VIRY.CZ

Je to stále stejné, jak chrome tak mozila.
Nemohu mít někde ňákou potvoru??

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

ComboFix 12-03-17.01 - petr 18.03.2012 21:00:58.10.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.939 [GMT 1:00]
Spuštěný z: c:\documents and settings\petr\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msmqinst.log
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-18 do 2012-03-18 )))))))))))))))))))))))))))))))
.
.
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-12 17:20 . 2011-10-14 21:09 1859968 ----a-w- c:\windows\system32\win32k.sys
2011-09-30 22:37 . 2011-05-06 18:42 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-12-26_14.18.45 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-03-18 17:50 . 2012-03-18 17:50 16384 c:\windows\temp\Perflib_Perfdata_728.dat
- 2007-01-29 08:58 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
+ 2007-01-29 08:58 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
+ 2007-03-25 18:08 . 2008-11-07 17:55 26144 c:\windows\system32\spupdsvc.exe
+ 2012-01-10 16:05 . 2008-11-07 17:55 16928 c:\windows\system32\spmsgXP_2k3.dll
- 2007-08-11 10:41 . 2011-08-12 11:51 18296 c:\windows\system32\spmsg.dll
+ 2007-08-11 10:41 . 2010-07-05 13:13 18296 c:\windows\system32\spmsg.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\pngfilt.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\pngfilt.dll
- 2001-10-25 14:00 . 2011-11-26 23:08 72464 c:\windows\system32\perfc009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 72464 c:\windows\system32\perfc009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 84270 c:\windows\system32\perfc005.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 84270 c:\windows\system32\perfc005.dat
+ 2004-08-17 13:49 . 2011-11-20 06:12 60416 c:\windows\system32\packager.exe
+ 2010-06-11 12:19 . 2011-08-17 08:57 75264 c:\windows\system32\nmwcdcls.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 52224 c:\windows\system32\msfeedsbs.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 52224 c:\windows\system32\msfeedsbs.dll
- 2004-08-17 13:49 . 2008-04-14 03:21 23040 c:\windows\system32\mciseq.dll
+ 2004-08-17 13:49 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 27648 c:\windows\system32\jsproxy.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 27648 c:\windows\system32\jsproxy.dll
+ 2007-08-13 17:39 . 2011-12-16 12:22 13824 c:\windows\system32\ieudinit.exe
- 2007-08-13 17:39 . 2011-08-17 12:21 13824 c:\windows\system32\ieudinit.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\iernonce.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\iernonce.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 78336 c:\windows\system32\ieencode.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 78336 c:\windows\system32\ieencode.dll
+ 2004-08-17 13:49 . 2011-12-16 12:22 70656 c:\windows\system32\ie4uinit.exe
- 2004-08-17 13:49 . 2011-08-17 12:21 70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-13 17:36 . 2011-12-19 08:08 63488 c:\windows\system32\icardie.dll
- 2007-08-13 17:36 . 2011-08-17 21:25 63488 c:\windows\system32\icardie.dll
+ 2009-07-14 09:35 . 2009-07-14 09:35 37608 c:\windows\system32\drivers\wdfldr.sys
+ 2011-08-17 08:56 . 2011-08-17 08:56 18176 c:\windows\system32\drivers\ccdcmb.sys
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\pngfilt.dll
+ 2011-11-20 06:12 . 2011-11-20 06:12 60416 c:\windows\system32\dllcache\packager.exe
+ 2007-12-15 15:44 . 2011-12-19 08:08 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-12-15 15:44 . 2011-12-16 12:22 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2007-12-15 15:44 . 2011-08-17 12:21 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2004-08-17 13:49 . 2011-08-17 21:25 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2009-02-20 17:13 . 2011-12-19 08:08 78336 c:\windows\system32\dllcache\ieencode.dll
- 2009-02-20 17:13 . 2011-08-17 21:25 78336 c:\windows\system32\dllcache\ieencode.dll
- 2004-08-17 13:49 . 2011-08-17 12:21 70656 c:\windows\system32\dllcache\ie4uinit.exe
+ 2004-08-17 13:49 . 2011-12-16 12:22 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-12-15 15:44 . 2011-08-17 21:25 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 63488 c:\windows\system32\dllcache\icardie.dll
+ 2009-12-14 07:10 . 2011-10-28 05:32 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2009-12-14 07:10 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2009-06-29 15:59 . 2011-12-19 08:08 17408 c:\windows\system32\dllcache\corpol.dll
- 2009-06-29 15:59 . 2011-08-17 21:25 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-17 13:49 . 2011-10-28 05:32 33280 c:\windows\system32\csrsrv.dll
- 2004-08-17 13:49 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 17408 c:\windows\system32\corpol.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 17408 c:\windows\system32\corpol.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2003-02-20 20:10 . 2003-02-20 20:10 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2004-07-15 01:11 . 2004-07-15 01:11 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2009-06-24 18:56 . 2009-06-24 18:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2003-02-21 07:24 . 2003-02-21 07:24 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2011-12-25 10:07 . 2011-12-25 10:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2004-07-14 23:35 . 2004-07-14 23:35 66560 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\PerfCounter.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorsn.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\CORPerfMonExt.dll
+ 2004-07-14 23:34 . 2004-07-14 23:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_PerfCounter.dll
+ 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorsn.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_CORPerfMonExt.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2004-07-14 23:34 . 2004-07-14 23:34 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2007-01-15 15:11 . 2007-01-15 15:11 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe
- 2003-02-20 19:09 . 2003-02-20 19:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2004-07-14 23:33 . 2004-07-14 23:33 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
- 2003-02-21 07:25 . 2003-02-21 07:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2004-07-15 13:28 . 2004-07-15 13:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
- 2003-02-21 07:25 . 2003-02-21 07:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2004-07-15 13:28 . 2004-07-15 13:28 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
- 2003-02-21 07:24 . 2003-02-21 07:24 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2003-10-08 13:30 . 2003-10-08 13:30 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\gacutil.exe
- 2003-02-21 10:20 . 2003-02-21 10:20 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2004-07-15 10:23 . 2004-07-15 10:23 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2011-12-24 21:55 . 2011-12-24 21:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2003-02-20 19:19 . 2003-02-20 19:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2011-12-24 22:49 . 2011-12-24 22:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2003-02-20 19:19 . 2003-02-20 19:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-15 00:49 . 2004-07-15 00:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2004-07-15 00:49 . 2004-07-15 00:49 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
- 2003-02-20 19:19 . 2003-02-20 19:19 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2011-12-24 22:49 . 2011-12-24 22:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 19:19 . 2003-02-20 19:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 44544 c:\windows\ie7updates\KB2647516-IE7\pngfilt.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 52224 c:\windows\ie7updates\KB2647516-IE7\msfeedsbs.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 27648 c:\windows\ie7updates\KB2647516-IE7\jsproxy.dll
+ 2012-03-07 07:02 . 2011-08-17 12:21 13824 c:\windows\ie7updates\KB2647516-IE7\ieudinit.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 44544 c:\windows\ie7updates\KB2647516-IE7\iernonce.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 78336 c:\windows\ie7updates\KB2647516-IE7\ieencode.dll
+ 2012-03-07 07:02 . 2011-08-17 12:21 70656 c:\windows\ie7updates\KB2647516-IE7\ie4uinit.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 63488 c:\windows\ie7updates\KB2647516-IE7\icardie.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 17408 c:\windows\ie7updates\KB2647516-IE7\corpol.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_ab33a82a\System.Drawing.Design.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_88e941e6\CustomMarshalers.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\31b65443e56a470d199f293085576e05\System.Web.DynamicData.Design.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-03-07 07:44 . 2012-03-07 07:44 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe
+ 2012-03-07 07:41 . 2012-03-07 07:41 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 66560 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 90112 c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-01-10 16:05 . 2009-07-13 15:49 47104 c:\windows\$NtUninstallWdf01009$\spuninst\KmdfCustom.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 8192 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-10-14 21:14 . 2011-10-14 21:14 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 8192 c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2004-08-17 13:49 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
+ 2004-08-17 13:49 . 2011-11-25 21:57 293376 c:\windows\system32\winsrv.dll
+ 2004-08-17 13:49 . 2011-10-14 14:47 174592 c:\windows\system32\winmm.dll
- 2004-08-17 13:49 . 2008-04-14 03:22 174592 c:\windows\system32\winmm.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 832512 c:\windows\system32\wininet.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 832512 c:\windows\system32\wininet.dll
+ 2004-08-17 13:49 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
- 2004-08-17 13:49 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 233472 c:\windows\system32\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 233472 c:\windows\system32\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 106496 c:\windows\system32\url.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 106496 c:\windows\system32\url.dll
+ 2004-08-17 13:49 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll
+ 2004-08-17 13:49 . 2011-11-03 15:29 386560 c:\windows\system32\qdvd.dll
- 2004-08-17 13:49 . 2008-04-14 03:21 386560 c:\windows\system32\qdvd.dll
+ 2001-10-25 14:00 . 2012-03-07 07:39 444206 c:\windows\system32\perfh009.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 444206 c:\windows\system32\perfh009.dat
+ 2001-10-25 14:00 . 2012-03-07 07:39 440934 c:\windows\system32\perfh005.dat
- 2001-10-25 14:00 . 2011-11-26 23:08 440934 c:\windows\system32\perfh005.dat
