VIRY.CZ

OTL logfile created on: 15.12.2011 18:00:26 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\t420\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,89 Gb Total Physical Memory | 5,40 Gb Available Physical Memory | 68,43% Memory free
19,71 Gb Paging File | 16,85 Gb Available in Paging File | 85,46% Paging File free
Paging file location(s): e:\pagefile.sys 12112 12112 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 110,62 Gb Total Space | 79,77 Gb Free Space | 72,12% Space Free | Partition Type: NTFS
Drive E: | 450,13 Gb Total Space | 383,74 Gb Free Space | 85,25% Space Free | Partition Type: NTFS
Drive F: | 15,62 Gb Total Space | 5,66 Gb Free Space | 36,22% Space Free | Partition Type: NTFS
Drive P: | 698,64 Gb Total Space | 569,13 Gb Free Space | 81,46% Space Free | Partition Type: NTFS

Computer Name: t420-THINK | User Name: t420 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2011.12.15 17:57:35 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\t420\Desktop\OTL.exe
PRC - [2011.12.06 17:45:32 | 047,658,848 | ---- | M] (Slimware Utilities, Inc.) -- C:\Program Files (x86)\FixCleaner\FixCleaner.exe
PRC - [2011.12.06 16:29:38 | 027,735,904 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe
PRC - [2011.12.05 20:17:44 | 024,242,056 | ---- | M] (Dropbox, Inc.) -- C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011.12.01 00:22:13 | 000,307,376 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011.11.28 19:01:23 | 000,127,192 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
PRC - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011.11.18 17:12:11 | 000,247,968 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe
PRC - [2011.11.17 21:55:25 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe
PRC - [2011.10.20 12:09:32 | 000,363,584 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
PRC - [2011.10.20 12:09:18 | 000,269,376 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
PRC - [2011.10.20 12:09:16 | 000,134,208 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
PRC - [2011.10.17 15:49:14 | 000,148,768 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\Bluetooth Headset Helper.exe
PRC - [2011.10.17 15:12:52 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011.10.17 15:12:48 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2011.10.06 12:26:22 | 000,708,232 | ---- | M] (Digital Creations AS) -- C:\Program Files (x86)\MaxTo\MaxTo.exe
PRC - [2011.10.04 03:04:00 | 000,064,576 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
PRC - [2011.09.29 16:06:02 | 002,898,776 | ---- | M] (Lamantine Software a.s.) -- C:\Program Files (x86)\Sticky Password\stpass.exe
PRC - [2011.08.12 23:18:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.08.12 05:20:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.08.11 19:04:14 | 000,328,552 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
PRC - [2011.07.25 23:18:46 | 000,028,672 | ---- | M] (Lenovo Group Limited) -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe
PRC - [2011.07.22 12:21:34 | 000,060,264 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
PRC - [2011.07.22 12:21:18 | 000,041,832 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe
PRC - [2011.07.12 17:17:04 | 000,138,680 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ZOOM\TpScrex.exe
PRC - [2011.07.12 16:53:24 | 000,101,736 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe
PRC - [2011.07.12 16:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
PRC - [2011.02.25 18:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011.02.24 08:10:24 | 000,212,944 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
PRC - [2011.01.17 02:42:02 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.11.18 16:47:52 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\SysWOW64\SASrv.exe
PRC - [2010.05.05 09:18:46 | 000,148,280 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
PRC - [2010.05.05 09:18:43 | 000,770,728 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
PRC - [2009.05.28 06:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe


========== Modules (No Company Name) ==========

MOD - [2011.12.12 14:46:33 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\f14466471a19a329eccf40839aa72cc4\IAStorUtil.ni.dll
MOD - [2011.12.12 14:46:33 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\056e417666352c7a702530d8a2770e30\IAStorCommon.ni.dll
MOD - [2011.11.17 21:55:25 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\U8300 Utilities\CONRCtl.exe
MOD - [2011.11.17 19:24:08 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d7a64c28cf0c90e6c48af4f7d6f9ed41\WindowsBase.ni.dll
MOD - [2011.11.17 19:23:51 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b2622080e047040fa044dd21a04ff10d\System.Runtime.Remoting.ni.dll
MOD - [2011.11.17 19:23:46 | 011,819,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\8e7909ef6b5f953d49244c6b9f5f5100\System.Web.ni.dll
MOD - [2011.11.17 19:23:34 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2011.11.17 19:08:58 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2011.11.17 19:08:54 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2011.11.17 19:08:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2011.11.17 19:08:50 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2011.11.17 19:08:47 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011.10.06 12:26:21 | 000,065,672 | ---- | M] () -- C:\Program Files (x86)\MaxTo\Hooker32.dll
MOD - [2011.10.06 12:26:21 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\MaxTo\BugzScoutDotNet.dll
MOD - [2011.08.19 03:25:20 | 000,471,040 | ---- | M] () -- C:\Program Files (x86)\Lexmark Toolbar\resource.dll
MOD - [2011.08.19 03:09:40 | 000,528,384 | ---- | M] () -- C:\Program Files (x86)\Lexmark Toolbar\toolband.dll
MOD - [2011.07.12 01:56:55 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_cs_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2011.06.01 05:37:24 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2010.11.13 03:01:07 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_cs_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010.11.13 03:00:59 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.05.05 09:18:46 | 000,148,280 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
MOD - [2010.05.05 09:18:43 | 000,770,728 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
MOD - [2010.04.05 06:56:07 | 000,716,954 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\epwizard.dll
MOD - [2010.04.05 06:55:15 | 000,159,890 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\customui.dll
MOD - [2010.04.05 06:55:04 | 000,061,604 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\epfunct.dll
MOD - [2010.04.05 06:54:59 | 000,123,033 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\eputil.dll
MOD - [2010.04.05 06:54:52 | 000,143,502 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\imagutil.dll
MOD - [2010.04.01 13:24:28 | 001,159,168 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeadrs.dll
MOD - [2010.04.01 13:23:27 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeascw.dll
MOD - [2009.06.23 07:11:00 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\epoemdll.dll
MOD - [2009.06.23 07:10:20 | 000,045,056 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\epstring.dll
MOD - [2009.06.23 07:08:50 | 002,203,648 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\epwizres.dll
MOD - [2009.05.28 06:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
MOD - [2009.04.07 15:25:27 | 000,409,600 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\iptk.dll
MOD - [2009.03.10 01:43:49 | 000,155,648 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeacaps.dll
MOD - [2009.03.02 10:25:47 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\Lexmark S300-S400 Series\lxeaptp.dll
MOD - [2008.05.22 03:28:16 | 000,458,752 | ---- | M] () -- C:\Program Files\Lexmark Printable Web\resource.dll
MOD - [2008.05.22 03:28:12 | 000,180,224 | ---- | M] () -- C:\Program Files\Lexmark Printable Web\bho.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.11.28 19:01:23 | 000,127,192 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV:64bit: - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2011.10.17 15:48:24 | 000,970,016 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2011.09.26 17:15:38 | 000,178,344 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\IPROSetMonitor.exe -- (Intel(R) PROSet Monitoring Service)
SRV:64bit: - [2011.08.11 11:20:42 | 000,045,928 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Windows\SysNative\ibmpmsvc.exe -- (IBMPMSVC)
SRV:64bit: - [2011.08.08 07:39:18 | 001,166,848 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011.07.27 21:04:48 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2011.07.27 20:44:18 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2011.07.22 12:21:34 | 000,060,264 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe -- (LENOVO.TPKNRSVC)
