:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111006.log
[2011.10.07 12:51:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111007.log
[2011.10.08 08:10:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111008.log
[2011.10.10 13:10:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111010.log
[2011.10.11 16:08:48 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111011.log
[2011.10.12 17:14:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111012.log
[2011.10.13 16:52:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111013.log
[2011.10.15 18:02:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111015.log
[2011.10.16 10:07:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111016.log
[2011.10.17 17:26:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111017.log
[2011.10.18 17:58:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111018.log
[2011.10.19 05:49:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111019.log
[2011.10.20 15:20:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111020.log
[2011.10.21 17:19:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111021.log
[2011.10.22 08:32:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111022.log
[2011.10.23 01:58:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111023.log
[2011.10.24 16:12:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111024.log
[2011.10.25 08:44:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111025.log
[2011.10.27 16:08:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111027.log
[2011.10.28 09:06:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111028.log
[2011.10.29 10:57:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111029.log
[2011.10.30 08:42:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111030.log
[2011.10.31 16:54:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111031.log
[2011.11.01 18:13:28 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111101.log
[2011.11.02 15:50:18 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111102.log
[2011.11.03 22:51:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111103.log
[2011.11.07 16:31:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111107.log
[2011.11.09 01:37:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111109.log
[2011.11.10 16:36:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111110.log
[2011.11.13 10:59:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111113.log
[2011.11.14 16:48:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111114.log
[2011.11.15 10:20:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111115.log
[2011.11.16 14:18:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111116.log
[2011.11.17 13:08:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111117.log
[2011.11.18 10:02:23 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111118.log
[2011.11.19 11:21:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111119.log
[2011.11.20 09:59:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111120.log
[2011.11.21 15:58:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111121.log
[2011.11.22 16:15:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111122.log
[2011.11.23 11:04:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111123.log
[2011.11.24 00:10:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111124.log
[2011.11.25 14:43:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111125.log
[2011.11.27 08:57:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111127.log
[2011.11.28 11:01:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111128.log
[2011.11.29 17:25:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111129.log
[2011.11.30 17:31:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111130.log
[2011.12.01 17:35:23 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111201.log
[2011.12.03 10:53:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111203.log
[2011.12.04 13:49:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111204.log
[2011.12.05 10:27:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111205.log
[2011.12.06 18:25:55 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111206.log
[2011.12.07 17:41:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111207.log
[2011.12.09 16:57:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111209.log
[2011.12.10 04:37:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111210.log
[2011.12.12 10:05:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111212.log
[2011.12.13 10:46:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111213.log
[2011.12.14 12:57:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111214.log
[2011.12.15 11:08:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111215.log
[2011.12.16 12:38:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111216.log
[2011.12.17 12:44:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111217.log
[2011.12.18 11:13:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111218.log
[2011.12.19 11:21:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111219.log
[2011.12.20 13:19:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111220.log
[2011.12.21 12:32:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111221.log
[2011.12.22 01:55:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111222.log
[2011.12.23 11:05:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111223.log
[2011.12.24 11:13:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111224.log
[2011.12.26 11:59:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111226.log
[2011.12.27 14:54:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111227.log
[2011.12.28 10:26:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111228.log
[2011.12.29 10:15:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111229.log
[2011.12.30 12:18:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111230.log
[2011.12.31 14:07:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20111231.log
[2012.01.01 15:24:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120101.log
[2012.01.02 14:08:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120102.log
[2012.01.03 10:33:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120103.log
[2012.01.04 10:10:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120104.log
[2012.01.05 11:35:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120105.log
[2012.01.06 12:05:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120106.log
[2012.01.07 15:18:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120107.log
[2012.01.08 13:27:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120108.log
[2012.01.09 11:48:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120109.log
[2012.01.10 13:21:41 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120110.log
[2012.01.11 12:07:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120111.log
[2012.01.12 12:32:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120112.log
[2012.01.13 12:20:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120113.log
[2012.01.14 13:32:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120114.log
[2012.01.15 04:21:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120115.log
[2012.01.16 00:26:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120116.log
[2012.01.17 12:35:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120117.log
[2012.01.18 12:32:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120118.log
[2012.01.19 16:33:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120119.log
[2012.01.20 12:36:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120120.log
[2012.01.21 18:19:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120121.log
[2012.01.22 14:47:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120122.log
[2012.01.23 18:33:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120123.log
[2012.01.24 16:17:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120124.log
[2012.01.25 01:58:34 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120125.log
[2012.01.26 10:35:13 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120126.log
[2012.01.27 10:14:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120127.log
[2012.01.28 22:33:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120128.log
[2012.01.29 02:31:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120129.log
[2012.01.30 11:24:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120130.log
[2012.01.31 03:44:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120131.log
[2012.02.01 12:33:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120201.log
[2012.02.02 12:08:13 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120202.log
[2012.02.03 10:29:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120203.log
[2012.02.04 18:00:51 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120204.log
[2012.02.06 11:56:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120206.log
[2012.02.07 11:39:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120207.log
[2012.02.08 12:20:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120208.log
[2012.02.09 12:26:38 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120209.log
[2012.02.10 11:34:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120210.log
[2012.02.11 11:25:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120211.log
[2012.02.12 10:23:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120212.log
[2012.02.13 11:56:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120213.log
[2012.02.14 12:15:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120214.log
[2012.02.15 12:36:54 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120215.log
[2012.02.16 10:00:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120216.log
