problém s PC

[Márty84]

Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte ComboFix.
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

[rogerfedex]

Jaká je pravděpodobnost, ze se mi ztratí data?
Nemam nic pri ruce, cim bych to zalohoval...

[Márty84]

Jaká je pravděpodobnost, ze se mi ztratí data?

Malinka, ale existuje. Zalezi na vas.

[rogerfedex]

ComboFix 14-02-24.02 - Ruud 25.02.2014 20:44:38.8.1 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.179 [GMT 1:00]
Spuštěný z: d:\nazareth\ComboFix.exe
AV: ESET NOD32 Antivirus 7.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0405.exe
c:\windows\system32\_000010_.tmp.dll
c:\windows\system32\SET664D.tmp
c:\windows\system32\SET6663.tmp
c:\windows\system32\SET668A.tmp
c:\windows\WindowsUpdate.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-25 do 2014-02-25 )))))))))))))))))))))))))))))))
.
.
2014-02-24 21:11 . 1999-11-10 09:05 86016 ----a-w- c:\windows\unvise32qt.exe
2014-02-24 21:11 . 2014-02-24 21:11 28672 ----a-w- c:\windows\system32\qttask.exe
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2014-02-24 21:11 . 2014-02-24 21:11 90112 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2014-02-24 21:11 . 2014-02-24 21:11 -------- d-----w- c:\windows\system32\QuickTime
2014-02-24 20:15 . 2014-02-24 20:15 -------- d-----w- c:\program files\Apple Software Update
2014-02-24 20:14 . 2009-02-26 18:32 38224 ------w- c:\windows\system32\IJRMF.exe
2014-02-24 18:50 . 2014-02-24 18:50 -------- d-----w- C:\FOUND.003
2014-02-24 06:14 . 2014-02-24 06:14 -------- d-----w- c:\windows\snack
2014-02-23 18:27 . 2014-02-23 18:27 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2014-02-23 18:27 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-23 16:41 . 2014-02-23 16:41 -------- d-----w- C:\AdwCleaner
2014-02-23 13:25 . 2011-06-21 10:24 32768 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2014-02-23 13:19 . 2014-02-23 13:19 -------- d-----w- c:\program files\CCleaner
2014-02-23 12:17 . 2014-02-23 12:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ESET
2014-02-23 12:17 . 2014-02-23 12:17 -------- d-----w- c:\program files\ESET
2014-02-23 11:15 . 2014-02-23 11:16 -------- d-sh--w- c:\documents and settings\Ruud\IECompatCache
2014-02-21 17:09 . 2014-02-22 15:10 17858952 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-24 18:59 . 2014-02-24 18:59 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 59136 ----a-w- c:\windows\system32\drivers\rfcomm.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 25471 ----a-w- c:\windows\system32\drivers\watv10nt.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 52864 ----a-w- c:\windows\system32\drivers\DMusic.sys.bak
2014-02-24 18:59 . 2014-02-24 18:59 62976 ----a-w- c:\windows\system32\drivers\cdrom.sys.bak
2014-02-24 18:59 . 2014-02-24 18:58 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2014-02-24 18:59 . 2014-02-24 18:58 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2014-02-24 18:58 . 2014-02-24 18:58 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2014-02-24 18:58 . 2014-02-24 18:58 3328 ----a-w- c:\windows\system32\drivers\dxgthk.sys.bak
2014-02-24 18:58 . 2014-02-24 18:58 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2014-02-24 18:58 . 2014-02-24 18:58 42368 ----a-w- c:\windows\system32\drivers\mountmgr.sys.bak
2014-02-24 06:15 . 2014-02-24 06:15 59136 ----a-w- c:\windows\system32\drivers\rfcomm.sys.dump
2014-02-24 06:15 . 2014-02-24 06:15 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.dump
2014-02-24 06:15 . 2014-02-24 06:15 25471 ----a-w- c:\windows\system32\drivers\watv10nt.sys.dump
2014-02-24 06:15 . 2014-02-24 06:15 52864 ----a-w- c:\windows\system32\drivers\DMusic.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 62976 ----a-w- c:\windows\system32\drivers\cdrom.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 3328 ----a-w- c:\windows\system32\drivers\dxgthk.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 69120 ----a-w- c:\windows\system32\drivers\psched.sys.dump
2014-02-24 06:14 . 2014-02-24 06:14 42368 ----a-w- c:\windows\system32\drivers\mountmgr.sys.dump
2014-02-22 15:11 . 2012-05-27 08:11 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-22 15:11 . 2012-05-27 08:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-06 03:38 . 2005-06-17 23:25 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-05 23:08 . 2002-12-05 11:00 43520 ------w- c:\windows\system32\licmgr10.dll
2014-02-05 23:08 . 2002-12-05 11:00 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-05 23:08 . 2002-12-05 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2014-02-05 22:24 . 2005-12-10 10:41 385024 ------w- c:\windows\system32\html.iec
2014-01-16 00:40 . 2014-01-16 00:40 487016 ----a-w- C:\SecurityScanner.dll
2014-01-04 03:12 . 2002-12-05 11:00 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-12-05 11:26 . 2002-12-05 11:00 1172992 ----a-w- c:\windows\system32\msxml3.dll
2013-11-27 20:21 . 2014-01-23 16:30 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"QuickTime Task"="c:\windows\system32\qttask.exe" [2014-02-24 28672]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^hp psc 2000 Series.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\hp psc 2000 Series.lnk
backup=c:\windows\pss\hp psc 2000 Series.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\InterVideo WinCinema Manager.lnk
backup=c:\windows\pss\InterVideo WinCinema Manager.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Media Key.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Media Key.lnk
backup=c:\windows\pss\Media Key.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^officejet 6100.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\officejet 6100.lnk
backup=c:\windows\pss\officejet 6100.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-11-21 16:57 959904 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2009-03-18 02:40 767312 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 04:22 15360 ------w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2005-11-04 17:03 7307264 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2005-11-04 17:03 86016 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2005-11-04 17:03 1519616 ----a-w- c:\windows\system32\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2011-04-08 11:59 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\System32\\muzapp.exe"=
.
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [10.12.2005 14:44 12856]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [23.2.2014 19:27 22856]
S2 ekrn;ESET Service;"c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe" --> c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [?]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [23.2.2014 19:27 701512]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [24.2.2013 9:49 30312]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\drivers\ssudbus.sys [24.2.2013 9:50 83168]
S3 pcouffin;Low level access layer for CD devices;c:\windows\system32\Drivers\pcouffin.sys --> c:\windows\system32\Drivers\pcouffin.sys [?]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [24.2.2013 9:49 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [24.2.2013 9:49 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [24.2.2013 9:49 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [24.2.2013 9:49 114280]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\drivers\ssudmdm.sys [24.2.2013 9:50 181344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-23 13:16 1150280 ----a-w- c:\program files\Google\Chrome\Application\33.0.1750.117\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-27 15:12]
.
2014-02-25 c:\windows\Tasks\User_Feed_Synchronization-{FBCB0C67-730A-46E3-8BF5-A72B65838E34}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
2014-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-23 13:14]
.
2014-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2014-02-23 13:14]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.centrum.cz/#utm_source=icq&utm_medium=generic
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: E&xportovat do aplikace Microsoft Office Excel - d:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\
FF - prefs.js: browser.search.selectedEngine - Ask Web Search
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=4BECD9CC-01BF-4C13-9E20-3161B90776B1&n=780b8a9e&ind=2014022302&p2=^AYY^xdm067^YYA^cz&si=flvrunner&searchfor=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-AppleSyncNotifier - c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
MSConfigStartUp-APSDaemon - c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
MSConfigStartUp-CanonMyPrinter - c:\program files\Canon\MyPrinter\BJMyPrt.exe
MSConfigStartUp-iTunesHelper - c:\program files\iTunes\iTunesHelper.exe
MSConfigStartUp-NVMixerTray - c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
MSConfigStartUp-QuickTime Task - c:\program files\QuickTime\qttask.exe
MSConfigStartUp-snpstd - c:\windows\vsnpstd.exe
MSConfigStartUp-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
AddRemove-01_Simmental - d:\program files\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - d:\program files\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - d:\program files\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - d:\program files\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - d:\program files\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - d:\program files\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - d:\program files\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - d:\program files\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - d:\program files\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-25_escape - d:\program files\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-02-25 20:55
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2152)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\program files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
c:\windows\System32\MsPMSPSv.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2014-02-25 20:58:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-25 19:58
ComboFix2.txt 2010-04-11 19:34
.
Před spuštěním: 371 146 752
Po spuštění: 1 141 538 816
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 18B074F4D46A951F4396D8C795E2BBC9
413FC2A0C716421B3158746D63736515

[Márty84]

Najdete tento soubor c:\windows\unvise32qt.exe a otestujte ho na virustotal a jotti http://forum.viry.cz/viewtopic.php?f=29&t=5846 Vysledky sem zkopirujte, nebo dejte odkaz.

Stejnym zpusobem otestujte i tyto soubory
c:\windows\system32\qttask.exe
c:\windows\system32\IJRMF.exe

[rogerfedex]

NAŠLO MI TO DVĚ HAVĚTI !!!!!


Název souboru: unvise32qt.exe
Stav:
Test dokončen. 0 z 23 programů nalezlo škodlivý kód.
Test proveden: Út 25 úno 2014 22:24:58 (CET) Trvalý odkaz



Podrobné informace
Velikost souboru: 86016 bajtů
Typ souboru: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: 23a458e8eb269a71a29ada0cb3e22e65
SHA1: ed89dac3cc37f2d47f2df0824965a1bac8f4638f


Tento soubor již byl jednou otestován. Výsledek předchozího testu je zobrazen níže.


Název souboru: qttask.exe
Stav:
Test dokončen. 1 z 23 programů nalezlo škodlivý kód.
Test proveden: So 4 led 2014 02:44:38 (CET) Trvalý odkaz



Podrobné informace
Velikost souboru: 28672 bajtů
Typ souboru: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: 4961601fdc07cf7b4f86986a715662bd
SHA1: d93681764bc831237a3538413f2ec6fba96c5df2




Výsledky
[Lavasoft Ad-Aware]
2014-01-04 Žádný nález
[Fortinet]
2014-01-03 Žádný nález
[Agnitum]
2014-01-03 Žádný nález
[Frisk F-Prot Antivirus]
2014-01-04 Žádný nález
[ArcaVir]
2014-01-03 Žádný nález
[F-Secure Anti-Virus]
2014-01-03 Žádný nález
[Avast! antivirus]
2014-01-03 Žádný nález
[G DATA]
2014-01-04 Žádný nález
[Grisoft AVG Anti-Virus]
2014-01-03 Žádný nález
[Ikarus]
2014-01-03 Žádný nález
[Avira AntiVir]
2014-01-03 Žádný nález
[Kaspersky Anti-Virus]
2014-01-04 Žádný nález
[Softwin BitDefender]
2014-01-04 Žádný nález
[Panda Antivirus]
2014-01-03 Žádný nález
[ClamAV]
2014-01-02 PUA.Win32.Packer.Armadillo-70
[Quick Heal]
2014-01-03 Žádný nález
[CPsecure]
2014-01-03 Žádný nález
[Sophos]
2014-01-04 Žádný nález
[Dr.Web]
2014-01-04 Žádný nález
[Trend Micro Antivirus]
2014-01-02 Žádný nález
[MicroWorld eScan]
2014-01-04 Žádný nález
[VirusBlokAda VBA32]
2014-01-03 Žádný nález

Výsledky
[Lavasoft Ad-Aware]
2014-02-25 Žádný nález
[Fortinet]
2014-02-24 Žádný nález
[Agnitum]
2014-02-25 Žádný nález
[Frisk F-Prot Antivirus]
2014-02-25 Žádný nález
[ArcaVir]
2014-02-25 Žádný nález
[F-Secure Anti-Virus]
2014-02-25 Žádný nález
[Avast! antivirus]
2014-02-25 Žádný nález
[G DATA]
2014-02-25 Žádný nález
[Grisoft AVG Anti-Virus]
2014-02-25 Žádný nález
[Ikarus]
2014-02-25 Žádný nález
[Avira AntiVir]
2014-02-25 Žádný nález
[Kaspersky Anti-Virus]
2014-02-25 Žádný nález
[Softwin BitDefender]
2014-02-25 Žádný nález
[Panda Antivirus]
2014-02-25 Žádný nález
[ClamAV]
2014-02-25 Žádný nález
[Quick Heal]
2014-02-25 Žádný nález
[CPsecure]
2014-02-25 Žádný nález
[Sophos]
2014-02-25 Žádný nález
[Dr.Web]
2014-02-25 Žádný nález
[Trend Micro Antivirus]
2014-02-24 Žádný nález
[MicroWorld eScan]
2014-02-25 Žádný nález
[VirusBlokAda VBA32]
2014-02-25 Žádný nález
[ESET]
2014-02-25 Žádný nález


Název souboru: IJRMF.exe
Stav:
Test dokončen. 0 z 23 programů nalezlo škodlivý kód.
Test proveden: Út 25 úno 2014 22:29:48 (CET) Trvalý odkaz



Podrobné informace
Velikost souboru: 38224 bajtů
Typ souboru: PE32 executable (GUI) Intel 80386, for MS Windows
MD5: cb1f04109a42abbbc8a3ce672d33512c
SHA1: 400820371e548077d3bd23094c93130ccba31d1f




Výsledky
[Lavasoft Ad-Aware]
2014-02-25 Žádný nález
[Fortinet]
2014-02-24 Žádný nález
[Agnitum]
2014-02-25 Žádný nález
[Frisk F-Prot Antivirus]
2014-02-25 Žádný nález
[ArcaVir]
2014-02-25 Žádný nález
[F-Secure Anti-Virus]
2014-02-25 Žádný nález
[Avast! antivirus]
2014-02-25 Žádný nález
[G DATA]
2014-02-25 Žádný nález
[Grisoft AVG Anti-Virus]
2014-02-25 Žádný nález
[Ikarus]
2014-02-25 Žádný nález
[Avira AntiVir]
2014-02-25 Žádný nález
[Kaspersky Anti-Virus]
2014-02-25 Žádný nález
[Softwin BitDefender]
2014-02-25 Žádný nález
[Panda Antivirus]
2014-02-25 Žádný nález
[ClamAV]
2014-02-25 Žádný nález
[Quick Heal]
2014-02-25 Žádný nález
[CPsecure]
2014-02-25 Žádný nález
[Sophos]
2014-02-25 Žádný nález
[Dr.Web]
2014-02-25 Žádný nález
[Trend Micro Antivirus]
2014-02-24 Žádný nález
[MicroWorld eScan]
2014-02-25 Žádný nález
[VirusBlokAda VBA32]
2014-02-25 Žádný nález
[ESET]
2014-02-25 Žádný nález





Community
Statistics
Dokumentace
FAQ
About

Join our community
Sign in

Česky

VirusTotal
SHA256: e55f951b5951b2299e2ad562a97cf3d7dd5ccc869ef9144d4bdb87df37cf2a30
File name: unvise32qt.exe
Detection ratio: 0 / 48
Analysis date: 2014-02-25 21:32:11 UTC ( 1 minuta ago )
0
0
Probably harmless! There are strong indicators suggesting that this file is safe to use.

Analysis
File detail
Additional information
Comments
Votes

Antivirus Result Update
AVG 20140225
Ad-Aware 20140225
Agnitum 20140225
AhnLab-V3 20140225
AntiVir 20140225
Antiy-AVL 20140225
Avast 20140225
Baidu-International 20140225
BitDefender 20140225
Bkav 20140225
ByteHero 20140225
CAT-QuickHeal 20140225
CMC 20140220
ClamAV 20140225
Commtouch 20140225
Comodo 20140225
DrWeb 20140225
ESET-NOD32 20140225
Emsisoft 20140225
F-Prot 20140225
F-Secure 20140225
Fortinet 20140225
GData 20140225
Ikarus 20140225
Jiangmin 20140225
K7AntiVirus 20140225
K7GW 20140225
Kaspersky 20140225
Kingsoft 20140225
Malwarebytes 20140225
McAfee 20140225
McAfee-GW-Edition 20140225
MicroWorld-eScan 20140225
Microsoft 20140225
NANO-Antivirus 20140225
Norman 20140224
Panda 20140225
Qihoo-360 20140220
Rising 20140225
SUPERAntiSpyware 20140225
Sophos 20140225
Symantec 20140225
TheHacker 20140224
TotalDefense 20140225
TrendMicro 20140225
TrendMicro-HouseCall 20140225
VBA32 20140225
VIPRE 20140225
ViRobot 20140225
nProtect 20140225
Blog | Twitter | contact@virustotal.com | Google groups | ToS | Privacy policy





Community
Statistics
Dokumentace
FAQ
About

Join our community
Sign in

Česky

VirusTotal
SHA256: 8f4e313e0dd5e88372cdcb3da1c0acfb71f28d353448d3f87723f876efbedb29
File name: IJRMF.exe
Detection ratio: 1 / 50
Analysis date: 2014-02-25 21:34:07 UTC ( 3 minuty ago )
0
0

Analysis
File detail
Additional information
Comments
Votes

Antivirus Result Update
NANO-Antivirus Trojan.Win32.Huhk.ctkowg 20140225
AVG 20140225
Ad-Aware 20140225
Agnitum 20140225
AhnLab-V3 20140225
AntiVir 20140225
Antiy-AVL 20140225
Avast 20140225
Baidu-International 20140225
BitDefender 20140225
Bkav 20140225
ByteHero 20140225
CAT-QuickHeal 20140225
CMC 20140220
ClamAV 20140225
Commtouch 20140225
Comodo 20140225
DrWeb 20140225
ESET-NOD32 20140225
Emsisoft 20140225
F-Prot 20140225
F-Secure 20140225
Fortinet 20140225
GData 20140225
Ikarus 20140225
Jiangmin 20140225
K7AntiVirus 20140225
K7GW 20140225
Kaspersky 20140225
Kingsoft 20140225
Malwarebytes 20140225
McAfee 20140225
McAfee-GW-Edition 20140225
MicroWorld-eScan 20140225
Microsoft 20140225
Norman 20140224
Panda 20140225
Qihoo-360 20140225
Rising 20140225
SUPERAntiSpyware 20140225
Sophos 20140225
Symantec 20140225
TheHacker 20140224
TotalDefense 20140225
TrendMicro 20140225
TrendMicro-HouseCall 20140225
VBA32 20140225
VIPRE 20140225
ViRobot 20140225
nProtect 20140225
Blog | Twitter | contact@virustotal.com | Google groups | ToS | Privacy policy




Community
Statistics
Dokumentace
FAQ
About

Join our community
Sign in

Česky

VirusTotal
SHA256: 468095e47587ac0705264d2510d07a3433203e596e042d6377a6191bcbea1635
File name: qttask.exe
Detection ratio: 0 / 50
Analysis date: 2014-02-25 21:38:50 UTC ( 0 minut ago )
0
0
Probably harmless! There are strong indicators suggesting that this file is safe to use.

Analysis
File detail
Additional information
Comments
Votes

Antivirus Result Update
AVG 20140225
Ad-Aware 20140225
Agnitum 20140225
AhnLab-V3 20140225
AntiVir 20140225
Antiy-AVL 20140225
Avast 20140225
Baidu-International 20140225
BitDefender 20140225
Bkav 20140225
ByteHero 20140225
CAT-QuickHeal 20140225
CMC 20140220
ClamAV 20140225
Commtouch 20140225
Comodo 20140225
DrWeb 20140225
ESET-NOD32 20140225
Emsisoft 20140225
F-Prot 20140225
F-Secure 20140225
Fortinet 20140225
GData 20140225
Ikarus 20140225
Jiangmin 20140225
K7AntiVirus 20140225
K7GW 20140225
Kaspersky 20140225
Kingsoft 20140225
Malwarebytes 20140225
McAfee 20140225
McAfee-GW-Edition 20140225
MicroWorld-eScan 20140225
Microsoft 20140225
NANO-Antivirus 20140225
Norman 20140224
Panda 20140225
Qihoo-360 20140225
Rising 20140225
SUPERAntiSpyware 20140225
Sophos 20140225
Symantec 20140225
TheHacker 20140224
TotalDefense 20140225
TrendMicro 20140225
TrendMicro-HouseCall 20140225
VBA32 20140225
VIPRE 20140225
ViRobot 20140225
nProtect 20140225
Blog | Twitter | contact@virustotal.com | Google groups | ToS | Privacy policy

[Márty84]

Dejte novy log z RSIT

[rogerfedex]

Marty84, měl bych dotaz:
Ty dva soubory co maji v sobě nějakou havet mazat nebudeme?