+ 2004-08-17 13:49 . 2011-12-19 08:08 102912 c:\windows\system32\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 102912 c:\windows\system32\occache.dll
+ 2011-08-17 08:57 . 2011-08-17 08:57 605696 c:\windows\system32\nmwcdcocls.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 671232 c:\windows\system32\mstime.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 671232 c:\windows\system32\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 193024 c:\windows\system32\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 193024 c:\windows\system32\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 478720 c:\windows\system32\mshtmled.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 478720 c:\windows\system32\mshtmled.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 468480 c:\windows\system32\msfeeds.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 468480 c:\windows\system32\msfeeds.dll
- 2007-03-23 16:36 . 2011-05-02 15:32 692736 c:\windows\system32\inetcomm.dll
+ 2007-03-23 16:36 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll
- 2007-08-13 17:34 . 2011-08-17 21:25 268288 c:\windows\system32\iertutil.dll
+ 2007-08-13 17:34 . 2011-12-19 08:08 268288 c:\windows\system32\iertutil.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 192512 c:\windows\system32\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 192512 c:\windows\system32\iepeers.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 384512 c:\windows\system32\iedkcs32.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-11 11:27 . 2011-08-17 21:25 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-11 11:27 . 2011-12-19 08:08 380928 c:\windows\system32\ieapfltr.dll
- 2001-10-25 14:00 . 2011-08-17 11:00 161792 c:\windows\system32\ieakui.dll
+ 2001-10-25 14:00 . 2011-12-16 10:58 161792 c:\windows\system32\ieakui.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 230400 c:\windows\system32\ieaksie.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 153088 c:\windows\system32\ieakeng.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 153088 c:\windows\system32\ieakeng.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 133120 c:\windows\system32\extmgr.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 133120 c:\windows\system32\extmgr.dll
+ 2004-08-17 13:49 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
- 2004-08-17 13:49 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 214528 c:\windows\system32\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 214528 c:\windows\system32\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 347136 c:\windows\system32\dxtmsft.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 347136 c:\windows\system32\dxtmsft.dll
+ 2009-07-14 09:35 . 2009-07-14 09:35 444136 c:\windows\system32\drivers\wdf01000.sys
- 2010-06-18 17:47 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2010-06-18 17:47 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
+ 2011-10-14 14:47 . 2011-10-14 14:47 174592 c:\windows\system32\dllcache\winmm.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 832512 c:\windows\system32\dllcache\wininet.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 832512 c:\windows\system32\dllcache\wininet.dll
- 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2008-12-16 12:32 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 106496 c:\windows\system32\dllcache\url.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 106496 c:\windows\system32\dllcache\url.dll
+ 2008-12-05 06:57 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll
+ 2009-05-01 08:48 . 2011-11-03 15:29 386560 c:\windows\system32\dllcache\qdvd.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 193024 c:\windows\system32\dllcache\msrating.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 193024 c:\windows\system32\dllcache\msrating.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 478720 c:\windows\system32\dllcache\mshtmled.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 478720 c:\windows\system32\dllcache\mshtmled.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 468480 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 468480 c:\windows\system32\dllcache\msfeeds.dll
- 2008-08-14 10:36 . 2011-05-02 15:32 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2008-08-14 10:36 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2007-03-23 16:36 . 2011-12-16 11:00 634680 c:\windows\system32\dllcache\iexplore.exe
- 2007-12-15 15:44 . 2011-08-17 21:25 268288 c:\windows\system32\dllcache\iertutil.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 268288 c:\windows\system32\dllcache\iertutil.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2001-10-25 14:00 . 2011-12-16 10:58 161792 c:\windows\system32\dllcache\ieakui.dll
- 2001-10-25 14:00 . 2011-08-17 11:00 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 230400 c:\windows\system32\dllcache\ieaksie.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 153088 c:\windows\system32\dllcache\ieakeng.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 133120 c:\windows\system32\dllcache\extmgr.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 133120 c:\windows\system32\dllcache\extmgr.dll
- 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
+ 2011-02-09 13:53 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2011-09-03 10:17 . 2011-09-09 09:12 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2011-09-28 07:06 602112 c:\windows\system32\dllcache\crypt32.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 124928 c:\windows\system32\dllcache\advpack.dll
- 2004-08-17 13:49 . 2011-09-09 09:12 602112 c:\windows\system32\crypt32.dll
+ 2004-08-17 13:49 . 2011-09-28 07:06 602112 c:\windows\system32\crypt32.dll
+ 2011-08-17 08:57 . 2011-08-17 08:57 123904 c:\windows\system32\ccdcmbwu.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 124928 c:\windows\system32\advpack.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 124928 c:\windows\system32\advpack.dll
+ 2011-12-25 02:49 . 2011-12-25 02:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2004-07-15 10:23 . 2004-07-15 10:23 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- 2003-02-21 10:20 . 2003-02-21 10:20 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2004-07-15 13:31 . 2004-07-15 13:31 573440 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
- 2003-02-21 07:27 . 2003-02-21 07:27 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
- 2003-02-21 07:27 . 2003-02-21 07:27 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 372736 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2004-07-15 13:31 . 2004-07-15 13:31 303104 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2004-07-14 23:35 . 2004-07-14 23:35 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2003-02-21 04:42 . 2003-02-21 04:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\msvcr71.dll
+ 2003-02-20 19:06 . 2003-02-20 19:06 311296 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorjit.dll
+ 2003-02-20 19:06 . 2003-02-20 19:06 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\fusion.dll
+ 2003-02-20 19:19 . 2003-02-20 19:19 253952 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\aspnet_isapi.dll
+ 2003-02-21 04:42 . 2003-02-21 04:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_msvcr71.dll
+ 2004-07-14 23:25 . 2004-07-14 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorjit.dll
+ 2004-07-14 23:24 . 2004-07-14 23:24 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_fusion.dll
+ 2004-07-15 00:49 . 2004-07-15 00:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_aspnet_isapi.dll
+ 2004-07-14 23:33 . 2004-07-14 23:33 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2011-12-24 21:55 . 2011-12-24 21:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2004-07-14 23:32 . 2004-07-14 23:32 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
- 2003-02-21 07:26 . 2003-02-21 07:26 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2004-07-15 13:28 . 2004-07-15 13:28 720896 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
- 2003-02-20 19:09 . 2003-02-20 19:09 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2004-07-14 23:35 . 2004-07-14 23:35 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
- 2003-02-20 19:06 . 2003-02-20 19:06 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2004-07-14 23:24 . 2004-07-14 23:24 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
- 2003-02-21 10:21 . 2003-02-21 10:21 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2004-07-15 10:23 . 2004-07-15 10:23 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2011-12-24 22:49 . 2011-12-24 22:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2012-01-20 18:28 . 2012-01-20 18:28 605696 c:\windows\Installer\9fcb4.msi
+ 2011-12-25 04:40 . 2011-12-25 04:40 819200 c:\windows\Installer\7367e.msp
+ 2012-03-07 07:02 . 2011-08-17 21:25 832512 c:\windows\ie7updates\KB2647516-IE7\wininet.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 233472 c:\windows\ie7updates\KB2647516-IE7\webcheck.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 106496 c:\windows\ie7updates\KB2647516-IE7\url.dll
+ 2012-03-07 07:03 . 2010-07-05 13:13 391032 c:\windows\ie7updates\KB2647516-IE7\spuninst\updspapi.dll
+ 2012-03-07 07:03 . 2010-07-05 13:13 233848 c:\windows\ie7updates\KB2647516-IE7\spuninst\spuninst.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 102912 c:\windows\ie7updates\KB2647516-IE7\occache.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 671232 c:\windows\ie7updates\KB2647516-IE7\mstime.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 193024 c:\windows\ie7updates\KB2647516-IE7\msrating.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 478720 c:\windows\ie7updates\KB2647516-IE7\mshtmled.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 468480 c:\windows\ie7updates\KB2647516-IE7\msfeeds.dll
+ 2012-03-07 07:02 . 2011-08-17 11:01 634632 c:\windows\ie7updates\KB2647516-IE7\iexplore.exe
+ 2012-03-07 07:02 . 2011-08-17 21:25 268288 c:\windows\ie7updates\KB2647516-IE7\iertutil.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 192512 c:\windows\ie7updates\KB2647516-IE7\iepeers.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 384512 c:\windows\ie7updates\KB2647516-IE7\iedkcs32.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 380928 c:\windows\ie7updates\KB2647516-IE7\ieapfltr.dll
+ 2012-03-07 07:02 . 2011-08-17 11:00 161792 c:\windows\ie7updates\KB2647516-IE7\ieakui.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 230400 c:\windows\ie7updates\KB2647516-IE7\ieaksie.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 153088 c:\windows\ie7updates\KB2647516-IE7\ieakeng.dll
+ 2012-03-07 07:03 . 2011-08-17 21:25 133120 c:\windows\ie7updates\KB2647516-IE7\extmgr.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 214528 c:\windows\ie7updates\KB2647516-IE7\dxtrans.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 347136 c:\windows\ie7updates\KB2647516-IE7\dxtmsft.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 124928 c:\windows\ie7updates\KB2647516-IE7\advpack.dll