[2012.02.17 11:15:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120217.log
[2012.02.18 09:27:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120218.log
[2012.02.19 08:46:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120219.log
[2012.02.20 11:37:28 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120220.log
[2012.02.21 11:50:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120221.log
[2012.02.22 12:00:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120222.log
[2012.02.23 09:16:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120223.log
[2012.02.24 08:42:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120224.log
[2012.02.26 10:27:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120226.log
[2012.02.29 07:53:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120229.log
[2012.03.02 12:30:23 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120302.log
[2012.03.03 13:20:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120303.log
[2012.03.04 12:31:21 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120304.log
[2012.03.06 16:04:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120306.log
[2012.03.07 12:49:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120307.log
[2012.03.08 12:12:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120308.log
[2012.03.10 12:24:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120310.log
[2012.03.12 10:06:58 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120312.log
[2012.03.13 09:54:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120313.log
[2012.03.17 12:39:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120317.log
[2012.03.18 12:35:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120318.log
[2012.03.21 09:05:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120321.log
[2012.03.22 17:25:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120322.log
[2012.03.23 10:09:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120323.log
[2012.03.24 10:08:43 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120324.log
[2012.03.27 10:54:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120327.log
[2012.03.28 16:02:05 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120328.log
[2012.03.30 08:09:56 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120330.log
[2012.03.31 08:58:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120331.log
[2012.04.02 16:39:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120402.log
[2012.04.03 15:54:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120403.log
[2012.04.04 08:50:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120404.log
[2012.04.05 11:28:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120405.log
[2012.04.06 10:58:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120406.log
[2012.04.09 15:07:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120409.log
[2012.04.12 11:30:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120412.log
[2012.04.13 22:59:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120413.log
[2012.04.15 10:27:12 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120415.log
[2012.04.16 22:32:23 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120416.log
[2012.04.17 11:31:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120417.log
[2012.05.24 20:53:13 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120524.log
[2012.05.27 18:54:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120527.log
[2012.06.16 16:44:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120616.log
[2012.07.10 11:38:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120710.log
[2012.07.16 16:22:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120716.log
[2012.07.17 07:11:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120717.log
[2012.07.18 07:18:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120718.log
[2012.07.19 07:48:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120719.log
[2012.07.20 08:01:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120720.log
[2012.07.21 07:55:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120721.log
[2012.07.22 09:59:47 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120722.log
[2012.07.26 18:28:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120726.log
[2012.08.03 14:13:50 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120803.log
[2012.08.04 07:27:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120804.log
[2012.08.05 07:52:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120805.log
[2012.08.07 11:18:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120807.log
[2012.08.09 17:49:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120809.log
[2012.08.10 11:43:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120810.log
[2012.08.11 07:37:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120811.log
[2012.08.13 18:53:15 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120813.log
[2012.08.14 12:31:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120814.log
[2012.08.15 20:28:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120815.log
[2012.08.16 12:52:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120816.log
[2012.08.17 08:11:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120817.log
[2012.08.20 05:56:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120820.log
[2012.08.21 17:39:09 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120821.log
[2012.08.22 20:30:29 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120822.log
[2012.08.23 06:22:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120823.log
[2012.08.25 09:18:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120825.log
[2012.08.26 09:10:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120826.log
[2012.08.28 05:08:57 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120828.log
[2012.08.29 16:40:09 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120829.log
[2012.08.30 06:35:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120830.log
[2012.09.01 10:46:34 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120901.log
[2012.09.02 06:41:08 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120902.log
[2012.09.03 17:56:32 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120903.log
[2012.09.05 16:30:07 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120905.log
[2012.09.07 18:08:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120907.log
[2012.09.08 07:45:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120908.log
[2012.09.09 09:15:48 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120909.log
[2012.09.10 17:16:55 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120910.log
[2012.09.15 08:42:04 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120915.log
[2012.09.16 06:44:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120916.log
[2012.09.18 08:25:39 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120918.log
[2012.09.19 13:56:50 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120919.log
[2012.09.20 13:02:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120920.log
[2012.09.21 04:10:19 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120921.log
[2012.09.22 05:33:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120922.log
[2012.09.24 13:09:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120924.log
[2012.09.25 09:46:16 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120925.log
[2012.09.27 18:11:37 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120927.log
[2012.09.28 07:36:03 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120928.log
[2012.09.29 09:03:50 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120929.log
[2012.09.30 12:14:17 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20120930.log
[2012.10.02 17:45:28 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121002.log
[2012.10.03 07:34:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121003.log
[2012.10.06 10:32:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121006.log
[2012.10.07 06:47:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121007.log
[2012.10.19 11:19:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121019.log
[2012.10.28 22:09:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121028.log
[2012.12.22 13:03:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121222.log
[2012.12.23 01:35:11 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121223.log
[2012.12.24 10:08:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121224.log
[2012.12.25 09:00:49 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121225.log
[2012.12.26 21:40:24 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121226.log
[2012.12.27 09:30:10 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121227.log
[2012.12.28 12:28:45 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121228.log
[2012.12.29 09:59:20 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121229.log
[2012.12.30 09:50:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121230.log
[2012.12.31 10:16:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20121231.log
[2013.01.01 10:09:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130101.log
[2013.01.02 14:00:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130102.log
[2013.01.03 15:17:48 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130103.log
[2013.01.04 10:50:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130104.log
[2013.01.05 11:03:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130105.log
[2013.01.06 10:02:46 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130106.log
[2013.01.07 15:54:36 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130107.log