Jinak po tom combofixu se mne zvysila pamet. KOukam, ze pomalinku, ale pomalinku se opet zahlcuje......

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ruud at 2014-02-26 07:12:04
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 992 MB (4%) free of 25 GB
Total RAM: 511 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:12:40, on 26.2.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\qttask.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
D:\NAZARETH\RSIT.exe
C:\Program Files\trend micro\Ruud.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=generic
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\system32\qttask.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (file missing)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://tw.msi.com.tw/autobios/client/iftwclix.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ESET Service (ekrn) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Firebird Guardian Service (InterBaseGuardian) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibguard.exe (file missing)
O23 - Service: Firebird Server (InterBaseServer) - Unknown owner - C:\Program Files\Borland\InterBase\bin\ibserver.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 6357 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{FBCB0C67-730A-46E3-8BF5-A72B65838E34}.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.tb.ask.com/search/GGmain. ... searchfor="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.70 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.4.1]
"Description"=
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
npdeployJava1.dll
nppdf32.dll
QuickTimePlugin.class
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll

C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\extensions\
8hffxtbr@Allin1Convert_8h.com

C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\
icqplugin-26.xml
icqplugin-31.xml
icqplugin-27.xml
icqplugin-28.xml
icqplugin-29.xml
icqplugin-30.xml
icqplugin-35.xml
icqplugin-32.xml
icqplugin-33.xml
icqplugin-34.xml
icqplugin-45.xml
icqplugin-36.xml
icqplugin-37.xml
icqplugin-38.xml
icqplugin-39.xml
icqplugin-40.xml
icqplugin-41.xml
icqplugin-42.xml
icqplugin-43.xml
icqplugin-44.xml
icqplugin-48.xml
icqplugin-46.xml
icqplugin-47.xml
icqplugin-49.xml
icqplugin-52.xml
icqplugin-50.xml
icqplugin-51.xml
icqplugin-73.xml
icqplugin-53.xml
icqplugin-54.xml
icqplugin-55.xml
icqplugin-56.xml
icqplugin-57.xml
icqplugin-58.xml
icqplugin-59.xml
icqplugin-60.xml
icqplugin-61.xml
icqplugin-62.xml
icqplugin-63.xml
icqplugin-64.xml
icqplugin-65.xml
icqplugin-66.xml
icqplugin-67.xml
icqplugin-68.xml
icqplugin-69.xml
icqplugin-70.xml
icqplugin-71.xml
icqplugin-72.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23 72336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2010-06-28 202144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-04-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-04-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2010-06-28 1615256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"QuickTime Task"=C:\WINDOWS\system32\qttask.exe [2014-02-24 28672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS\system32\NvCpl.dll [2005-11-04 7307264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\System32\NvMcTray.dll [2005-11-04 86016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^hp psc 2000 Series.lnk]
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^InterVideo WinCinema Manager.lnk]
D:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Media Key.lnk]
C:\Program Files\Media Key\MagicKey.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^officejet 6100.lnk]
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\System32\muzapp.exe"="C:\WINDOWS\System32\muzapp.exe:*:Enabled:MUZ AOD APP player"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.l3acm"=C:\WINDOWS\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"msacm.lhacm"=lhacm.acm
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-02-25 21:30:48 ----SHD---- C:\Recycled
2014-02-25 20:58:55 ----A---- C:\ComboFix.txt
2014-02-25 20:41:36 ----RASHD---- C:\cmdcons
2014-02-25 20:39:35 ----D---- C:\WINDOWS\erdnt
2014-02-24 22:11:52 ----A---- C:\WINDOWS\unvise32qt.exe
2014-02-24 22:11:51 ----A---- C:\WINDOWS\system32\qttask.exe
2014-02-24 22:11:24 ----D---- C:\WINDOWS\system32\QuickTime
2014-02-24 21:15:16 ----D---- C:\Program Files\Apple Software Update
2014-02-24 21:14:05 ----N---- C:\WINDOWS\system32\IJRMF.exe
2014-02-24 19:59:33 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys.bak
2014-02-24 19:59:33 ----A---- C:\WINDOWS\system32\drivers\ssadmdfl.sys.bak
2014-02-24 19:59:33 ----A---- C:\WINDOWS\system32\drivers\ssadcmnt.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\WudfRd.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\WudfPf.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\streamip.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\stream.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\StarOpen.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\ssadwhnt.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\ssadwh.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\ssadcm.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\sr.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys.bak
2014-02-24 19:59:32 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\udfs.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\termdd.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\tdi.sys.bak
2014-02-24 19:59:31 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\vga.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\usbohci.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys.bak
2014-02-24 19:59:30 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\SONYPVU1.SYS.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\npfs.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\mqac.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\http.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\HPZius12.sys.bak
2014-02-24 19:59:29 ----A---- C:\WINDOWS\system32\drivers\HPZipr12.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\ssudmdm.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\scsiport.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\Pclepci.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\pciide.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\hidir.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\hamachi.sys.bak
2014-02-24 19:59:28 ----A---- C:\WINDOWS\system32\drivers\dmio.sys.bak
2014-02-24 19:59:27 ----A---- C:\WINDOWS\system32\drivers\ssudbus.sys.bak
2014-02-24 19:59:27 ----A---- C:\WINDOWS\system32\drivers\NVENET.sys.bak
2014-02-24 19:59:27 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys.bak
2014-02-24 19:59:26 ----A---- C:\WINDOWS\system32\drivers\pfmodnt.sys.bak
2014-02-24 19:59:26 ----A---- C:\WINDOWS\system32\drivers\pci.sys.bak
2014-02-24 19:59:26 ----A---- C:\WINDOWS\system32\drivers\haP16v2k.sys.bak
2014-02-24 19:59:26 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys.bak
2014-02-24 19:59:26 ----A---- C:\WINDOWS\system32\drivers\Fasttx2k.sys.bak
2014-02-24 19:59:25 ----A---- C:\WINDOWS\system32\drivers\emupia2k.sys.bak
2014-02-24 19:59:25 ----A---- C:\WINDOWS\system32\drivers\ctsfm2k.sys.bak
2014-02-24 19:59:25 ----A---- C:\WINDOWS\system32\drivers\ctprxy2k.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\swenum.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\nwrdr.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\amdagp.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\agpcpq.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\agp440.sys.bak
2014-02-24 19:59:24 ----A---- C:\WINDOWS\system32\drivers\acpi.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\pcmcia.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1tuxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1ttxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1snxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1rvxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1raxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1pdxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1mdxx.sys.bak
2014-02-24 19:59:23 ----A---- C:\WINDOWS\system32\drivers\ati1btxx.sys.bak
2014-02-24 19:59:22 ----A---- C:\WINDOWS\system32\drivers\vgauti.sys.bak
2014-02-24 19:59:22 ----A---- C:\WINDOWS\system32\drivers\ati2mtaa.sys.bak
2014-02-24 19:59:22 ----A---- C:\WINDOWS\system32\drivers\ati1xsxx.sys.bak
2014-02-24 19:59:22 ----A---- C:\WINDOWS\system32\drivers\ati1xbxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinttxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinsnxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinrvxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinraxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinpdxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\atinbtxx.sys.bak
2014-02-24 19:59:21 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\bthport.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\bthmodem.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\atinxsxx.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\atinxbxx.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\atintuxx.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys.bak
2014-02-24 19:59:20 ----A---- C:\WINDOWS\system32\drivers\afd.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\bthusb.sys.bak
2014-02-24 19:59:19 ----A---- C:\WINDOWS\system32\drivers\bthprint.sys.bak
2014-02-24 19:59:18 ----A---- C:\WINDOWS\system32\drivers\hsfcxts2.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\mtlmnt5.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys.bak
2014-02-24 19:59:17 ----A---- C:\WINDOWS\system32\drivers\ctoss2k.sys.bak
2014-02-24 19:59:16 ----A---- C:\WINDOWS\system32\drivers\mtlstrm.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\recagent.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\ntmtlfax.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\mutohpen.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\mtxparhm.sys.bak
2014-02-24 19:59:15 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys.bak
2014-02-24 19:59:14 ----A---- C:\WINDOWS\system32\drivers\srv.sys.bak
2014-02-24 19:59:14 ----A---- C:\WINDOWS\system32\drivers\s3gnbm.sys.bak
2014-02-24 19:59:14 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys.bak
2014-02-24 19:59:13 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys.bak
2014-02-24 19:59:13 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys.bak
2014-02-24 19:59:13 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys.bak
2014-02-24 19:59:13 ----A---- C:\WINDOWS\system32\drivers\hpzid412.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\usbd.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\smbali.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\slwdmsup.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\slnthal.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\slntamr.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\slnt7554.sys.bak
2014-02-24 19:59:12 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys.bak
2014-02-24 19:59:11 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys.bak
2014-02-24 19:59:11 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys.bak
2014-02-24 19:59:11 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys.bak
2014-02-24 19:59:11 ----A---- C:\WINDOWS\system32\drivers\irbus.sys.bak
2014-02-24 19:59:10 ----A---- C:\WINDOWS\system32\drivers\wadv11nt.sys.bak
2014-02-24 19:59:10 ----A---- C:\WINDOWS\system32\drivers\wadv09nt.sys.bak
2014-02-24 19:59:10 ----A---- C:\WINDOWS\system32\drivers\wadv08nt.sys.bak
2014-02-24 19:59:10 ----A---- C:\WINDOWS\system32\drivers\wadv07nt.sys.bak
2014-02-24 19:59:10 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\watv10nt.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\watv06nt.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\audstub.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\atmarpc.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\arp1394.sys.bak
2014-02-24 19:59:09 ----A---- C:\WINDOWS\system32\drivers\1394bus.sys.bak
2014-02-24 19:59:08 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys.bak
2014-02-24 19:59:08 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys.bak
2014-02-24 19:59:08 ----A---- C:\WINDOWS\system32\drivers\dmboot.sys.bak
2014-02-24 19:59:08 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\update.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\nvarm.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\nvapu.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\mpe.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\imagesrv.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\fips.sys.bak
2014-02-24 19:59:07 ----A---- C:\WINDOWS\system32\drivers\ctaud2k.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\wacompen.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\sisagp.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\nv_agp.SYS.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\mstee.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\msfs.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\mf.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys.bak
2014-02-24 19:59:06 ----A---- C:\WINDOWS\system32\drivers\bthpan.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\netbt.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\netbios.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\imapi.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys.bak
2014-02-24 19:59:05 ----A---- C:\WINDOWS\system32\drivers\bridge.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\nmnt.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\ndis.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\crusoe.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\atmlane.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\atapi.sys.bak
2014-02-24 19:59:04 ----A---- C:\WINDOWS\system32\drivers\alim1541.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\tape.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\p3.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys.bak
2014-02-24 19:59:03 ----A---- C:\WINDOWS\system32\drivers\drmk.sys.bak
2014-02-24 19:59:02 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys.bak
2014-02-24 19:59:02 ----A---- C:\WINDOWS\system32\drivers\nvmcp.sys.bak
2014-02-24 19:59:02 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys.bak
2014-02-24 19:59:01 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys.bak
2014-02-24 19:59:01 ----A---- C:\WINDOWS\system32\drivers\ohci1394.sys.bak
2014-02-24 19:59:01 ----A---- C:\WINDOWS\system32\drivers\kbfilter.sys.bak
2014-02-24 19:59:01 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\processr.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\portcls.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\nwlnkipx.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys.bak
2014-02-24 19:59:00 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\usbcamd2.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\gameenum.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys.bak
2014-02-24 19:58:59 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\ws2ifsl.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\vdmindvd.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\usbcamd.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\redbook.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\oprghdlr.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\mnmdd.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\irenum.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\imagedrv.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\fsvga.sys.bak
2014-02-24 19:58:58 ----A---- C:\WINDOWS\system32\drivers\acpiec.sys.bak
2014-02-24 19:58:57 ----A---- C:\WINDOWS\system32\drivers\tsbvcap.sys.bak
2014-02-24 19:58:57 ----A---- C:\WINDOWS\system32\drivers\tosdvd.sys.bak
2014-02-24 19:58:57 ----A---- C:\WINDOWS\system32\drivers\ssadbus.sys.bak
2014-02-24 19:58:57 ----A---- C:\WINDOWS\system32\drivers\serenum.sys.bak
2014-02-24 19:58:56 ----A---- C:\WINDOWS\system32\drivers\smclib.sys.bak
2014-02-24 19:58:56 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys.bak
2014-02-24 19:58:55 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys.bak
2014-02-24 19:58:54 ----A---- C:\WINDOWS\system32\drivers\RMCast.sys.bak
2014-02-24 19:58:53 ----A---- C:\WINDOWS\system32\drivers\serial.sys.bak
2014-02-24 19:58:53 ----A---- C:\WINDOWS\system32\drivers\riodrv.sys.bak
2014-02-24 19:58:53 ----A---- C:\WINDOWS\system32\drivers\rio8drv.sys.bak
2014-02-24 19:58:52 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys.bak
2014-02-24 19:58:52 ----A---- C:\WINDOWS\system32\drivers\rawwan.sys.bak
2014-02-24 19:58:52 ----A---- C:\WINDOWS\system32\drivers\nwlnkspx.sys.bak
2014-02-24 19:58:52 ----A---- C:\WINDOWS\system32\drivers\nwlnknb.sys.bak
2014-02-24 19:58:51 ----A---- C:\WINDOWS\system32\drivers\nwlnkfwd.sys.bak
2014-02-24 19:58:51 ----A---- C:\WINDOWS\system32\drivers\nwlnkflt.sys.bak
2014-02-24 19:58:51 ----A---- C:\WINDOWS\system32\drivers\nikedrv.sys.bak
2014-02-24 19:58:51 ----A---- C:\WINDOWS\system32\drivers\ks.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\mcd.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\ipfltdrv.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\disk.sys.bak
2014-02-24 19:58:50 ----A---- C:\WINDOWS\system32\drivers\cpqdap01.sys.bak
2014-02-24 19:58:49 ----A---- C:\WINDOWS\system32\drivers\cinemst2.sys.bak
2014-02-24 19:58:49 ----A---- C:\WINDOWS\system32\drivers\cbidf2k.sys.bak
2014-02-24 19:58:48 ----A---- C:\WINDOWS\system32\drivers\atmuni.sys.bak
2014-02-24 19:58:47 ----A---- C:\WINDOWS\system32\drivers\atmepvc.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\slip.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\parvdm.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\nvax.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\fdc.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\dxgthk.sys.bak
2014-02-24 19:58:46 ----A---- C:\WINDOWS\system32\drivers\amdk6.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\rdpcdd.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\null.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\fs_rec.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\cdaudio.sys.bak
2014-02-24 19:58:45 ----A---- C:\WINDOWS\system32\drivers\beep.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\raspti.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\ptilink.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\psched.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\msdv.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\mbam.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys.bak
2014-02-24 19:58:44 ----A---- C:\WINDOWS\system32\drivers\dxg.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\splitter.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\parport.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\nic1394.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\modem.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys.bak
2014-02-24 19:58:43 ----A---- C:\WINDOWS\system32\drivers\aec.sys.bak
2014-02-24 19:58:42 ----A---- C:\WINDOWS\system32\drivers\wmilib.sys.bak
2014-02-24 19:58:42 ----A---- C:\WINDOWS\system32\drivers\ftdisk.sys.bak
2014-02-24 19:58:42 ----A---- C:\WINDOWS\system32\drivers\dmload.sys.bak
2014-02-24 19:58:42 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys.bak
2014-02-24 19:58:42 ----A---- C:\WINDOWS\system32\drivers\ctac32k.sys.bak
2014-02-24 19:50:12 ----D---- C:\FOUND.003
2014-02-24 07:14:45 ----D---- C:\WINDOWS\snack
2014-02-23 19:27:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-02-23 19:27:10 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-02-23 17:41:01 ----D---- C:\AdwCleaner
2014-02-23 14:25:54 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2014-02-23 14:19:05 ----D---- C:\Program Files\CCleaner
2014-02-23 13:17:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2014-02-23 13:17:14 ----D---- C:\Program Files\ESET
2014-02-23 13:08:12 ----ASH---- C:\pagefile.sys
2014-02-21 18:09:41 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2014-02-17 19:47:26 ----RSD---- C:\WINDOWS\assembly
2014-02-16 10:16:54 ----HD---- C:\WINDOWS\$NtUninstallKB2916036$
2014-02-16 10:13:57 ----HD---- C:\WINDOWS\$NtUninstallKB2862152$
2014-02-16 09:36:30 ----HD---- C:\WINDOWS\$NtUninstallKB2893984$
2014-02-16 09:07:48 ----HD---- C:\WINDOWS\$NtUninstallKB2914368$
2014-02-15 10:46:49 ----D---- C:\Program Files\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2014-02-25 20:55:22 ----A---- C:\WINDOWS\system.ini
2014-02-25 20:41:42 ----RASH---- C:\boot.ini
2014-02-25 20:40:26 ----N---- C:\WINDOWS\SchedLgU.Txt
2014-02-22 16:11:18 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-02-21 17:53:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-16 17:19:16 ----A---- C:\WINDOWS\NeroDigital.ini
2014-02-16 09:36:52 ----A---- C:\WINDOWS\system32\MRT.exe
2014-02-06 04:38:36 ----A---- C:\WINDOWS\system32\wininet.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\occache.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\mstime.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\mshtmled.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\licmgr10.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\iepeers.dll
2014-02-06 00:08:34 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\url.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-02-06 00:08:34 ----A---- C:\WINDOWS\system32\corpol.dll
2014-02-05 23:24:06 ----N---- C:\WINDOWS\system32\ie4uinit.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fasttx2k;fasttx2k; C:\WINDOWS\System32\DRIVERS\fasttx2k.sys [2003-06-10 156672]
R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\System32\DRIVERS\nv_agp.sys [2003-03-19 18688]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2002-07-11 12856]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2002-12-05 12032]
R2 PfModNT;PfModNT; \??\C:\WINDOWS\System32\PfModNT.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 catchme;catchme; \??\C:\DOCUME~1\Ruud\LOCALS~1\Temp\catchme.sys []
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2003-04-11 502160]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2003-03-25 144736]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2003-04-03 850880]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-04-08 29696]
R3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENET.sys [2002-11-27 80896]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-04-08 282880]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2003-03-25 190176]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\WINDOWS\System32\Drivers\ssadadb.sys [2013-01-31 30312]
S3 BtAudio;Bluetooth Audio; C:\WINDOWS\system32\DRIVERS\btaudio.sys []
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys []
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2003-03-27 287920]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2013-01-31 83168]
S3 genmcmn;Scroll Mouse Driver; C:\WINDOWS\System32\DRIVERS\gmfiltr.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2006-01-25 10345]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
S3 mbr;mbr; \??\C:\DOCUME~1\Ruud\LOCALS~1\Temp\mbr.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\pcouffin.sys []
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2002-12-05 5888]
S3 sermouse;Ovladač sériové myši; C:\WINDOWS\system32\DRIVERS\sermouse.sys [2001-10-24 17664]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 snpstd;VideoCAM Trek; C:\WINDOWS\system32\DRIVERS\snpstd.sys []
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2013-01-31 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2013-01-31 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2013-01-31 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2013-01-31 114280]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2013-01-31 181344]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2009-02-10 116104]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-04-04 161664]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\System32\MsPMSPSv.exe [2000-06-26 53520]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-23 116648]
S2 InterBaseGuardian;Firebird Guardian Service; C:\Program Files\Borland\InterBase\bin\ibguard.exe []
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22 257928]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-02-23 116648]
S3 InterBaseServer;Firebird Server; C:\Program Files\Borland\InterBase\bin\ibserver.exe []
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-03-09 65795]

-----------------EOF-----------------

[Márty84]

Budeme.

Nevim jak se vam to povedlo, ale vy uz jste zase stihnul natahat do pc to, co uz jsme mazali.

Zopakujte krok s ADWCleanerem. Rovnou Clean a dejte sem jeho log

[rogerfedex]

Fakt jsem z toho zoufaly...
Vsak jsem chodil jen na idnes a na seznam na email.
nic drastickeho a je to zase vse zpet..