+ 2012-03-07 19:02 . 2012-03-07 19:02 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_6e64ce08\System.Drawing.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_085c5ac5\System.Drawing.Design.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_5307889b\CustomMarshalers.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe
+ 2012-03-07 07:58 . 2012-03-07 07:58 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\4ad8369d6a60765d7e9b43cdf9023f41\WindowsFormsIntegration.ni.dll
+ 2012-03-07 07:58 . 2012-03-07 07:58 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fc63b434b2f253cd27625487f7b02ac0\System.Web.Routing.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\86650d4fb220f94f25bb5da42a03d454\System.Web.Extensions.Design.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\654465871e547e131668874de7c60b8c\System.Web.Entity.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f0d6895f6e709d425cb5da6053c603d2\System.Web.Entity.Design.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3f3b7dc7208e302e39a2dfb5b2cb953b\System.Web.DynamicData.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\e9cddd213343f15d611b14620d649bb0\System.Web.Abstractions.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\e9ae7ae6d1e9edc7aaf819889cd1c692\System.Drawing.Design.ni.dll
+ 2012-03-07 08:30 . 2012-03-07 08:30 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll
+ 2012-03-07 08:28 . 2012-03-07 08:28 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4ac9ac2326720485aefd4d79d2024945\System.Data.Entity.Design.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe
+ 2012-03-07 08:22 . 2012-03-07 08:22 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\edec83be646eb52204c991371751a428\ServiceModelReg.ni.exe
+ 2012-03-07 07:47 . 2012-03-07 07:47 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe
+ 2012-03-07 08:22 . 2012-03-07 08:22 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe
+ 2012-03-07 08:02 . 2012-03-07 08:02 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\25ce400b547f517258c8afb0480390ea\AspNetMMCExt.ni.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 573440 c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 372736 c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 303104 c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-11-26 23:07 . 2011-11-26 23:07 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 720896 c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-01-10 16:05 . 2008-11-07 17:55 382496 c:\windows\$NtUninstallWdf01009$\spuninst\updspapi.dll
+ 2012-01-10 16:05 . 2008-11-07 17:55 231456 c:\windows\$NtUninstallWdf01009$\spuninst\spuninst.exe
+ 2011-05-18 06:09 . 2011-05-18 06:09 1461992 c:\windows\system32\wdfcoinstaller01009.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 1168896 c:\windows\system32\urlmon.dll
+ 2004-08-17 13:49 . 2011-12-19 08:08 1168896 c:\windows\system32\urlmon.dll
+ 2004-08-17 13:49 . 2011-11-03 15:29 1294848 c:\windows\system32\quartz.dll
+ 2004-08-17 13:49 . 2011-11-01 16:07 1288192 c:\windows\system32\ole32.dll
+ 2004-08-17 13:45 . 2011-10-26 10:49 2150912 c:\windows\system32\ntoskrnl.exe
- 2004-08-17 13:45 . 2010-12-09 15:14 2150912 c:\windows\system32\ntoskrnl.exe
+ 2004-08-17 15:45 . 2011-10-26 10:49 2029056 c:\windows\system32\ntkrnlpa.exe
- 2004-08-17 15:45 . 2010-12-09 15:14 2029056 c:\windows\system32\ntkrnlpa.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 3616768 c:\windows\system32\mshtml.dll
- 2007-08-13 17:54 . 2011-08-17 21:25 6076416 c:\windows\system32\ieframe.dll
+ 2007-08-13 17:54 . 2011-12-19 08:08 6076416 c:\windows\system32\ieframe.dll
- 2007-03-23 00:27 . 2011-07-13 18:21 2159064 c:\windows\system32\FNTCACHE.DAT
+ 2007-03-23 00:27 . 2012-03-07 07:54 2159064 c:\windows\system32\FNTCACHE.DAT
+ 2008-10-16 15:58 . 2012-01-12 17:20 1859968 c:\windows\system32\dllcache\win32k.sys
+ 2004-08-17 13:49 . 2011-12-19 08:08 1168896 c:\windows\system32\dllcache\urlmon.dll
- 2004-08-17 13:49 . 2011-08-17 21:25 1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2008-05-07 05:12 . 2011-11-03 15:29 1294848 c:\windows\system32\dllcache\quartz.dll
+ 2010-07-16 12:00 . 2011-11-01 16:07 1288192 c:\windows\system32\dllcache\ole32.dll
- 2008-10-16 15:58 . 2010-12-09 15:14 2194944 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2194944 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2004-08-17 13:49 . 2011-12-19 08:08 3616768 c:\windows\system32\dllcache\mshtml.dll
+ 2007-12-15 15:44 . 2011-12-19 08:08 6076416 c:\windows\system32\dllcache\ieframe.dll
- 2007-12-15 15:44 . 2011-08-17 21:25 6076416 c:\windows\system32\dllcache\ieframe.dll
+ 2011-12-25 02:50 . 2011-12-25 02:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-10-26 02:39 . 2011-10-26 02:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2004-07-15 07:15 . 2004-07-15 07:15 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
- 2003-02-21 05:04 . 2003-02-21 05:04 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 1339392 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2011-12-25 10:07 . 2011-12-25 10:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 1703936 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2004-07-15 13:32 . 2004-07-15 13:32 1294336 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2003-02-20 19:08 . 2003-02-20 19:08 2482176 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorwks.dll
+ 2003-02-20 19:07 . 2003-02-20 19:07 2494464 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorsvr.dll
+ 2003-02-21 07:26 . 2003-02-21 07:26 2088960 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW2852\mscorlib.dll
+ 2004-07-14 23:28 . 2004-07-14 23:28 2502656 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorwks.dll
+ 2004-07-14 23:26 . 2004-07-14 23:26 2510848 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorsvr.dll
+ 2004-07-15 13:29 . 2004-07-15 13:29 2138112 c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW172\_mscorlib.dll
+ 2011-12-24 21:54 . 2011-12-24 21:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2011-12-24 21:53 . 2011-12-24 21:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2011-12-25 10:06 . 2011-12-25 10:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2011-12-26 08:59 . 2011-12-26 08:59 4368896 c:\windows\Installer\73677.msp
+ 2011-10-30 21:54 . 2011-10-30 21:54 2748416 c:\windows\Installer\2df2a7.msp
+ 2012-03-07 07:02 . 2011-08-17 21:25 1168896 c:\windows\ie7updates\KB2647516-IE7\urlmon.dll
+ 2012-03-07 07:02 . 2011-09-05 07:45 3615744 c:\windows\ie7updates\KB2647516-IE7\mshtml.dll
+ 2012-03-07 07:02 . 2011-08-17 21:25 6076416 c:\windows\ie7updates\KB2647516-IE7\ieframe.dll
- 2008-10-16 15:58 . 2010-12-09 15:14 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:50 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-10-16 15:58 . 2011-10-26 10:49 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2008-10-16 15:58 . 2010-12-09 15:14 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-03-07 19:00 . 2012-03-07 19:00 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_e43bccd7\System.dll
+ 2012-03-07 19:04 . 2012-03-07 19:04 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_062dc3a2\System.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_75784bb4\System.Xml.dll
+ 2012-03-07 19:01 . 2012-03-07 19:01 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_6c4a46ec\System.Xml.dll
+ 2012-03-07 19:01 . 2012-03-07 19:01 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c3eef29e\System.Windows.Forms.dll
+ 2012-03-07 19:05 . 2012-03-07 19:05 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_aa12827b\System.Windows.Forms.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_41b46906\System.Drawing.dll
+ 2012-03-07 19:02 . 2012-03-07 19:02 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b153217a\System.Design.dll
+ 2012-03-07 19:06 . 2012-03-07 19:06 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_a004ee26\System.Design.dll
+ 2012-03-07 19:07 . 2012-03-07 19:07 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d85b6220\mscorlib.dll
+ 2012-03-07 19:03 . 2012-03-07 19:03 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_690bd075\mscorlib.dll