[2013.01.08 10:00:55 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130108.log
[2013.01.09 09:03:06 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130109.log
[2013.01.10 05:49:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130110.log
[2013.01.11 13:51:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130111.log
[2013.01.12 10:24:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130112.log
[2013.01.13 10:02:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130113.log
[2013.01.14 18:17:52 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130114.log
[2013.01.15 16:56:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130115.log
[2013.01.16 16:51:44 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130116.log
[2013.01.17 19:53:35 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130117.log
[2013.01.18 14:46:02 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130118.log
[2013.01.21 18:32:25 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130121.log
[2013.01.22 09:42:57 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130122.log
[2013.01.23 17:13:33 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130123.log
[2013.01.24 17:46:14 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130124.log
[2013.01.25 18:05:22 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130125.log
[2013.01.26 09:41:41 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130126.log
[2013.01.27 10:39:40 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130127.log
[2013.01.29 17:25:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130129.log
[2013.01.30 18:47:26 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130130.log
[2013.01.31 18:22:01 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130131.log
[2013.02.01 19:37:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130201.log
[2013.02.02 09:31:59 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130202.log
[2013.02.04 16:57:00 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130204.log
[2013.02.07 17:36:53 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130207.log
[2013.02.08 19:35:30 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130208.log
[2013.02.11 17:28:31 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130211.log
[2013.02.12 07:21:27 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130212.log
[2013.02.13 16:21:42 | 000,000,000 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\log\LOADER-20130213.log
[2008.05.14 16:06:30 | 000,561,200 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\x64\eDSLoader.exe
[2008.05.14 16:05:22 | 000,526,896 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
[2008.05.14 16:05:28 | 000,454,704 | ---- | M] () -- \Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe
[2012.12.11 16:47:08 | 000,048,315 | ---- | M] () -- \Program Files\Full Tilt Poker\Graphics\Cashier\WebDialog\cashier_loader.mng
[2012.12.11 16:47:08 | 000,015,895 | ---- | M] () -- \Program Files\Full Tilt Poker\Graphics\Lobby\Backgrounds\LoaderChip.gif
[2013.02.21 20:07:05 | 000,033,656 | R--- | M] () -- \Program Files\Norton AntiVirus\Engine\16.0.0.125\HSLoader.exe
[3 \Program Files\Norton AntiVirus\Engine\16.0.0.125\*.tmp files -> \Program Files\Norton AntiVirus\Engine\16.0.0.125\*.tmp -> ]
[2012.11.01 08:32:14 | 000,057,224 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.09.04 22:34:12 | 000,083,848 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2008.06.20 19:13:32 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2013.03.05 10:11:10 | 000,432,128 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Facebook\ZPSPluginLoader.exe
[2013.03.05 13:03:44 | 000,443,904 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 14:12:42 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Flickr\ZPSPluginLoader.exe
[2013.03.05 12:34:20 | 000,192,512 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 14:12:40 | 000,053,640 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Plugins\Picasa\ZPSPluginLoader.exe
[2013.12.13 16:35:50 | 000,103,936 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Program32\8bfLoader.exe
[2013.12.13 16:35:58 | 000,018,944 | ---- | M] () -- \Program Files\Zoner\Photo Studio 16\Program32\WICLoader.exe
[2013.12.27 06:34:35 | 000,002,535 | ---- | M] () -- \ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealDownloader.lnk
[2013.08.14 15:19:02 | 000,014,136 | ---- | M] () -- \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2013.08.14 14:48:20 | 000,000,319 | ---- | M] () -- \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2013.08.14 15:24:36 | 000,002,587 | ---- | M] () -- \ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
[2010.11.11 11:28:34 | 000,004,229 | ---- | M] () -- \Users\ACER\AppData\Roaming\Philips-Songbird\Profiles\oi4pkjx8.default\extensions\philips-branding@philips.com\payload\rhapsody@songbirdnest.com\platform\WINNT_x86-msvc\components\sbRhapsodyLibraryLoader.js
[2013.12.27 06:34:35 | 000,002,535 | ---- | M] () -- \Users\All Users\Microsoft\Windows\Start Menu\Programs\RealNetworks\RealDownloader.lnk
[2013.08.14 15:19:02 | 000,014,136 | ---- | M] () -- \Users\All Users\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\Chrome\Content\browserrecordloader.js
[2013.08.14 14:48:20 | 000,000,319 | ---- | M] () -- \Users\All Users\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\Chrome\Content\browserrecordloader.xul
[2013.08.14 15:24:36 | 000,002,587 | ---- | M] () -- \Users\All Users\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
[2013.10.02 18:06:45 | 001,021,920 | ---- | M] () -- \Users\Public\Downloads\Norton\{NAV21021-SHPD-FSD40014}\NAVDownloader.exe
[2008.08.06 09:09:38 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2008.01.21 03:23:37 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2008.01.21 07:45:35 | 000,003,402 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_33426ea9fd097a15.manifest
[2008.01.21 07:45:35 | 000,027,648 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_33426ea9fd097a15_winload.exe.mui_3bc5b827
[2008.01.21 07:45:35 | 000,019,968 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_33426ea9fd097a15_winresume.exe.mui_ff8b5358
[2009.11.20 17:59:47 | 000,004,864 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6002.18005_none_5d12333e69c8ab94.manifest
[2009.11.20 17:59:47 | 000,986,600 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6002.18005_none_5d12333e69c8ab94_winload.exe_75835076
[2009.11.20 17:59:48 | 000,926,184 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6002.18005_none_5d12333e69c8ab94_winresume.exe_85cd1215
[2008.01.21 03:26:48 | 000,003,885 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.0.6001.18000_none_6b332839511be4b2.manifest
[2008.01.21 03:26:48 | 000,021,048 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.0.6001.18000_none_6b332839511be4b2_spldr.sys_98bd87a0
[2008.02.29 08:26:23 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_de-de_cb9c6772f81a418b.manifest
[2008.02.29 08:19:08 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_en-us_748d3d6be6f84d50.manifest
[2008.02.29 11:05:29 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_es-es_74589a4fe71f3ef5.manifest
[2008.02.29 11:07:01 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_fr-fr_1710104ed9f15557.manifest
[2008.02.29 11:05:17 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_it-it_01380695b1233ad5.manifest
[2008.02.29 09:14:00 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_ja-jp_a35d85a2a43e4cb0.manifest
[2008.02.29 11:02:51 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16646_nl-nl_2d992eca70004957.manifest
[2008.02.29 08:19:24 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_de-de_cbf6c366115bebbd.manifest
[2008.02.29 08:21:05 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_en-us_74e7995f0039f782.manifest
[2008.02.29 10:56:53 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_es-es_74b2f6430060e927.manifest
[2008.02.29 11:12:24 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_fr-fr_176a6c41f332ff89.manifest
[2008.02.29 11:01:15 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_it-it_01926288ca64e507.manifest
[2008.02.29 08:46:06 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_ja-jp_a3b7e195bd7ff6e2.manifest
[2008.02.29 10:17:45 | 000,003,414 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.20782_nl-nl_2df38abd8941f389.manifest
[2008.01.21 07:38:38 | 000,003,402 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_33426ea9fd097a15.manifest
[2008.02.29 08:17:27 | 000,004,858 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16646_none_591b3d986f9b5725.manifest
[2008.02.29 08:13:09 | 000,004,858 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.20782_none_5975998b88dd0157.manifest
[2008.01.21 03:20:53 | 000,004,864 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18000_none_5b26ba326ca6e048.manifest
[2008.02.29 09:08:07 | 000,004,864 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b.manifest
[2008.02.29 08:37:27 | 000,004,864 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.22125_none_5b9fb89785d036a7.manifest
[2009.04.11 00:12:44 | 000,004,864 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6002.18005_none_5d12333e69c8ab94.manifest
[2006.11.02 11:13:06 | 000,003,970 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.0.6000.16386_none_68fc663d5430d3de.manifest
[2008.01.21 03:19:11 | 000,003,885 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.0.6001.18000_none_6b332839511be4b2.manifest
[2008.01.21 03:23:37 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6001.18000_none_45f41bf18fa2cf5a\dmloader.dll
[2008.01.21 03:23:37 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6002.18005_none_47df94fd8cc49aa6\dmloader.dll