SRV:64bit: - [2011.07.22 12:21:18 | 000,041,832 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE)
SRV:64bit: - [2011.07.12 16:53:58 | 000,133,992 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC)
SRV:64bit: - [2011.07.12 16:53:40 | 000,145,256 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD)
SRV:64bit: - [2011.07.12 16:53:24 | 000,101,736 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE)
SRV:64bit: - [2011.07.12 16:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV:64bit: - [2011.07.08 17:53:20 | 000,144,232 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe -- (HyperW7Svc)
SRV:64bit: - [2011.06.03 12:51:38 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2011.03.29 19:15:36 | 000,047,728 | ---- | M] (Lenovo.) [On_Demand | Stopped] -- C:\Windows\SysNative\TPHDEXLG64.exe -- (TPHDEXLGSVC)
SRV:64bit: - [2010.12.17 08:18:08 | 000,198,784 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
SRV:64bit: - [2010.09.23 02:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010.04.14 21:45:36 | 001,052,328 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxeacoms.exe -- (lxea_device)
SRV:64bit: - [2010.04.14 21:45:30 | 000,045,736 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxeaserv.exe -- (lxeaCATSCustConnectService)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.07.14 02:39:47 | 000,010,240 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\TCPSVCS.EXE -- (simptcp)
SRV - [2011.10.20 12:09:18 | 000,269,376 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe -- (AcSvc)
SRV - [2011.10.20 12:09:16 | 000,134,208 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe -- (AcPrfMgrSvc)
SRV - [2011.10.17 15:12:52 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Úložná technologie Intel(R)
SRV - [2011.10.04 03:04:00 | 000,478,056 | ---- | M] (Lenovo.) [On_Demand | Running] -- C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE -- (DozeSvc)
SRV - [2011.10.04 03:04:00 | 000,175,168 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.exe -- (PwmEWSvc)
SRV - [2011.10.04 03:04:00 | 000,089,152 | ---- | M] (Lenovo) [On_Demand | Stopped] -- C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE -- (Power Manager DBC Service)
SRV - [2011.09.01 19:27:08 | 000,446,800 | ---- | M] (Lenovo Group Limited) [Disabled | Stopped] -- C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe -- (SROSVC)
SRV - [2011.08.12 23:18:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.08.12 05:20:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011.07.25 23:18:46 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files (x86)\Lenovo\System Update\SUService.exe -- (SUService)
SRV - [2011.06.06 16:35:30 | 001,191,464 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.03.02 05:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 18:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011.02.24 08:10:24 | 000,212,944 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe -- (jhi_service) Intel(R)
SRV - [2011.01.17 02:42:04 | 002,656,280 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2011.01.17 02:42:02 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.11.21 04:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010.11.21 04:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010.11.21 04:24:51 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2010.11.18 16:47:52 | 000,446,592 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService)
SRV - [2010.04.14 21:45:21 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\lxeacoms.exe -- (lxea_device)
SRV - [2010.03.18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.07.14 02:14:42 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\TCPSVCS.EXE -- (simptcp)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.12.15 16:58:11 | 000,015,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:64bit: - [2011.12.10 11:55:00 | 000,971,360 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2011.12.10 11:54:52 | 000,210,016 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vididr.sys -- (vididr)
DRV:64bit: - [2011.12.10 11:54:50 | 000,141,920 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsflt53.sys -- (vidsflt53) Acronis Disk Storage Filter (53)
DRV:64bit: - [2011.12.10 11:54:49 | 000,275,552 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2011.11.28 18:54:44 | 000,140,120 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswFW.sys -- (aswFW)
DRV:64bit: - [2011.11.28 18:54:06 | 000,591,192 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2011.11.28 18:53:58 | 000,304,472 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2011.11.28 18:53:28 | 000,258,392 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis2.sys -- (aswNdis2)
DRV:64bit: - [2011.11.28 18:52:22 | 000,042,328 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2011.11.28 18:52:20 | 000,058,712 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2011.11.28 18:52:11 | 000,066,904 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.11.28 18:51:53 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2011.11.17 21:52:01 | 000,447,872 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cxpolar64.sys -- (CXPOLARIS)
DRV:64bit: - [2011.11.17 21:52:01 | 000,044,032 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cxcir64.sys -- (CXIR)
DRV:64bit: - [2011.10.21 09:30:04 | 012,310,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011.10.17 16:24:50 | 000,437,288 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (BTWAMPFL)
DRV:64bit: - [2011.10.17 16:24:44 | 000,164,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2011.10.17 16:24:44 | 000,146,984 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2011.10.17 16:24:44 | 000,039,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2011.10.17 16:24:44 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2011.10.17 14:55:32 | 000,559,384 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011.10.05 00:28:42 | 000,032,936 | ---- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iqvw64e.sys -- (NAL)
DRV:64bit: - [2011.10.04 03:04:00 | 000,031,344 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\DZHDD64.SYS -- (DzHDD64)
DRV:64bit: - [2011.10.04 03:04:00 | 000,014,960 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TPPWR64V.SYS -- (TPPWRIF)
DRV:64bit: - [2011.10.03 15:46:40 | 001,577,088 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2011.09.30 18:16:50 | 000,393,264 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011.09.06 22:10:01 | 000,012,368 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis.sys -- (aswNdis)
DRV:64bit: - [2011.08.12 23:18:00 | 000,027,240 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011.08.11 11:20:42 | 000,039,024 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ibmpmdrv.sys -- (IBMPMDRV)
DRV:64bit: - [2011.08.08 07:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2011.08.08 07:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011.08.04 15:45:24 | 000,341,680 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1c62x64.sys -- (e1cexpress) Intel(R)
DRV:64bit: - [2011.08.03 17:28:32 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Ovladač adaptéru řady Intel(R)
DRV:64bit: - [2011.07.12 02:16:51 | 000,031,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmxdrv.sys -- (pmxdrv)
DRV:64bit: - [2011.07.08 17:53:24 | 000,032,104 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Program Files\Lenovo\RapidBoot\PHCORE64.sys -- (PHCORE)
DRV:64bit: - [2011.05.30 18:21:40 | 000,013,128 | ---- | M] (Authentec Inc.) [Kernel | Auto | Running] -- C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys -- (smihlp) SMI Helper Driver (smihlp)
DRV:64bit: - [2011.05.10 07:11:28 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011.03.29 19:13:40 | 000,139,888 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsX64.sys -- (Shockprf)
DRV:64bit: - [2011.03.29 19:11:48 | 000,023,664 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ApsHM64.sys -- (TPDIGIMN)
DRV:64bit: - [2011.03.23 08:25:00 | 000,101,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdxc64.sys -- (risdxc)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.03.05 02:18:42 | 000,166,016 | ---- | M] (Ricoh co.,Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\5U877.sys -- (5U877)
DRV:64bit: - [2010.11.21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.10.19 08:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010.09.07 06:09:36 | 000,015,472 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\smiifx64.sys -- (lenovo.smi)
DRV:64bit: - [2009.12.02 08:33:30 | 000,040,512 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\psadd.sys -- (psadd)
DRV:64bit: - [2009.09.24 12:58:38 | 000,041,536 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tvti2c.sys -- (TVTI2C)
DRV:64bit: - [2009.07.15 13:35:44 | 000,632,320 | ---- | M] (PixArt Imaging Incorporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GUCI_AVS.sys -- (GUCI_AVS)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009.07.14 00:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0




IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data]
IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)



O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (Lexmark Panel nástrojů) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Lexmark Panel nástrojů) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\..\Toolbar\WebBrowser: (Lexmark Panel nástrojů) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files (x86)\Lexmark Toolbar\toolband.dll ()
O3:64bit: - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [EzPrint] C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe ()
O4:64bit: - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [lxeamon.exe] C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe ()
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
O4 - HKLM..\Run: [PWMTRV] C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [RotateImage] C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Ricoh co.,Ltd.)
O4 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001..\Run: [MaxTo] C:\Program Files (x86)\MaxTo\MaxTo.exe (Digital Creations AS)
O4 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001..\Run: [StickyPassword] C:\Program Files (x86)\Sticky Password\stpass.exe (Lamantine Software a.s.)
O4 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\t420\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O7 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 1
O8:64bit: - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O8:64bit: - Extra context menu item: Open with XmlPad - C:\Program Files (x86)\WMHelp Software\WMHelp XmlPad\WmhASPP.dll (WMHelp Software)
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Open with XmlPad - C:\Program Files (x86)\WMHelp Software\WMHelp XmlPad\WmhASPP.dll (WMHelp Software)
O9:64bit: - Extra Button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} http://support.lenovo.com/Resources/Len ... etect2.cab (IASRunner Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinsta ... s-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.co ... .5.2.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{97A6D425-188A-4B45-83CC-54EB5D4BD719}: DhcpNameServer = 213.46.172.36 213.46.172.37
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Handler\wmh - No CLSID value found
O18 - Protocol\Handler\wmh {A1428E78-2D00-4590-A071-0CC9700A7768} - C:\Program Files (x86)\WMHelp Software\WMHelp XmlPad\WmhASPP.dll (WMHelp Software)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\psfus: DllName - (C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll) - C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.06.10 17:32:46 | 000,000,049 | -HS- | M] () - F:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\...com [@ = comfile] -- Reg Error: Key error. File not found
O37 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\...exe [@ = exefile] -- Reg Error: Key error. File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2011.12.15 17:57:30 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\t420\Desktop\OTL.exe
[2011.12.15 16:22:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011.12.15 14:29:52 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.12.15 14:29:52 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.12.15 14:29:51 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011.12.15 14:29:51 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011.12.15 14:29:50 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.12.15 14:29:50 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.12.15 14:29:49 | 002,309,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2011.12.15 14:29:49 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011.12.15 14:29:49 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.12.15 14:29:48 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.12.15 14:29:48 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.12.15 13:48:52 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\FixCleaner
[2011.12.15 13:48:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FixCleaner
[2011.12.15 13:48:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FixCleaner
[2011.12.15 12:44:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
[2011.12.15 12:44:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DriverUpdate
[2011.12.15 12:22:05 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2011.12.15 12:21:53 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.12.15 12:21:53 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.12.15 12:21:16 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011.12.15 11:25:07 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2011.12.15 11:25:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers
[2011.12.15 11:23:16 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Local\SlimWare Utilities Inc
[2011.12.14 13:54:45 | 000,000,000 | ---D | C] -- C:\Users\t420\DoctorWeb
[2011.12.14 13:49:58 | 000,000,000 | ---D | C] -- C:\Beruska.com11838B
[2011.12.14 13:41:19 | 000,000,000 | ---D | C] -- C:\Beruska.com
[2011.12.14 11:54:24 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011.12.14 11:54:24 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011.12.14 11:54:24 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011.12.14 11:54:18 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.12.14 11:54:13 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.12.14 11:54:06 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW
[2011.12.14 11:23:04 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\Malwarebytes
[2011.12.14 11:22:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.12.14 11:22:55 | 000,025,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.12.13 23:45:46 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011.12.13 23:45:46 | 000,000,000 | ---D | C] -- C:\rsit
[2011.12.13 18:01:05 | 000,214,408 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2011.12.13 18:01:05 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2011.12.13 18:01:05 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2011.12.12 14:51:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation
[2011.12.12 14:49:33 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\Intel Corporation
[2011.12.12 14:46:01 | 000,559,384 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys
[2011.12.12 14:45:57 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\InstallShield
[2011.12.12 14:36:46 | 000,178,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\IPROSetMonitor.exe
[2011.12.12 08:51:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxTo
[2011.12.12 08:51:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MaxTo
[2011.12.12 08:39:59 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Local\Digital_Creations_AS
[2011.12.12 08:39:56 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\AI_RecycleBin
[2011.12.11 14:09:37 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\Corel
[2011.12.11 14:09:35 | 000,000,000 | ---D | C] -- C:\Users\t420\Corel
[2011.12.11 00:38:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2011.12.10 23:15:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Binarysense
[2011.12.10 22:29:31 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\Lenovo
[2011.12.10 21:08:36 | 000,000,000 | ---D | C] -- C:\inetpub
[2011.12.10 21:08:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\BestPractices
[2011.12.10 21:08:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\BestPractices
[2011.12.10 12:13:16 | 000,000,000 | ---D | C] -- C:\Users\t420\AppData\Roaming\Acronis
[2011.12.10 11:55:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Acronis
[2011.12.10 11:55:00 | 000,971,360 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\timntr.sys
[2011.12.10 11:54:52 | 000,210,016 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\vididr.sys
[2011.12.10 11:54:50 | 000,141,920 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\vsflt53.sys
[2011.12.10 11:54:49 | 000,275,552 | ---- | C] (Acronis) -- C:\Windows\SysNative\drivers\snapman.sys
[2011.12.10 11:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
[2011.12.10 11:54:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Acronis
[2011.12.10 11:54:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acronis
[2011.12.10 00:13:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SPBA
[2011.12.09 17:16:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SPBA
[2011.12.09 17:16:58 | 000,000,000 | ---D | C] -- C:\Program Files\ThinkVantage Fingerprint Software
[2011.11.17 00:11:35 | 000,847,872 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeausb1.dll
[2011.11.17 00:11:35 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeapmui.dll
[2011.11.17 00:11:35 | 000,364,544 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeainpa.dll
[2011.11.17 00:11:35 | 000,344,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeaiesc.dll
[2011.11.17 00:11:34 | 001,048,576 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeaserv.dll
[2011.11.17 00:11:34 | 000,688,128 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeahbn3.dll
[2011.11.17 00:11:34 | 000,598,696 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeacoms.exe
[2011.11.17 00:11:34 | 000,577,536 | ---- | C] ( ) -- C:\Windows\SysWow64\lxealmpm.dll
[2011.11.17 00:11:34 | 000,372,736 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeacomm.dll
[2011.11.17 00:11:34 | 000,324,264 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeaih.exe
[2011.11.17 00:11:33 | 000,802,816 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeacomc.dll
[2011.11.17 00:11:33 | 000,373,416 | ---- | C] ( ) -- C:\Windows\SysWow64\lxeacfg.exe