+ 2012-03-07 07:42 . 2012-03-07 07:42 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll
+ 2012-03-07 07:58 . 2012-03-07 07:58 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll
+ 2012-03-07 07:41 . 2012-03-07 07:41 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
+ 2012-03-07 07:57 . 2012-03-07 07:57 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\c4c671c737b553db8e07664816475333\System.WorkflowServices.ni.dll
+ 2012-03-07 15:15 . 2012-03-07 15:15 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\80a288b6611668160334668cc2608e4a\System.Workflow.ComponentModel.ni.dll
+ 2012-03-07 15:14 . 2012-03-07 15:14 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\4c27548df5897320840ee0d65db38742\System.Workflow.Activities.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\030cde14924eefebc06c240dbfe093a4\System.Web.Mobile.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6379c8ca8ae11effb415139990923ff1\System.Web.Extensions.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e456140d5d6c43d7383bd36d3f9e12c6\System.Speech.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d51e6bb07124a1d780d1e024858e0dc1\System.Printing.ni.dll
+ 2012-03-07 08:02 . 2012-03-07 08:02 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\707a05a7d5a8d99dd56d1d50311a60d2\System.Deployment.ni.dll
+ 2012-03-07 07:48 . 2012-03-07 07:48 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll
+ 2012-03-07 08:29 . 2012-03-07 08:29 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll
+ 2012-03-07 07:49 . 2012-03-07 07:49 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll
+ 2012-03-07 08:28 . 2012-03-07 08:28 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\424160369b301ccd1b6fd86265611955\System.Data.Entity.ni.dll
+ 2012-03-07 07:48 . 2012-03-07 07:48 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll
+ 2012-03-07 07:47 . 2012-03-07 07:47 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\33cdfb4c322a528260016ac759230501\ReachFramework.ni.dll
+ 2012-03-07 07:47 . 2012-03-07 07:47 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a6def83aee1aaf3336675ce58ac09013\PresentationUI.ni.dll
+ 2012-03-07 07:41 . 2012-03-07 07:41 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\59cd6ce5a254006179eee92952cd2272\PresentationBuildTasks.ni.dll
+ 2012-03-07 08:24 . 2012-03-07 08:24 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\96e485c02ad346a2bd26a635e7fcb023\Microsoft.VisualBasic.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll
+ 2012-03-07 15:12 . 2012-03-07 15:12 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\912789fd859e0887e10a935cade08e72\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6c1d3eec78906cc2a2ecffb013114c50\Microsoft.Build.Tasks.ni.dll
+ 2012-03-07 08:23 . 2012-03-07 08:23 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 07:00 . 2012-03-07 07:00 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2010-10-06 13:31 . 2010-10-06 13:31 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-10-14 21:14 . 2011-10-14 21:14 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-07 07:36 . 2012-03-07 07:36 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-03-07 07:38 . 2012-03-07 07:38 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-10-14 21:15 . 2011-10-14 21:15 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-07 07:37 . 2012-03-07 07:37 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 1339392 c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.XML.dll
+ 2012-03-07 18:59 . 2012-03-07 18:59 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-03-07 19:00 . 2012-03-07 19:00 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-03-06 22:58 . 2012-03-06 22:58 1703936 c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-03-06 22:59 . 2012-03-06 22:59 1294336 c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
+ 2007-03-27 18:29 . 2012-01-26 22:20 52550552 c:\windows\system32\MRT.exe
+ 2011-12-26 16:02 . 2011-12-26 16:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp
+ 2012-03-07 08:40 . 2012-03-07 08:40 15256576 c:\windows\Installer\2c000e.msp
+ 2012-03-06 22:53 . 2012-03-06 22:53 19210240 c:\windows\Installer\1337dfa.msp
+ 2011-12-26 08:02 . 2011-12-26 08:02 19677184 c:\windows\Installer\10851dd.msp
+ 2012-03-07 07:57 . 2012-03-07 07:57 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll
+ 2012-03-07 15:13 . 2012-03-07 15:13 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\29bdc8352d3c26e3c572ea60639dec3b\System.Web.ni.dll
+ 2012-03-07 08:22 . 2012-03-07 08:22 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll
+ 2012-03-07 07:50 . 2012-03-07 07:50 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c8f8fb506c32500acc1b6190d054f26\System.Design.ni.dll
+ 2012-03-07 07:46 . 2012-03-07 07:46 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5060105fb9e169399fe45600b1e9215e\PresentationFramework.ni.dll
+ 2012-03-07 07:44 . 2012-03-07 07:44 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KeySpy"="c:\documents and settings\petr\Plocha\finest group\KeySpy\KeySpy.exe" [2007-04-07 217088]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"nwiz"="nwiz.exe" [2008-05-16 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-11-28 3744552]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe [2008-12-17 295606]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)
"NoSecurityTab"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSecurityTab"= 1 (0x1)
"HonorAutoRunSetting"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MDM"=2 (0x2)
"LVPrcSrv"=2 (0x2)
"btwdins"=2 (0x2)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
"<NO NAME>"=
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" /hide
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"Print2PDF Print Monitor"="c:\program files\Software602\Print2PDF\Print2PDF.exe" /server
"igfxtray"=c:\windows\system32\igfxtray.exe
"igfxhkcmd"=c:\windows\system32\hkcmd.exe
"igfxpers"=c:\windows\system32\igfxpers.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\dc++strong\\sdc21\\StrongDC.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\squid\\ncftpput.exe"=
"c:\\Casino\\ParadiseCasino\\casino.exe"=
"c:\\Program Files\\Common Files\\soft602\\langserv.exe"=
"c:\\Program Files\\Common Files\\EPSON\\EBAPI\\eEBSvc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [16.9.2011 22:08 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [19.7.2008 20:06 314456]
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [14.4.2010 9:28 85344]
R2 Aladdin SQL Server;Aladdin SQL Server;c:\program files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [27.9.2011 7:40 136192]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19.7.2008 20:06 20568]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [19.4.2010 12:45 1050440]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [25.2.2010 10:18 10064]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [11.6.2010 13:18 36608]
S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [17.8.2004 14:49 14336]
S3 TNET1130;802.11 b/g WLAN;c:\windows\system32\DRIVERS\tnet1130.sys --> c:\windows\system32\DRIVERS\tnet1130.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-18 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-583907252-362288127-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
.
2012-03-11 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-362288127-839522115-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.Google.com
uDefault_Search_URL = hxxp://www.Google.com
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = 127.0.0.1:3128
uSearchAssistant = hxxp://www.Google.com/
uCustomizeSearch = hxxp://www.Google.com/
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 178.77.254.254 77.48.100.254
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-18 22:05
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2012-03-18 22:32:57
ComboFix-quarantined-files.txt 2012-03-18 21:32
ComboFix2.txt 2011-12-26 14:35
ComboFix3.txt 2011-09-18 13:09
ComboFix4.txt 2011-09-18 09:26
ComboFix5.txt 2012-03-18 19:54
.
Před spuštěním: Volných bajtů: 14 003 666 944
Po spuštění: Volných bajtů: 14 151 618 560
.
- - End Of File - - 54763723A77951571256689BEF98A2E1