< *minodlogin* /s >

< *tnod* /s >
[2008.07.24 08:52:36 | 000,000,750 | ---- | M] () -- \ACER\Preload\Autorun\APP\Arcade Deluxe\PCinema\Config\CopyRightNoDTS.ini
[2008.07.24 08:52:36 | 000,000,750 | ---- | M] () -- \Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Customizations\Generic\CopyRightNoDTS.ini

< *AutoKMS* /s >

< *activator* /s >
[2012.11.02 14:54:14 | 000,318,304 | ---- | M] () -- \Program Files\TuneUp Utilities 2013\ProgramDeactivator.exe
[2012.11.02 14:57:18 | 000,102,752 | ---- | M] () -- \Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe

[xtoncekx]

< *serial* /s >
[2014.02.05 18:41:19 | 000,003,170 | ---- | M] () -- \Games\World_of_Tanks\res\scripts\client\gui\shared\gui_items\serializers.pyc
[2014.02.13 22:57:42 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.30214.0\System.Runtime.Serialization.dll
[2014.03.12 17:05:19 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.30214.0\System.Runtime.Serialization.ni.dll
[2011.11.10 20:44:28 | 000,005,687 | ---- | M] () -- \Program Files\PokerStars\gx\tokenserial.jpg
[2012.10.08 12:01:03 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2009.03.31 19:04:50 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.03.30 05:42:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.08 12:01:03 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.02.15 09:37:42 | 002,346,496 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\032ab8e56366d48dc3f04b6eb7bc8c9f\System.Runtime.Serialization.ni.dll
[2013.08.19 18:10:34 | 002,346,496 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1bf91944c0a39048bb079c5d81f90529\System.Runtime.Serialization.ni.dll
[2014.02.13 19:29:35 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\71d3236a23facafbbb7c81924df6ba0f\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.08.19 18:10:08 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\aecbf967d699e9d2da69afdf5412491c\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.27 06:41:39 | 000,309,760 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\abb3fbf787b74b7d2513a8c409b5ef74\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.02.27 06:41:39 | 000,000,580 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runt9064068c#\abb3fbf787b74b7d2513a8c409b5ef74\System.Runtime.Serialization.Formatters.Soap.ni.dll.aux
[2014.02.27 06:42:14 | 002,825,216 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll
[2014.02.27 06:42:14 | 000,001,308 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll.aux
[2014.02.27 06:51:02 | 000,026,624 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\94ce7a3b39b335283a0087f9964e9099\System.Xml.Serialization.ni.dll
[2014.02.27 06:51:02 | 000,000,376 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.84e525b7#\94ce7a3b39b335283a0087f9964e9099\System.Xml.Serialization.ni.dll.aux
[2013.09.11 22:33:38 | 000,027,920 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.09.11 22:33:38 | 000,133,344 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.09.11 21:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Json\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Json.dll
[2013.09.11 21:21:54 | 000,022,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Primitives\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Primitives.dll
[2013.09.11 22:33:38 | 000,113,864 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.09.11 21:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Xml\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Xml.dll
[2013.09.11 22:33:38 | 001,052,320 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.09.11 21:21:54 | 000,036,480 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
[2013.09.11 21:21:54 | 000,022,656 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.XmlSerializer\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Xml.XmlSerializer.dll
[2009.03.30 05:42:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2009.03.31 19:04:50 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.08 12:01:09 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 22:33:38 | 001,052,320 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2013.09.11 22:33:38 | 000,133,344 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2013.09.11 21:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Json.dll
[2013.09.11 21:21:54 | 000,022,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Primitives.dll
[2013.09.11 21:21:54 | 000,022,176 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Xml.dll
[2013.09.11 21:21:54 | 000,036,480 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
[2013.09.11 21:21:54 | 000,022,656 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.XmlSerializer.dll
[2013.09.11 22:33:38 | 000,027,920 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.09.11 22:33:38 | 000,113,864 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.01.21 03:23:51 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2008.01.21 07:44:02 | 000,005,632 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2006.11.02 09:51:30 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2008.01.21 07:42:01 | 000,004,096 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\grserial.sys.mui
[2008.01.21 07:42:02 | 000,010,240 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2008.01.21 03:23:26 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\hiddigi.inf_33048ac2\serial.sys
[2006.11.02 09:51:30 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\hiddigi.inf_9d4661e2\serial.sys
[2006.11.02 08:41:49 | 001,010,560 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_91bbdacd\smserial.sys
[2008.01.21 03:23:01 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_44880ea7\serial.sys
[2006.11.02 09:51:30 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_ac874de4\serial.sys
[2006.11.02 09:51:28 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_a24cc104\grserial.sys
[2008.01.21 03:23:22 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_bec36faa\grserial.sys
[2009.11.20 17:59:56 | 000,003,462 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6002.18005_none_13a1062aa9ccba61.manifest