========== Files - Modified Within 7 Days ==========

[2011.12.15 18:04:11 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011.12.15 17:57:35 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\t420\Desktop\OTL.exe
[2011.12.15 17:21:00 | 000,000,952 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.12.15 17:21:00 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.15 17:05:19 | 000,031,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.12.15 17:05:19 | 000,031,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.12.15 17:02:58 | 002,706,886 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2011.12.15 17:02:58 | 001,355,302 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.12.15 17:02:58 | 000,841,752 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2011.12.15 17:02:58 | 000,794,266 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.12.15 17:02:58 | 000,005,378 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.12.15 16:58:16 | 000,000,420 | ---- | M] () -- C:\Windows\tasks\DriverUpdate Startup.job
[2011.12.15 16:58:14 | 000,000,404 | ---- | M] () -- C:\Windows\tasks\FixCleaner Startup.job
[2011.12.15 16:58:11 | 000,015,672 | ---- | M] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
[2011.12.15 16:57:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.12.15 16:22:39 | 000,544,656 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2011.12.15 16:22:39 | 000,214,408 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2011.12.15 16:22:39 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2011.12.15 16:22:39 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2011.12.15 14:32:37 | 000,292,456 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.12.15 14:05:54 | 000,000,466 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job
[2011.12.15 14:05:54 | 000,000,464 | ---- | M] () -- C:\Windows\tasks\FixCleaner Scan.job
[2011.12.15 00:11:45 | 000,000,600 | ---- | M] () -- C:\Users\t420\AppData\Local\PUTTY.RND
[2011.12.14 18:11:09 | 015,939,160 | ---- | M] () -- C:\Users\t420\Desktop\nadoma.zip
[2011.12.14 15:58:30 | 000,428,352 | ---- | M] () -- C:\Users\t420\Desktop\tmp_nadoma.sql
[2011.12.13 22:51:35 | 000,959,127 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-novy.jpg
[2011.12.13 22:51:03 | 000,926,509 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-oicker.jpg
[2011.12.13 22:50:45 | 002,112,842 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-novy-vyber.jpg
[2011.12.13 22:50:25 | 002,061,302 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-edit.jpg
[2011.12.13 22:50:13 | 002,011,903 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-detail.jpg
[2011.12.13 22:49:58 | 002,086,903 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam.jpg
[2011.12.13 22:48:38 | 002,328,206 | ---- | M] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-kategorie.jpg
[2011.12.12 16:33:40 | 000,004,584 | ---- | M] () -- C:\Users\t420\Desktop\registrace2.html
[2011.12.12 16:32:00 | 000,006,254 | ---- | M] () -- C:\Users\t420\Desktop\registrace1.html
[2011.12.12 14:49:30 | 000,016,582 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2011.12.11 20:48:25 | 000,459,343 | ---- | M] () -- C:\Users\t420\Desktop\GoPay-integracni-manual_v_1_9.pdf
[2011.12.11 20:40:41 | 000,136,301 | ---- | M] () -- C:\Users\t420\Desktop\airtoy.mPlatbyTech.pdf
[2011.12.11 14:09:37 | 000,000,952 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2011.12.10 23:30:13 | 000,000,017 | ---- | M] () -- C:\Users\t420\AppData\Local\resmon.resmoncfg
[2011.12.10 11:55:00 | 000,971,360 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\timntr.sys
[2011.12.10 11:54:52 | 000,210,016 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\vididr.sys
[2011.12.10 11:54:50 | 000,141,920 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\vsflt53.sys
[2011.12.10 11:54:49 | 000,275,552 | ---- | M] (Acronis) -- C:\Windows\SysNative\drivers\snapman.sys