Najednou se to bohužel nevešlo.....

Potvory nevidím, ted to vypadá jak?

bohužel je to stále stejné, jak chrome tak firefox zatěžují procesor v průměru na 70%, chvílemi na 100%. Je problém cokoli na PC udělat....

Zkusíme ještě mrknout, zda OTL něco nevyhrabe

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript: - zaškrtněte okénko Pro všechny uživatele.
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde

OTL logfile created on: 26.3.2012 20:51:09 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 64,27% Memory free
2,84 Gb Paging File | 2,51 Gb Available in Paging File | 88,32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 13,21 Gb Free Space | 8,87% Space Free | Partition Type: NTFS

Computer Name: PETR-D455EAF4C9 | User Name: petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.03.26 20:48:44 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
PRC - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
PRC - [2012.01.20 07:35:36 | 001,047,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2011.11.28 20:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.11.28 20:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011.10.10 14:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
PRC - [2010.04.19 13:47:26 | 000,719,688 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2010.04.19 13:45:44 | 001,050,440 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2009.07.24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2008.07.26 09:23:42 | 000,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.04.07 12:25:28 | 000,217,088 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe
PRC - [2002.06.21 12:04:06 | 000,184,320 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe
PRC - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe


========== Modules (No Company Name) ==========

MOD - [2012.03.26 10:54:34 | 001,749,504 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12032601\algo.dll
MOD - [2012.03.25 20:46:55 | 001,749,504 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12032501\algo.dll
MOD - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
MOD - [2012.01.20 07:35:35 | 000,411,120 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\ppgooglenaclpluginchrome.dll
MOD - [2012.01.20 07:35:34 | 003,767,792 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\pdf.dll
MOD - [2012.01.20 07:34:10 | 000,122,880 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avutil-51.dll
MOD - [2012.01.20 07:34:09 | 000,222,208 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avformat-53.dll
MOD - [2012.01.20 07:34:07 | 001,746,432 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\avcodec-53.dll
MOD - [2012.01.20 04:14:40 | 008,593,056 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\Application\16.0.912.77\gcswf32.dll
MOD - [2009.04.27 23:49:26 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2008.07.26 09:24:04 | 000,068,120 | ---- | M] () -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVCSPS.dll
MOD - [2007.04.07 12:25:28 | 000,217,088 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe
MOD - [2002.04.05 00:07:00 | 000,286,720 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBNWDev.dll
MOD - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper_3004.dll -- (nosGetPlusHelper) getPlus(R)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012.03.21 16:49:36 | 000,139,672 | ---- | M] () [Auto | Running] -- C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe -- (Aladdin SQL Server)
SRV - [2011.11.28 20:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.10.10 14:55:04 | 000,085,344 | ---- | M] (Software602 a.s.) [Auto | Running] -- C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe -- (602XML Updater)
SRV - [2010.07.09 14:42:20 | 000,435,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010.04.19 13:45:44 | 001,050,440 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009.07.24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2008.12.17 22:06:40 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.07.26 09:25:36 | 000,150,040 | ---- | M] (Logitech Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2008.07.26 09:23:42 | 000,186,904 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer)
SRV - [2004.03.31 18:13:32 | 000,135,168 | ---- | M] (WIDCOMM, Inc.) [Disabled | Stopped] -- C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2002.06.21 12:04:06 | 000,184,320 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe -- (EpsonBidirectionalAgent)
SRV - [2002.01.29 14:33:14 | 000,077,824 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe -- (EpsonBidirectionalService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\VcommMgr.sys -- (VcommMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\VComm.sys -- (VComm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\tnet1130.sys -- (TNET1130)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\petr\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Boot | Stopped] -- System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vbtenum.sys -- (BTHidEnum)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\btcusb.sys -- (Btcsrusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btnetdrv.sys -- (BT)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\blueletaudio.sys -- (BlueletAudio)
DRV - File not found [Kernel | Auto | Stopped] -- -- (adfs)
DRV - [2011.11.28 19:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011.11.28 19:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011.11.28 19:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011.11.28 19:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011.11.28 19:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011.11.28 19:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011.11.28 19:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011.08.17 10:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.02.25 11:18:08 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.03.31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008.07.26 17:26:22 | 000,041,752 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2008.07.26 17:25:48 | 000,627,864 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2008.07.26 17:22:34 | 002,570,520 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI)
DRV - [2008.07.26 17:22:22 | 000,013,848 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter)
DRV - [2008.07.26 09:25:02 | 000,025,624 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2008.04.13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007.04.01 11:37:23 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004.03.31 18:13:34 | 000,016,640 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2004.03.31 18:13:32 | 000,146,684 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2004.03.31 18:13:32 | 000,052,856 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2004.03.31 18:13:32 | 000,030,235 | ---- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2004.03.31 18:13:30 | 001,260,106 | ---- | M] (WIDCOMM, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.Google.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://google.icq.com/search/search_frame.php
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.Google.com
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.Google.com/
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.Google.com/
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes,DefaultScope = search13
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... rer:source?}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?clien ... s}&locale=
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatche ... tbid=60342
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://www.icq.com/search/results.php?q ... &ch_id=osd
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\SearchScopes\search13: "URL" = http://search13.net/search.php?q={searchTerms}
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:3128

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.param.yahoo-fr: "megaup"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com"
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA80}:1.0.23
FF - prefs.js..extensions.enabledItems: {6236BA26-C117-4007-928C-DE0716C7FA96}:1.0.5
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {4D144BC3-23FB-47de-90C5-63CCB0139CCF}:1.0
FF - prefs.js..network.proxy.share_proxy_settings: true


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nppl3260.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.775: C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprpjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@software602.cz/602XML Filler: C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.99\npGoogleUpdate3.dll File not found
FF - HKCU\Software\MozillaPlugins\{@alibaba.com/alisetup;version=1.0}: C:\Documents and Settings\petr\Local Settings\Data aplikací\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll (alibaba)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.09.01 17:26:21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.01 00:37:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.11 13:24:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011.09.22 22:21:31 | 000,000,000 | ---D | M]

[2010.01.22 20:30:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Extensions
[2010.01.22 20:30:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.03.12 11:28:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\extensions
[2011.11.09 21:51:53 | 000,000,000 | ---D | M] (Feedback module) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a19}
[2007.04.09 18:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Sunbird\Profiles\7aoed1t2.default\extensions
[2010.04.01 13:43:47 | 000,002,251 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\askcom.xml
[2012.03.24 20:05:27 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-1.xml
[2008.09.24 20:57:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-2.xml
[2008.09.27 20:34:15 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-3.xml
[2008.11.15 10:21:07 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-4.xml
[2008.12.20 21:12:24 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-5.xml
[2009.02.04 15:16:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-6.xml
[2009.03.21 19:12:47 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin-7.xml
[2008.07.09 23:35:48 | 000,000,962 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\icqplugin.xml
[2011.09.05 07:50:31 | 000,001,575 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\web-search.xml
[2011.05.06 20:42:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.09.12 12:25:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA80}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{6236BA26-C117-4007-928C-DE0716C7FA96}.XPI
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\PETR\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\0NZYY65T.DEFAULT\EXTENSIONS\{8675F4B3-2F19-11ED-2D6B-0800600C0A19}
[2009.09.02 12:25:45 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.10.01 00:37:04 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.09.12 12:25:13 | 000,423,656 | ---- | M] (Oracle) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.09.21 12:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml
[2010.01.01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.210.6 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npfiller.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Data aplikac\u00ED\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\petr\Local Settings\Data aplikac\u00ED\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.18_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.2_1\
CHR - Extension: Gmail = C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.03.18 23:04:08 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No CLSID value found.
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-583907252-362288127-839522115-1003\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KeySpy] C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 1
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 0
O7 - HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Append to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/ ... vc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 178.77.254.254 77.48.100.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8DBE2F65-E88F-45D0-A6FA-4426E06182D6}: DhcpNameServer = 178.77.254.254 77.48.100.254
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\petr\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.04.17 23:24:03 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.ACDV - C:\WINDOWS\System32\ACDV.dll (ACD Systems)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\i420vfw.dll (www.helixcommunity.org)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.03.26 20:48:53 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
[2012.03.22 19:57:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\petr\Plocha\okulandy
[2012.03.19 09:11:42 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012.03.18 21:53:59 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012.03.18 21:53:59 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012.03.18 21:53:59 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012.03.18 21:53:59 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012.03.18 21:52:28 | 004,438,697 | R--- | C] (Swearware) -- C:\Documents and Settings\petr\Plocha\ComboFix.exe
[2012.03.10 20:20:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012.03.07 20:58:52 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2012.03.02 16:30:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\petr\Dokumenty\Downloads