[2009.11.20 17:59:56 | 000,017,384 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6002.18005_none_13a1062aa9ccba61_kdcom.dll_db5e7744
[2008.01.21 07:45:31 | 000,005,632 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_4e6ae191e3aac47c_serialui.dll.mui_7d29d2a3
[2009.11.20 18:00:27 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805_serialui.dll_bea29328
[2006.11.02 13:33:50 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.16386_none_d24e4473b7df83f3.manifest
[2008.06.23 03:05:53 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.16708_none_d2461403b7e6edc1.manifest
[2008.06.23 03:02:26 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.20864_none_bb7eca1fd1887f4d.manifest
[2008.01.21 03:21:15 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18000_none_d222c62fb8372cbf.manifest
[2008.06.23 03:40:19 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18096_none_d22b4019b82faa94.manifest
[2008.06.23 02:58:46 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.22208_none_bb54690bd1df5a1e.manifest
[2009.04.11 00:16:00 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18005_none_d1fe4b6bb888c0d3.manifest
[2010.04.12 19:29:50 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18239_none_d200f0e1b88673fe.manifest
[2012.10.08 17:24:13 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18707_none_d1fe1cdfb888f64c.manifest
[2010.04.12 20:40:05 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.22380_none_bb39189bd2286c0e.manifest
[2012.10.08 16:03:48 | 000,003,028 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.22945_none_bb34a4b3d22c88bd.manifest
[2008.01.21 07:38:00 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16386_cs-cz_5ff98b2cc72ba40d.manifest
[2006.11.02 13:39:55 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16386_en-us_bb16054302d6ef1f.manifest
[2008.06.23 03:30:17 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16708_en-us_bb0dd4d302de58ed.manifest
[2008.08.14 06:39:56 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16730_cs-cz_5ff511dac72f8cd8.manifest
[2008.06.23 03:23:53 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.20864_en-us_a4468aef1c7fea79.manifest
[2008.08.14 06:23:06 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.20895_cs-cz_492cfaeee0d2050d.manifest
[2008.01.21 07:38:23 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.18000_cs-cz_5fce0ce8c7834cd9.manifest
[2008.06.23 03:32:13 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.18096_en-us_baf300e9032715c0.manifest
[2008.08.14 09:36:16 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.18121_cs-cz_5fcff690c7819979.manifest
[2008.06.23 03:09:44 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.22208_en-us_a41c29db1cd6c54a.manifest
[2008.08.14 08:03:05 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.22243_cs-cz_490422d4e1275f6f.manifest
[2009.04.11 11:04:50 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18005_cs-cz_5fa99224c7d4e0ed.manifest
[2010.04.12 23:15:50 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18239_cs-cz_5fac379ac7d29418.manifest
[2010.04.12 18:44:55 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18239_en-us_bac8b1b1037ddf2a.manifest
[2012.10.08 20:37:20 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18707_cs-cz_5fa96398c7d51666.manifest
[2012.10.08 17:20:22 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18707_en-us_bac5ddaf03806178.manifest
[2010.04.12 23:51:48 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22380_cs-cz_48e45f54e1748c28.manifest
[2010.04.12 19:41:31 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22380_en-us_a400d96b1d1fd73a.manifest
[2012.10.08 17:22:39 | 000,002,584 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22945_cs-cz_48dfeb6ce178a8d7.manifest
[2012.10.08 16:00:20 | 000,000,633 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22945_en-us_a3fc65831d23f3e9.manifest
[2006.11.02 13:33:50 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.16386_none_02917a0ddf868526.manifest
[2008.06.23 03:05:31 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.16708_none_0289499ddf8deef4.manifest
[2008.06.23 03:02:01 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.20864_none_ebc1ffb9f92f8080.manifest
[2008.01.21 03:21:15 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18000_none_0265fbc9dfde2df2.manifest
[2008.06.23 03:39:55 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18096_none_026e75b3dfd6abc7.manifest
[2008.06.23 02:58:14 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.22208_none_eb979ea5f9865b51.manifest
[2009.04.11 00:15:32 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18005_none_02418105e02fc206.manifest
[2010.04.12 19:29:29 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18239_none_0244267be02d7531.manifest
[2012.10.08 17:23:59 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18707_none_02415279e02ff77f.manifest
[2010.04.12 20:39:45 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22380_none_eb7c4e35f9cf6d41.manifest
[2012.10.08 16:03:34 | 000,003,227 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22945_none_eb77da4df9d389f0.manifest
[2006.11.02 11:18:20 | 000,003,462 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6000.16386_none_0f7ecb22afbfde41.manifest
[2008.01.21 03:20:08 | 000,003,462 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6001.18000_none_11b58d1eacaaef15.manifest
[2009.04.11 00:13:32 | 000,003,462 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6002.18005_none_13a1062aa9ccba61.manifest
[2006.11.02 11:02:09 | 000,001,406 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.0.6000.16386_none_2a8610ec098ae6c4.manifest
[2006.11.02 13:33:50 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16386_none_076c25db205d1f68.manifest
[2008.06.23 03:08:38 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16708_none_0763f56b20648936.manifest
[2008.06.23 03:05:46 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.20864_none_f09cab873a061ac2.manifest
[2008.01.21 03:21:11 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18000_none_0740a79720b4c834.manifest