========== Files Created - No Company Name ==========

[2011.12.15 18:04:11 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011.12.15 17:17:33 | 002,328,206 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-kategorie.jpg
[2011.12.15 17:17:33 | 002,112,842 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-novy-vyber.jpg
[2011.12.15 17:17:33 | 002,086,903 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam.jpg
[2011.12.15 17:17:33 | 002,061,302 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-edit.jpg
[2011.12.15 17:17:33 | 002,011,903 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-detail.jpg
[2011.12.15 17:17:33 | 000,959,127 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-novy.jpg
[2011.12.15 17:17:33 | 000,926,509 | ---- | C] () -- C:\Users\t420\Desktop\Alfred_nakupniseznam-oicker.jpg
[2011.12.15 13:49:09 | 000,000,464 | ---- | C] () -- C:\Windows\tasks\FixCleaner Scan.job
[2011.12.15 13:49:09 | 000,000,404 | ---- | C] () -- C:\Windows\tasks\FixCleaner Startup.job
[2011.12.15 12:44:31 | 000,000,420 | ---- | C] () -- C:\Windows\tasks\DriverUpdate Startup.job
[2011.12.15 12:44:29 | 000,015,672 | ---- | C] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
[2011.12.14 18:08:31 | 015,939,160 | ---- | C] () -- C:\Users\t420\Desktop\nadoma.zip
[2011.12.14 15:58:21 | 000,428,352 | ---- | C] () -- C:\Users\t420\Desktop\tmp_nadoma.sql
[2011.12.14 11:54:24 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011.12.14 11:54:24 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011.12.14 11:54:24 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011.12.14 11:54:24 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011.12.14 11:54:24 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011.12.12 16:33:40 | 000,004,584 | ---- | C] () -- C:\Users\t420\Desktop\registrace2.html
[2011.12.12 16:32:00 | 000,006,254 | ---- | C] () -- C:\Users\t420\Desktop\registrace1.html
[2011.12.12 14:49:30 | 000,016,582 | ---- | C] () -- C:\Windows\SysNative\results.xml
[2011.12.11 20:48:24 | 000,459,343 | ---- | C] () -- C:\Users\t420\Desktop\GoPay-integracni-manual_v_1_9.pdf
[2011.12.11 20:40:41 | 000,136,301 | ---- | C] () -- C:\Users\t420\Desktop\airtoy.mPlatbyTech.pdf
[2011.12.11 14:09:36 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2011.12.10 23:30:13 | 000,000,017 | ---- | C] () -- C:\Users\t420\AppData\Local\resmon.resmoncfg
[2011.12.04 20:37:36 | 000,000,600 | ---- | C] () -- C:\Users\t420\AppData\Local\PUTTY.RND
[2011.11.18 09:07:14 | 000,000,339 | ---- | C] () -- C:\Users\t420\AppData\Roaming\Drives Meter_Settings.ini
[2011.11.18 09:06:07 | 000,000,352 | ---- | C] () -- C:\Users\t420\AppData\Roaming\Network Meter_Settings.ini
[2011.11.18 09:04:38 | 000,000,412 | ---- | C] () -- C:\Users\t420\AppData\Roaming\All CPU Meter_Settings.ini
[2011.11.17 20:15:45 | 000,000,600 | ---- | C] () -- C:\Users\t420\AppData\Roaming\winscp.rnd
[2011.11.17 01:37:41 | 000,210,032 | ---- | C] () -- C:\Windows\SysWow64\DBCLIENT.DLL
[2011.11.17 00:11:36 | 000,344,064 | ---- | C] () -- C:\Windows\SysWow64\lxeacomx.dll
[2011.11.17 00:11:36 | 000,331,776 | ---- | C] () -- C:\Windows\SysWow64\LXEAinst.dll
[2011.11.17 00:11:35 | 000,323,584 | ---- | C] () -- C:\Windows\SysWow64\lxeains.dll
[2011.11.17 00:11:35 | 000,262,144 | ---- | C] () -- C:\Windows\SysWow64\lxeainsb.dll
[2011.11.17 00:11:35 | 000,253,952 | ---- | C] () -- C:\Windows\SysWow64\lxeacu.dll
[2011.11.17 00:11:35 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\lxeainsr.dll
[2011.11.17 00:11:35 | 000,090,112 | ---- | C] () -- C:\Windows\SysWow64\lxeacub.dll
[2011.11.17 00:11:35 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\lxeajswr.dll
[2011.11.17 00:11:35 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\lxeacur.dll
[2011.11.17 00:01:35 | 000,024,064 | ---- | C] () -- C:\Windows\SysWow64\LXEAsmr.dll
[2011.11.17 00:01:34 | 000,299,008 | ---- | C] () -- C:\Windows\SysWow64\LXEAsm.dll
[2011.11.16 23:53:58 | 000,002,157 | ---- | C] () -- C:\Windows\SysWow64\GUCI_AVS.ini
[2011.10.21 09:27:54 | 000,217,536 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.10.21 09:22:54 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2011.10.21 09:03:04 | 013,903,872 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2011.08.12 05:20:56 | 000,305,256 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.07.12 02:22:02 | 000,963,116 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.07.12 02:22:01 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011.12.10 12:13:16 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Acronis
[2011.12.15 16:58:16 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Dropbox
[2011.12.15 11:24:08 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\FileZilla
[2011.12.15 16:19:22 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\FixCleaner
[2011.12.15 17:08:28 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\gtk-2.0
[2011.11.17 00:40:50 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Lamantine
[2011.11.16 22:49:33 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Leadertech
[2011.12.10 22:29:31 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Lenovo
[2011.11.20 21:11:46 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\OpenOffice.org
[2011.11.17 02:18:58 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\PCDr
[2011.11.16 23:54:24 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\PwrMgr
[2011.11.17 20:30:09 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\SQL Maestro Group
[2011.11.21 10:32:04 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Subversion
[2011.12.15 17:31:07 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Sylpheed
[2011.11.17 02:05:20 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\WMHelp
[2011.12.15 16:58:16 | 000,000,420 | ---- | M] () -- C:\Windows\Tasks\DriverUpdate Startup.job
[2011.12.15 14:05:54 | 000,000,464 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Scan.job
[2011.12.15 16:58:14 | 000,000,404 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Startup.job
[2011.11.29 07:37:12 | 000,000,528 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2011.12.11 15:36:14 | 000,032,524 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.12.15 14:05:54 | 000,000,466 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Custom Scans ==========


< >

< >


< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.21 04:24:27 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.21 04:23:53 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Users\t420\AppData\Local\SlimWare Utilities Inc\DriverUpdate\Backups\20111215T125352547164\gencdrom\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Users\t420\AppData\Local\SlimWare Utilities Inc\SlimDrivers\Backups\20111215T102658609852\gencdrom\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 04:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 04:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: HAL.DLL >
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.21 04:24:08 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 04:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.21 04:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.09.29 18:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010.11.21 04:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.04.25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011.04.25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.07.12 02:04:27 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=CB6A53EF141CC3DA32DA54F7E75D301B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21687_none_118505f696597a9d\tcpip.sys
[2011.07.12 02:04:27 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=DC08410DB2D0CC542DACAC7A90E6CB7A -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17582_none_10f667b97d405c20\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\SysNative\drivers\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 04:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.21 04:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

< >

< %systemroot%*.* /U /s >
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[22 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2011.12.10 12:13:16 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Acronis
[2011.11.20 20:42:20 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Adobe
[2011.12.11 14:09:56 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Corel
[2011.12.15 16:58:16 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Dropbox
[2011.12.15 11:24:08 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\FileZilla
[2011.12.15 16:19:22 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\FixCleaner
[2011.11.18 19:38:51 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Google
[2011.12.15 17:08:28 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\gtk-2.0
[2011.11.16 22:49:14 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Identities
[2011.12.12 14:45:57 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\InstallShield
[2011.11.16 22:44:29 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Intel
[2011.12.12 14:49:33 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Intel Corporation
[2011.11.17 00:40:50 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Lamantine
[2011.11.16 22:49:33 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Leadertech
[2011.12.10 22:29:31 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Lenovo
[2011.11.16 22:59:37 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Macromedia
[2011.12.14 11:23:04 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Malwarebytes
[2010.11.21 08:16:41 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Media Center Programs
[2011.12.13 10:18:42 | 000,000,000 | --SD | M] -- C:\Users\t420\AppData\Roaming\Microsoft
[2011.11.20 21:11:46 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\OpenOffice.org
[2011.11.17 02:18:58 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\PCDr
[2011.11.17 02:10:30 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\PSpad
[2011.11.16 23:54:24 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\PwrMgr
[2011.12.15 18:09:31 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Skype
[2011.11.17 20:30:09 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\SQL Maestro Group
[2011.11.21 10:32:04 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Subversion
[2011.12.15 18:10:59 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\Sylpheed
[2011.11.17 02:05:20 | 000,000,000 | ---D | M] -- C:\Users\t420\AppData\Roaming\WMHelp

< %APPDATA%\*.exe /s >
[2011.12.05 20:17:44 | 024,242,056 | ---- | M] (Dropbox, Inc.) -- C:\Users\t420\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2011.12.05 20:18:12 | 000,174,752 | ---- | M] (Dropbox, Inc.) -- C:\Users\t420\AppData\Roaming\Dropbox\bin\Uninstall.exe
[2011.11.18 18:41:09 | 000,010,134 | R--- | M] () -- C:\Users\t420\AppData\Roaming\Microsoft\Installer\{24E92E7A-6848-4747-A3EA-3AAC0576BE52}\ARPPRODUCTICON.exe
[2011.11.18 18:41:11 | 000,010,134 | R--- | M] () -- C:\Users\t420\AppData\Roaming\Microsoft\Installer\{39A04221-294E-4D90-A0F2-CCB1EF15CB56}\ARPPRODUCTICON.exe
[2011.11.17 02:05:21 | 000,010,134 | R--- | M] () -- C:\Users\t420\AppData\Roaming\Microsoft\Installer\{718CCDCB-A709-4781-8D64-27ADFB25827A}\ARPPRODUCTICON.exe
[2011.11.17 02:05:21 | 000,212,992 | R--- | M] (InstallShield Software Corp.) -- C:\Users\t420\AppData\Roaming\Microsoft\Installer\{718CCDCB-A709-4781-8D64-27ADFB25827A}\eGenerator.exe_804E3805AB544CE1A01B7D64F5511657.exe
[2011.11.17 02:05:21 | 000,008,854 | R--- | M] () -- C:\Users\t420\AppData\Roaming\Microsoft\Installer\{718CCDCB-A709-4781-8D64-27ADFB25827A}\Uninstall_WMHelp_eGe_6DFE29CB5DF44891B902B7940AEF600B.exe
[2011.11.17 02:18:57 | 008,891,160 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\t420\AppData\Roaming\PCDr\Update\Binaries\patch_ltt_580224to584923_64_10.exe
[2010.10.12 13:36:00 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\t420\AppData\Roaming\PCDr\Update\Rules\30a930c1-1edd-4909-b902-b28164aabb42\LenovoSignedAppUpdaterRules\AddCertificate.exe
[2010.10.12 13:36:00 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\t420\AppData\Roaming\PCDr\Update\Rules\66b7d2b1-0ce2-46db-8428-792069f78f9f\LenovoSignedAppUpdaterRules\AddCertificate.exe
[2010.10.12 13:36:00 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\t420\AppData\Roaming\PCDr\Update\Rules\947ea2d8-64ff-47a9-905f-d54d59702e8d\LenovoSignedAppUpdaterRules\AddCertificate.exe
[2010.10.12 13:36:00 | 000,016,976 | ---- | M] (PC-Doctor, Inc.) -- C:\Users\t420\AppData\Roaming\PCDr\Update\Rules\fb4bc3a9-2fd4-4175-b38c-a00e7e192f83\LenovoSignedAppUpdaterRules\AddCertificate.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2011.12.15 16:58:16 | 000,000,420 | ---- | M] () -- C:\Windows\Tasks\DriverUpdate Startup.job
[2011.12.15 14:05:54 | 000,000,464 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Scan.job
[2011.12.15 16:58:14 | 000,000,404 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Startup.job
[2011.12.15 17:21:00 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2011.12.15 17:21:00 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2011.11.29 07:37:12 | 000,000,528 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2011.12.15 14:05:54 | 000,000,466 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2011.12.15 16:22:39 | 000,544,656 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\deployJava1.dll
[2011.12.15 16:22:39 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\java.exe
[2011.12.15 16:22:39 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\javaw.exe
[2011.12.15 16:22:39 | 000,214,408 | ---- | M] (Oracle Corporation) -- C:\Windows\system32\javaws.exe
[2011.12.13 18:00:53 | 000,005,472 | ---- | M] () -- C:\Windows\system32\jupdate-1.6.0_30-b12.log
[2011.12.15 17:00:17 | 000,000,044 | ---- | M] () -- C:\Windows\system32\log.txt