# AdwCleaner v3.019 - Report created 26/02/2014 at 20:38:31
# Updated 17/02/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Ruud - ML
# Running from : D:\NAZARETH\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\Allin1Convert_8h
File Deleted : C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\invalidprefs.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Ask Web Search");
Line Deleted : user_pref("browser.search.selectedEngine", "Ask Web Search");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":220475038,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":220475039,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=4BECD9CC-01BF-4C13-9E20-3161B90776B1&n=780b8a9e&p2=^AYY^xdm067^YYA^cz&si=flvru[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "5.79.3.25578");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=4BECD9CC-01BF-4C13-9E20-3161B90776B1&n=780b8a9e&p2=^AYY^xdm067^YYA^cz&si=flvrunner");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014022302");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm067^YYA^cz");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://allin1convert.dl.tb.ask.com/install_pixels.jhtml?partner=^AYY^xdm067^YYA^cz&coId=c3d9104986ac49f5afc345768d347ec5&ca[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "4BECD9CC-01BF-4C13-9E20-3161B90776B1");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1393443336012");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "5.79.3.25578");
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
Line Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=4BECD9CC-01BF-4C13-9E20-3161B90776B1&n=780b8a9e&ind=2014022302&p2=^AYY^xdm067^YYA^cz&si=flvrunner&searchfor=");

-\\ Google Chrome v33.0.1750.117

[ File : C:\Documents and Settings\Ruud\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [16193 octets] - [23/02/2014 17:41:06]
AdwCleaner[R1].txt - [16254 octets] - [23/02/2014 17:48:19]
AdwCleaner[R2].txt - [16203 octets] - [23/02/2014 19:10:58]
AdwCleaner[S0].txt - [16427 octets] - [23/02/2014 19:12:33]
AdwCleaner[R3].txt - [6013 octets] - [26/02/2014 20:37:01]
AdwCleaner[S1].txt - [6022 octets] - [26/02/2014 20:38:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6082 octets] ##########

[Márty84]

Dejte novy log z RSIT

a k tomu

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

[rogerfedex]

OTL Extras logfile created on: 27.2.2014 19:39:02 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Ruud\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,49 Mb Total Physical Memory | 158,46 Mb Available Physical Memory | 30,98% Memory free
1,93 Gb Paging File | 1,65 Gb Available in Paging File | 85,35% Paging File free
Paging file location(s): C:\pagefile.sys 1500 1500 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,40 Gb Total Space | 0,93 Gb Free Space | 3,82% Space Free | Partition Type: FAT32
Drive D: | 87,37 Gb Total Space | 62,92 Gb Free Space | 72,02% Space Free | Partition Type: NTFS

Computer Name: ML | User Name: Ruud | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\ICQ7.5\ICQ.exe" = C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\WINDOWS\System32\muzapp.exe" = C:\WINDOWS\System32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{1111706F-666A-4037-7777-210328764D10}" = JavaFX 2.1.0
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
"{26A24AE4-039D-4CA4-87B4-2F83217004FF}" = Java(TM) 7 Update 4
"{30BB4D60-81DB-11D5-BB77-00400536ABAC}" = OLYMPUS CAMEDIA Master 4.2
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{90110405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0405-0000-0000000FF1CE}" = Sada Compatibility Pack pro systém Office 2007
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9BFFB382-0B2C-11D6-AB3E-000102B0F79A}" = Readiris 7.5
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-AB0000000001}" = Adobe Reader XI (11.0.05) - Czech
"{B1BFDF6B-3C03-46fe-B5D7-BABB0063D8E0}" = pdfforge Toolbar v4.1
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"BSPlayer1" = BSPlayer
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner
"DVD Shrink_is1" = DVD Shrink 3.2
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"Google Chrome" = Google Chrome
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 27.0.1 (x86 cs)" = Mozilla Firefox 27.0.1 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Audio Driver" = NVIDIA Audio Driver
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nForce Drivers" = NVIDIA nForce Drivers
"QuickTime" = QuickTime
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SiSoftware Sandra Professional 2004.SP2b (Win32 x86)_is1" = SiSoftware Sandra Professional 2004.SP2b (Win32 x86)
"Synacast Plug-in" = Synacast Plug-in 1.1.0.1
"Totalcmd" = Total Commander (Remove or Repair)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Toolbar" = Yahoo! Toolbar

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 26.2.2014 15:22:00 | Computer Name = ML | Source = MsiInstaller | ID = 1024
Description = Aktualizaci Adobe Reader XI (11.0.06) produktu Adobe Reader XI (11.0.06)
- Czech nebylo možné nainstalovat. Kód chyby: 1603. Instalační služba systému Windows
může vytvořit soubor protokolu s informacemi, které usnadní řešení potíží při instalaci
softwaru. Další informace naleznete na webu na adrese http://go.microsoft.com/fwlink/?LinkId=23127

Error - 26.2.2014 15:26:01 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 26.2.2014 16:26:12 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 26.2.2014 17:26:02 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 26.2.2014 18:26:02 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 26.2.2014 19:26:00 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 26.2.2014 20:26:00 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 27.2.2014 13:26:01 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 27.2.2014 14:26:00 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

Error - 27.2.2014 15:31:35 | Computer Name = ML | Source = MsiInstaller | ID = 10005
Description = Product: Google Update Helper -- The installer has encountered an
unexpected error installing this package. This may indicate a problem with this
package. The error code is 2721. The arguments are: , ,

[ System Events ]
Error - 25.2.2014 12:14:33 | Computer Name = ML | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 192.168.100.11 pro síťovou kartu s adresou 000C765748E2
byla serverem DHCP 192.168.100.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 25.2.2014 13:29:22 | Computer Name = ML | Source = Cdrom | ID = 262151
Description = Zařízení \Device\CdRom0 má chybný blok.

Error - 25.2.2014 15:55:10 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba ESET Service neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 25.2.2014 15:55:10 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba Firebird Guardian Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 26.2.2014 15:20:48 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba ESET Service neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 26.2.2014 15:20:48 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba Firebird Guardian Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 26.2.2014 15:39:47 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba ESET Service neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 26.2.2014 15:39:47 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba Firebird Guardian Service neuspěla při spuštění v důsledku
následující chyby: %%2

Error - 27.2.2014 12:59:33 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba ESET Service neuspěla při spuštění v důsledku následující chyby:
%%2

Error - 27.2.2014 12:59:33 | Computer Name = ML | Source = Service Control Manager | ID = 7000
Description = Služba Firebird Guardian Service neuspěla při spuštění v důsledku
následující chyby: %%2


< End of report >

OTL logfile created on: 27.2.2014 19:39:02 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Ruud\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

511,49 Mb Total Physical Memory | 158,46 Mb Available Physical Memory | 30,98% Memory free
1,93 Gb Paging File | 1,65 Gb Available in Paging File | 85,35% Paging File free
Paging file location(s): C:\pagefile.sys 1500 1500 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,40 Gb Total Space | 0,93 Gb Free Space | 3,82% Space Free | Partition Type: FAT32
Drive D: | 87,37 Gb Total Space | 62,92 Gb Free Space | 72,02% Space Free | Partition Type: NTFS

Computer Name: ML | User Name: Ruud | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.02.27 19:37:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ruud\Plocha\OTL.exe
PRC - [2014.02.24 22:11:52 | 000,028,672 | ---- | M] () -- C:\WINDOWS\system32\qttask.exe
PRC - [2014.02.15 10:48:18 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.04.04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
PRC - [2009.02.10 18:01:50 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2014.02.24 22:11:52 | 000,028,672 | ---- | M] () -- C:\WINDOWS\system32\qttask.exe
MOD - [2014.02.15 10:48:08 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2009.02.10 18:01:50 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
MOD - [2005.10.10 14:21:24 | 000,311,296 | ---- | M] () -- C:\Program Files\WinRAR\rarlng.dll
MOD - [2005.10.07 15:05:32 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2001.10.28 16:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll


========== Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibserver.exe -- (InterBaseServer)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibguard.exe -- (InterBaseGuardian)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)
SRV - File not found [Auto | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2014.02.22 16:12:30 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014.02.15 10:48:12 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.04.04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009.02.10 18:01:50 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2003.03.09 21:31:02 | 000,065,795 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\usbaapl.sys -- (USBAAPL)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\snpstd.sys -- (snpstd)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\pcouffin.sys -- (pcouffin)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\INSTALL\GMSIPCI.SYS -- (GMSIPCI)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\DRIVERS\gmfiltr.sys -- (genmcmn)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Ruud\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btwdndis.sys -- (BTWDNDIS)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btport.sys -- (BTDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btaudio.sys -- (BtAudio)
DRV - [2013.04.04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013.01.31 09:19:50 | 000,181,344 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013.01.31 09:19:50 | 000,083,168 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2013.01.31 09:19:34 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2013.01.31 09:19:34 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2013.01.31 09:19:34 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd)
DRV - [2013.01.31 09:19:34 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb)
DRV - [2013.01.31 09:19:34 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2008.04.13 20:45:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006.07.24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2006.01.25 00:06:46 | 000,010,345 | ---- | M] (Applied Networking Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2003.06.10 12:25:30 | 000,156,672 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Fasttx2k.sys -- (fasttx2k)
DRV - [2003.04.11 06:32:36 | 000,502,160 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k)
DRV - [2003.04.08 01:28:00 | 000,282,880 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce)
DRV - [2003.04.08 01:28:00 | 000,029,696 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax)
DRV - [2003.04.03 03:59:46 | 000,850,880 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2003.03.27 05:58:56 | 000,287,920 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2003.03.25 13:13:30 | 000,144,736 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2003.03.25 13:12:54 | 000,190,176 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2003.03.19 09:51:00 | 000,018,688 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nv_agp.SYS -- (nv_agp)
DRV - [2003.03.05 12:19:28 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\pfmodnt.sys -- (PfModNT)
DRV - [2002.11.27 14:52:00 | 000,080,896 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENET.sys -- (NVENET)
DRV - [2002.07.11 12:00:44 | 000,012,856 | ---- | M] (WayTech Development, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\kbfilter.sys -- (kbfilter)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7


IE - HKU\.DEFAULT\..\URLSearchHook: - No CLSID value found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://www.google.com
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://www.google.com
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=generic
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={ ... orm=IE8SRC
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\SearchScopes\{62D4C888-90C0-416D-B3B8-AA784A4D97DF}: "URL" = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... FA_csCZ430
IE - HKU\S-1-5-21-299502267-57989841-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Ask Web Search"
FF - prefs.js..browser.search.selectedEngine: "Ask Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://home.tb.ask.com/index.jhtml?ptb= ... =flvrunner"
FF - prefs.js..extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev: "true"
FF - prefs.js..extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb: "Ask Web Search"
FF - prefs.js..extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev: "true"
FF - prefs.js..extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb: "Ask Web Search"
FF - prefs.js..browser.startup.homepage: "https://www.seznam.cz/"
FF - prefs.js..browser.startup.homepage: "true"
FF - prefs.js..browser.startup.homepage: "http://home.tb.ask.com/index.jhtml?ptb= ... =flvrunner"
FF - prefs.js..keyword.URL: "http://search.tb.ask.com/search/GGmain. ... searchfor="
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014.02.15 10:46:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014.02.15 10:46:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2008.08.27 22:46:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Extensions
[2006.09.07 00:50:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\extensions
[2014.02.23 14:24:08 | 000,000,000 | ---D | M] (Allin1Convert) -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\extensions\8hffxtbr@Allin1Convert_8h.com
[2010.07.20 23:36:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-26.xml
[2010.10.29 16:56:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-31.xml
[2010.07.21 17:30:20 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-27.xml
[2010.08.12 18:26:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-28.xml
[2010.09.13 14:15:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-29.xml
[2010.10.17 17:49:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-30.xml
[2011.03.17 23:37:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-35.xml
[2010.10.30 08:38:44 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-32.xml
[2011.03.01 21:22:46 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-33.xml
[2011.03.03 13:39:22 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-34.xml
[2011.09.08 07:26:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-45.xml
[2011.03.24 22:25:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-36.xml
[2011.03.24 22:34:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-37.xml
[2011.03.25 14:35:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-38.xml
[2011.06.26 17:57:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-39.xml
[2011.06.27 07:16:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-40.xml
[2011.08.19 12:31:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-41.xml
[2011.08.19 12:32:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-42.xml
[2011.08.19 19:51:38 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-43.xml
[2011.09.07 22:21:00 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-44.xml
[2011.11.10 06:45:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-48.xml
[2011.10.03 16:40:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-46.xml
[2011.10.03 21:26:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-47.xml
[2011.11.10 14:33:16 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-49.xml
[2012.02.12 08:31:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-52.xml
[2012.01.10 16:14:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-50.xml
[2012.01.11 07:13:54 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-51.xml
[2013.08.15 22:12:56 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-73.xml
[2012.02.12 14:10:28 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-53.xml
[2012.03.18 15:33:48 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-54.xml
[2012.03.18 16:57:28 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-55.xml
[2012.04.26 19:57:12 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-56.xml
[2012.04.26 22:52:52 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-57.xml
[2012.07.19 11:42:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-58.xml
[2012.07.19 22:18:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-59.xml
[2012.08.31 11:37:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-60.xml
[2012.09.01 08:20:34 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-61.xml
[2012.10.15 10:03:36 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-62.xml
[2012.10.15 10:22:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-63.xml
[2012.12.07 07:44:30 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-64.xml
[2012.12.07 07:48:32 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-65.xml
[2013.01.19 08:22:40 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-66.xml
[2013.01.19 08:39:40 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-67.xml
[2013.02.23 04:57:10 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-68.xml
[2013.02.23 05:10:22 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-69.xml
[2013.04.01 14:39:58 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-70.xml
[2013.04.12 16:23:50 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-71.xml
[2013.07.03 07:42:06 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla\Firefox\Profiles\7k89gfpr.default\searchplugins\icqplugin-72.xml
[2014.02.15 10:46:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014.02.15 10:46:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014.02.15 10:46:52 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.10.18 12:17:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.06.21 16:52:34 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

========== Chrome ==========

CHR - plugin: Error reading preferences file
CHR - Extension: Bookmark Manager = C:\Documents and Settings\Ruud\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\

O1 HOSTS File: ([2014.02.25 20:55:06 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Podpora odkazu pro Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [QuickTime Task] C:\WINDOWS\system32\qttask.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-299502267-57989841-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML File not found
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - D:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe File not found
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe File not found
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe File not found
O9 - Extra Button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe File not found
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdat ... /opuc3.cab (Office Update Installation Engine)
O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} http://tw.msi.com.tw/autobios/client/iftwclix.cab (InstallFromTheWeb ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/C ... 2630787037 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.46.172.36 213.46.172.37
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DF92755A-7783-4CDD-84E1-11BB8E4BED37}: DhcpNameServer = 213.46.172.36 213.46.172.37
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Ruud\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ruud\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\WINDOWS\System32\lhacm.acm (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.02.27 19:37:39 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ruud\Plocha\OTL.exe
[2014.02.25 21:30:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Ruud\Recent
[2014.02.25 21:30:48 | 000,000,000 | -HSD | C] -- C:\Recycled
[2014.02.25 20:41:36 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2014.02.25 20:39:52 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Obrázky
[2014.02.25 20:39:51 | 000,000,000 | R--D | C] -- d:\Documents and Settings\Ruud\Dokumenty\Filmy
[2014.02.25 20:39:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2014.02.25 17:20:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ruud\Plocha\06-2008 Chata Jevišovka
[2014.02.24 22:11:52 | 000,086,016 | ---- | C] (MindVision) -- C:\WINDOWS\unvise32qt.exe
[2014.02.24 22:11:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\QuickTime
[2014.02.24 22:11:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\QuickTime
[2014.02.24 21:15:16 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2014.02.24 21:14:05 | 000,038,224 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\IJRMF.exe
[2014.02.24 19:50:12 | 000,000,000 | ---D | C] -- C:\FOUND.003
[2014.02.24 07:14:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\snack
[2014.02.24 07:10:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ruud\Plocha\RK_Quarantine
[2014.02.23 19:27:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
[2014.02.23 19:27:10 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2014.02.23 19:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014.02.23 19:26:33 | 010,285,040 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Ruud\Plocha\mbam-setup-1.75.0.1300.exe
[2014.02.23 17:41:01 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.02.23 14:19:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2014.02.23 14:19:05 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014.02.23 14:18:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
[2014.02.23 13:31:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ruud\Plocha\Speclean
[2014.02.23 13:17:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2014.02.23 13:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2014.02.23 12:15:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Ruud\IECompatCache
[2014.02.21 18:09:41 | 017,858,952 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2014.02.17 19:47:26 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2014.02.15 10:46:49 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2008.05.11 08:52:12 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Ruud\Data aplikací\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[rogerfedex]