[2008.06.23 03:43:41 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18096_none_0749218120ad4609.manifest
[2008.06.23 03:02:24 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22208_none_f0724a733a5cf593.manifest
[2009.04.11 00:18:56 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18005_none_071c2cd321065c48.manifest
[2010.04.12 19:32:33 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18239_none_071ed24921040f73.manifest
[2012.10.08 17:26:11 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18707_none_071bfe47210691c1.manifest
[2010.04.12 20:42:39 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22380_none_f056fa033aa60783.manifest
[2012.10.08 16:05:32 | 000,003,062 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22945_none_f052861b3aaa2432.manifest
[2006.10.20 02:14:53 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.16386_none_483e6ea12378b3a8\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.27 19:00:27 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.16720_none_4838f505237d831c\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.27 18:55:55 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6000.20883_none_31710ba93d1fc80f\System.Runtime.Serialization.Formatters.Soap.dll
[2008.01.21 03:23:53 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.18000_none_4812f05d23d05c74\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.27 19:03:15 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.18111_none_4813d9bb23cf8fbd\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.27 18:58:35 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.22230_none_31484a573d7508d0\System.Runtime.Serialization.Formatters.Soap.dll
[2009.03.30 05:42:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6002.18005_none_47ee75992421f088\System.Runtime.Serialization.Formatters.Soap.dll
[2008.01.21 07:40:03 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6000.16386_cs-cz_0167850d1d10bca1\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.12 23:57:47 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6000.16754_cs-cz_0164b12f1d133e9e\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.12 23:56:42 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6000.20921_cs-cz_ea944dc536bd060d\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.01.21 07:43:32 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6001.18000_cs-cz_013c06c91d68656d\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.15 23:24:37 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6001.18145_cs-cz_013f95e51d654b3f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.15 23:25:16 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6001.22269_cs-cz_ea739499370b4477\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.03.31 19:04:50 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.0.6002.18005_cs-cz_01178c051db9f981\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2006.11.02 13:36:03 | 000,888,832 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.16386_none_d24e4473b7df83f3\System.Runtime.Serialization.dll
[2008.06.20 02:17:50 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.16708_none_d2461403b7e6edc1\System.Runtime.Serialization.dll
[2008.06.20 02:12:45 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6000.20864_none_bb7eca1fd1887f4d\System.Runtime.Serialization.dll
[2008.01.21 03:25:23 | 000,929,792 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18000_none_d222c62fb8372cbf\System.Runtime.Serialization.dll
[2008.06.20 02:14:31 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.18096_none_d22b4019b82faa94\System.Runtime.Serialization.dll
[2008.06.20 02:13:19 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6001.22208_none_bb54690bd1df5a1e\System.Runtime.Serialization.dll
[2009.02.18 19:38:43 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18005_none_d1fe4b6bb888c0d3\System.Runtime.Serialization.dll
[2010.04.12 13:21:15 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18239_none_d200f0e1b88673fe\System.Runtime.Serialization.dll
[2012.10.08 12:01:09 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18707_none_d1fe1cdfb888f64c\System.Runtime.Serialization.dll
[2010.04.12 13:22:49 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.22380_none_bb39189bd2286c0e\System.Runtime.Serialization.dll
[2012.10.08 11:59:43 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.22945_none_bb34a4b3d22c88bd\System.Runtime.Serialization.dll
[2008.01.21 07:42:34 | 000,081,920 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16386_cs-cz_5ff98b2cc72ba40d\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:12:07 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.16730_cs-cz_5ff511dac72f8cd8\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:12:26 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6000.20895_cs-cz_492cfaeee0d2050d\System.RunTime.Serialization.Resources.dll
[2008.01.21 07:43:27 | 000,086,016 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.18000_cs-cz_5fce0ce8c7834cd9\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:15:53 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.18121_cs-cz_5fcff690c7819979\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:16:19 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6001.22243_cs-cz_490422d4e1275f6f\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18005_cs-cz_5fa99224c7d4e0ed\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18239_cs-cz_5fac379ac7d29418\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.18707_cs-cz_5fa96398c7d51666\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22380_cs-cz_48e45f54e1748c28\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.0.6002.22945_cs-cz_48dfeb6ce178a8d7\System.RunTime.Serialization.Resources.dll
[2006.11.02 13:36:03 | 000,888,832 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.16386_none_02917a0ddf868526\System.Runtime.Serialization.dll
[2008.06.20 02:17:48 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.16708_none_0289499ddf8deef4\System.Runtime.Serialization.dll