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"StickyPassword" = C:\Program Files (x86)\Sticky Password\stpass.exe -- [2011.09.29 16:06:02 | 002,898,776 | ---- | M] (Lamantine Software a.s.)
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2010.11.21 04:24:51 | 001,475,584 | ---- | M] (Microsoft Corporation)
"MaxTo" = "C:\Program Files (x86)\MaxTo\MaxTo.exe" --start-hidden -- [2011.10.06 12:26:22 | 000,708,232 | ---- | M] (Digital Creations AS)
"swg" = "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" -- [2011.11.18 17:12:06 | 000,039,408 | ---- | M] (Google Inc.)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2011.12.15 18:04:11 | 000,000,512 | ---- | M] () MD5=906A0C1FD662443C5D7B134D9C8FE07E -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *loader* /s >
[2011.02.25 18:46:24 | 000,005,987 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\scripts\io\downloader.js
[2011.01.17 16:21:04 | 000,006,263 | ---- | M] () -- \Program Files (x86)\OpenOffice.org 3\Basis\program\pythonloader.py
[2011.11.20 20:52:23 | 000,021,504 | ---- | M] () -- \Program Files (x86)\OpenOffice.org 3\Basis\program\pythonloader.uno.dll
[2011.01.17 19:07:52 | 000,000,171 | ---- | M] () -- \Program Files (x86)\OpenOffice.org 3\Basis\program\pythonloader.uno.ini
[2011.11.20 20:52:28 | 000,029,184 | ---- | M] () -- \Program Files (x86)\OpenOffice.org 3\URE\bin\javaloader.uno.dll
[2010.11.19 12:24:20 | 000,003,689 | ---- | M] () -- \Program Files (x86)\OpenOffice.org 3\URE\java\unoloader.jar
[2007.07.23 18:06:00 | 000,003,226 | ---- | M] () -- \Program Files (x86)\Sylpheed\etc\gtk-2.0\gdk-pixbuf.loaders
[2007.08.30 05:10:58 | 000,013,312 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ani.dll
[2007.08.30 05:10:58 | 000,015,360 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-bmp.dll
[2007.08.30 05:10:58 | 000,024,064 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-gif.dll
[2007.08.30 05:10:58 | 000,013,824 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ico.dll
[2007.08.30 05:10:58 | 000,015,360 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll
[2007.08.30 05:10:58 | 000,011,264 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pcx.dll
[2007.08.30 05:10:58 | 000,016,384 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-png.dll
[2007.08.30 05:10:58 | 000,012,800 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-pnm.dll
[2007.08.30 05:10:58 | 000,008,704 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-ras.dll
[2007.08.30 05:10:58 | 000,013,824 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tga.dll
[2007.08.30 05:10:58 | 000,013,824 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-tiff.dll
[2007.08.30 05:10:58 | 000,007,680 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-wbmp.dll
[2007.08.30 05:10:58 | 000,010,752 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xbm.dll
[2007.08.30 05:10:58 | 000,025,088 | ---- | M] () -- \Program Files (x86)\Sylpheed\lib\gtk-2.0\2.10.0\loaders\libpixbufloader-xpm.dll
[2011.07.28 22:42:57 | 000,002,941 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\config\ModuleAutoDeps\org-openide-loaders.xml
[2011.07.28 22:42:57 | 000,000,411 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\config\Modules\org-openide-loaders.xml
[2011.11.17 22:08:49 | 001,322,173 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\modules\org-openide-loaders.jar
[2011.11.17 22:08:46 | 000,007,062 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\modules\locale\org-openide-loaders_ja.jar
[2011.11.17 22:08:45 | 000,006,437 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\modules\locale\org-openide-loaders_pt_BR.jar
[2011.11.17 22:08:46 | 000,007,588 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\modules\locale\org-openide-loaders_ru.jar
[2011.11.17 22:08:45 | 000,006,722 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\modules\locale\org-openide-loaders_zh_CN.jar
[2011.11.17 22:09:45 | 000,000,465 | ---- | M] () -- \Program Files\NetBeans 7.0.1\platform\update_tracking\org-openide-loaders.xml
[2011.08.03 09:07:56 | 000,002,941 | ---- | M] () -- \Users\t420\.netbeans\7.0\config\ModuleAutoDeps\org-openide-loaders.xml
[2011.08.03 09:07:56 | 000,000,411 | ---- | M] () -- \Users\t420\.netbeans\7.0\config\Modules\org-openide-loaders.xml
[2011.08.03 09:07:56 | 001,322,173 | ---- | M] () -- \Users\t420\.netbeans\7.0\modules\org-openide-loaders.jar
[2011.08.03 09:07:56 | 000,007,101 | ---- | M] () -- \Users\t420\.netbeans\7.0\modules\locale\org-openide-loaders_ja.jar
[2011.08.03 09:07:56 | 000,006,440 | ---- | M] () -- \Users\t420\.netbeans\7.0\modules\locale\org-openide-loaders_pt_BR.jar
[2011.08.03 09:07:56 | 000,007,726 | ---- | M] () -- \Users\t420\.netbeans\7.0\modules\locale\org-openide-loaders_ru.jar
[2011.08.03 09:07:56 | 000,006,731 | ---- | M] () -- \Users\t420\.netbeans\7.0\modules\locale\org-openide-loaders_zh_CN.jar
[2011.08.03 09:07:56 | 000,000,829 | ---- | M] () -- \Users\t420\.netbeans\7.0\update_tracking\org-openide-loaders.xml
[2011.05.02 16:24:24 | 000,001,049 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s1\errors\1\app\docs\html\d4\d5f\class_image_uploader.html.warn
[2011.05.02 16:23:58 | 000,000,252 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s1\errors\1\www\js\yui-loader-min.js.warn
[2011.09.16 21:35:24 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Loader.php.warn
[2011.09.16 21:35:24 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Amf\Parse\TypeLoader.php.warn
[2011.09.16 21:34:49 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Application\Module\Autoloader.php.warn
[2011.09.16 21:34:56 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Loader\Autoloader.php.warn
[2011.09.16 21:34:56 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Loader\PluginLoader.php.warn
[2011.09.16 21:35:13 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Search\Lucene\Index\DictionaryLoader.php.warn
[2011.09.16 21:35:09 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Tool\Framework\Loader\BasicLoader.php.warn
[2011.09.16 21:35:09 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s36\errors\1\Tool\Framework\Loader\IncludePathLoader.php.warn
[2011.09.27 17:16:10 | 000,000,074 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s48\errors\1\resource\grid\scripts\jqgrid\src\grid.loader.js.warn
[2011.11.17 22:13:49 | 000,000,074 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s54\errors\1\resource\grid\scripts\jqgrid\src\grid.loader.js.warn
[2011.11.17 22:13:34 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Loader.php.warn
[2011.11.17 22:13:26 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Amf\Parse\TypeLoader.php.warn
[2011.11.17 22:13:20 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Application\Module\Autoloader.php.warn
[2011.11.17 22:13:36 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Loader\Autoloader.php.warn
[2011.11.17 22:13:36 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Loader\PluginLoader.php.warn
[2011.11.17 22:13:18 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Search\Lucene\Index\DictionaryLoader.php.warn
[2011.11.17 22:13:19 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Tool\Framework\Loader\BasicLoader.php.warn
[2011.11.17 22:13:19 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s56\errors\1\Tool\Framework\Loader\IncludePathLoader.php.warn
[2011.12.13 17:57:21 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s70\errors\1\library\Amz\Controller\Action\Helper\LayoutLoader.php.warn
[2011.12.13 17:57:22 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s70\errors\1\library\Cleevio\Controller\Action\Helper\LayoutLoader.php.warn
[2011.12.13 17:57:36 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s70\errors\1\public\_admin\lib\Cake\TestSuite\CakeTestLoader.php.warn
[2011.11.21 11:25:58 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Loader.php.warn
[2011.11.21 11:25:49 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Amf\Parse\TypeLoader.php.warn
[2011.11.21 11:25:44 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Application\Module\Autoloader.php.warn
[2011.11.21 11:26:00 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Loader\Autoloader.php.warn
[2011.11.21 11:26:00 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Loader\PluginLoader.php.warn
[2011.11.21 11:25:41 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Search\Lucene\Index\DictionaryLoader.php.warn
[2011.11.21 11:25:42 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Tool\Framework\Loader\BasicLoader.php.warn
[2011.11.21 11:25:42 | 000,000,089 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s71\errors\1\Zend\Tool\Framework\Loader\IncludePathLoader.php.warn
[2011.05.16 11:07:44 | 000,000,074 | ---- | M] () -- \Users\t420\.netbeans\7.0\var\cache\index\s9\errors\1\resource\grid\scripts\jqgrid\src\grid.loader.js.warn
[2010.08.30 10:56:06 | 000,000,949 | ---- | M] () -- \Users\t420\AppData\Roaming\SQL Maestro Group\PHP Generator\SQLite\Themes\Believe\Templates\editors\image_uploader.tpl
[2011.03.01 10:25:24 | 000,011,310 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Loader.php
[2011.03.01 10:25:24 | 000,007,638 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Amf\Parse\TypeLoader.php
[2011.03.01 10:25:24 | 000,002,950 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Application\Module\Autoloader.php
[2011.05.02 23:47:40 | 000,016,892 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Loader\Autoloader.php
[2011.03.01 10:25:24 | 000,014,749 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Loader\PluginLoader.php
[2011.03.01 10:25:24 | 000,010,495 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Search\Lucene\Index\DictionaryLoader.php
[2011.03.01 10:25:24 | 000,004,653 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Tool\Framework\Loader\BasicLoader.php
[2011.03.01 10:25:24 | 000,004,670 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\_include_path\Zend\Tool\Framework\Loader\IncludePathLoader.php
[2011.11.21 10:44:49 | 000,000,540 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\chytradomacnost.cz\library\Amz\Controller\Action\Helper\LayoutLoader.php
[2011.11.21 10:44:49 | 000,000,685 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\chytradomacnost.cz\library\Cleevio\Controller\Action\Helper\LayoutLoader.php
[2011.11.21 16:41:13 | 000,003,281 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\chytradomacnost.cz\public\_admin\lib\Cake\TestSuite\CakeTestLoader.php
[2011.04.03 16:17:28 | 000,000,847 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\css\img\ajax-loader.gif
[2011.01.31 15:33:42 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\dark_rounded\loader.gif
[2011.01.31 15:33:42 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\dark_square\loader.gif
[2011.03.17 05:06:28 | 000,006,331 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\default\loader.gif
[2011.01.31 15:33:42 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\facebook\loader.gif
[2011.01.31 15:33:42 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\light_rounded\loader.gif
[2011.01.31 15:33:42 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\loc-stage-root\revoco\public\images\prettyPhoto\light_square\loader.gif
[2011.04.20 12:20:12 | 000,000,847 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\_ftp\resource\grid\images\ajax-loader.gif
[2011.04.20 12:20:12 | 000,002,169 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\_ftp\resource\grid\scripts\jqgrid\src\grid.loader.js
[2007.09.29 10:41:54 | 000,005,905 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\aff\include\fileuploader.inc.php
[2011.12.04 17:24:52 | 000,000,847 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\ssh-test\bavse.info\resource\grid\images\ajax-loader.gif
[2011.12.04 17:24:45 | 000,002,123 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\ssh-test\bavse.info\resource\grid\scripts\jqgrid\src\grid.loader.js
[2011.12.04 17:22:30 | 000,000,208 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\ssh-test\munkshare.com\uploader-top.html
[2011.12.04 17:22:30 | 000,001,734 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\vacula\ssh-test\munkshare.com\_downloader.php
[2010.06.14 12:46:50 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\xtend\domains\default\img\prettyPhoto\dark_square\loader.gif
[2010.06.14 12:46:52 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\xtend\domains\default\img\prettyPhoto\light_rounded\loader.gif
[2010.06.14 12:46:52 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\NetBeansProjects\xtend\domains\default\img\prettyPhoto\light_square\loader.gif
[2011.12.04 13:03:28 | 000,001,253 | ---- | M] () -- \Users\t420\Documents\PSPadData\bak\C\Users\t420\Documents\PSPadData\ftp\loc.cz,revoco.cz\loc_cz\public\downloader.php
[2011.12.04 13:04:04 | 000,001,285 | ---- | M] () -- \Users\t420\Documents\PSPadData\ftp\loc.cz,revoco.cz\loc_cz\public\downloader.php
[2010.03.31 13:36:06 | 000,000,910 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default.xtend.cz\template-gazur\Záloha TravelPromo\st_newsletter\Swift5\lib\Swift\ClassLoader.php
[2010.03.31 13:36:58 | 000,004,323 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default.xtend.cz\template-gazur\Záloha TravelPromo\st_newsletter\visual_editors\fckeditor\editor\_source\fckscriptloader.js
[2010.03.31 13:36:58 | 000,001,047 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default.xtend.cz\template-gazur\Záloha TravelPromo\st_newsletter\visual_editors\fckeditor\editor\_source\classes\fckimagepreloader.js
[2010.03.31 13:37:00 | 000,002,871 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default.xtend.cz\template-gazur\Záloha TravelPromo\st_newsletter\visual_editors\fckeditor\editor\_source\classes\fckstylesloader.js
[2010.08.09 09:49:46 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default-app-copy\default\img\prettyPhoto\dark_square\loader.gif
[2010.08.09 09:49:46 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default-app-copy\default\img\prettyPhoto\light_rounded\loader.gif
[2010.08.09 09:49:47 | 000,002,545 | ---- | M] () -- \Users\t420\Documents\Work Documents\XTEND\XTEND\default-app-copy\default\img\prettyPhoto\light_square\loader.gif
[2011.12.04 12:12:53 | 000,000,314 | ---- | M] () -- \Users\t420\Favorites\DOWNLOADER.url
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.12 01:57:32 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2011.07.12 01:57:32 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2011.07.12 01:57:32 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2011.07.12 01:57:32 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2011.07.12 01:57:32 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2011.07.12 02:02:46 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.07.12 02:02:46 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2011.07.12 02:02:46 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2011.07.12 02:02:46 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2011.07.12 02:02:46 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2011.07.12 01:54:27 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2010.11.21 04:16:35 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.07.12 02:02:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.07.12 02:02:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 6456 bytes -> C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh

< End of report >

OTL Extras logfile created on: 15.12.2011 18:00:26 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\t420\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

7,89 Gb Total Physical Memory | 5,40 Gb Available Physical Memory | 68,43% Memory free
19,71 Gb Paging File | 16,85 Gb Available in Paging File | 85,46% Paging File free
Paging file location(s): e:\pagefile.sys 12112 12112 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 110,62 Gb Total Space | 79,77 Gb Free Space | 72,12% Space Free | Partition Type: NTFS
Drive E: | 450,13 Gb Total Space | 383,74 Gb Free Space | 85,25% Space Free | Partition Type: NTFS
Drive F: | 15,62 Gb Total Space | 5,66 Gb Free Space | 36,22% Space Free | Partition Type: NTFS
Drive P: | 698,64 Gb Total Space | 569,13 Gb Free Space | 81,46% Space Free | Partition Type: NTFS

Computer Name: t420-THINK | User Name: t420 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found
.cmd [@ = cmdfile] -- Reg Error: Key error. File not found
.com [@ = comfile] -- Reg Error: Key error. File not found
.exe [@ = exefile] -- Reg Error: Key error. File not found
.pif [@ = piffile] -- Reg Error: Key error. File not found
.vbs [@ = VBSFile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{25FBDA9A-E868-4B3B-B9FF-D923818511A1}" = Software Intel(R) PROSet/Wireless WiFi
"{26A24AE4-039D-4CA4-87B4-2F86416029FF}" = Java(TM) 6 Update 29 (64-bit)
"{26DE7BAD-453E-4C96-979F-1C288ECAA159}" = Intel(R) Network Connections 16.7.166.0
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{39A04221-294E-4D90-A0F2-CCB1EF15CB56}" = Lenovo Patch Utility 64 bit
"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5E2652DF-743F-482B-A593-C95F431A5769}" = RapidBoot
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{88C6A6D9-324C-46E8-BA87-563D14021442}_is1" = ThinkVantage Communications Utility
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 275.93
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 275.93
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 275.93
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.3.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C2938C94-239C-4156-B245-C5406A4F3E93}" = ThinkVantage Fingerprint Software
"{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}" = ThinkPad Bluetooth with Enhanced Data Rate Software
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E224B44B-B5EB-4af3-A80A-A255358E241A}_is1" = ThinkVantage AutoLock
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"0CDBDD444A1F5FFEA227B4E7DCE195F11F08240A" = Windows Driver Package - Intel System (09/10/2010 9.2.0.1011)
"4534F449D55EE49DEE206B3D9A3B1811E1A495EA" = Windows Driver Package - Ricoh Company SD Host Controller (03/23/2011 6.10.10.30)
"466E9B20D871055D6D3CDA2CDD1D355E978A61AF" = Windows Driver Package - Lenovo 1.61.00.11 (11/11/2010 1.61.00.11)
"5DF942712DC7660AE4A1B04809A1C3F67B0CA27C" = Windows Driver Package - Synaptics (SynTP) Mouse (03/24/2011 15.2.19.0)
"6D23A494E9A245843FB8584D9307D3E328DF8613" = Windows Driver Package - Intel (e1cexpress) Net (12/21/2010 11.8.84.0)
"90FD26A77B849AE03FF5F07A1CDA7F950406A8D8" = Windows Driver Package - Intel (MEIx64) System (10/19/2010 7.0.0.1144)
"A513FC5E5A08D4EF27F234E91E0E942A0234210B" = Windows Driver Package - Intel System (09/10/2010 9.2.0.1011)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"CNXT_AUDIO_HDA" = Conexant 20672 SmartAudio HD
"D97688B8E3830BF9820E15EB8D9552DCBF988CFD" = Windows Driver Package - Intel USB (09/16/2010 9.2.0.1013)
"DisableAMTPopup" = Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7
"EnablePS" = Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7
"FE1BEBFD475BB832AAF104F5C63348E98A9286DF" = Windows Driver Package - Intel System (10/04/2010 9.2.0.1015)
"LENOVO.SMIIF" = Lenovo System Interface Driver
"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility
"Lexmark S300-S400 Series" = Lexmark S300-S400 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"nbi-nb-base-7.0.1.0.0" = NetBeans IDE 7.0.1
"OnScreenDisplay" = On Screen Display
"PC-Doctor for Windows" = Lenovo ThinkVantage Toolbox
"Power Management Driver" = ThinkPad Power Management Driver
"ProInst" = Intel PROSet Wireless
"PROSetDX" = Intel(R) Network Connections 16.7.166.0
"SynTPDeinstKey" = ThinkPad UltraNav Driver
"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04F46566-A95C-46FF-9CA1-F3FDBAB61283}" = DriverUpdate
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Panel nástrojů
"{10B43A43-FF73-47FD-83E8-A503E84F9ED6}" = OpenOffice.org 3.3
"{13F59938-C595-479C-B479-F171AB9AF64F}" = Lenovo User Guide
"{17CBC505-D1AE-459D-B445-3D2000A85842}" = ThinkPad UltraNav Utility
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24E92E7A-6848-4747-A3EA-3AAC0576BE52}" = Lenovo Patch Utility
"{25C64847-B900-48AD-A164-1B4F9B774650}" = System Update
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 30
"{26A24AE4-039D-4CA4-87B4-2F83217001FF}" = Java(TM) 7 Update 1
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50300123-F8FC-4B50-B449-E847D04F1BA2}" = Windows Live Messenger
"{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}" = Create Recovery Media
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6707C034-ED6B-4B6A-B21F-969B3606FBDE}" = Lenovo Registration
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718CCDCB-A709-4781-8D64-27ADFB25827A}" = WMHelp XmlPad
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E537894-A559-4D60-B3CB-F4485E3D24E3}" = ThinkVantage Access Connections
"{904CD0E4-4B72-4CF7-9828-267C6678A22E}" = System Requirements Lab for Intel
"{91A29166-4E1B-4664-B70B-4C4A3B6B3372}" = Lenovo Screen Reading Optimizer
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9767F5DD-B569-4A03-8508-C63A973BF13B}" = MaxTo
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.1.6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}" = Integrated Camera TWAIN
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7D5787B-3A91-4433-A753-CFE520671683}" = Acronis True Image HD
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA057BF7-EE60-4063-A52D-39B9FD8BC1C7}" = FixCleaner
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-1029-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Czech
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B2CA6F37-1602-4823-81B5-0384B6888AA6}" = Integrated Camera Driver Installer Package Ver.1.1.0.1147
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{C01A86F5-56E7-101F-9BC9-E3F1025EB779}" = Intel(R) Identity Protection Technology 1.1.2.0
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C6A0FD8A-F107-44CA-AA1B-49341936F76A}" = iLook 320
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DA60AB6B-6C9C-4B5F-BC61-3B0D9BCBD50B}" = GIGABYTE Remote Utilities
"{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = ThinkPad Power Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}" = Message Center Plus
"{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}" = Lenovo Warranty Information
"{FE041B02-234C-4AAA-9511-80DF6482A458}" = RICOH_Media_Driver_v2.13.18.02
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"AutocompletePro3_is1" = AutocompletePro
"avast" = avast! Internet Security
"Lenovo Welcome_is1" = Lenovo Welcome
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"ProInst" = Intel PROSet Wireless
"PSPad editor_is1" = PSPad editor
"SQLite PHP Generator Professional_is1" = SQLite PHP Generator Professional 11.4
"Sticky Password_is1" = Sticky Password 5.0.5.241
"suc13_is1" = Stereo 2011 - ekonomický software, v.13.1.11
"Sylpheed" = Sylpheed 3.1.2
"TVCONDrv" = GIGABYTE U8300 BDA Device
"WinLiveSuite" = Windows Live Essentials
"winscp3_is1" = WinSCP 4.3.5

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"FileZilla Client" = FileZilla Client 3.5.2
"RadioSure" = RadioSure

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12.12.2011 9:36:41 | Computer Name = t420-THINK | Source = System Restore | ID = 8193
Description =

Error - 12.12.2011 9:36:41 | Computer Name = t420-THINK | Source = System Restore | ID = 8193
Description =

Error - 12.12.2011 9:36:41 | Computer Name = t420-THINK | Source = System Restore | ID = 8193
Description =

Error - 12.12.2011 9:48:43 | Computer Name = t420-THINK | Source = WinMgmt | ID = 10
Description =

Error - 12.12.2011 9:53:39 | Computer Name = t420-THINK | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 12.12.2011 9:53:39 | Computer Name = t420-THINK | Source = Microsoft-Windows-LoadPerf | ID = 3012
Description = Hodnota řetězce výkonu v registru výkonu je poškozena, pokud proces
Performance zprostředkovatele čítače rozšíření. Hodnotu BaseIndex z registru výkonu
obsahuje první hodnota DWORD datové části. Hodnotu LastCounter obsahuje druhá hodnota
DWORD a hodnotu LastHelp obsahuje třetí hodnota DWORD datové části.

Error - 12.12.2011 9:53:39 | Computer Name = t420-THINK | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Uvolnění řetězců čítačů výkonu pro službu WmiApRpl (WmiApRpl) se nezdařilo.
První hodnota DWORD v datové oblasti obsahuje kód chyby.

Error - 12.12.2011 10:11:05 | Computer Name = t420-THINK | Source = WinMgmt | ID = 10
Description =

Error - 12.12.2011 10:14:18 | Computer Name = t420-THINK | Source = System Restore | ID = 8193
Description =

Error - 12.12.2011 10:14:20 | Computer Name = t420-THINK | Source = System Restore | ID = 8193
Description =

[ System Events ]
Error - 15.12.2011 7:15:13 | Computer Name = t420-THINK | Source = volmgr | ID = 262189
Description = Systému se nepodařilo úspěšně načíst ovladač výpisu stavu systému.

Error - 15.12.2011 7:15:19 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7000
Description = Služba Conexant Polaris IR Transceiver neuspěla při spuštění v důsledku
následující chyby: %%1058

Error - 15.12.2011 7:15:20 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7009
Description = Při čekání na připojení služby lxeaCATSCustConnectService bylo dosaženo
časového limitu (30000 ms).

Error - 15.12.2011 7:15:20 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7000
Description = Služba lxeaCATSCustConnectService neuspěla při spuštění v důsledku
následující chyby: %%1053

Error - 15.12.2011 7:16:20 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7011
Description = Při čekání na odezvu transakce služby Spooler bylo dosaženo časového
limitu (30000 ms).

Error - 15.12.2011 7:16:43 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 15.12.2011 7:17:42 | Computer Name = t420-THINK | Source = DCOM | ID = 10016
Description =

Error - 15.12.2011 7:24:27 | Computer Name = t420-THINK | Source = volmgr | ID = 262189
Description = Systému se nepodařilo úspěšně načíst ovladač výpisu stavu systému.

Error - 15.12.2011 7:24:32 | Computer Name = t420-THINK | Source = volmgr | ID = 262189
Description = Systému se nepodařilo úspěšně načíst ovladač výpisu stavu systému.

Error - 15.12.2011 7:24:39 | Computer Name = t420-THINK | Source = Service Control Manager | ID = 7000
Description = Služba Conexant Polaris IR Transceiver neuspěla při spuštění v důsledku
následující chyby: %%1058


< End of report >

jeste doplnim poznatky:

1) pri restartu dost casto zamrzne hned na uvodni obrazovce (nedobehne ani ke spusteni windows)
2) dost casto se taky objevuji problemy s pripojenim - resp. se nepripoji internet a nasleduje lavina problemu a nutny restart OS
3) "zmizela" mi ze systemu ctecka otisku prostu (to ale nemusi mit souvislost a muze byt spojeno s chybou WINDOWS 7 resp typem uctu apod., nekde jsem to cetl na microsoftim wervervu primo)

urcite jeste x dalsich priznaku, na ktere si ted nevzpomenu, a ktere mi ovsem strasne pijou krev ..