[2014.02.27 19:45:14 | 000,000,420 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{FBCB0C67-730A-46E3-8BF5-A72B65838E34}.job
[2014.02.27 19:43:10 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.02.27 19:37:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ruud\Plocha\OTL.exe
[2014.02.27 19:26:02 | 000,000,936 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.02.27 19:09:02 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.02.27 17:59:26 | 000,000,932 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.02.27 17:59:16 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.02.27 01:59:06 | 000,028,548 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,028,548 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,025,824 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,025,824 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,000,292 | ---- | M] () -- C:\WINDOWS\System32\DVCStateBkp-{00000001-00000000-00000008-00001102-00000004-10071102}.dat
[2014.02.27 01:59:06 | 000,000,292 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000001-00000000-00000008-00001102-00000004-10071102}.dat
[2014.02.25 20:41:42 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2014.02.25 20:09:28 | 000,049,664 | ---- | M] () -- C:\Documents and Settings\Ruud\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.02.24 22:13:34 | 000,010,861 | ---- | M] () -- C:\WINDOWS\System32\QuickTime.qtp
[2014.02.24 22:11:52 | 000,028,672 | ---- | M] () -- C:\WINDOWS\System32\qttask.exe
[2014.02.24 22:11:28 | 000,000,630 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\QuickTime Player.lnk
[2014.02.24 19:59:34 | 000,114,280 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadserd.sys.dump
[2014.02.24 19:59:34 | 000,082,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\WudfRd.sys.bak
[2014.02.24 19:59:34 | 000,077,568 | ---- | M] () -- C:\WINDOWS\System32\drivers\WudfPf.sys.bak
[2014.02.24 19:59:34 | 000,073,344 | ---- | M] () -- C:\WINDOWS\System32\drivers\sr.sys.bak
[2014.02.24 19:59:34 | 000,060,800 | ---- | M] () -- C:\WINDOWS\System32\drivers\sysaudio.sys.bak
[2014.02.24 19:59:34 | 000,056,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\swmidi.sys.bak
[2014.02.24 19:59:34 | 000,049,408 | ---- | M] () -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2014.02.24 19:59:34 | 000,046,464 | ---- | M] () -- C:\WINDOWS\System32\drivers\gagp30kx.sys.bak
[2014.02.24 19:59:34 | 000,032,768 | ---- | M] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys.dump
[2014.02.24 19:59:34 | 000,032,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2014.02.24 19:59:34 | 000,030,312 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadadb.sys.dump
[2014.02.24 19:59:34 | 000,015,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\streamip.sys.bak
[2014.02.24 19:59:34 | 000,012,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\usb8023x.sys.bak
[2014.02.24 19:59:34 | 000,012,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadmdfl.sys.bak
[2014.02.24 19:59:34 | 000,011,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffdisk.sys.bak
[2014.02.24 19:59:34 | 000,010,472 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadcmnt.sys.bak
[2014.02.24 19:59:34 | 000,010,472 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadcm.sys.bak
[2014.02.24 19:59:34 | 000,010,344 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadwhnt.sys.bak
[2014.02.24 19:59:34 | 000,010,344 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadwh.sys.bak
[2014.02.24 19:59:34 | 000,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys.bak
[2014.02.24 19:59:32 | 000,361,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\tcpip.sys.bak
[2014.02.24 19:59:32 | 000,092,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\ksecdd.sys.bak
[2014.02.24 19:59:32 | 000,081,664 | ---- | M] () -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.02.24 19:59:32 | 000,066,048 | ---- | M] () -- C:\WINDOWS\System32\drivers\udfs.sys.bak
[2014.02.24 19:59:32 | 000,059,520 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbhub.sys.bak
[2014.02.24 19:59:32 | 000,052,480 | ---- | M] () -- C:\WINDOWS\System32\drivers\volsnap.sys.bak
[2014.02.24 19:59:32 | 000,044,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\uagp35.sys.bak
[2014.02.24 19:59:32 | 000,040,840 | ---- | M] () -- C:\WINDOWS\System32\drivers\termdd.sys.bak
[2014.02.24 19:59:32 | 000,030,336 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbehci.sys.bak
[2014.02.24 19:59:32 | 000,026,368 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbstor.sys.bak
[2014.02.24 19:59:32 | 000,021,896 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdtcp.sys.bak
[2014.02.24 19:59:32 | 000,020,992 | ---- | M] () -- C:\WINDOWS\System32\drivers\vga.sys.bak
[2014.02.24 19:59:32 | 000,019,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\wstcodec.sys.bak
[2014.02.24 19:59:32 | 000,019,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.02.24 19:59:32 | 000,017,152 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbohci.sys.bak
[2014.02.24 19:59:32 | 000,015,872 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.02.24 19:59:32 | 000,012,040 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdpipe.sys.bak
[2014.02.24 19:59:30 | 000,265,728 | ---- | M] () -- C:\WINDOWS\System32\drivers\http.sys.bak
[2014.02.24 19:59:30 | 000,181,344 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssudmdm.sys.bak
[2014.02.24 19:59:30 | 000,172,416 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmixer.sys.bak
[2014.02.24 19:59:30 | 000,153,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmio.sys.bak
[2014.02.24 19:59:30 | 000,096,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2014.02.24 19:59:30 | 000,092,544 | ---- | M] () -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.02.24 19:59:30 | 000,030,848 | ---- | M] () -- C:\WINDOWS\System32\drivers\npfs.sys.bak
[2014.02.24 19:59:30 | 000,025,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbprint.sys.bak
[2014.02.24 19:59:30 | 000,025,344 | ---- | M] () -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.02.24 19:59:30 | 000,019,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidir.sys.bak
[2014.02.24 19:59:30 | 000,017,664 | ---- | M] () -- C:\WINDOWS\System32\drivers\sermouse.sys.bak
[2014.02.24 19:59:30 | 000,014,165 | ---- | M] () -- C:\WINDOWS\System32\drivers\Pclepci.sys.bak
[2014.02.24 19:59:30 | 000,012,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\mouhid.sys.bak
[2014.02.24 19:59:30 | 000,010,345 | ---- | M] () -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2014.02.24 19:59:30 | 000,003,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\pciide.sys.bak
[2014.02.24 19:59:28 | 000,287,920 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctdvda2k.sys.dump
[2014.02.24 19:59:28 | 000,156,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\Fasttx2k.sys.bak
[2014.02.24 19:59:28 | 000,142,752 | ---- | M] () -- C:\WINDOWS\System32\drivers\haP16v2k.sys.bak
[2014.02.24 19:59:28 | 000,083,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssudbus.sys.bak
[2014.02.24 19:59:28 | 000,080,896 | ---- | M] () -- C:\WINDOWS\System32\drivers\NVENET.sys.bak
[2014.02.24 19:59:28 | 000,068,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\pci.sys.bak
[2014.02.24 19:59:28 | 000,020,480 | ---- | M] () -- C:\WINDOWS\System32\drivers\flpydisk.sys.bak
[2014.02.24 19:59:28 | 000,015,840 | ---- | M] () -- C:\WINDOWS\System32\drivers\pfmodnt.sys.bak
[2014.02.24 19:59:28 | 000,014,336 | ---- | M] () -- C:\WINDOWS\System32\drivers\asyncmac.sys.bak
[2014.02.24 19:59:26 | 000,850,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\ha10kx2k.sys.dump
[2014.02.24 19:59:26 | 000,196,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdpdr.sys.bak
[2014.02.24 19:59:26 | 000,188,288 | ---- | M] () -- C:\WINDOWS\System32\drivers\acpi.sys.bak
[2014.02.24 19:59:26 | 000,163,584 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwrdr.sys.bak
[2014.02.24 19:59:26 | 000,144,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\emupia2k.sys.bak
[2014.02.24 19:59:26 | 000,135,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctsfm2k.sys.bak
[2014.02.24 19:59:26 | 000,044,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\agpcpq.sys.bak
[2014.02.24 19:59:26 | 000,042,368 | ---- | M] () -- C:\WINDOWS\System32\drivers\agp440.sys.bak
[2014.02.24 19:59:26 | 000,006,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctprxy2k.sys.bak
[2014.02.24 19:59:26 | 000,004,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\swenum.sys.bak
[2014.02.24 19:59:24 | 000,701,440 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2014.02.24 19:59:24 | 000,326,912 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati2mtaa.sys.bak
[2014.02.24 19:59:24 | 000,120,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\pcmcia.sys.bak
[2014.02.24 19:59:24 | 000,063,663 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1rvxx.sys.bak
[2014.02.24 19:59:24 | 000,056,623 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1btxx.sys.bak
[2014.02.24 19:59:24 | 000,036,463 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.02.24 19:59:24 | 000,036,076 | ---- | M] () -- C:\WINDOWS\System32\drivers\vgauti.sys.bak
[2014.02.24 19:59:24 | 000,034,735 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.02.24 19:59:24 | 000,030,671 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.02.24 19:59:24 | 000,029,455 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.02.24 19:59:24 | 000,026,367 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.02.24 19:59:24 | 000,021,343 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.02.24 19:59:24 | 000,012,047 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.02.24 19:59:24 | 000,011,615 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.02.24 19:59:22 | 000,272,128 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthport.sys.bak
[2014.02.24 19:59:22 | 000,138,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\afd.sys.bak
[2014.02.24 19:59:22 | 000,104,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys.bak
[2014.02.24 19:59:22 | 000,073,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\atintuxx.sys.bak
[2014.02.24 19:59:22 | 000,063,488 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys.bak
[2014.02.24 19:59:22 | 000,057,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys.bak
[2014.02.24 19:59:22 | 000,052,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinraxx.sys.bak
[2014.02.24 19:59:22 | 000,041,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\amdk7.sys.bak
[2014.02.24 19:59:22 | 000,037,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthmodem.sys.bak
[2014.02.24 19:59:22 | 000,036,480 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.02.24 19:59:22 | 000,031,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.02.24 19:59:22 | 000,028,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.02.24 19:59:22 | 000,017,024 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthenum.sys.bak
[2014.02.24 19:59:22 | 000,014,336 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.02.24 19:59:22 | 000,013,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.02.24 19:59:22 | 000,013,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.02.24 19:59:20 | 000,129,792 | ---- | M] () -- C:\WINDOWS\System32\drivers\fltmgr.sys.bak
[2014.02.24 19:59:20 | 000,034,560 | ---- | M] () -- C:\WINDOWS\System32\drivers\wanarp.sys.bak
[2014.02.24 19:59:20 | 000,025,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidbth.sys.bak
[2014.02.24 19:59:20 | 000,018,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthusb.sys.bak
[2014.02.24 19:59:18 | 001,309,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtlstrm.sys.bak
[2014.02.24 19:59:18 | 000,190,176 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctoss2k.sys.bak
[2014.02.24 19:59:18 | 000,126,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtlmnt5.sys.bak
[2014.02.24 19:59:18 | 000,040,192 | ---- | M] () -- C:\WINDOWS\System32\drivers\intelppm.sys.bak
[2014.02.24 19:59:18 | 000,036,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\ip6fw.sys.bak
[2014.02.24 19:59:16 | 000,452,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtxparhm.sys.bak
[2014.02.24 19:59:16 | 000,357,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\srv.sys.bak
[2014.02.24 19:59:16 | 000,180,360 | ---- | M] () -- C:\WINDOWS\System32\drivers\ntmtlfax.sys.bak
[2014.02.24 19:59:16 | 000,166,912 | ---- | M] () -- C:\WINDOWS\System32\drivers\s3gnbm.sys.bak
[2014.02.24 19:59:16 | 000,059,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\rfcomm.sys.bak
[2014.02.24 19:59:16 | 000,030,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.02.24 19:59:16 | 000,015,488 | ---- | M] () -- C:\WINDOWS\System32\drivers\mssmbios.sys.bak
[2014.02.24 19:59:16 | 000,013,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.02.24 19:59:16 | 000,012,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.02.24 19:59:14 | 000,404,990 | ---- | M] () -- C:\WINDOWS\System32\drivers\slntamr.sys.bak
[2014.02.24 19:59:14 | 000,129,535 | ---- | M] () -- C:\WINDOWS\System32\drivers\slnt7554.sys.bak
[2014.02.24 19:59:14 | 000,095,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\slnthal.sys.bak
[2014.02.24 19:59:14 | 000,079,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\sdbus.sys.bak
[2014.02.24 19:59:14 | 000,025,088 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.02.24 19:59:14 | 000,013,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.02.24 19:59:14 | 000,012,288 | ---- | M] () -- C:\WINDOWS\System32\drivers\tunmp.sys.bak
[2014.02.24 19:59:14 | 000,011,008 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffp_sd.sys.bak
[2014.02.24 19:59:14 | 000,010,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffp_mmc.sys.bak
[2014.02.24 19:59:14 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.02.24 19:59:14 | 000,005,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.02.24 19:59:12 | 000,123,008 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbvideo.sys.bak
[2014.02.24 19:59:12 | 000,046,848 | ---- | M] () -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.02.24 19:59:12 | 000,042,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\viaagp.sys.bak
[2014.02.24 19:59:12 | 000,012,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.02.24 19:59:12 | 000,011,935 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.02.24 19:59:12 | 000,011,871 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.02.24 19:59:12 | 000,011,807 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.02.24 19:59:12 | 000,011,295 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.02.24 19:59:10 | 000,800,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmboot.sys.bak
[2014.02.24 19:59:10 | 000,502,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctaud2k.sys.bak
[2014.02.24 19:59:10 | 000,060,800 | ---- | M] () -- C:\WINDOWS\System32\drivers\arp1394.sys.bak
[2014.02.24 19:59:10 | 000,059,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmarpc.sys.bak
[2014.02.24 19:59:10 | 000,053,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\1394bus.sys.bak
[2014.02.24 19:59:10 | 000,025,471 | ---- | M] () -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.02.24 19:59:10 | 000,022,271 | ---- | M] () -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.02.24 19:59:10 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\bdasup.sys.bak
[2014.02.24 19:59:10 | 000,006,400 | ---- | M] () -- C:\WINDOWS\System32\drivers\enum1394.sys.bak
[2014.02.24 19:59:10 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\audstub.sys.bak
[2014.02.24 19:59:08 | 000,384,768 | ---- | M] () -- C:\WINDOWS\System32\drivers\update.sys.bak
[2014.02.24 19:59:08 | 000,282,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvapu.sys.bak
[2014.02.24 19:59:08 | 000,152,832 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipnat.sys.bak
[2014.02.24 19:59:08 | 000,125,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2014.02.24 19:59:08 | 000,101,120 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthpan.sys.bak
[2014.02.24 19:59:08 | 000,085,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\nabtsfec.sys.bak
[2014.02.24 19:59:08 | 000,075,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipsec.sys.bak
[2014.02.24 19:59:08 | 000,066,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvarm.sys.bak
[2014.02.24 19:59:08 | 000,063,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2014.02.24 19:59:08 | 000,044,544 | ---- | M] () -- C:\WINDOWS\System32\drivers\fips.sys.bak
[2014.02.24 19:59:08 | 000,037,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\isapnp.sys.bak
[2014.02.24 19:59:08 | 000,036,864 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.02.24 19:59:08 | 000,035,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\msgpc.sys.bak
[2014.02.24 19:59:08 | 000,023,040 | ---- | M] () -- C:\WINDOWS\System32\drivers\mouclass.sys.bak
[2014.02.24 19:59:08 | 000,019,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\msfs.sys.bak
[2014.02.24 19:59:08 | 000,018,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\nv_agp.SYS.bak
[2014.02.24 19:59:08 | 000,015,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\mpe.sys.bak
[2014.02.24 19:59:08 | 000,014,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbscan.sys.bak
[2014.02.24 19:59:08 | 000,014,208 | ---- | M] () -- C:\WINDOWS\System32\drivers\wacompen.sys.bak
[2014.02.24 19:59:08 | 000,007,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\mskssrv.sys.bak
[2014.02.24 19:59:08 | 000,005,504 | ---- | M] () -- C:\WINDOWS\System32\drivers\mstee.sys.bak
[2014.02.24 19:59:08 | 000,005,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\mspclock.sys.bak
[2014.02.24 19:59:06 | 000,226,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2014.02.24 19:59:06 | 000,182,656 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndis.sys.bak
[2014.02.24 19:59:06 | 000,162,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\netbt.sys.bak
[2014.02.24 19:59:06 | 000,096,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\atapi.sys.bak
[2014.02.24 19:59:06 | 000,071,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\bridge.sys.bak
[2014.02.24 19:59:06 | 000,055,808 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2014.02.24 19:59:06 | 000,042,752 | ---- | M] () -- C:\WINDOWS\System32\drivers\alim1541.sys.bak
[2014.02.24 19:59:06 | 000,042,112 | ---- | M] () -- C:\WINDOWS\System32\drivers\imapi.sys.bak
[2014.02.24 19:59:06 | 000,040,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndproxy.sys.bak
[2014.02.24 19:59:06 | 000,040,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\crusoe.sys.bak
[2014.02.24 19:59:06 | 000,040,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2014.02.24 19:59:06 | 000,034,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\netbios.sys.bak
[2014.02.24 19:59:04 | 000,853,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvmcp.sys.bak
[2014.02.24 19:59:04 | 000,574,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\ntfs.sys.bak
[2014.02.24 19:59:04 | 000,143,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\fastfat.sys.bak
[2014.02.24 19:59:04 | 000,060,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.02.24 19:59:04 | 000,048,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspptp.sys.bak
[2014.02.24 19:59:04 | 000,046,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\p3.sys.bak
[2014.02.24 19:59:04 | 000,019,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\partmgr.sys.bak
[2014.02.24 19:59:04 | 000,014,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.02.24 19:59:04 | 000,010,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndistapi.sys.bak
[2014.02.24 19:59:04 | 000,010,368 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidusb.sys.bak
[2014.02.24 19:59:04 | 000,002,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\drmkaud.sys.bak
[2014.02.24 19:59:02 | 000,146,048 | ---- | M] () -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.02.24 19:59:02 | 000,088,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2014.02.24 19:59:02 | 000,061,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\ohci1394.sys.bak
[2014.02.24 19:59:02 | 000,051,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\rasl2tp.sys.bak
[2014.02.24 19:59:02 | 000,041,472 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspppoe.sys.bak
[2014.02.24 19:59:02 | 000,039,680 | ---- | M] () -- C:\WINDOWS\System32\drivers\processr.sys.bak
[2014.02.24 19:59:02 | 000,025,728 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.02.24 19:59:02 | 000,024,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.02.24 19:59:02 | 000,017,024 | ---- | M] () -- C:\WINDOWS\System32\drivers\ccdecode.sys.bak
[2014.02.24 19:59:02 | 000,014,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndisuio.sys.bak
[2014.02.24 19:59:02 | 000,012,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\kbfilter.sys.bak
[2014.02.24 19:59:02 | 000,004,992 | ---- | M] () -- C:\WINDOWS\System32\drivers\mspqm.sys.bak
[2014.02.24 19:59:00 | 000,180,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\mrxdav.sys.bak
[2014.02.24 19:59:00 | 000,175,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdbss.sys.bak
[2014.02.24 19:59:00 | 000,063,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\cdfs.sys.bak
[2014.02.24 19:59:00 | 000,058,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\redbook.sys.bak
[2014.02.24 19:59:00 | 000,058,112 | ---- | M] () -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.02.24 19:59:00 | 000,049,536 | ---- | M] () -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.02.24 19:59:00 | 000,032,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbccgp.sys.bak
[2014.02.24 19:59:00 | 000,025,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.02.24 19:59:00 | 000,012,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.02.24 19:59:00 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\ws2ifsl.sys.bak
[2014.02.24 19:59:00 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\acpiec.sys.bak
[2014.02.24 19:59:00 | 000,011,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\irenum.sys.bak
[2014.02.24 19:59:00 | 000,010,624 | ---- | M] () -- C:\WINDOWS\System32\drivers\gameenum.sys.bak
[2014.02.24 19:59:00 | 000,005,504 | ---- | M] () -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2014.02.24 19:59:00 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\mnmdd.sys.bak
[2014.02.24 19:59:00 | 000,003,456 | ---- | M] () -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.02.24 19:58:58 | 000,456,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\mrxsmb.sys.bak
[2014.02.24 19:58:58 | 000,121,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadbus.sys.bak
[2014.02.24 19:58:58 | 000,051,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.02.24 19:58:58 | 000,021,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.02.24 19:58:58 | 000,015,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\serenum.sys.bak
[2014.02.24 19:58:58 | 000,014,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.02.24 19:58:58 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\rootmdm.sys.bak
[2014.02.24 19:58:56 | 000,203,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\RMCast.sys.bak
[2014.02.24 19:58:54 | 000,064,256 | ---- | M] () -- C:\WINDOWS\System32\drivers\serial.sys.bak
[2014.02.24 19:58:54 | 000,063,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.02.24 19:58:54 | 000,055,936 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.02.24 19:58:54 | 000,034,432 | ---- | M] () -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.02.24 19:58:54 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.02.24 19:58:54 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.02.24 19:58:52 | 000,141,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2014.02.24 19:58:52 | 000,052,096 | ---- | M] () -- C:\WINDOWS\System32\drivers\i8042prt.sys.bak
[2014.02.24 19:58:52 | 000,036,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\disk.sys.bak
[2014.02.24 19:58:52 | 000,032,896 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys.bak
[2014.02.24 19:58:52 | 000,032,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkfwd.sys.bak
[2014.02.24 19:58:52 | 000,012,416 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkflt.sys.bak
[2014.02.24 19:58:52 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.02.24 19:58:52 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.02.24 19:58:52 | 000,010,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.02.24 19:58:52 | 000,007,680 | ---- | M] () -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.02.24 19:58:50 | 000,352,256 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.02.24 19:58:50 | 000,262,528 | ---- | M] () -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.02.24 19:58:50 | 000,031,360 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.02.24 19:58:50 | 000,013,952 | ---- | M] () -- C:\WINDOWS\System32\drivers\cbidf2k.sys.bak
[2014.02.24 19:58:48 | 000,041,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2014.02.24 19:58:48 | 000,029,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvax.sys.bak
[2014.02.24 19:58:48 | 000,027,392 | ---- | M] () -- C:\WINDOWS\System32\drivers\fdc.sys.bak
[2014.02.24 19:58:48 | 000,011,392 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfloppy.sys.bak