========== Files - Modified Within 30 Days ==========

[2012.03.26 21:13:01 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.03.26 20:48:44 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\petr\Plocha\OTL.exe
[2012.03.26 20:16:31 | 000,186,500 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012.03.26 20:16:30 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-583907252-362288127-839522115-1003.job
[2012.03.26 20:16:26 | 000,002,337 | ---- | M] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Speed Launcher.lnk
[2012.03.26 20:15:38 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.03.26 20:15:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.03.25 23:15:17 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-362288127-839522115-1003.job
[2012.03.25 21:48:34 | 000,254,782 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\Nové čestné prohlášení.bmp
[2012.03.25 18:22:33 | 000,444,206 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.03.25 18:22:33 | 000,440,934 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2012.03.25 18:22:33 | 000,072,464 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.03.25 18:22:32 | 000,084,270 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2012.03.22 18:33:44 | 001,136,428 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\fa+inspekcni vyj050.pdf
[2012.03.22 18:29:34 | 004,722,678 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\čestné prohlášení burčákpotv
[2012.03.20 20:02:11 | 002,159,064 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.20 00:00:00 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.03.18 23:04:08 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012.03.18 21:52:56 | 004,438,697 | R--- | M] (Swearware) -- C:\Documents and Settings\petr\Plocha\ComboFix.exe
[2012.03.14 00:17:39 | 000,120,877 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\vratné logo.jpg
[2012.03.10 20:15:56 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012.03.10 20:15:54 | 000,241,664 | ---- | M] () -- C:\Documents and Settings\petr\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.03.06 19:49:21 | 001,434,483 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\bryz.JPG
[2012.02.29 19:53:44 | 000,293,098 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\obrazovka.JPG
[2012.02.29 19:38:51 | 005,292,054 | ---- | M] () -- C:\Documents and Settings\petr\Plocha\obrazovka.bmp

========== Files Created - No Company Name ==========

[2012.03.26 21:13:01 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.03.25 21:48:32 | 000,254,782 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\Nové čestné prohlášení.bmp
[2012.03.22 18:33:41 | 001,136,428 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\fa+inspekcni vyj050.pdf
[2012.03.22 18:29:27 | 004,722,678 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\čestné prohlášení burčákpotv
[2012.03.18 21:53:59 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012.03.18 21:53:59 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012.03.18 21:53:59 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012.03.18 21:53:59 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012.03.18 21:53:59 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012.03.14 00:17:38 | 000,120,877 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\vratné logo.jpg
[2012.03.06 19:52:20 | 000,869,685 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\kolo.JPG
[2012.03.06 19:50:53 | 000,864,392 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\bryz1.JPG
[2012.03.06 19:49:20 | 001,434,483 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\bryz.JPG
[2012.02.29 19:45:40 | 000,293,098 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\obrazovka.JPG
[2012.02.29 19:38:50 | 005,292,054 | ---- | C] () -- C:\Documents and Settings\petr\Plocha\obrazovka.bmp
[2011.09.25 19:33:59 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\EEBDSCVR.dll
[2011.09.25 19:33:58 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\EEBAPI.dll
[2011.09.25 19:33:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\EBAPI.dll
[2011.09.25 15:44:22 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT.DAT
[2011.05.11 12:51:26 | 000,074,752 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe
[2010.11.04 17:00:13 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2010.08.12 10:13:28 | 000,000,367 | ---- | C] () -- C:\WINDOWS\posta2.ini
[2010.06.27 22:31:26 | 000,925,712 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2010.06.11 14:18:35 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010.06.11 14:18:35 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010.04.21 18:46:14 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Data aplikací\85C3B64EBA.sys

========== LOP Check ==========

[2010.11.14 11:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2008.07.19 21:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\avg7
[2008.03.21 15:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Bluetooth
[2008.01.13 17:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\EPSON
[2008.07.09 23:37:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2011.05.11 14:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nitro PDF
[2008.08.17 10:27:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
[2010.06.11 14:21:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Suite
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2010.07.09 14:41:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
[2008.01.13 17:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\UDL
[2010.07.09 14:40:58 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2007.05.11 23:47:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\AVG7
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Softland
[2011.11.02 12:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602Installer
[2011.11.02 12:58:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602XML
[2007.04.01 11:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ACD Systems
[2008.09.27 20:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\AVG7
[2011.05.11 12:51:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CAD-KAS
[2009.01.09 18:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ChaosPro
[2008.12.19 12:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\com.adobe.ExMan
[2011.05.11 14:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Downloaded Installations
[2008.01.13 18:25:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\EPSON
[2010.08.05 20:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\FileZilla
[2009.03.07 21:07:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\fltk.org
[2009.07.21 11:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\gtk-2.0
[2009.02.11 21:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\HDRsoft
[2009.05.29 19:10:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQ
[2007.03.25 21:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQLite
[2010.03.07 11:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InfraRecorder
[2009.11.07 11:58:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\KillProcess
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\langmaster.sz
[2008.03.14 19:51:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Leadertech
[2009.08.20 11:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\mojosoft
[2011.05.11 14:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Nitro PDF
[2010.06.11 14:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\PC Suite
[2008.10.24 18:56:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Pixmantec
[2010.10.17 14:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Posta
[2008.02.28 22:18:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\postgresql
[2011.09.17 20:39:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Samsung
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Softland
[2008.03.01 17:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems
[2011.11.16 00:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\STORMWARE
[2010.01.22 20:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Thunderbird
[2011.09.16 22:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TNS2011
[2011.05.11 13:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Tomahawk
[2007.03.24 19:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TuneUp Software
[2009.01.09 18:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Ultra Fractal 3
[2010.04.18 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\uTorrent
[2008.03.29 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 05:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)

< >

< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008.04.13 21:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: CSRSS.EXE >
[2008.04.14 05:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\ServicePackFiles\i386\csrss.exe
[2008.04.14 05:22:17 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=628CE66E3FD35BFC7969DBAC245DC069 -- C:\WINDOWS\system32\csrss.exe

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007.06.13 15:11:59 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

< MD5 for: FASTFAT.SYS >
[2008.04.13 21:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\ServicePackFiles\i386\fastfat.sys
[2008.04.13 21:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) MD5=38D332A6D56AF32635675F132548343E -- C:\WINDOWS\system32\drivers\fastfat.sys

< MD5 for: HAL.DLL >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.08.19 16:09:35 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 05:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\dllcache\isapnp.sys
[2008.04.14 05:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\isapnp.sys

< MD5 for: LSASS.EXE >
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys

< MD5 for: NETLOGON.DLL >
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: NTFS.SYS >
[2007.02.09 13:23:36 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=05AB81909514BFD69CBB1F2C147CF6B9 -- C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\ERDNT\cache\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\ServicePackFiles\i386\ntfs.sys
[2008.04.13 21:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) MD5=78A08DD6A8D65E697C18E1DB01C5CDCA -- C:\WINDOWS\system32\drivers\ntfs.sys
[2004.08.04 00:15:10 | 000,574,592 | ---- | M] (Microsoft Corporation) MD5=B78BE402C3F63DD55521F73876951CDD -- C:\cmdcons\NTFS.SYS

< MD5 for: SCECLI.DLL >
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.02.09 13:18:56 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=3D107D45CCFDB266E91D84B52CD7F430 -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\ERDNT\cache\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\dllcache\services.exe
[2009.02.09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=9EF697AF07BB8DD82C3B02CA953A95B7 -- C:\WINDOWS\system32\services.exe
[2008.04.14 05:22:45 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=F0D2AE69035092BF22DAD6B50FAB85C2 -- C:\WINDOWS\ServicePackFiles\i386\services.exe

< MD5 for: SMSS.EXE >
[2004.08.17 16:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SPOOLSV.EXE >
[2010.08.17 15:19:36 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=258DD5D4283FD9F9A7166BE9AE45CE73 -- C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\ERDNT\cache\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\dllcache\spoolsv.exe
[2010.08.17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) MD5=60784F891563FB1B767F70117FC2428F -- C:\WINDOWS\system32\spoolsv.exe
[2005.06.11 02:17:13 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=AD3D9D191AEA7B5445FE1D82FFBB4788 -- C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[2008.04.14 05:22:48 | 000,057,856 | ---- | M] (Microsoft Corporation) MD5=CB1090BCA0E7B40D0B5B4E4D66531809 -- C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe

< MD5 for: TCPIP.SYS >
[2007.10.30 18:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:35 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< C:\windows\system32\spool\prtprocs|dll;true;true;true /FP >
[2008.07.06 14:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2003.06.19 02:31:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008.07.06 14:06:10 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\x64\filterpipelineprintproc.dll