[2008.06.20 02:12:43 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6000.20864_none_ebc1ffb9f92f8080\System.Runtime.Serialization.dll
[2008.01.21 03:25:23 | 000,929,792 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18000_none_0265fbc9dfde2df2\System.Runtime.Serialization.dll
[2008.06.20 02:14:29 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.18096_none_026e75b3dfd6abc7\System.Runtime.Serialization.dll
[2008.06.20 02:13:17 | 000,966,656 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6001.22208_none_eb979ea5f9865b51\System.Runtime.Serialization.dll
[2009.02.18 19:38:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18005_none_02418105e02fc206\System.Runtime.Serialization.dll
[2010.04.12 13:21:01 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18239_none_0244267be02d7531\System.Runtime.Serialization.dll
[2012.10.08 12:01:03 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18707_none_02415279e02ff77f\System.Runtime.Serialization.dll
[2010.04.12 13:22:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22380_none_eb7c4e35f9cf6d41\System.Runtime.Serialization.dll
[2012.10.08 11:59:29 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22945_none_eb77da4df9d389f0\System.Runtime.Serialization.dll
[2008.01.21 07:42:02 | 000,010,240 | ---- | M] () -- \Windows\winsxs\x86_hiddigi.inf.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_f15fa7f9f28d5343\serial.sys.mui
[2008.01.21 03:23:26 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_hiddigi.inf_31bf3856ad364e35_6.0.6001.18000_none_955c449145dbf667\serial.sys
[2008.01.21 07:41:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_bdf5a8f7ae6b024a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.12 23:57:47 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6000.16754_cs-cz_be141fbfae547065\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.12 23:56:42 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6000.20921_cs-cz_bebb2d56c75c6d7e\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.01.21 07:43:48 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_c02c6af3ab56131e\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.15 23:24:37 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18145_cs-cz_c0062e9bab71febc\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.09.15 23:25:16 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.22269_cs-cz_c07e2cb6c49c3bc4\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.03.31 19:04:50 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_cs-cz_c217e3ffa877de6a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2008.01.21 07:41:55 | 000,005,632 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_4c341f95e6bfb3a8\serialui.dll.mui
[2008.01.21 07:44:02 | 000,005,632 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_4e6ae191e3aac47c\serialui.dll.mui
[2008.01.21 03:23:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6001.18000_none_f501a18e1eaabcb9\serialui.dll
[2008.01.21 03:23:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\serialui.dll
[2008.01.21 07:42:31 | 000,081,920 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_5b3d50955593c887\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:12:07 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6000.16730_cs-cz_5b6d660d55709964\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:12:26 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6000.20895_cs-cz_5bbb24c26eba5f87\System.RunTime.Serialization.Resources.dll
[2008.01.21 07:43:24 | 000,086,016 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_5d741291527ed95b\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:15:53 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18121_cs-cz_5d5f74e9528e27bb\System.RunTime.Serialization.Resources.dll
[2008.08.12 23:16:19 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.22243_cs-cz_5dd572706bba3215\System.RunTime.Serialization.Resources.dll
[2009.02.19 02:11:23 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_cs-cz_5f5f8b9d4fa0a4a7\System.RunTime.Serialization.Resources.dll
[2008.01.21 07:40:22 | 000,010,240 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_c27f608a4f515351\serial.sys.mui
[2008.01.21 03:23:01 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.0.6001.18000_none_f897b0b1b85e4433\serial.sys
[2008.01.21 07:42:01 | 000,004,096 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf.resources_31bf3856ad364e35_6.0.6000.16386_cs-cz_b4070b50f198e261\grserial.sys.mui
[2008.01.21 03:23:22 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.0.6001.18000_none_72a9e15f343dcd03\grserial.sys
[2006.11.02 13:36:02 | 000,888,832 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16386_none_076c25db205d1f68\System.Runtime.Serialization.dll
[2008.06.20 02:17:48 | 000,966,656 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.16708_none_0763f56b20648936\System.Runtime.Serialization.dll
[2008.06.20 02:12:43 | 000,966,656 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6000.20864_none_f09cab873a061ac2\System.Runtime.Serialization.dll
[2008.01.21 03:25:21 | 000,929,792 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18000_none_0740a79720b4c834\System.Runtime.Serialization.dll
[2008.06.20 02:14:29 | 000,966,656 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.18096_none_0749218120ad4609\System.Runtime.Serialization.dll
[2008.06.20 02:13:17 | 000,966,656 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6001.22208_none_f0724a733a5cf593\System.Runtime.Serialization.dll
[2009.02.18 19:38:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18005_none_071c2cd321065c48\System.Runtime.Serialization.dll
[2010.04.12 13:21:01 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18239_none_071ed24921040f73\System.Runtime.Serialization.dll
[2012.10.08 12:01:03 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18707_none_071bfe47210691c1\System.Runtime.Serialization.dll
[2010.04.12 13:22:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22380_none_f056fa033aa60783\System.Runtime.Serialization.dll
[2012.10.08 11:59:29 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22945_none_f052861b3aaa2432\System.Runtime.Serialization.dll