[2014.02.24 19:58:48 | 000,011,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\slip.sys.bak
[2014.02.24 19:58:48 | 000,006,784 | ---- | M] () -- C:\WINDOWS\System32\drivers\parvdm.sys.bak
[2014.02.24 19:58:48 | 000,003,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.02.24 19:58:46 | 000,091,520 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndiswan.sys.bak
[2014.02.24 19:58:46 | 000,071,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.02.24 19:58:46 | 000,051,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\msdv.sys.bak
[2014.02.24 19:58:46 | 000,030,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.02.24 19:58:46 | 000,024,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\kbdclass.sys.bak
[2014.02.24 19:58:46 | 000,022,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\mbam.sys.bak
[2014.02.24 19:58:46 | 000,018,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\cdaudio.sys.bak
[2014.02.24 19:58:46 | 000,016,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspti.sys.bak
[2014.02.24 19:58:46 | 000,010,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndisip.sys.bak
[2014.02.24 19:58:46 | 000,008,832 | ---- | M] () -- C:\WINDOWS\System32\drivers\rasacd.sys.bak
[2014.02.24 19:58:46 | 000,007,936 | ---- | M] () -- C:\WINDOWS\System32\drivers\fs_rec.sys.bak
[2014.02.24 19:58:46 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdpcdd.sys.bak
[2014.02.24 19:58:46 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\beep.sys.bak
[2014.02.24 19:58:46 | 000,002,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\null.sys.bak
[2014.02.24 19:58:44 | 000,142,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\aec.sys.bak
[2014.02.24 19:58:44 | 000,134,656 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctac32k.sys.bak
[2014.02.24 19:58:44 | 000,125,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\ftdisk.sys.bak
[2014.02.24 19:58:44 | 000,080,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\parport.sys.bak
[2014.02.24 19:58:44 | 000,061,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\nic1394.sys.bak
[2014.02.24 19:58:44 | 000,030,080 | ---- | M] () -- C:\WINDOWS\System32\drivers\modem.sys.bak
[2014.02.24 19:58:44 | 000,020,864 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipinip.sys.bak
[2014.02.24 19:58:44 | 000,014,208 | ---- | M] () -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.02.24 19:58:44 | 000,006,272 | ---- | M] () -- C:\WINDOWS\System32\drivers\splitter.sys.bak
[2014.02.24 19:58:44 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmload.sys.bak
[2014.02.24 19:58:44 | 000,004,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.02.24 07:15:28 | 000,012,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadmdfl.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\WudfRd.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\WudfPf.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\wdfldr.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usb8023x.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadwhnt.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadwh.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadcmnt.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadcm.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\sr.sys.dump
[2014.02.24 07:15:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\gagp30kx.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\wdmaud.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\volsnap.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\videoprt.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\vga.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbstor.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbohci.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbintel.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbhub.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbehci.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\udfs.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\uagp35.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\termdd.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdtcp.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdpipe.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\tdi.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\tcpip.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\sysaudio.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\swmidi.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\streamip.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\stream.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffdisk.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\wstcodec.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbprint.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssudmdm.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssudbus.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\sonydcam.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\sermouse.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\scsiport.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\Pclepci.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\pciide.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\npfs.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\mqac.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\mouhid.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\ksecdd.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\kmixer.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\http.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidir.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\hamachi.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmio.sys.dump
[2014.02.24 07:15:22 | 000,142,752 | ---- | M] () -- C:\WINDOWS\System32\drivers\haP16v2k.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\pci.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\NVENET.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\flpydisk.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\asyncmac.sys.dump
[2014.02.24 07:15:20 | 000,196,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdpdr.sys.dump
[2014.02.24 07:15:20 | 000,156,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\Fasttx2k.sys.dump
[2014.02.24 07:15:20 | 000,144,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\emupia2k.sys.dump
[2014.02.24 07:15:20 | 000,135,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctsfm2k.sys.dump
[2014.02.24 07:15:20 | 000,015,840 | ---- | M] () -- C:\WINDOWS\System32\drivers\pfmodnt.sys.dump
[2014.02.24 07:15:20 | 000,006,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctprxy2k.sys.dump
[2014.02.24 07:15:18 | 000,188,288 | ---- | M] () -- C:\WINDOWS\System32\drivers\acpi.sys.dump
[2014.02.24 07:15:18 | 000,163,584 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwrdr.sys.dump
[2014.02.24 07:15:18 | 000,044,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\agpcpq.sys.dump
[2014.02.24 07:15:18 | 000,042,368 | ---- | M] () -- C:\WINDOWS\System32\drivers\agp440.sys.dump
[2014.02.24 07:15:18 | 000,004,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\swenum.sys.dump
[2014.02.24 07:15:16 | 000,326,912 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati2mtaa.sys.dump
[2014.02.24 07:15:16 | 000,120,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\pcmcia.sys.dump
[2014.02.24 07:15:16 | 000,063,663 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1rvxx.sys.dump
[2014.02.24 07:15:16 | 000,056,623 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1btxx.sys.dump
[2014.02.24 07:15:16 | 000,036,463 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.dump
[2014.02.24 07:15:16 | 000,036,076 | ---- | M] () -- C:\WINDOWS\System32\drivers\vgauti.sys.dump
[2014.02.24 07:15:16 | 000,034,735 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.dump
[2014.02.24 07:15:16 | 000,030,671 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1raxx.sys.dump
[2014.02.24 07:15:16 | 000,029,455 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.dump
[2014.02.24 07:15:16 | 000,026,367 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1snxx.sys.dump
[2014.02.24 07:15:16 | 000,021,343 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.dump
[2014.02.24 07:15:16 | 000,012,047 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.dump
[2014.02.24 07:15:16 | 000,011,615 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.dump
[2014.02.24 07:15:14 | 000,701,440 | ---- | M] () -- C:\WINDOWS\System32\drivers\ati2mtag.sys.dump
[2014.02.24 07:15:14 | 000,104,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys.dump
[2014.02.24 07:15:14 | 000,073,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\atintuxx.sys.dump
[2014.02.24 07:15:14 | 000,063,488 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys.dump
[2014.02.24 07:15:14 | 000,057,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys.dump
[2014.02.24 07:15:14 | 000,052,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinraxx.sys.dump
[2014.02.24 07:15:14 | 000,041,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\amdk7.sys.dump
[2014.02.24 07:15:14 | 000,037,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthmodem.sys.dump
[2014.02.24 07:15:14 | 000,031,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinxbxx.sys.dump
[2014.02.24 07:15:14 | 000,028,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinsnxx.sys.dump
[2014.02.24 07:15:14 | 000,017,024 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthenum.sys.dump
[2014.02.24 07:15:14 | 000,014,336 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys.dump
[2014.02.24 07:15:14 | 000,013,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinttxx.sys.dump
[2014.02.24 07:15:14 | 000,013,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys.dump
[2014.02.24 07:15:12 | 000,272,128 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthport.sys.dump
[2014.02.24 07:15:12 | 000,138,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\afd.sys.dump
[2014.02.24 07:15:12 | 000,129,792 | ---- | M] () -- C:\WINDOWS\System32\drivers\fltmgr.sys.dump
[2014.02.24 07:15:12 | 000,036,480 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthprint.sys.dump
[2014.02.24 07:15:12 | 000,034,560 | ---- | M] () -- C:\WINDOWS\System32\drivers\wanarp.sys.dump
[2014.02.24 07:15:12 | 000,025,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidbth.sys.dump
[2014.02.24 07:15:12 | 000,018,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthusb.sys.dump
[2014.02.24 07:15:08 | 000,190,176 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctoss2k.sys.dump
[2014.02.24 07:15:08 | 000,126,686 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtlmnt5.sys.dump
[2014.02.24 07:15:08 | 000,040,192 | ---- | M] () -- C:\WINDOWS\System32\drivers\intelppm.sys.dump
[2014.02.24 07:15:08 | 000,036,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\ip6fw.sys.dump
[2014.02.24 07:15:06 | 001,309,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtlstrm.sys.dump
[2014.02.24 07:15:06 | 000,452,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\mtxparhm.sys.dump
[2014.02.24 07:15:06 | 000,180,360 | ---- | M] () -- C:\WINDOWS\System32\drivers\ntmtlfax.sys.dump
[2014.02.24 07:15:06 | 000,166,912 | ---- | M] () -- C:\WINDOWS\System32\drivers\s3gnbm.sys.dump
[2014.02.24 07:15:06 | 000,059,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\rfcomm.sys.dump
[2014.02.24 07:15:06 | 000,030,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\rndismpx.sys.dump
[2014.02.24 07:15:06 | 000,015,488 | ---- | M] () -- C:\WINDOWS\System32\drivers\mssmbios.sys.dump
[2014.02.24 07:15:06 | 000,013,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\recagent.sys.dump
[2014.02.24 07:15:06 | 000,012,672 | ---- | M] () -- C:\WINDOWS\System32\drivers\mutohpen.sys.dump
[2014.02.24 07:15:04 | 000,404,990 | ---- | M] () -- C:\WINDOWS\System32\drivers\slntamr.sys.dump
[2014.02.24 07:15:04 | 000,357,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\srv.sys.dump
[2014.02.24 07:15:04 | 000,129,535 | ---- | M] () -- C:\WINDOWS\System32\drivers\slnt7554.sys.dump
[2014.02.24 07:15:04 | 000,123,008 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbvideo.sys.dump
[2014.02.24 07:15:04 | 000,095,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\slnthal.sys.dump
[2014.02.24 07:15:04 | 000,079,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\sdbus.sys.dump
[2014.02.24 07:15:04 | 000,046,848 | ---- | M] () -- C:\WINDOWS\System32\drivers\irbus.sys.dump
[2014.02.24 07:15:04 | 000,042,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\viaagp.sys.dump
[2014.02.24 07:15:04 | 000,025,471 | ---- | M] () -- C:\WINDOWS\System32\drivers\watv10nt.sys.dump
[2014.02.24 07:15:04 | 000,025,088 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidparse.sys.dump
[2014.02.24 07:15:04 | 000,022,271 | ---- | M] () -- C:\WINDOWS\System32\drivers\watv06nt.sys.dump
[2014.02.24 07:15:04 | 000,013,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\slwdmsup.sys.dump
[2014.02.24 07:15:04 | 000,012,928 | ---- | M] () -- C:\WINDOWS\System32\drivers\usb8023.sys.dump
[2014.02.24 07:15:04 | 000,012,288 | ---- | M] () -- C:\WINDOWS\System32\drivers\tunmp.sys.dump
[2014.02.24 07:15:04 | 000,011,935 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv11nt.sys.dump
[2014.02.24 07:15:04 | 000,011,871 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv09nt.sys.dump
[2014.02.24 07:15:04 | 000,011,807 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv07nt.sys.dump
[2014.02.24 07:15:04 | 000,011,295 | ---- | M] () -- C:\WINDOWS\System32\drivers\wadv08nt.sys.dump
[2014.02.24 07:15:04 | 000,011,008 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffp_sd.sys.dump
[2014.02.24 07:15:04 | 000,010,240 | ---- | M] () -- C:\WINDOWS\System32\drivers\sffp_mmc.sys.dump
[2014.02.24 07:15:04 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\smbali.sys.dump
[2014.02.24 07:15:04 | 000,005,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbd.sys.dump
[2014.02.24 07:15:04 | 000,003,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\audstub.sys.dump
[2014.02.24 07:15:02 | 000,800,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmboot.sys.dump
[2014.02.24 07:15:02 | 000,502,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctaud2k.sys.dump
[2014.02.24 07:15:02 | 000,282,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvapu.sys.dump
[2014.02.24 07:15:02 | 000,066,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvarm.sys.dump
[2014.02.24 07:15:02 | 000,060,800 | ---- | M] () -- C:\WINDOWS\System32\drivers\arp1394.sys.dump
[2014.02.24 07:15:02 | 000,059,904 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmarpc.sys.dump
[2014.02.24 07:15:02 | 000,053,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\1394bus.sys.dump
[2014.02.24 07:15:02 | 000,015,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\mpe.sys.dump
[2014.02.24 07:15:02 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\bdasup.sys.dump
[2014.02.24 07:15:02 | 000,006,400 | ---- | M] () -- C:\WINDOWS\System32\drivers\enum1394.sys.dump
[2014.02.24 07:15:00 | 000,384,768 | ---- | M] () -- C:\WINDOWS\System32\drivers\update.sys.dump
[2014.02.24 07:15:00 | 000,152,832 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipnat.sys.dump
[2014.02.24 07:15:00 | 000,125,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\imagesrv.sys.dump
[2014.02.24 07:15:00 | 000,075,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipsec.sys.dump
[2014.02.24 07:15:00 | 000,063,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\mf.sys.dump
[2014.02.24 07:15:00 | 000,044,544 | ---- | M] () -- C:\WINDOWS\System32\drivers\fips.sys.dump
[2014.02.24 07:15:00 | 000,037,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\isapnp.sys.dump
[2014.02.24 07:15:00 | 000,036,864 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidclass.sys.dump
[2014.02.24 07:15:00 | 000,023,040 | ---- | M] () -- C:\WINDOWS\System32\drivers\mouclass.sys.dump
[2014.02.24 07:15:00 | 000,014,208 | ---- | M] () -- C:\WINDOWS\System32\drivers\wacompen.sys.dump
[2014.02.24 07:14:58 | 000,162,816 | ---- | M] () -- C:\WINDOWS\System32\drivers\netbt.sys.dump
[2014.02.24 07:14:58 | 000,101,120 | ---- | M] () -- C:\WINDOWS\System32\drivers\bthpan.sys.dump
[2014.02.24 07:14:58 | 000,085,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\nabtsfec.sys.dump
[2014.02.24 07:14:58 | 000,071,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\bridge.sys.dump
[2014.02.24 07:14:58 | 000,055,808 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmlane.sys.dump
[2014.02.24 07:14:58 | 000,042,112 | ---- | M] () -- C:\WINDOWS\System32\drivers\imapi.sys.dump
[2014.02.24 07:14:58 | 000,035,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\msgpc.sys.dump
[2014.02.24 07:14:58 | 000,034,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\netbios.sys.dump
[2014.02.24 07:14:58 | 000,019,072 | ---- | M] () -- C:\WINDOWS\System32\drivers\msfs.sys.dump
[2014.02.24 07:14:58 | 000,018,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\nv_agp.SYS.dump
[2014.02.24 07:14:58 | 000,014,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbscan.sys.dump
[2014.02.24 07:14:58 | 000,007,552 | ---- | M] () -- C:\WINDOWS\System32\drivers\mskssrv.sys.dump
[2014.02.24 07:14:58 | 000,005,504 | ---- | M] () -- C:\WINDOWS\System32\drivers\mstee.sys.dump
[2014.02.24 07:14:58 | 000,005,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\mspclock.sys.dump
[2014.02.24 07:14:56 | 000,574,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\ntfs.sys.dump
[2014.02.24 07:14:56 | 000,226,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\tcpip6.sys.dump
[2014.02.24 07:14:56 | 000,182,656 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndis.sys.dump
[2014.02.24 07:14:56 | 000,096,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\atapi.sys.dump
[2014.02.24 07:14:56 | 000,060,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\drmk.sys.dump
[2014.02.24 07:14:56 | 000,048,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspptp.sys.dump
[2014.02.24 07:14:56 | 000,046,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\p3.sys.dump
[2014.02.24 07:14:56 | 000,042,752 | ---- | M] () -- C:\WINDOWS\System32\drivers\alim1541.sys.dump
[2014.02.24 07:14:56 | 000,040,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndproxy.sys.dump
[2014.02.24 07:14:56 | 000,040,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\crusoe.sys.dump
[2014.02.24 07:14:56 | 000,040,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\nmnt.sys.dump
[2014.02.24 07:14:56 | 000,014,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\tape.sys.dump
[2014.02.24 07:14:56 | 000,010,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndistapi.sys.dump
[2014.02.24 07:14:56 | 000,010,368 | ---- | M] () -- C:\WINDOWS\System32\drivers\hidusb.sys.dump
[2014.02.24 07:14:56 | 000,002,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\drmkaud.sys.dump
[2014.02.24 07:14:54 | 000,853,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvmcp.sys.dump
[2014.02.24 07:14:54 | 000,180,608 | ---- | M] () -- C:\WINDOWS\System32\drivers\mrxdav.sys.dump
[2014.02.24 07:14:54 | 000,175,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdbss.sys.dump
[2014.02.24 07:14:54 | 000,146,048 | ---- | M] () -- C:\WINDOWS\System32\drivers\portcls.sys.dump
[2014.02.24 07:14:54 | 000,143,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\fastfat.sys.dump
[2014.02.24 07:14:54 | 000,088,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.dump
[2014.02.24 07:14:54 | 000,063,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\cdfs.sys.dump
[2014.02.24 07:14:54 | 000,061,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\ohci1394.sys.dump
[2014.02.24 07:14:54 | 000,058,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\redbook.sys.dump
[2014.02.24 07:14:54 | 000,051,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\rasl2tp.sys.dump
[2014.02.24 07:14:54 | 000,049,536 | ---- | M] () -- C:\WINDOWS\System32\drivers\classpnp.sys.dump
[2014.02.24 07:14:54 | 000,041,472 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspppoe.sys.dump
[2014.02.24 07:14:54 | 000,039,680 | ---- | M] () -- C:\WINDOWS\System32\drivers\processr.sys.dump
[2014.02.24 07:14:54 | 000,032,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbccgp.sys.dump
[2014.02.24 07:14:54 | 000,025,728 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbcamd2.sys.dump
[2014.02.24 07:14:54 | 000,024,960 | ---- | M] () -- C:\WINDOWS\System32\drivers\pciidex.sys.dump
[2014.02.24 07:14:54 | 000,019,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\partmgr.sys.dump
[2014.02.24 07:14:54 | 000,017,024 | ---- | M] () -- C:\WINDOWS\System32\drivers\ccdecode.sys.dump
[2014.02.24 07:14:54 | 000,014,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndisuio.sys.dump
[2014.02.24 07:14:54 | 000,012,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\kbfilter.sys.dump
[2014.02.24 07:14:54 | 000,010,624 | ---- | M] () -- C:\WINDOWS\System32\drivers\gameenum.sys.dump
[2014.02.24 07:14:54 | 000,004,992 | ---- | M] () -- C:\WINDOWS\System32\drivers\mspqm.sys.dump
[2014.02.24 07:14:52 | 000,456,320 | ---- | M] () -- C:\WINDOWS\System32\drivers\mrxsmb.sys.dump
[2014.02.24 07:14:52 | 000,203,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\RMCast.sys.dump
[2014.02.24 07:14:52 | 000,121,064 | ---- | M] () -- C:\WINDOWS\System32\drivers\ssadbus.sys.dump
[2014.02.24 07:14:52 | 000,064,256 | ---- | M] () -- C:\WINDOWS\System32\drivers\serial.sys.dump
[2014.02.24 07:14:52 | 000,063,232 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnknb.sys.dump
[2014.02.24 07:14:52 | 000,058,112 | ---- | M] () -- C:\WINDOWS\System32\drivers\vdmindvd.sys.dump
[2014.02.24 07:14:52 | 000,055,936 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.dump
[2014.02.24 07:14:52 | 000,051,712 | ---- | M] () -- C:\WINDOWS\System32\drivers\tosdvd.sys.dump
[2014.02.24 07:14:52 | 000,034,432 | ---- | M] () -- C:\WINDOWS\System32\drivers\rawwan.sys.dump
[2014.02.24 07:14:52 | 000,025,600 | ---- | M] () -- C:\WINDOWS\System32\drivers\usbcamd.sys.dump
[2014.02.24 07:14:52 | 000,021,376 | ---- | M] () -- C:\WINDOWS\System32\drivers\tsbvcap.sys.dump
[2014.02.24 07:14:52 | 000,015,744 | ---- | M] () -- C:\WINDOWS\System32\drivers\serenum.sys.dump
[2014.02.24 07:14:52 | 000,014,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\smclib.sys.dump
[2014.02.24 07:14:52 | 000,012,160 | ---- | M] () -- C:\WINDOWS\System32\drivers\fsvga.sys.dump
[2014.02.24 07:14:52 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\ws2ifsl.sys.dump
[2014.02.24 07:14:52 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\riodrv.sys.dump
[2014.02.24 07:14:52 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\rio8drv.sys.dump
[2014.02.24 07:14:52 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\acpiec.sys.dump
[2014.02.24 07:14:52 | 000,011,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\irenum.sys.dump
[2014.02.24 07:14:52 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\rootmdm.sys.dump
[2014.02.24 07:14:52 | 000,005,504 | ---- | M] () -- C:\WINDOWS\System32\drivers\imagedrv.sys.dump
[2014.02.24 07:14:52 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\mnmdd.sys.dump
[2014.02.24 07:14:52 | 000,003,456 | ---- | M] () -- C:\WINDOWS\System32\drivers\oprghdlr.sys.dump
[2014.02.24 07:14:50 | 000,352,256 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmuni.sys.dump
[2014.02.24 07:14:50 | 000,262,528 | ---- | M] () -- C:\WINDOWS\System32\drivers\cinemst2.sys.dump
[2014.02.24 07:14:50 | 000,141,056 | ---- | M] () -- C:\WINDOWS\System32\drivers\ks.sys.dump
[2014.02.24 07:14:50 | 000,052,096 | ---- | M] () -- C:\WINDOWS\System32\drivers\i8042prt.sys.dump
[2014.02.24 07:14:50 | 000,041,216 | ---- | M] () -- C:\WINDOWS\System32\drivers\amdk6.sys.dump
[2014.02.24 07:14:50 | 000,036,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\disk.sys.dump
[2014.02.24 07:14:50 | 000,032,896 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys.dump
[2014.02.24 07:14:50 | 000,032,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkfwd.sys.dump
[2014.02.24 07:14:50 | 000,031,360 | ---- | M] () -- C:\WINDOWS\System32\drivers\atmepvc.sys.dump
[2014.02.24 07:14:50 | 000,029,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\nvax.sys.dump
[2014.02.24 07:14:50 | 000,027,392 | ---- | M] () -- C:\WINDOWS\System32\drivers\fdc.sys.dump
[2014.02.24 07:14:50 | 000,013,952 | ---- | M] () -- C:\WINDOWS\System32\drivers\cbidf2k.sys.dump
[2014.02.24 07:14:50 | 000,012,416 | ---- | M] () -- C:\WINDOWS\System32\drivers\nwlnkflt.sys.dump
[2014.02.24 07:14:50 | 000,012,032 | ---- | M] () -- C:\WINDOWS\System32\drivers\nikedrv.sys.dump
[2014.02.24 07:14:50 | 000,011,776 | ---- | M] () -- C:\WINDOWS\System32\drivers\cpqdap01.sys.dump
[2014.02.24 07:14:50 | 000,011,392 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfloppy.sys.dump
[2014.02.24 07:14:50 | 000,011,136 | ---- | M] () -- C:\WINDOWS\System32\drivers\slip.sys.dump
[2014.02.24 07:14:50 | 000,010,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxapi.sys.dump
[2014.02.24 07:14:50 | 000,008,832 | ---- | M] () -- C:\WINDOWS\System32\drivers\rasacd.sys.dump
[2014.02.24 07:14:50 | 000,007,680 | ---- | M] () -- C:\WINDOWS\System32\drivers\mcd.sys.dump
[2014.02.24 07:14:50 | 000,006,784 | ---- | M] () -- C:\WINDOWS\System32\drivers\parvdm.sys.dump