< %systemroot%\system32\drivers\*.sys /5 >

< %systemroot%\system32\drivers\*.sys /X >
[2008.04.14 05:21:36 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008.04.14 05:21:36 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008.04.14 05:21:36 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008.04.14 05:21:36 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008.04.14 05:21:36 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008.04.14 05:21:36 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008.04.14 05:21:36 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2004.07.17 11:36:24 | 000,064,352 | ---- | M] () -- C:\WINDOWS\system32\drivers\ativmc20.cod
[2008.04.14 05:21:37 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008.04.14 05:21:37 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008.04.14 05:21:37 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008.04.14 05:21:37 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008.04.14 05:21:37 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008.04.14 05:21:38 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2004.07.17 22:55:24 | 000,129,045 | ---- | M] () -- C:\WINDOWS\system32\drivers\cxthsfs2.cty
[2001.10.25 16:00:00 | 003,440,660 | ---- | M] () -- C:\WINDOWS\system32\drivers\gm.dls
[2001.10.25 16:00:00 | 000,000,646 | ---- | M] () -- C:\WINDOWS\system32\drivers\gmreadme.txt
[2004.08.17 16:49:30 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kstvtune.ax
[2004.08.17 16:49:30 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kswdmcap.ax
[2004.08.17 16:49:30 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\ksxbar.ax
[2008.07.26 08:44:30 | 000,069,592 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFaL000.cfg
[2008.07.26 08:44:30 | 000,227,172 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL000.cfg
[2008.07.26 08:44:30 | 000,146,680 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL001.cfg
[2008.07.26 08:44:30 | 000,085,302 | ---- | M] () -- C:\WINDOWS\system32\drivers\LVFeL002.cfg
[2012.01.10 18:05:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012.01.10 18:06:27 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2004.07.17 11:35:00 | 000,067,866 | ---- | M] () -- C:\WINDOWS\system32\drivers\netwlan5.img
[2008.04.14 05:21:55 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008.04.14 05:22:04 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll
[2004.08.17 16:49:20 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\vfwwdm32.dll
[2004.08.17 16:49:30 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\vidcap.ax

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\system32\*.* /5 >
[2012.03.26 20:16:31 | 000,186,500 | ---- | M] () -- C:\WINDOWS\system32\nvapps.xml
[2012.03.25 18:22:32 | 000,084,270 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2012.03.25 18:22:33 | 000,072,464 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2012.03.25 18:22:33 | 000,440,934 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2012.03.25 18:22:33 | 000,444,206 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2012.03.25 18:22:32 | 001,057,018 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2012.03.26 20:15:38 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\config\*.sav >
[2007.03.23 02:26:12 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2007.03.23 02:26:12 | 000,663,552 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2007.03.23 02:26:12 | 000,458,752 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\*.* /U /s >
[15 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]

< %systemroot%\*. /mp /s >

< %ALLUSERSPROFILE%\Data Aplikací\*.* >
[2010.04.21 18:46:14 | 000,000,008 | RHS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\85C3B64EBA.sys
[2007.03.23 02:29:19 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\desktop.ini
[2010.04.30 08:31:41 | 000,002,828 | -HS- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\KGyGaAvL.sys
[2008.04.18 17:28:22 | 000,001,743 | ---- | M] () -- C:\Documents and Settings\All Users\Data Aplikací\QTSBandwidthCache

< %ALLUSERSPROFILE%\Data Aplikací\*.exe /s >
[2010.01.11 21:46:57 | 079,858,648 | ---- | M] (Acresso Software Inc. ) -- C:\Documents and Settings\All Users\Data Aplikací\Corel\Downloads\540215253_610005\1271254118180\KPTCollection.exe
[2011.05.25 12:30:28 | 202,521,536 | ---- | M] (Acresso Software Inc. ) -- C:\Documents and Settings\All Users\Data Aplikací\Corel\Downloads\540215253_610005\1300677038363\CDGSX5SP3.exe
[2006.04.18 05:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Data Aplikací\EPSON\EPW!3 SSRP\E_S30RP1.EXE

< %ALLUSERSPROFILE%\Dáta aplikácií\*.* >

< %ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s >

< %APPDATA%\*. >
[2011.11.02 12:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602Installer
[2011.11.02 12:58:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\602XML
[2007.04.01 11:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ACD Systems
[2010.09.04 22:42:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Adobe
[2008.01.05 21:50:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Apple Computer
[2008.09.27 20:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\AVG7
[2011.05.11 12:51:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CAD-KAS
[2009.01.09 18:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ChaosPro
[2008.12.19 12:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\com.adobe.ExMan
[2010.05.02 20:56:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Corel
[2008.08.12 20:16:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\CyberLink
[2011.05.11 14:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Downloaded Installations
[2008.01.13 18:25:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\EPSON
[2010.08.05 20:00:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\FileZilla
[2009.03.07 21:07:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\fltk.org
[2009.07.21 11:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\gtk-2.0
[2009.02.11 21:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\HDRsoft
[2007.03.29 23:21:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Help
[2009.05.29 19:10:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQ
[2007.03.25 21:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\ICQLite
[2007.03.23 18:45:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Identities
[2010.03.07 11:21:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InfraRecorder
[2011.04.14 19:39:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\InstallShield
[2009.11.07 11:58:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\KillProcess
[2009.06.26 22:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\langmaster.sz
[2007.04.02 17:31:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Lavasoft
[2008.03.14 19:51:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Leadertech
[2007.03.24 19:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Macromedia
[2011.02.02 18:45:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Malwarebytes
[2012.01.20 20:32:26 | 000,000,000 | --SD | M] -- C:\Documents and Settings\petr\Data aplikací\Microsoft
[2009.08.20 11:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\mojosoft
[2008.08.26 23:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Mozilla
[2011.05.11 14:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Nitro PDF
[2010.06.11 14:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\PC Suite
[2008.10.24 18:56:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Pixmantec
[2010.10.17 14:31:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Posta
[2008.02.28 22:18:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\postgresql
[2010.09.01 16:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Real
[2011.09.17 20:39:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Samsung
[2012.02.15 16:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Skype
[2011.07.31 19:29:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\skypePM
[2011.05.11 13:57:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Softland
[2008.03.01 17:32:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems
[2011.11.16 00:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\STORMWARE
[2007.03.24 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Sun
[2007.03.24 15:43:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Talkback
[2010.01.22 20:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Thunderbird
[2011.09.16 22:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TNS2011
[2011.05.11 13:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Tomahawk
[2007.03.24 19:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\TuneUp Software
[2009.01.09 18:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Ultra Fractal 3
[2010.04.18 17:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\uTorrent
[2008.03.29 12:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\petr\Data aplikací\Zoner

< %APPDATA%\*.* >
[2007.06.11 14:53:37 | 000,002,528 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\$_hpcst$.hpc
[2007.03.23 02:29:19 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\petr\Data aplikací\desktop.ini

< %APPDATA%\*.exe /s >
[2009.12.23 13:08:37 | 000,026,694 | R--- | M] () -- C:\Documents and Settings\petr\Data aplikací\Microsoft\Installer\{446E684C-A48C-4A67-89F7-824B63F96153}\_D72106D85CB38188D5EFB4.exe
[2008.02.05 13:56:14 | 000,074,016 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\Download.exe
[2008.02.05 10:33:36 | 000,060,920 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\iisinstall.exe
[2008.02.05 14:25:10 | 000,202,168 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\install.exe
[2007.10.25 18:02:12 | 038,220,656 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\SQLEXPR32.EXE
[2008.02.05 10:34:30 | 000,198,032 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\VistaIIS.exe
[2008.02.05 10:34:38 | 000,050,496 | ---- | M] () -- C:\Documents and Settings\petr\Data aplikací\Sprinx Systems\Sprinx CRM 5.0.7.0\WinVer.exe

< %SYSTEMDRIVE%\*.exe >
[2011.09.25 19:00:51 | 002,577,408 | ---- | M] () -- C:\epson18385eu.exe
[2011.09.25 15:42:17 | 002,775,552 | ---- | M] () -- C:\epson19067eu.exe

< >

< >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-03-19 22:08:14

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s >
"StateIndex" = 1

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER
BOOTEXECUTE REG_MULTI_SZ autocheck autochk *\0\0

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=3
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.03.26 21:13:01 | 000,000,512 | ---- | M] () MD5=5DAD7A15C2AB2B7F14DD1F3B99DD5EA3 -- C:\PhysicalMBR.bin

< End of report >

OTL Extras logfile created on: 26.3.2012 20:51:09 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\petr\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1,50 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 64,27% Memory free
2,84 Gb Paging File | 2,51 Gb Available in Paging File | 88,32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 13,21 Gb Free Space | 8,87% Space Free | Partition Type: NTFS

Computer Name: PETR-D455EAF4C9 | User Name: petr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1723:TCP" = 1723:TCP:*:Enabled:@xpsp2res.dll,-22015
"1701:UDP" = 1701:UDP:*:Enabled:@xpsp2res.dll,-22016
"500:UDP" = 500:UDP:*:Enabled:@xpsp2res.dll,-22017