-> to vse me vedlo k myslence, ze je tam nejde proste "zaskodnik"

No bud tam bude zaskodnik nebo to bude naboreny HW - coz by ukazovaly ty problemy pri spousteni - nez projdu skript, otestujte HDD

Otestujte HD pomoci HD Tune http://www.stahuj.centrum.cz/utility_a_ ... g/hd-tune/

• Udelejte testy Benchmark a Error Scan - dejte screeny
• Dejte screen ze zalozky Health
• Scree udelate kdyz klilknete na tu modrou disketku a pak jej sem dejte dle tohoto navdou http://www.viry.cz/forum/viewtopic.php?f=15&t=14114 - zajima Vas jen cast "zaslani na forum" samozrejme

Spustte znovu OTL

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  :otl
  IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
  IE - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data]
  O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
  O18:64bit: - Protocol\Handler\livecall - No CLSID value found
  O18:64bit: - Protocol\Handler\msnim - No CLSID value found
  O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
  O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
  O18:64bit: - Protocol\Handler\wmh - No CLSID value found
  O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  O37 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\...com [@ = comfile] -- Reg Error: Key error. File not found
  O37 - HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\...exe [@ = exefile] -- Reg Error: Key error. File not found
  [2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
  [4 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
  [1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
  [22 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
  [2011.12.15 16:58:16 | 000,000,420 | ---- | M] () -- C:\Windows\Tasks\DriverUpdate Startup.job
  [2011.12.15 14:05:54 | 000,000,464 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Scan.job
  [2011.12.15 16:58:14 | 000,000,404 | ---- | M] () -- C:\Windows\Tasks\FixCleaner Startup.job
  [2011.12.15 17:21:00 | 000,000,948 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  [2011.12.15 17:21:00 | 000,000,952 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  [2011.11.29 07:37:12 | 000,000,528 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
  [2011.12.15 14:05:54 | 000,000,466 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job
  
  :files
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]

• Nasledne kliknete na Opravit
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

screeny zde (ADATA SSD S510 120GB je systemovy, ST9500420AS je sekundarni interni SATA, Samsung M2 Portable je externi USD)

http://www.loc.cz/test/HDTune_Benchmark ... 0120GB.png
http://www.loc.cz/test/HDTune_Benchmark ... rtable.png
http://www.loc.cz/test/HDTune_Benchmark_ST9500420AS.png
http://www.loc.cz/test/HDTune_Error%20S ... 0120GB.png
http://www.loc.cz/test/HDTune_Error%20S ... rtable.png
http://www.loc.cz/test/HDTune_Error%20S ... 0420AS.png
http://www.loc.cz/test/HDTune_Health_AD ... 0120GB.png
http://www.loc.cz/test/HDTune_Health_Sa ... rtable.png
http://www.loc.cz/test/HDTune_Health_ST9500420AS.png

No ten disk 500GB nevypada dobre

Na ten systemovy (120GB) pustte jeste CrystalDiskInfo dle navodu kolegyne

motji píše: stáhněte
http://www.slunecnice.cz/sw/crystaldiskinfo/
- spusťte ho a v nabídce zvolte Kopírovat.
-Data ze schránky sem pak vložte pomocí Ctrl+V

tak na po desaty mi konecne nabehl windows (vzdy to skoncilo a nevytvorilo mi to plochu, az v nouzovym rezimu)

All processes killed
========== OTL ==========
HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKU\S-1-5-21-1821955461-2439377967-1106980377-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL| /E : value set successfully!
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wmh\ deleted successfully.
File Protocol\Handler\wmh - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001_Classes\.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001_Classes\comfile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.com\\|comfile /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001_Classes\.exe\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1821955461-2439377967-1106980377-1001_Classes\exefile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully!
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC588.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPA13F.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder deleted successfully.
C:\Windows\Installer\MSI419B.tmp deleted successfully.
C:\Windows\Temp\GUR2AB7.tmp deleted successfully.
C:\Windows\Temp\GUR6BCC.tmp deleted successfully.
C:\Windows\Temp\GUR740.tmp deleted successfully.
C:\Windows\Temp\GUR859.tmp deleted successfully.
C:\Windows\Temp\GURAF71.tmp deleted successfully.
C:\Windows\Temp\GURB901.tmp deleted successfully.
C:\Windows\Temp\GURBF1.tmp deleted successfully.
C:\Windows\Temp\GURC245.tmp deleted successfully.
C:\Windows\Temp\GURCAC.tmp deleted successfully.
C:\Windows\Temp\GURCFAD.tmp deleted successfully.
C:\Windows\Temp\GURD8FF.tmp deleted successfully.
C:\Windows\Temp\SEPE6D7.tmp deleted successfully.
C:\Windows\Temp\SEPE6E6.tmp deleted successfully.
C:\Windows\Temp\SEPE715.tmp deleted successfully.
C:\Windows\Temp\SEPFC3A.tmp deleted successfully.
C:\Windows\Temp\SEPFC3B.tmp deleted successfully.
C:\Windows\Temp\SEPFC3C.tmp deleted successfully.
C:\Windows\Temp\SEPFC4A.tmp deleted successfully.
C:\Windows\Temp\SEPFC5A.tmp deleted successfully.
C:\Windows\Temp\SEPFC5B.tmp deleted successfully.
C:\Windows\Temp\SEPFC69.tmp deleted successfully.
C:\Windows\Temp\SEPFC6A.tmp deleted successfully.
C:\Windows\Tasks\DriverUpdate Startup.job moved successfully.
C:\Windows\Tasks\FixCleaner Scan.job moved successfully.
C:\Windows\Tasks\FixCleaner Startup.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job moved successfully.
C:\Windows\Tasks\SystemToolsDailyTest.job moved successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: t420
->Temp folder emptied: 19972971 bytes
->Temporary Internet Files folder emptied: 82390156 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 961 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 881265 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 5425615 bytes

Total Files Cleaned = 104,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: t420
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.31.0 log created on 12152011_204038

Files\Folders moved on Reboot...
C:\Users\t420\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\t420\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G2S0S3O0\rk=172593;pr=22;xp=30;np=21;uz=43111;fbi=58058;sbi=31530;fbo=58058;sbo=31530;fse=11700;sse=159888;fvi=58058;svi=31530;cg=39bc6bb31340a47a2f3761f7ff9ff4c5[1].htm not found!
File\Folder C:\Users\t420\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EGHW4D1K\afr[1].htm not found!
File\Folder C:\Users\t420\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EGHW4D1K\afr[2].htm not found!
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

----------------------------------------------------------------------------
CrystalDiskInfo 4.1.3 (C) 2008-2011 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 SP1 [6.1 Build 7601] (x64)
Date : 2011/12/15 21:24:33

-- Controller Map ----------------------------------------------------------
+ Intel(R) Mobile Express Chipset SATA AHCI Controller [ATA]
- ADATA SSD S510 120GB
- ST9500420AS

-- Disk List ---------------------------------------------------------------
(1) ST9500420AS : 500.1 GB [1-0-1, pd1]

----------------------------------------------------------------------------
(1) ST9500420AS
----------------------------------------------------------------------------
Model : ST9500420AS
Firmware : 0003LVM1
Serial Number : 5VJD5A6N
Disk Size : 500.1 GB (8.4/137.4/500.1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/150
Power On Hours : 1222 hod.
Power On Count : 1012 krát
Temparature : 32 C (89 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 8080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 119 _99 _34 00000CCBDD04 Počet chyb čtení
03 _98 _98 __0 000000000000 Čas na roztočení ploten
04 100 100 _20 00000000037B Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _76 _60 _30 000002B73270 Počet chybných hledání
09 _99 _99 __0 0EE5000004C6 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 _20 0000000003F4 Počet cyklů zapnutí zařízení
B8 100 100 _99 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 100 __0 000100010001 Časový limit příkazu
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _68 _47 _45 000021200020 Teplota toku vzduchu
BF 100 100 __0 00000000000C Počet udalostí zaznamenaných otřesovým senzorem
C0 _98 _98 __0 000000000FF2 Počet vypnutí disku
C1 _97 _97 __0 0000000018A5 Počet cyklů načítání/vymazání
C2 _32 _53 __0 001000000020 Teplota
C3 _47 _40 __0 00000CCBDD04 Počet oprav chybného čtení
C4 _99 _99 _30 AF300000045F Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
FE 100 100 __0 000000000000 Ochrana proti pádu

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0C 5A 3F FF C8 37 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20
020: 35 56 4A 44 35 41 36 4E 00 00 80 00 00 04 30 30
030: 30 33 4C 56 4D 31 53 54 39 35 30 30 34 32 30 41
040: 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 40 00 02 00 02 00 00 07 FF FF 00 01
070: 00 3F FF C1 00 3E 01 10 FF FF 0F FF 00 00 00 07
080: 00 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 1F 05 02 00 02 00 48 00 48
0A0: 01 F0 00 29 34 6B 7D 09 61 23 34 69 BC 09 61 23
0B0: 20 3F 00 36 00 36 80 80 FF FE 00 00 FE 00 00 00
0C0: 00 00 00 00 00 00 00 00 60 30 3A 38 00 00 00 00
0D0: 00 00 00 00 40 00 00 00 50 00 C5 00 3D 02 AE C3
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 1E
0F0: 40 1E 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 29 60 30 3A 38 60 30 3A 38 20 20 00 02 01 40
110: 01 00 50 00 3C 06 3C 0A 00 00 00 3C 00 00 00 08
120: 00 00 00 00 00 1F 02 80 00 04 00 00 00 08 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 3E 00 80 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 10 3B 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 1C 20 00 00 00 00 00 02 00 00 10 10 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 A5

na systemovy SSD nejde CrystalDiskInfo prepnout nijak, asi to je jen pro plotnove dsiky ..

Pustte tam jeste avp tool at vyloucime problem haveti http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

tak po 5ti hodinach nasel je predchozim skenem ulozeny soubor do karanteny

LOG

Status: Deleted (events: 1)
16.12.2011 2:33:47 Deleted virus EICAR-Test-File C:\Documents and Settings\t420\DoctorWeb\Quarantine\Av-test.txt High

Takze to opravdu bude chyba v HW

tak to nejsem moc rad
v zarucni oprave z to bylo 2x, jednou vymenili mainboard a podruhe display, nicmene k nicemu to nevedlo, ten 500GB HDD klidne vyhodim, ale to asi nebude ono, protoze kdyz tam neni, zadna pozitivni zmena nenastane