[rogerfedex]

[2014.02.24 07:14:50 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\rdpcdd.sys.dump
[2014.02.24 07:14:50 | 000,004,224 | ---- | M] () -- C:\WINDOWS\System32\drivers\beep.sys.dump
[2014.02.24 07:14:50 | 000,003,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxgthk.sys.dump
[2014.02.24 07:14:48 | 000,142,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\aec.sys.dump
[2014.02.24 07:14:48 | 000,134,656 | ---- | M] () -- C:\WINDOWS\System32\drivers\ctac32k.sys.dump
[2014.02.24 07:14:48 | 000,091,520 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndiswan.sys.dump
[2014.02.24 07:14:48 | 000,080,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\parport.sys.dump
[2014.02.24 07:14:48 | 000,071,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\dxg.sys.dump
[2014.02.24 07:14:48 | 000,061,824 | ---- | M] () -- C:\WINDOWS\System32\drivers\nic1394.sys.dump
[2014.02.24 07:14:48 | 000,051,200 | ---- | M] () -- C:\WINDOWS\System32\drivers\msdv.sys.dump
[2014.02.24 07:14:48 | 000,030,592 | ---- | M] () -- C:\WINDOWS\System32\drivers\rndismp.sys.dump
[2014.02.24 07:14:48 | 000,030,080 | ---- | M] () -- C:\WINDOWS\System32\drivers\modem.sys.dump
[2014.02.24 07:14:48 | 000,024,576 | ---- | M] () -- C:\WINDOWS\System32\drivers\kbdclass.sys.dump
[2014.02.24 07:14:48 | 000,022,856 | ---- | M] () -- C:\WINDOWS\System32\drivers\mbam.sys.dump
[2014.02.24 07:14:48 | 000,020,864 | ---- | M] () -- C:\WINDOWS\System32\drivers\ipinip.sys.dump
[2014.02.24 07:14:48 | 000,018,688 | ---- | M] () -- C:\WINDOWS\System32\drivers\cdaudio.sys.dump
[2014.02.24 07:14:48 | 000,016,512 | ---- | M] () -- C:\WINDOWS\System32\drivers\raspti.sys.dump
[2014.02.24 07:14:48 | 000,010,880 | ---- | M] () -- C:\WINDOWS\System32\drivers\ndisip.sys.dump
[2014.02.24 07:14:48 | 000,007,936 | ---- | M] () -- C:\WINDOWS\System32\drivers\fs_rec.sys.dump
[2014.02.24 07:14:48 | 000,006,272 | ---- | M] () -- C:\WINDOWS\System32\drivers\splitter.sys.dump
[2014.02.24 07:14:48 | 000,002,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\null.sys.dump
[2014.02.24 07:14:46 | 000,125,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\ftdisk.sys.dump
[2014.02.24 07:14:46 | 000,014,208 | ---- | M] () -- C:\WINDOWS\System32\drivers\diskdump.sys.dump
[2014.02.24 07:14:46 | 000,005,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\dmload.sys.dump
[2014.02.24 07:14:46 | 000,004,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\wmilib.sys.dump
[2014.02.24 07:09:36 | 000,947,289 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\RogueKiller.exe
[2014.02.23 19:27:16 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2014.02.23 19:26:38 | 010,285,040 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Ruud\Plocha\mbam-setup-1.75.0.1300.exe
[2014.02.23 17:46:04 | 000,112,998 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\Clipboard011.jpg
[2014.02.23 17:40:50 | 001,241,834 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\adwcleaner.exe
[2014.02.23 14:19:40 | 000,000,588 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2014.02.23 14:18:52 | 000,001,719 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2014.02.23 13:33:28 | 000,105,340 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\Clipboard01.jpg
[2014.02.22 19:53:58 | 000,026,833 | ---- | M] () -- C:\Documents and Settings\Ruud\Plocha\pracovní deska.jpg
[2014.02.22 16:11:18 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2014.02.22 16:11:16 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2014.02.22 16:10:30 | 017,858,952 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2014.02.21 17:53:26 | 000,435,682 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.02.21 17:53:26 | 000,432,420 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.02.21 17:53:26 | 000,079,462 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.02.21 17:53:26 | 000,068,578 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.02.21 17:28:32 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014.02.16 17:19:16 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2014.02.16 10:44:52 | 000,219,248 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.02.06 04:38:36 | 000,920,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2014.02.06 00:08:34 | 011,113,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2014.02.06 00:08:34 | 006,021,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2014.02.06 00:08:34 | 002,006,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2014.02.06 00:08:34 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl
[2014.02.06 00:08:34 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2014.02.06 00:08:34 | 001,216,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2014.02.06 00:08:34 | 000,759,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2014.02.06 00:08:34 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll
[2014.02.06 00:08:34 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll
[2014.02.06 00:08:34 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2014.02.06 00:08:34 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll
[2014.02.06 00:08:34 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2014.02.06 00:08:34 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2014.02.06 00:08:34 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll
[2014.02.06 00:08:34 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2014.02.06 00:08:34 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll
[2014.02.06 00:08:34 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2014.02.06 00:08:34 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
[2014.02.06 00:08:34 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll
[2014.02.06 00:08:34 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll
[2014.02.06 00:08:34 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2014.02.06 00:08:34 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll
[2014.02.06 00:08:34 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2014.02.06 00:08:34 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll
[2014.02.06 00:08:34 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licmgr10.dll
[2014.02.06 00:08:34 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll
[2014.02.06 00:08:34 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll
[2014.02.06 00:08:34 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\corpol.dll
[2014.02.06 00:08:34 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\corpol.dll
[2014.02.05 23:24:06 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\html.iec
[2014.02.05 23:24:06 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2014.02.05 23:24:06 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ie4uinit.exe ========== Files Created - No Company Name ==========

[2014.02.27 19:43:09 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.02.24 22:11:51 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\qttask.exe
[2014.02.24 22:11:27 | 000,000,630 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\QuickTime Player.lnk
[2014.02.24 19:59:33 | 000,114,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadserd.sys.dump
[2014.02.24 19:59:33 | 000,032,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\wdfldr.sys.bak
[2014.02.24 19:59:33 | 000,030,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadadb.sys.dump
[2014.02.24 19:59:33 | 000,012,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadmdfl.sys.bak
[2014.02.24 19:59:33 | 000,010,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadcmnt.sys.bak
[2014.02.24 19:59:32 | 000,082,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\WudfRd.sys.bak
[2014.02.24 19:59:32 | 000,077,568 | ---- | C] () -- C:\WINDOWS\System32\drivers\WudfPf.sys.bak
[2014.02.24 19:59:32 | 000,073,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\sr.sys.bak
[2014.02.24 19:59:32 | 000,060,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\sysaudio.sys.bak
[2014.02.24 19:59:32 | 000,056,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\swmidi.sys.bak
[2014.02.24 19:59:32 | 000,049,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\stream.sys.bak
[2014.02.24 19:59:32 | 000,046,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\gagp30kx.sys.bak
[2014.02.24 19:59:32 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys.dump
[2014.02.24 19:59:32 | 000,015,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\streamip.sys.bak
[2014.02.24 19:59:32 | 000,012,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\usb8023x.sys.bak
[2014.02.24 19:59:32 | 000,011,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffdisk.sys.bak
[2014.02.24 19:59:32 | 000,010,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadcm.sys.bak
[2014.02.24 19:59:32 | 000,010,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadwhnt.sys.bak
[2014.02.24 19:59:32 | 000,010,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadwh.sys.bak
[2014.02.24 19:59:32 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys.bak
[2014.02.24 19:59:31 | 000,361,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\tcpip.sys.bak
[2014.02.24 19:59:31 | 000,066,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\udfs.sys.bak
[2014.02.24 19:59:31 | 000,044,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\uagp35.sys.bak
[2014.02.24 19:59:31 | 000,040,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\termdd.sys.bak
[2014.02.24 19:59:31 | 000,030,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbehci.sys.bak
[2014.02.24 19:59:31 | 000,021,896 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdtcp.sys.bak
[2014.02.24 19:59:31 | 000,019,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.02.24 19:59:31 | 000,012,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdpipe.sys.bak
[2014.02.24 19:59:30 | 000,092,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\ksecdd.sys.bak
[2014.02.24 19:59:30 | 000,081,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.02.24 19:59:30 | 000,059,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbhub.sys.bak
[2014.02.24 19:59:30 | 000,052,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\volsnap.sys.bak
[2014.02.24 19:59:30 | 000,026,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbstor.sys.bak
[2014.02.24 19:59:30 | 000,020,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\vga.sys.bak
[2014.02.24 19:59:30 | 000,019,200 | ---- | C] () -- C:\WINDOWS\System32\drivers\wstcodec.sys.bak
[2014.02.24 19:59:30 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbohci.sys.bak
[2014.02.24 19:59:30 | 000,015,872 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.02.24 19:59:29 | 000,265,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\http.sys.bak
[2014.02.24 19:59:29 | 000,092,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.02.24 19:59:29 | 000,030,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\npfs.sys.bak
[2014.02.24 19:59:29 | 000,025,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbprint.sys.bak
[2014.02.24 19:59:29 | 000,025,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.02.24 19:59:29 | 000,021,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\HPZius12.sys.bak
[2014.02.24 19:59:29 | 000,017,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\sermouse.sys.bak
[2014.02.24 19:59:29 | 000,016,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\HPZipr12.sys.bak
[2014.02.24 19:59:29 | 000,012,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\mouhid.sys.bak
[2014.02.24 19:59:29 | 000,007,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\SONYPVU1.SYS.bak
[2014.02.24 19:59:28 | 000,181,344 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssudmdm.sys.bak
[2014.02.24 19:59:28 | 000,172,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\kmixer.sys.bak
[2014.02.24 19:59:28 | 000,153,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmio.sys.bak
[2014.02.24 19:59:28 | 000,096,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\scsiport.sys.bak
[2014.02.24 19:59:28 | 000,019,200 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidir.sys.bak
[2014.02.24 19:59:28 | 000,014,165 | ---- | C] () -- C:\WINDOWS\System32\drivers\Pclepci.sys.bak
[2014.02.24 19:59:28 | 000,010,345 | ---- | C] () -- C:\WINDOWS\System32\drivers\hamachi.sys.bak
[2014.02.24 19:59:28 | 000,003,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\pciide.sys.bak
[2014.02.24 19:59:27 | 000,083,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssudbus.sys.bak
[2014.02.24 19:59:27 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\drivers\NVENET.sys.bak
[2014.02.24 19:59:27 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\asyncmac.sys.bak
[2014.02.24 19:59:26 | 000,287,920 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctdvda2k.sys.dump
[2014.02.24 19:59:26 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\Fasttx2k.sys.bak
[2014.02.24 19:59:26 | 000,142,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\haP16v2k.sys.bak
[2014.02.24 19:59:26 | 000,068,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\pci.sys.bak
[2014.02.24 19:59:26 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\flpydisk.sys.bak
[2014.02.24 19:59:26 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\pfmodnt.sys.bak
[2014.02.24 19:59:25 | 000,850,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\ha10kx2k.sys.dump
[2014.02.24 19:59:25 | 000,144,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\emupia2k.sys.bak
[2014.02.24 19:59:25 | 000,135,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctsfm2k.sys.bak
[2014.02.24 19:59:25 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctprxy2k.sys.bak
[2014.02.24 19:59:24 | 000,196,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdpdr.sys.bak
[2014.02.24 19:59:24 | 000,188,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\acpi.sys.bak
[2014.02.24 19:59:24 | 000,163,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwrdr.sys.bak
[2014.02.24 19:59:24 | 000,044,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\agpcpq.sys.bak
[2014.02.24 19:59:24 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdagp.sys.bak
[2014.02.24 19:59:24 | 000,042,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\agp440.sys.bak
[2014.02.24 19:59:24 | 000,004,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\swenum.sys.bak
[2014.02.24 19:59:23 | 000,120,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\pcmcia.sys.bak
[2014.02.24 19:59:23 | 000,063,663 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1rvxx.sys.bak
[2014.02.24 19:59:23 | 000,056,623 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1btxx.sys.bak
[2014.02.24 19:59:23 | 000,036,463 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.02.24 19:59:23 | 000,030,671 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.02.24 19:59:23 | 000,026,367 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.02.24 19:59:23 | 000,021,343 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.02.24 19:59:23 | 000,012,047 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.02.24 19:59:23 | 000,011,615 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.02.24 19:59:22 | 000,326,912 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati2mtaa.sys.bak
[2014.02.24 19:59:22 | 000,036,076 | ---- | C] () -- C:\WINDOWS\System32\drivers\vgauti.sys.bak
[2014.02.24 19:59:22 | 000,034,735 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.02.24 19:59:22 | 000,029,455 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.02.24 19:59:21 | 000,701,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati2mtag.sys.bak
[2014.02.24 19:59:21 | 000,104,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys.bak
[2014.02.24 19:59:21 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys.bak
[2014.02.24 19:59:21 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinraxx.sys.bak
[2014.02.24 19:59:21 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.02.24 19:59:21 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.02.24 19:59:21 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.02.24 19:59:21 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.02.24 19:59:20 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthport.sys.bak
[2014.02.24 19:59:20 | 000,138,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\afd.sys.bak
[2014.02.24 19:59:20 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\atintuxx.sys.bak
[2014.02.24 19:59:20 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys.bak
[2014.02.24 19:59:20 | 000,041,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdk7.sys.bak
[2014.02.24 19:59:20 | 000,037,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthmodem.sys.bak
[2014.02.24 19:59:20 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.02.24 19:59:20 | 000,017,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthenum.sys.bak
[2014.02.24 19:59:19 | 000,220,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys.bak
[2014.02.24 19:59:19 | 000,144,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\hdaudbus.sys.bak
[2014.02.24 19:59:19 | 000,129,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\fltmgr.sys.bak
[2014.02.24 19:59:19 | 000,036,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.02.24 19:59:19 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\wanarp.sys.bak
[2014.02.24 19:59:19 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidbth.sys.bak
[2014.02.24 19:59:19 | 000,018,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthusb.sys.bak
[2014.02.24 19:59:18 | 000,685,056 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfcxts2.sys.bak
[2014.02.24 19:59:17 | 001,041,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys.bak
[2014.02.24 19:59:17 | 000,190,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctoss2k.sys.bak
[2014.02.24 19:59:17 | 000,126,686 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtlmnt5.sys.bak
[2014.02.24 19:59:17 | 000,040,192 | ---- | C] () -- C:\WINDOWS\System32\drivers\intelppm.sys.bak
[2014.02.24 19:59:17 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\ip6fw.sys.bak
[2014.02.24 19:59:17 | 000,011,868 | ---- | C] () -- C:\WINDOWS\System32\drivers\mdmxsdk.sys.bak
[2014.02.24 19:59:16 | 001,309,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtlstrm.sys.bak
[2014.02.24 19:59:15 | 000,452,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtxparhm.sys.bak
[2014.02.24 19:59:15 | 000,180,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\ntmtlfax.sys.bak
[2014.02.24 19:59:15 | 000,059,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\rfcomm.sys.bak
[2014.02.24 19:59:15 | 000,015,488 | ---- | C] () -- C:\WINDOWS\System32\drivers\mssmbios.sys.bak
[2014.02.24 19:59:15 | 000,013,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.02.24 19:59:15 | 000,012,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.02.24 19:59:14 | 000,357,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\srv.sys.bak
[2014.02.24 19:59:14 | 000,166,912 | ---- | C] () -- C:\WINDOWS\System32\drivers\s3gnbm.sys.bak
[2014.02.24 19:59:14 | 000,030,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.02.24 19:59:13 | 000,079,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdbus.sys.bak
[2014.02.24 19:59:13 | 000,051,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\hpzid412.sys.bak
[2014.02.24 19:59:13 | 000,011,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffp_sd.sys.bak
[2014.02.24 19:59:13 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffp_mmc.sys.bak
[2014.02.24 19:59:12 | 000,404,990 | ---- | C] () -- C:\WINDOWS\System32\drivers\slntamr.sys.bak
[2014.02.24 19:59:12 | 000,129,535 | ---- | C] () -- C:\WINDOWS\System32\drivers\slnt7554.sys.bak
[2014.02.24 19:59:12 | 000,095,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\slnthal.sys.bak
[2014.02.24 19:59:12 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.02.24 19:59:12 | 000,013,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.02.24 19:59:12 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.02.24 19:59:12 | 000,005,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.02.24 19:59:11 | 000,123,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbvideo.sys.bak
[2014.02.24 19:59:11 | 000,046,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.02.24 19:59:11 | 000,012,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.02.24 19:59:11 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\tunmp.sys.bak
[2014.02.24 19:59:10 | 000,042,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\viaagp.sys.bak
[2014.02.24 19:59:10 | 000,011,935 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.02.24 19:59:10 | 000,011,871 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.02.24 19:59:10 | 000,011,807 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.02.24 19:59:10 | 000,011,295 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.02.24 19:59:09 | 000,060,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\arp1394.sys.bak
[2014.02.24 19:59:09 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmarpc.sys.bak
[2014.02.24 19:59:09 | 000,053,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\1394bus.sys.bak
[2014.02.24 19:59:09 | 000,025,471 | ---- | C] () -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.02.24 19:59:09 | 000,022,271 | ---- | C] () -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.02.24 19:59:09 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\audstub.sys.bak
[2014.02.24 19:59:08 | 000,800,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmboot.sys.bak
[2014.02.24 19:59:08 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\bdasup.sys.bak
[2014.02.24 19:59:08 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\enum1394.sys.bak
[2014.02.24 19:59:07 | 000,502,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctaud2k.sys.bak
[2014.02.24 19:59:07 | 000,384,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\update.sys.bak
[2014.02.24 19:59:07 | 000,282,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvapu.sys.bak
[2014.02.24 19:59:07 | 000,152,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipnat.sys.bak
[2014.02.24 19:59:07 | 000,125,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\imagesrv.sys.bak
[2014.02.24 19:59:07 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipsec.sys.bak
[2014.02.24 19:59:07 | 000,066,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvarm.sys.bak
[2014.02.24 19:59:07 | 000,044,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\fips.sys.bak
[2014.02.24 19:59:07 | 000,037,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\isapnp.sys.bak
[2014.02.24 19:59:07 | 000,015,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\mpe.sys.bak
[2014.02.24 19:59:06 | 000,101,120 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthpan.sys.bak
[2014.02.24 19:59:06 | 000,063,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\mf.sys.bak
[2014.02.24 19:59:06 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\sisagp.sys.bak
[2014.02.24 19:59:06 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.02.24 19:59:06 | 000,035,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\msgpc.sys.bak
[2014.02.24 19:59:06 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\mouclass.sys.bak
[2014.02.24 19:59:06 | 000,019,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\msfs.sys.bak
[2014.02.24 19:59:06 | 000,018,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\nv_agp.SYS.bak
[2014.02.24 19:59:06 | 000,014,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbscan.sys.bak
[2014.02.24 19:59:06 | 000,014,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\wacompen.sys.bak
[2014.02.24 19:59:06 | 000,007,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\mskssrv.sys.bak
[2014.02.24 19:59:06 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\mstee.sys.bak
[2014.02.24 19:59:06 | 000,005,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\mspclock.sys.bak
[2014.02.24 19:59:05 | 000,162,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\netbt.sys.bak
[2014.02.24 19:59:05 | 000,085,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\nabtsfec.sys.bak
[2014.02.24 19:59:05 | 000,071,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\bridge.sys.bak
[2014.02.24 19:59:05 | 000,042,112 | ---- | C] () -- C:\WINDOWS\System32\drivers\imapi.sys.bak
[2014.02.24 19:59:05 | 000,034,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\netbios.sys.bak
[2014.02.24 19:59:04 | 000,226,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\tcpip6.sys.bak
[2014.02.24 19:59:04 | 000,182,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndis.sys.bak
[2014.02.24 19:59:04 | 000,096,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys.bak
[2014.02.24 19:59:04 | 000,055,808 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmlane.sys.bak
[2014.02.24 19:59:04 | 000,042,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\alim1541.sys.bak
[2014.02.24 19:59:04 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndproxy.sys.bak
[2014.02.24 19:59:04 | 000,040,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\crusoe.sys.bak
[2014.02.24 19:59:04 | 000,040,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\nmnt.sys.bak
[2014.02.24 19:59:03 | 000,574,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\ntfs.sys.bak
[2014.02.24 19:59:03 | 000,060,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.02.24 19:59:03 | 000,048,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspptp.sys.bak
[2014.02.24 19:59:03 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\p3.sys.bak
[2014.02.24 19:59:03 | 000,014,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.02.24 19:59:03 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndistapi.sys.bak
[2014.02.24 19:59:03 | 000,010,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidusb.sys.bak
[2014.02.24 19:59:03 | 000,002,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\drmkaud.sys.bak
[2014.02.24 19:59:02 | 000,853,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvmcp.sys.bak
[2014.02.24 19:59:02 | 000,143,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\fastfat.sys.bak
[2014.02.24 19:59:02 | 000,019,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\partmgr.sys.bak
[2014.02.24 19:59:01 | 000,061,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\ohci1394.sys.bak
[2014.02.24 19:59:01 | 000,024,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.02.24 19:59:01 | 000,017,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\ccdecode.sys.bak
[2014.02.24 19:59:01 | 000,012,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\kbfilter.sys.bak
[2014.02.24 19:59:00 | 000,146,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.02.24 19:59:00 | 000,088,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.bak
[2014.02.24 19:59:00 | 000,051,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasl2tp.sys.bak
[2014.02.24 19:59:00 | 000,041,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspppoe.sys.bak
[2014.02.24 19:59:00 | 000,039,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\processr.sys.bak
[2014.02.24 19:59:00 | 000,014,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndisuio.sys.bak
[2014.02.24 19:59:00 | 000,004,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\mspqm.sys.bak
[2014.02.24 19:58:59 | 000,180,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\mrxdav.sys.bak
[2014.02.24 19:58:59 | 000,175,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdbss.sys.bak
[2014.02.24 19:58:59 | 000,063,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdfs.sys.bak
[2014.02.24 19:58:59 | 000,049,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.02.24 19:58:59 | 000,032,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbccgp.sys.bak
[2014.02.24 19:58:59 | 000,025,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.02.24 19:58:59 | 000,010,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\gameenum.sys.bak
[2014.02.24 19:58:58 | 000,058,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\redbook.sys.bak
[2014.02.24 19:58:58 | 000,058,112 | ---- | C] () -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.02.24 19:58:58 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.02.24 19:58:58 | 000,012,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.02.24 19:58:58 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\ws2ifsl.sys.bak
[2014.02.24 19:58:58 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\acpiec.sys.bak
[2014.02.24 19:58:58 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\irenum.sys.bak
[2014.02.24 19:58:58 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\imagedrv.sys.bak
[2014.02.24 19:58:58 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\mnmdd.sys.bak
[2014.02.24 19:58:58 | 000,003,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.02.24 19:58:57 | 000,121,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadbus.sys.bak
[2014.02.24 19:58:57 | 000,051,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.02.24 19:58:57 | 000,021,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.02.24 19:58:57 | 000,015,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\serenum.sys.bak
[2014.02.24 19:58:56 | 000,014,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.02.24 19:58:56 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\rootmdm.sys.bak
[2014.02.24 19:58:55 | 000,456,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\mrxsmb.sys.bak
[2014.02.24 19:58:54 | 000,203,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\RMCast.sys.bak
[2014.02.24 19:58:53 | 000,064,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\serial.sys.bak
[2014.02.24 19:58:53 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.02.24 19:58:53 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.02.24 19:58:52 | 000,063,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.02.24 19:58:52 | 000,055,936 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.02.24 19:58:52 | 000,034,432 | ---- | C] () -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.02.24 19:58:52 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys.bak
[2014.02.24 19:58:51 | 000,141,056 | ---- | C] () -- C:\WINDOWS\System32\drivers\ks.sys.bak