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\dc++strong\sdc21\StrongDC.exe" = C:\dc++strong\sdc21\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Program Files\ICQ6.5\ICQ.exe" = C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\squid\ncftpput.exe" = C:\squid\ncftpput.exe:*:Enabled:TNSftp -- (NcFTP Software)
"C:\Casino\ParadiseCasino\casino.exe" = C:\Casino\ParadiseCasino\casino.exe:*:Enabled:casino -- ()
"C:\Program Files\Common Files\soft602\langserv.exe" = C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker -- ()
"C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe" = C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe:*:Enabled:eEBSvc -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{44864C09-D493-4B07-BAD0-F65557A3C552}" = CorelDRAW Graphics Suite X5 - KPT Collection
"_{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension
"_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{05D18A0F-ED9D-4FBD-9BF5-AF632EB09CB3}" = CGS15_IPM_T2
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0901FCE8-5415-4499-BBC8-1AA106DD66E2}" = Adobe Setup
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{19D2B63E-C1F1-4803-BA8B-4AB8FE216952}" = EPSON PRINT Image Framer Tool
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
"{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
"{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32C74893-0243-4235-A6F3-201F0E5D2C03}" = Software602 Print2PDF
"{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{356658C7-8C60-4A43-AF50-75CA8E642934}" = CorelDRAW Graphics Suite X5 - CZ
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3AF8FCCD-F51A-4014-9002-F195E1CBC876}" = Logitech QuickCam
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{446E684C-A48C-4A67-89F7-824B63F96153}" = Stigo YouTube Downloader
"{44864C09-D493-4B07-BAD0-F65557A3C552}" = CorelDRAW Graphics Suite X5 - KPT Collection
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5178C1BB-1EB1-4468-894B-7DE964DDCAA2}" = Adobe Photoshop CS3
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
"{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
"{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}" = Adobe Color NA Extra Settings
"{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
"{65094424-9351-40B8-939B-3676D67E48E0}" = Corel Graphics - Windows Shell Extension
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3
"{77077FFF-8831-470F-9627-E86F06A50CCD}" = Avery Wizard 3.1
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-1029-0000-7760-000000000003}" = Adobe Acrobat 8 Professional - Czech, Greek, Hungarian, Polish, Slovak
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{AF21F061-F04B-42B4-B6C3-784A080F782A}" = dirLock
"{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}" = Adobe Color EU Recommended Settings
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D387C31D-971F-4EEC-8734-382B39AD04F0}" = Software602 Form Filler
"{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English
"{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{E86BC406-944E-41F6-ADE6-2C136734C96B}" = EPSON File Manager
"{E98D6792-FC51-4187-9448-CA9BF893384E}" = MicroStar Bluetooth Software
"{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
"{F4E74C05-CD77-4422-B5BB-E82693EE2FA3}" = iSpQ VideoChat 8.0
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)
"{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Balíček ovladače systému Windows - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Balíček ovladače systému Windows - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
"Adobe Acrobat Reader 3.02" = Adobe Acrobat Reader 3.02
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_4977c84bcdc298c444ccfbdcccb660d" = Adobe Photoshop CS3
"Aladdin" = Aladdin - ekonomický informační systém
"AliSetup" = AliSetup 0.1.0.52
"Audacity_is1" = Audacity 1.2.6
"avast" = avast! Free Antivirus
"CCleaner" = CCleaner (remove only)
"C-Media Audio Driver" = C-Media WDM Audio Driver
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"FileZilla Client" = FileZilla Client 3.2.4.1
"GTK 2.0" = GTK+ Runtime 2.6.9 rev a (odstranit)
"HijackThis" = HijackThis 2.0.2
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"KJ05P_is1" = E-VISION Kniha jízd 2005 Professional
"lvdrivers_11.80" = Logitech QuickCam Driver Package
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 7.0.1 (x86 cs)" = Mozilla Firefox 7.0.1 (x86 cs)
"Mozilla Thunderbird 10.0.2 (x86 cs)" = Mozilla Thunderbird 10.0.2 (x86 cs)
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NVIDIA Drivers" = NVIDIA Drivers
"ParadiseCasino" = ParadiseCasino
"PDF Editor 2" = PDF Editor 2
"PENTAX Digital Camera Utility" = PENTAX Digital Camera Utility
"PhotoFiltre Studio" = PhotoFiltre Studio
"Pošta & kancelář_is1" = Pošta & kancelář 2.6
"Pošta a kancelář 3_is1" = Pošta a kancelář 3.1
"rajče.net_is1" = rajče verze 57 sestavení 183
"RealPlayer 12.0" = RealPlayer
"ReDynaMix HDR (Adobe Photoshop Plug-in)_is1" = DCETools - ReDynaMix HDR 1.01
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"simple2_is1" = Tone Mapping Plug-In 1.2
"The KMPlayer" = The KMPlayer (remove only)
"TuneUp Utilities" = TuneUp Utilities
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = Archivátor WinRAR

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Aladdin Events ]
Error - 17.10.2011 17:23:32 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

Error - 9.11.2011 16:50:27 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

Error - 15.11.2011 10:19:51 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.12.2011 16:24:27 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 15.12.2011 8:57:23 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = ERROR: Client pipe broken!

Error - 30.12.2011 14:34:26 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 2.2.2012 6:44:10 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 7.2.2012 15:16:35 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 12.3.2012 5:58:51 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = IS Aladdin update failed. Can't load XML string (1)!

Error - 21.3.2012 10:50:30 | Computer Name = PETR-D455EAF4C9 | Source = Aladdin | ID = 107
Description = UPDATE: Restart batch successfully executed.

[ Antivirus Events ]
Error - 14.2.2009 4:05:02 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 5.11.2009 3:11:12 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 7.11.2009 17:32:00 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 28.11.2009 12:36:03 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 6.3.2010 17:29:36 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 6.3.2010 17:30:44 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 7.3.2010 5:13:06 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:25:07 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:25:50 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

Error - 25.6.2010 8:36:25 | Computer Name = PETR-D455EAF4C9 | Source = avast! | ID = 33554522
Description =

[ Application Events ]
Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:48 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 288

Error - 24.3.2012 7:55:49 | Computer Name = PETR-D455EAF4C9 | Source = Protexis Licensing Service | ID = 49
Description = Failed to Release Mutex Error ID = Returned Error 1

[ System Events ]
Error - 22.3.2012 14:56:59 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 22.3.2012 14:57:17 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 22.3.2012 17:34:07 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 23.3.2012 2:27:21 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 23.3.2012 5:09:13 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby upnphost
s argumenty za účelem spuštění serveru: {204810B9-73B2-11D4-BF42-00B0D0118B56}

Error - 24.3.2012 5:44:38 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 24.3.2012 7:56:34 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 24.3.2012 7:56:51 | Computer Name = PETR-D455EAF4C9 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1058 při pokusu o spuštění služby MDM
s argumenty za účelem spuštění serveru: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

Error - 25.3.2012 12:18:32 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2

Error - 26.3.2012 14:16:52 | Computer Name = PETR-D455EAF4C9 | Source = Service Control Manager | ID = 7000
Description = Služba adfs neuspěla při spuštění v důsledku následující chyby: %%2


< End of report >

Spustte OTL
-do bílého okna dole skopírujte tento skript:
-klikněte na tlačítko opravit.
-Následně se pc restartuje.
- Log vložte zde

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{BFC32E1D-EE75-4A48-BC60-104E11EE2431} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFC32E1D-EE75-4A48-BC60-104E11EE2431}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\{@alibaba.com/alisetup;version=1.0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{@alibaba.com/alisetup;version=1.0}\ not found.
C:\Documents and Settings\petr\Local Settings\Data aplikací\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll moved successfully.
Prefs.js: "megaup" removed from browser.search.param.yahoo-fr
Prefs.js: "megaup" removed from browser.search.param.yahoo-fr-cjkt
HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_USERS\S-1-5-21-583907252-362288127-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Bar| /E : value set successfully!
HKU\S-1-5-21-583907252-362288127-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Prev Search Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
========== FILES ==========
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP135.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP17F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP186.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1C7.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1D3.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1DF.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP23A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP25A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP29C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2C0.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP37.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7A.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPC.tmp folder moved successfully.
C:\Documents and Settings\All Users\Data aplikací\85C3B64EBA.sys moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: petr
->Temp folder emptied: 222054 bytes
->Temporary Internet Files folder emptied: 2545273 bytes
->Java cache emptied: 61982 bytes
->FireFox cache emptied: 51357993 bytes
->Google Chrome cache emptied: 248118991 bytes
->Flash cache emptied: 6291 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 153658 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 289,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: petr
->Flash cache emptied: 0 bytes

User: postgres

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.39.2 log created on 03272012_225954

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Jak to vypadá?

Je to o trošku lepší, ale stále při načítání stránek nebo při již dvou otevřených panelech je pořád vytížení procesoru 65%-99%.
Napadá Vás ještě něco??
Díky za Vaši pomoc

Zkoušeli jsme zakázat doplnky?