< *w7lxe* /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:B623B5B8

< End of report >

[Márty84]

Vypnete antivir, at nebrani programu v praci.
Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
IMPI Updater
AdobeFlashPlayerUpdateSvc

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job

:otl
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1955701762-1772253553-2218349715-1000\..\SearchScopes\{7EE49D67-F07A-42E8-9247-328332D89466}: "URL" = http://start.funmoods.com/results.php?f=4&a=ddrnw&q={searchTerms}
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{17E113E6-CD0E-4045-B154-65F0E57959EF}: C:\Program Files\IMPI\Firefox
[8 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\Windows\temp\*.tmp files -> C:\Windows\temp\*.tmp -> ]
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:B623B5B8

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Zoner Photo Studio Autoupdate"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate] /64

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

[xtoncekx]

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: ACER
->Temp folder emptied: 31832 bytes
->Temporary Internet Files folder emptied: 180358 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 71351110 bytes
->Flash cache emptied: 1732 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 68,00 mb


[EMPTYFLASH]

User: ACER
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Guest
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service IMPI Updater stopped successfully!
Service IMPI Updater deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1955701762-1772253553-2218349715-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-1955701762-1772253553-2218349715-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EE49D67-F07A-42E8-9247-328332D89466}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7EE49D67-F07A-42E8-9247-328332D89466}\ not found.
Prefs.js: "" removed from browser.search.defaulturl
Prefs.js: true removed from browser.search.useDBForOrder
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{17E113E6-CD0E-4045-B154-65F0E57959EF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17E113E6-CD0E-4045-B154-65F0E57959EF}\ not found.
File C:\Program Files\IMPI\Firefox not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP119.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP205B.tmp\System.Xml.Linq.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP205B.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP501.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP6F36.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPB436.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBD2A.tmp\System.Data.Services.dll deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPBD2A.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDD63.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE7DF.tmp folder deleted successfully.
File delete failed. C:\Windows\temp\JETE954.tmp scheduled to be deleted on reboot.
ADS C:\ProgramData\Temp:B623B5B8 deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] /6\ not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate] /6\ not found.

OTL by OldTimer - Version 3.2.69.0 log created on 03232014_202824

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\JETE954.tmp not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[Márty84]

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

Prejmenujte ComboFix na Uninstall a spustte ho. CF by se mel odinstalovat.

T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.piriform.com/ccleaner/download/slim a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!

Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, jak je na tom pc.

[xtoncekx]

zdravím.tak pc už je na tom o dost líp.děkuju za pomoc

[Márty84]

To jsem rad. Ale vzhledem ke stavu disku to asi nebude uplne ono. Pravidelne zalohujte, kdyby disk nahodou selhal.

Nemate zac!

Mejte se a treba zase nekdy