[rogerfedex]

[2014.02.24 19:58:51 | 000,032,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkfwd.sys.bak
[2014.02.24 19:58:51 | 000,012,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkflt.sys.bak
[2014.02.24 19:58:51 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.02.24 19:58:50 | 000,052,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\i8042prt.sys.bak
[2014.02.24 19:58:50 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\disk.sys.bak
[2014.02.24 19:58:50 | 000,032,896 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys.bak
[2014.02.24 19:58:50 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.02.24 19:58:50 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.02.24 19:58:50 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.02.24 19:58:49 | 000,262,528 | ---- | C] () -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.02.24 19:58:49 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\cbidf2k.sys.bak
[2014.02.24 19:58:48 | 000,352,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.02.24 19:58:47 | 000,031,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.02.24 19:58:46 | 000,041,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdk6.sys.bak
[2014.02.24 19:58:46 | 000,029,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvax.sys.bak
[2014.02.24 19:58:46 | 000,027,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\fdc.sys.bak
[2014.02.24 19:58:46 | 000,011,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfloppy.sys.bak
[2014.02.24 19:58:46 | 000,011,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\slip.sys.bak
[2014.02.24 19:58:46 | 000,006,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\parvdm.sys.bak
[2014.02.24 19:58:46 | 000,003,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.02.24 19:58:45 | 000,018,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdaudio.sys.bak
[2014.02.24 19:58:45 | 000,008,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasacd.sys.bak
[2014.02.24 19:58:45 | 000,007,936 | ---- | C] () -- C:\WINDOWS\System32\drivers\fs_rec.sys.bak
[2014.02.24 19:58:45 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdpcdd.sys.bak
[2014.02.24 19:58:45 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\beep.sys.bak
[2014.02.24 19:58:45 | 000,002,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\null.sys.bak
[2014.02.24 19:58:44 | 000,091,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndiswan.sys.bak
[2014.02.24 19:58:44 | 000,071,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.02.24 19:58:44 | 000,051,200 | ---- | C] () -- C:\WINDOWS\System32\drivers\msdv.sys.bak
[2014.02.24 19:58:44 | 000,030,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.02.24 19:58:44 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\kbdclass.sys.bak
[2014.02.24 19:58:44 | 000,022,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\mbam.sys.bak
[2014.02.24 19:58:44 | 000,017,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\ptilink.sys.bak
[2014.02.24 19:58:44 | 000,016,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspti.sys.bak
[2014.02.24 19:58:44 | 000,010,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndisip.sys.bak
[2014.02.24 19:58:43 | 000,142,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\aec.sys.bak
[2014.02.24 19:58:43 | 000,080,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\parport.sys.bak
[2014.02.24 19:58:43 | 000,061,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\nic1394.sys.bak
[2014.02.24 19:58:43 | 000,030,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\modem.sys.bak
[2014.02.24 19:58:43 | 000,020,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipinip.sys.bak
[2014.02.24 19:58:43 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\splitter.sys.bak
[2014.02.24 19:58:42 | 000,134,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctac32k.sys.bak
[2014.02.24 19:58:42 | 000,125,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\ftdisk.sys.bak
[2014.02.24 19:58:42 | 000,014,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.02.24 19:58:42 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmload.sys.bak
[2014.02.24 19:58:42 | 000,004,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.02.24 07:15:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\wdfldr.sys.dump
[2014.02.24 07:15:26 | 000,012,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadmdfl.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\WudfRd.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\WudfPf.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usb8023x.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadwhnt.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadwh.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadcmnt.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadcm.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\sr.sys.dump
[2014.02.24 07:15:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\gagp30kx.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\termdd.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdtcp.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdpipe.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\tdi.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\tcpip.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\sysaudio.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\swmidi.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\streamip.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\stream.sys.dump
[2014.02.24 07:15:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffdisk.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\wstcodec.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\wdmaud.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\volsnap.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\videoprt.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\vga.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbstor.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbohci.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbintel.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbhub.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbehci.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\udfs.sys.dump
[2014.02.24 07:15:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\uagp35.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbprint.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssudmdm.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\SONYPVU1.SYS.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\sonydcam.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\sermouse.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\pciide.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\npfs.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\mqac.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\mouhid.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ksecdd.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\http.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\HPZius12.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\HPZipr12.sys.dump
[2014.02.24 07:15:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmio.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssudbus.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\scsiport.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\Pclepci.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\kmixer.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidir.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\hamachi.sys.dump
[2014.02.24 07:15:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\asyncmac.sys.dump
[2014.02.24 07:15:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\NVENET.sys.dump
[2014.02.24 07:15:20 | 000,142,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\haP16v2k.sys.dump
[2014.02.24 07:15:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\pci.sys.dump
[2014.02.24 07:15:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\flpydisk.sys.dump
[2014.02.24 07:15:19 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\Fasttx2k.sys.dump
[2014.02.24 07:15:19 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\pfmodnt.sys.dump
[2014.02.24 07:15:18 | 000,196,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdpdr.sys.dump
[2014.02.24 07:15:18 | 000,144,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\emupia2k.sys.dump
[2014.02.24 07:15:18 | 000,135,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctsfm2k.sys.dump
[2014.02.24 07:15:18 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctprxy2k.sys.dump
[2014.02.24 07:15:17 | 000,188,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\acpi.sys.dump
[2014.02.24 07:15:16 | 000,163,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwrdr.sys.dump
[2014.02.24 07:15:16 | 000,044,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\agpcpq.sys.dump
[2014.02.24 07:15:16 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdagp.sys.dump
[2014.02.24 07:15:16 | 000,042,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\agp440.sys.dump
[2014.02.24 07:15:16 | 000,004,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\swenum.sys.dump
[2014.02.24 07:15:15 | 000,120,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\pcmcia.sys.dump
[2014.02.24 07:15:15 | 000,063,663 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1rvxx.sys.dump
[2014.02.24 07:15:15 | 000,056,623 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1btxx.sys.dump
[2014.02.24 07:15:15 | 000,036,463 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.dump
[2014.02.24 07:15:15 | 000,036,076 | ---- | C] () -- C:\WINDOWS\System32\drivers\vgauti.sys.dump
[2014.02.24 07:15:15 | 000,030,671 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1raxx.sys.dump
[2014.02.24 07:15:15 | 000,029,455 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.dump
[2014.02.24 07:15:15 | 000,026,367 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1snxx.sys.dump
[2014.02.24 07:15:15 | 000,021,343 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.dump
[2014.02.24 07:15:15 | 000,012,047 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.dump
[2014.02.24 07:15:15 | 000,011,615 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.dump
[2014.02.24 07:15:14 | 000,326,912 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati2mtaa.sys.dump
[2014.02.24 07:15:14 | 000,034,735 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.dump
[2014.02.24 07:15:13 | 000,701,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\ati2mtag.sys.dump
[2014.02.24 07:15:13 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys.dump
[2014.02.24 07:15:13 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinraxx.sys.dump
[2014.02.24 07:15:13 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys.dump
[2014.02.24 07:15:13 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys.dump
[2014.02.24 07:15:12 | 000,104,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys.dump
[2014.02.24 07:15:12 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\atintuxx.sys.dump
[2014.02.24 07:15:12 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys.dump
[2014.02.24 07:15:12 | 000,041,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdk7.sys.dump
[2014.02.24 07:15:12 | 000,037,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthmodem.sys.dump
[2014.02.24 07:15:12 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxbxx.sys.dump
[2014.02.24 07:15:12 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinsnxx.sys.dump
[2014.02.24 07:15:12 | 000,017,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthenum.sys.dump
[2014.02.24 07:15:12 | 000,013,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinttxx.sys.dump
[2014.02.24 07:15:11 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthport.sys.dump
[2014.02.24 07:15:11 | 000,138,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\afd.sys.dump
[2014.02.24 07:15:11 | 000,036,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthprint.sys.dump
[2014.02.24 07:15:11 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\wanarp.sys.dump
[2014.02.24 07:15:11 | 000,018,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthusb.sys.dump
[2014.02.24 07:15:10 | 000,220,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys.dump
[2014.02.24 07:15:10 | 000,144,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\hdaudbus.sys.dump
[2014.02.24 07:15:10 | 000,129,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\fltmgr.sys.dump
[2014.02.24 07:15:10 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidbth.sys.dump
[2014.02.24 07:15:09 | 000,685,056 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfcxts2.sys.dump
[2014.02.24 07:15:07 | 001,041,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys.dump
[2014.02.24 07:15:07 | 000,190,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctoss2k.sys.dump
[2014.02.24 07:15:07 | 000,040,192 | ---- | C] () -- C:\WINDOWS\System32\drivers\intelppm.sys.dump
[2014.02.24 07:15:07 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\ip6fw.sys.dump
[2014.02.24 07:15:07 | 000,011,868 | ---- | C] () -- C:\WINDOWS\System32\drivers\mdmxsdk.sys.dump
[2014.02.24 07:15:06 | 000,126,686 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtlmnt5.sys.dump
[2014.02.24 07:15:05 | 001,309,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtlstrm.sys.dump
[2014.02.24 07:15:05 | 000,452,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\mtxparhm.sys.dump
[2014.02.24 07:15:04 | 000,357,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\srv.sys.dump
[2014.02.24 07:15:04 | 000,180,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\ntmtlfax.sys.dump
[2014.02.24 07:15:04 | 000,166,912 | ---- | C] () -- C:\WINDOWS\System32\drivers\s3gnbm.sys.dump
[2014.02.24 07:15:04 | 000,059,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\rfcomm.sys.dump
[2014.02.24 07:15:04 | 000,030,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\rndismpx.sys.dump
[2014.02.24 07:15:04 | 000,015,488 | ---- | C] () -- C:\WINDOWS\System32\drivers\mssmbios.sys.dump
[2014.02.24 07:15:04 | 000,013,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\recagent.sys.dump
[2014.02.24 07:15:04 | 000,012,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\mutohpen.sys.dump
[2014.02.24 07:15:03 | 000,404,990 | ---- | C] () -- C:\WINDOWS\System32\drivers\slntamr.sys.dump
[2014.02.24 07:15:03 | 000,129,535 | ---- | C] () -- C:\WINDOWS\System32\drivers\slnt7554.sys.dump
[2014.02.24 07:15:03 | 000,079,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdbus.sys.dump
[2014.02.24 07:15:03 | 000,051,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\hpzid412.sys.dump
[2014.02.24 07:15:03 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidparse.sys.dump
[2014.02.24 07:15:03 | 000,011,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffp_sd.sys.dump
[2014.02.24 07:15:03 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\sffp_mmc.sys.dump
[2014.02.24 07:15:03 | 000,005,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbd.sys.dump
[2014.02.24 07:15:02 | 000,123,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbvideo.sys.dump
[2014.02.24 07:15:02 | 000,095,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\slnthal.sys.dump
[2014.02.24 07:15:02 | 000,053,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\1394bus.sys.dump
[2014.02.24 07:15:02 | 000,046,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\irbus.sys.dump
[2014.02.24 07:15:02 | 000,042,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\viaagp.sys.dump
[2014.02.24 07:15:02 | 000,025,471 | ---- | C] () -- C:\WINDOWS\System32\drivers\watv10nt.sys.dump
[2014.02.24 07:15:02 | 000,022,271 | ---- | C] () -- C:\WINDOWS\System32\drivers\watv06nt.sys.dump
[2014.02.24 07:15:02 | 000,013,240 | ---- | C] () -- C:\WINDOWS\System32\drivers\slwdmsup.sys.dump
[2014.02.24 07:15:02 | 000,012,928 | ---- | C] () -- C:\WINDOWS\System32\drivers\usb8023.sys.dump
[2014.02.24 07:15:02 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\tunmp.sys.dump
[2014.02.24 07:15:02 | 000,011,935 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv11nt.sys.dump
[2014.02.24 07:15:02 | 000,011,871 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv09nt.sys.dump
[2014.02.24 07:15:02 | 000,011,807 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv07nt.sys.dump
[2014.02.24 07:15:02 | 000,011,295 | ---- | C] () -- C:\WINDOWS\System32\drivers\wadv08nt.sys.dump
[2014.02.24 07:15:02 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\smbali.sys.dump
[2014.02.24 07:15:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\audstub.sys.dump
[2014.02.24 07:15:01 | 000,800,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmboot.sys.dump
[2014.02.24 07:15:01 | 000,060,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\arp1394.sys.dump
[2014.02.24 07:15:01 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmarpc.sys.dump
[2014.02.24 07:15:01 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\bdasup.sys.dump
[2014.02.24 07:15:01 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\enum1394.sys.dump
[2014.02.24 07:15:00 | 000,502,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctaud2k.sys.dump
[2014.02.24 07:15:00 | 000,282,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvapu.sys.dump
[2014.02.24 07:15:00 | 000,066,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvarm.sys.dump
[2014.02.24 07:15:00 | 000,015,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\mpe.sys.dump
[2014.02.24 07:14:59 | 000,384,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\update.sys.dump
[2014.02.24 07:14:59 | 000,152,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipnat.sys.dump
[2014.02.24 07:14:59 | 000,125,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\imagesrv.sys.dump
[2014.02.24 07:14:59 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipsec.sys.dump
[2014.02.24 07:14:59 | 000,044,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\fips.sys.dump
[2014.02.24 07:14:59 | 000,037,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\isapnp.sys.dump
[2014.02.24 07:14:59 | 000,014,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\wacompen.sys.dump
[2014.02.24 07:14:58 | 000,063,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\mf.sys.dump
[2014.02.24 07:14:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\sisagp.sys.dump
[2014.02.24 07:14:58 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidclass.sys.dump
[2014.02.24 07:14:58 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\mouclass.sys.dump
[2014.02.24 07:14:57 | 000,101,120 | ---- | C] () -- C:\WINDOWS\System32\drivers\bthpan.sys.dump
[2014.02.24 07:14:57 | 000,085,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\nabtsfec.sys.dump
[2014.02.24 07:14:57 | 000,035,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\msgpc.sys.dump
[2014.02.24 07:14:57 | 000,019,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\msfs.sys.dump
[2014.02.24 07:14:57 | 000,018,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\nv_agp.SYS.dump
[2014.02.24 07:14:57 | 000,014,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbscan.sys.dump
[2014.02.24 07:14:57 | 000,007,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\mskssrv.sys.dump
[2014.02.24 07:14:57 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\mstee.sys.dump
[2014.02.24 07:14:57 | 000,005,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\mspclock.sys.dump
[2014.02.24 07:14:56 | 000,162,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\netbt.sys.dump
[2014.02.24 07:14:56 | 000,071,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\bridge.sys.dump
[2014.02.24 07:14:56 | 000,055,808 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmlane.sys.dump
[2014.02.24 07:14:56 | 000,042,112 | ---- | C] () -- C:\WINDOWS\System32\drivers\imapi.sys.dump
[2014.02.24 07:14:56 | 000,034,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\netbios.sys.dump
[2014.02.24 07:14:55 | 000,226,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\tcpip6.sys.dump
[2014.02.24 07:14:55 | 000,182,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndis.sys.dump
[2014.02.24 07:14:55 | 000,096,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys.dump
[2014.02.24 07:14:55 | 000,048,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspptp.sys.dump
[2014.02.24 07:14:55 | 000,042,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\alim1541.sys.dump
[2014.02.24 07:14:55 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndproxy.sys.dump
[2014.02.24 07:14:55 | 000,040,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\crusoe.sys.dump
[2014.02.24 07:14:55 | 000,040,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\nmnt.sys.dump
[2014.02.24 07:14:54 | 000,574,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\ntfs.sys.dump
[2014.02.24 07:14:54 | 000,060,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\drmk.sys.dump
[2014.02.24 07:14:54 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\p3.sys.dump
[2014.02.24 07:14:54 | 000,019,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\partmgr.sys.dump
[2014.02.24 07:14:54 | 000,014,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\tape.sys.dump
[2014.02.24 07:14:54 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndistapi.sys.dump
[2014.02.24 07:14:54 | 000,010,368 | ---- | C] () -- C:\WINDOWS\System32\drivers\hidusb.sys.dump
[2014.02.24 07:14:54 | 000,002,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\drmkaud.sys.dump
[2014.02.24 07:14:53 | 000,853,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvmcp.sys.dump
[2014.02.24 07:14:53 | 000,146,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\portcls.sys.dump
[2014.02.24 07:14:53 | 000,143,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\fastfat.sys.dump
[2014.02.24 07:14:53 | 000,088,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkipx.sys.dump
[2014.02.24 07:14:53 | 000,061,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\ohci1394.sys.dump
[2014.02.24 07:14:53 | 000,051,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasl2tp.sys.dump
[2014.02.24 07:14:53 | 000,039,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\processr.sys.dump
[2014.02.24 07:14:53 | 000,024,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\pciidex.sys.dump
[2014.02.24 07:14:53 | 000,017,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\ccdecode.sys.dump
[2014.02.24 07:14:53 | 000,012,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\kbfilter.sys.dump
[2014.02.24 07:14:52 | 000,180,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\mrxdav.sys.dump
[2014.02.24 07:14:52 | 000,175,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdbss.sys.dump
[2014.02.24 07:14:52 | 000,063,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdfs.sys.dump
[2014.02.24 07:14:52 | 000,058,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\redbook.sys.dump
[2014.02.24 07:14:52 | 000,049,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\classpnp.sys.dump
[2014.02.24 07:14:52 | 000,041,472 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspppoe.sys.dump
[2014.02.24 07:14:52 | 000,032,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbccgp.sys.dump
[2014.02.24 07:14:52 | 000,025,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbcamd2.sys.dump
[2014.02.24 07:14:52 | 000,014,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndisuio.sys.dump
[2014.02.24 07:14:52 | 000,010,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\gameenum.sys.dump
[2014.02.24 07:14:52 | 000,004,992 | ---- | C] () -- C:\WINDOWS\System32\drivers\mspqm.sys.dump
[2014.02.24 07:14:51 | 000,121,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\ssadbus.sys.dump
[2014.02.24 07:14:51 | 000,058,112 | ---- | C] () -- C:\WINDOWS\System32\drivers\vdmindvd.sys.dump
[2014.02.24 07:14:51 | 000,051,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\tosdvd.sys.dump
[2014.02.24 07:14:51 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\usbcamd.sys.dump
[2014.02.24 07:14:51 | 000,021,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\tsbvcap.sys.dump
[2014.02.24 07:14:51 | 000,015,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\serenum.sys.dump
[2014.02.24 07:14:51 | 000,012,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsvga.sys.dump
[2014.02.24 07:14:51 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\ws2ifsl.sys.dump
[2014.02.24 07:14:51 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\acpiec.sys.dump
[2014.02.24 07:14:51 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\irenum.sys.dump
[2014.02.24 07:14:51 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\imagedrv.sys.dump
[2014.02.24 07:14:51 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\mnmdd.sys.dump
[2014.02.24 07:14:51 | 000,003,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\oprghdlr.sys.dump
[2014.02.24 07:14:50 | 000,456,320 | ---- | C] () -- C:\WINDOWS\System32\drivers\mrxsmb.sys.dump
[2014.02.24 07:14:50 | 000,203,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\RMCast.sys.dump
[2014.02.24 07:14:50 | 000,064,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\serial.sys.dump
[2014.02.24 07:14:50 | 000,063,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnknb.sys.dump
[2014.02.24 07:14:50 | 000,055,936 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.dump
[2014.02.24 07:14:50 | 000,034,432 | ---- | C] () -- C:\WINDOWS\System32\drivers\rawwan.sys.dump
[2014.02.24 07:14:50 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys.dump
[2014.02.24 07:14:50 | 000,014,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\smclib.sys.dump
[2014.02.24 07:14:50 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\riodrv.sys.dump
[2014.02.24 07:14:50 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\rio8drv.sys.dump
[2014.02.24 07:14:50 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\rootmdm.sys.dump
[2014.02.24 07:14:49 | 000,262,528 | ---- | C] () -- C:\WINDOWS\System32\drivers\cinemst2.sys.dump
[2014.02.24 07:14:49 | 000,141,056 | ---- | C] () -- C:\WINDOWS\System32\drivers\ks.sys.dump
[2014.02.24 07:14:49 | 000,052,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\i8042prt.sys.dump
[2014.02.24 07:14:49 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\disk.sys.dump
[2014.02.24 07:14:49 | 000,032,896 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipfltdrv.sys.dump
[2014.02.24 07:14:49 | 000,032,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkfwd.sys.dump
[2014.02.24 07:14:49 | 000,012,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\nwlnkflt.sys.dump
[2014.02.24 07:14:49 | 000,012,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\nikedrv.sys.dump
[2014.02.24 07:14:49 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\cpqdap01.sys.dump
[2014.02.24 07:14:49 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxapi.sys.dump
[2014.02.24 07:14:49 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\drivers\mcd.sys.dump
[2014.02.24 07:14:48 | 000,352,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmuni.sys.dump
[2014.02.24 07:14:48 | 000,041,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\amdk6.sys.dump
[2014.02.24 07:14:48 | 000,031,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmepvc.sys.dump
[2014.02.24 07:14:48 | 000,029,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvax.sys.dump
[2014.02.24 07:14:48 | 000,027,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\fdc.sys.dump
[2014.02.24 07:14:48 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\cbidf2k.sys.dump
[2014.02.24 07:14:48 | 000,011,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfloppy.sys.dump
[2014.02.24 07:14:48 | 000,011,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\slip.sys.dump
[2014.02.24 07:14:48 | 000,008,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\rasacd.sys.dump
[2014.02.24 07:14:48 | 000,006,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\parvdm.sys.dump
[2014.02.24 07:14:48 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\rdpcdd.sys.dump
[2014.02.24 07:14:48 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\beep.sys.dump
[2014.02.24 07:14:48 | 000,003,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxgthk.sys.dump
[2014.02.24 07:14:47 | 000,091,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndiswan.sys.dump
[2014.02.24 07:14:47 | 000,071,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\dxg.sys.dump
[2014.02.24 07:14:47 | 000,051,200 | ---- | C] () -- C:\WINDOWS\System32\drivers\msdv.sys.dump
[2014.02.24 07:14:47 | 000,030,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\rndismp.sys.dump
[2014.02.24 07:14:47 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\kbdclass.sys.dump
[2014.02.24 07:14:47 | 000,018,688 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdaudio.sys.dump
[2014.02.24 07:14:47 | 000,017,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\ptilink.sys.dump
[2014.02.24 07:14:47 | 000,016,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\raspti.sys.dump
[2014.02.24 07:14:47 | 000,010,880 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndisip.sys.dump
[2014.02.24 07:14:47 | 000,007,936 | ---- | C] () -- C:\WINDOWS\System32\drivers\fs_rec.sys.dump
[2014.02.24 07:14:47 | 000,002,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\null.sys.dump
[2014.02.24 07:14:46 | 000,142,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\aec.sys.dump
[2014.02.24 07:14:46 | 000,134,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\ctac32k.sys.dump
[2014.02.24 07:14:46 | 000,080,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\parport.sys.dump
[2014.02.24 07:14:46 | 000,061,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\nic1394.sys.dump
[2014.02.24 07:14:46 | 000,030,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\modem.sys.dump
[2014.02.24 07:14:46 | 000,022,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\mbam.sys.dump
[2014.02.24 07:14:46 | 000,020,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\ipinip.sys.dump
[2014.02.24 07:14:46 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\splitter.sys.dump
[2014.02.24 07:14:45 | 000,125,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\ftdisk.sys.dump
[2014.02.24 07:14:45 | 000,014,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\diskdump.sys.dump
[2014.02.24 07:14:45 | 000,005,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\dmload.sys.dump
[2014.02.24 07:14:45 | 000,004,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\wmilib.sys.dump
[2014.02.24 07:09:39 | 000,947,289 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\RogueKiller.exe
[2014.02.23 19:27:14 | 000,000,690 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
[2014.02.23 17:44:49 | 000,112,998 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\Clipboard011.jpg
[2014.02.23 17:40:51 | 001,241,834 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\adwcleaner.exe
[2014.02.23 14:25:54 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
[2014.02.23 14:19:38 | 000,000,588 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
[2014.02.23 14:18:45 | 000,001,719 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
[2014.02.23 14:15:01 | 000,000,936 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.02.23 14:14:59 | 000,000,932 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.02.23 13:33:26 | 000,105,340 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\Clipboard01.jpg
[2014.02.23 12:15:29 | 000,000,420 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{FBCB0C67-730A-46E3-8BF5-A72B65838E34}.job
[2014.02.22 19:52:45 | 000,026,833 | ---- | C] () -- C:\Documents and Settings\Ruud\Plocha\pracovní deska.jpg
[2013.02.24 08:47:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Data aplikací\LauncherAccess.dt
[2013.02.24 08:43:39 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2013.02.05 17:52:50 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2013.02.05 17:52:50 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2013.02.05 17:52:50 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2013.02.05 17:52:50 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2012.09.21 02:38:25 | 000,001,646 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010.02.26 07:10:43 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\Ruud\Data aplikací\rbuwzv.dat
[2008.05.11 08:52:43 | 000,000,668 | ---- | C] () -- C:\Documents and Settings\Ruud\Data aplikací\vso_ts_preview.xml
[2008.05.11 08:52:12 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Ruud\Data aplikací\inst.exe
[2008.05.11 08:52:12 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Ruud\Data aplikací\pcouffin.cat
[2008.05.11 08:52:12 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Ruud\Data aplikací\pcouffin.inf
[2005.12.16 10:56:49 | 000,049,664 | ---- | C] () -- C:\Documents and Settings\Ruud\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2014.02.17 19:47:32 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 05:21:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 12:56:06 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 05:22:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2006.01.23 21:34:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
[2006.03.27 13:06:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OLYMPUS
[2008.05.11 10:09:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\vsosdk
[2008.07.02 07:22:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2010.01.25 20:00:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010.08.26 19:42:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJPLM
[2010.08.26 19:43:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJScan
[2010.08.26 19:48:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Data aplikací\CanonIJSolutionMenu
[2012.02.09 20:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TmForever
[2013.02.24 09:42:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Samsung
[2013.03.30 10:36:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2014.02.23 13:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2006.09.06 17:52:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\Složka odesílání Share-to-Web
[2005.12.10 12:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Složka odesílání Share-to-Web
[2005.12.10 14:59:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\InterVideo
[2005.12.10 17:38:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ICQLite
[2005.12.22 21:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Leadertech
[2006.01.01 03:46:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\.BitTornado
[2008.05.11 08:52:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Vso
[2008.07.02 07:21:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ICQ
[2008.07.10 18:24:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ESET
[2008.12.15 07:30:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\uTorrent
[2010.08.26 19:38:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Canon Easy-WebPrint EX
[2010.08.26 19:43:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Canon
[2010.10.22 18:25:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\602XML
[2011.03.30 17:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\602Installer
[2012.05.27 08:51:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Oracle
[2013.03.26 18:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\OpenOffice.org

========== Purity Check ==========



========== Custom Scans ==========

< >
[2005.12.10 09:34:08 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2005.12.10 09:36:11 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2012.05.27 09:11:42 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2014.02.23 12:15:29 | 000,000,420 | -H-- | C] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{FBCB0C67-730A-46E3-8BF5-A72B65838E34}.job
[2014.02.23 14:14:59 | 000,000,932 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2014.02.23 14:15:01 | 000,000,936 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\erdnt\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\snack\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.04 07:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\erdnt\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\snack\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.04 06:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0031\DriverFiles\i386\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 05:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 23:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\snack\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.04 06:59:52 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 23:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\erdnt\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\erdnt\cache\eventlog.dll
[2008.04.14 05:21:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 23:49:06 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\erdnt\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 23:49:22 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 15:12:00 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=9B32416BD5988C97B6397CE0B02CAF97 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007.06.13 15:23:40 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=ED7B460B142A32097B8A8F6ECC941815 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.04 06:59:10 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
[2004.08.04 07:00:12 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\$NtServicePackUninstall$\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.10.15 17:47:40 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2002.12.05 12:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 04:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\snack\isapnp.sys
[2008.04.14 04:27:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 23:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\erdnt\cache\lsass.exe
[2008.04.14 05:22:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\erdnt\cache\ndis.sys
[2008.04.13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\snack\ndis.sys
[2008.04.13 21:20:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.04 07:14:28 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 23:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\erdnt\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 23:49:16 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\erdnt\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 23:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\erdnt\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 23:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2006.04.20 13:51:50 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=1DBF125862891817F374F407626967F4 -- C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
[2002.12.05 12:00:00 | 000,332,928 | ---- | M] (Microsoft Corporation) MD5=244A2F9816BC9B593957281EF577D976 -- C:\WINDOWS\$NtUninstallKB893066_0$\tcpip.sys
[2008.06.20 12:45:14 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2006.01.13 18:07:08 | 000,360,448 | ---- | M] (Microsoft Corporation) MD5=5562CC0A47B2AEF06D3417B733F3C195 -- C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys
[2006.01.13 03:28:14 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=583E063FDC888CA30D05C2724B0D7EF4 -- C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
[2005.05.25 20:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[2007.10.30 17:53:32 | 000,360,832 | ---- | M] (Microsoft Corporation) MD5=64798ECFA43D78C7178375FCDD16D8C8 -- C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2005.05.25 20:04:02 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=88763A98A4C26C409741B4AA162720C9 -- C:\WINDOWS\$hf_mig$\KB893066\SP2GDR\tcpip.sys
[2005.05.25 20:04:02 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=88763A98A4C26C409741B4AA162720C9 -- C:\WINDOWS\$NtUninstallKB913446$\tcpip.sys
[2007.10.30 18:20:56 | 000,360,064 | ---- | M] (Microsoft Corporation) MD5=90CAFF4B094573449A0872A0F919B178 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\erdnt\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\snack\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.04 07:14:40 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB893066_1$\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2006.04.20 14:18:36 | 000,360,576 | ---- | M] (Microsoft Corporation) MD5=B2220C618B42A2212A59D91EBD6FC4B4 -- C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\erdnt\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 23:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 23:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008.04.14 05:22:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\erdnt\cache\winlogon.exe
[2008.04.14 05:22:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 23:49:20 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\erdnt\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[2 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[1 C:\WINDOWS\CSC\*.tmp files -> C:\WINDOWS\CSC\*.tmp -> ]
[1810 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\twain_32\*.tmp files -> C:\WINDOWS\twain_32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2005.12.10 09:22:24 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Ruud\Data aplikací\Microsoft
[2005.12.10 09:43:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Identities
[2005.12.10 11:10:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Macromedia
[2005.12.10 12:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Složka odesílání Share-to-Web
[2005.12.10 14:59:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\InterVideo
[2005.12.10 17:38:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ICQLite
[2005.12.10 18:08:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Lavasoft
[2005.12.22 21:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Adobe
[2005.12.22 21:27:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\AdobeUM
[2005.12.22 21:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Leadertech
[2006.01.01 03:46:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\.BitTornado
[2006.01.01 17:26:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Help
[2006.01.29 12:03:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Google
[2006.05.20 22:57:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Skype
[2006.06.09 18:12:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\AdobeAUM
[2006.09.07 00:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Mozilla
[2007.04.06 12:39:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\teamspeak2
[2007.07.23 20:11:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\U3
[2007.10.10 20:57:04 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Ruud\Data aplikací\SecuROM
[2008.05.11 08:52:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Vso
[2008.07.02 07:21:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ICQ
[2008.07.10 18:24:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\ESET
[2008.12.15 07:30:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\uTorrent
[2008.12.15 19:48:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\skypePM
[2009.08.30 22:27:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Sun
[2010.01.25 20:02:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Apple Computer
[2010.02.28 18:34:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Malwarebytes
[2010.03.28 17:32:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Hewlett-Packard
[2010.08.26 19:38:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Canon Easy-WebPrint EX
[2010.08.26 19:43:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Canon
[2010.10.22 18:25:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\602XML
[2011.03.30 17:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\602Installer
[2012.05.27 08:51:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\Oracle
[2013.03.26 18:22:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ruud\Data aplikací\OpenOffice.org

< %APPDATA%\*.exe /s >
[2008.05.11 14:10:08 | 000,087,608 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\inst.exe
[2006.05.24 13:36:46 | 000,110,592 | ---- | M] () -- C:\Documents and Settings\Ruud\Data aplikací\U3\temp\cleanup.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2005.12.10 09:21:00 | 000,421,888 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
[2005.12.10 09:21:02 | 000,630,784 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2005.12.10 09:21:02 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2014.02.24 22:11:44 | 000,003,738 | ---- | M] () -- C:\WINDOWS\system32\qtplugin.log
[2014.02.24 22:11:52 | 000,028,672 | ---- | M] () -- C:\WINDOWS\system32\qttask.exe
[2014.02.27 01:59:06 | 000,000,292 | ---- | M] () -- C:\WINDOWS\system32\DVCState-{00000001-00000000-00000008-00001102-00000004-10071102}.dat
[2014.02.27 01:59:06 | 000,000,292 | ---- | M] () -- C:\WINDOWS\system32\DVCStateBkp-{00000001-00000000-00000008-00001102-00000004-10071102}.dat
[2014.02.27 01:59:06 | 000,028,548 | ---- | M] () -- C:\WINDOWS\system32\BMXState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.24 22:13:34 | 000,010,861 | ---- | M] () -- C:\WINDOWS\system32\QuickTime.qtp
[2014.02.27 01:59:06 | 000,028,548 | ---- | M] () -- C:\WINDOWS\system32\BMXStateBkp-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,025,824 | ---- | M] () -- C:\WINDOWS\system32\BMXCtrlState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx
[2014.02.27 01:59:06 | 000,025,824 | ---- | M] () -- C:\WINDOWS\system32\BMXBkpCtrlState-{00000001-00000000-00000008-00001102-00000004-10071102}.rfx

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.02.27 19:43:10 | 000,000,512 | ---- | M] () MD5=CFF4536F206A0FD778F6C75CB97C6D04 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2012.11.12 19:09:00 | 000,306,704 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Adobe\AIH.0be03cb1b6d1672ab6aa929923eda5ec208a263e\downloader.bundle
[2012.11.12 21:55:00 | 000,511,944 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Adobe\AIH.0be03cb1b6d1672ab6aa929923eda5ec208a263e\downloader.dll
[2005.06.07 12:25:46 | 000,044,032 | ---- | M] () -- \Program Files\WinRAR\RarExtLoader.exe
[2004.08.17 23:49:04 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2004.08.04 06:59:38 | 000,230,400 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.exe
[2004.08.04 06:59:38 | 000,278,016 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\osloader.ntd
[2002.12.12 00:14:32 | 000,033,280 | ---- | M] () -- \WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dmloader.dll
[2008.04.13 20:31:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.14 05:21:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 20:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 05:21:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2004.08.17 15:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2008.07.29 19:16:38 | 000,966,656 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2004.08.17 23:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2004.08.17 23:43:54 | 000,028,416 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\grserial.sys
[2014.02.21 18:26:42 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2014.02.17 23:53:58 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2008.07.25 11:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.29 19:16:38 | 000,966,656 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2008.04.14 04:17:26 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2004.07.20 02:54:18 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\snack\serial.sys
[2002.12.05 12:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2002.12.05 12:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2002.12.05 12:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2002.12.05 12:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 04:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2014.02.24 07:14:52 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.dump
[2014.02.24 19:58:54 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak

< *w7lxe* /s >

< End of report >