Logfile of random's system information tool 1.07 (written by random/random)
Run by Michal at 2010-05-17 19:24:06
Microsoft Windows 7 Ultimate Service Pack 3
System drive C: has 70 GB (70%) free of 100 GB
Total RAM: 4094 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:24:08, on 17.5.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ICQ7.1\ICQ.exe
C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\Michal\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Michal.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files (x86)\Logitech\Logitech Vid\vid.exe" -bootmode
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - Startup: Logitech . Registrace produktu.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_93C8148BBB233F43.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files (x86)\ICQ7.1\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) -
http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - ALWIL Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11965 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-05-07 798771]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-05-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-05-07 798771]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-05-06 2815192]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-10-14 2793304]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2010-03-13 75048]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=C:\Program Files (x86)\ICQ7.1\ICQ.exe [2010-05-07 133368]
"Logitech Vid"=C:\Program Files (x86)\Logitech\Logitech Vid\vid.exe [2009-07-16 5458704]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Logitech . Registrace produktu.lnk - C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr "=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=
"NoActiveDesktopChanges"=
"ForceActiveDesktopOn"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-05-17 19:23:52 ----D---- C:\rsit
2010-05-17 18:42:03 ----D---- C:\Program Files (x86)\CCleaner
2010-05-17 15:39:24 ----D---- C:\Users\Michal\AppData\Roaming\Malwarebytes
2010-05-17 15:39:17 ----D---- C:\ProgramData\Malwarebytes
2010-05-17 15:39:17 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-05-16 21:27:08 ----D---- C:\Program Files (x86)\trend micro
2010-05-16 20:21:49 ----D---- C:\Users\Michal\AppData\Roaming\NVIDIA
2010-05-16 19:49:29 ----D---- C:\ProgramData\NVIDIA
2010-05-16 19:49:02 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2010-05-16 19:48:14 ----A---- C:\Windows\SysWOW64\OpenCL.dll
2010-05-16 19:48:14 ----A---- C:\Windows\SysWOW64\nvwgf2um.dll
2010-05-16 19:48:13 ----A---- C:\Windows\SysWOW64\nvoglv32.dll
2010-05-16 19:48:13 ----A---- C:\Windows\SysWOW64\nvencodemft.dll
2010-05-16 19:48:13 ----A---- C:\Windows\SysWOW64\nvdecodemft.dll
2010-05-16 19:48:11 ----A---- C:\Windows\SysWOW64\nvcuvid.dll
2010-05-16 19:48:11 ----A---- C:\Windows\SysWOW64\nvcuvenc.dll
2010-05-16 19:48:10 ----A---- C:\Windows\SysWOW64\nvcuda.dll
2010-05-16 19:48:10 ----A---- C:\Windows\SysWOW64\nvcompiler.dll
2010-05-16 19:48:10 ----A---- C:\Windows\SysWOW64\nvapi.dll
2010-05-16 19:39:47 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2010-05-16 14:19:10 ----A---- C:\Windows\SysWOW64\XAudio2_5.dll
2010-05-16 14:19:10 ----A---- C:\Windows\SysWOW64\xactengine3_5.dll
2010-05-16 14:19:10 ----A---- C:\Windows\SysWOW64\D3DCompiler_42.dll
2010-05-16 14:19:08 ----A---- C:\Windows\SysWOW64\D3DX9_42.dll
2010-05-16 14:19:08 ----A---- C:\Windows\SysWOW64\d3dx11_42.dll
2010-05-16 14:19:08 ----A---- C:\Windows\SysWOW64\d3dx10_42.dll
2010-05-16 14:19:08 ----A---- C:\Windows\SysWOW64\d3dcsx_42.dll
2010-05-16 14:19:06 ----A---- C:\Windows\SysWOW64\XAPOFX1_3.dll
2010-05-16 14:19:04 ----A---- C:\Windows\SysWOW64\XAudio2_3.dll
2010-05-16 14:19:04 ----A---- C:\Windows\SysWOW64\XAPOFX1_2.dll
2010-05-16 14:19:04 ----A---- C:\Windows\SysWOW64\xactengine3_3.dll
2010-05-16 14:19:04 ----A---- C:\Windows\SysWOW64\X3DAudio1_5.dll
2010-05-16 14:19:03 ----A---- C:\Windows\SysWOW64\XAudio2_2.dll
2010-05-16 14:19:03 ----A---- C:\Windows\SysWOW64\XAPOFX1_1.dll
2010-05-16 14:19:03 ----A---- C:\Windows\SysWOW64\xactengine3_2.dll
2010-05-15 21:22:18 ----D---- C:\Program Files (x86)\Mozilla Firefox
2010-05-15 13:33:13 ----D---- C:\Program Files (x86)\Common Files\Adobe AIR
2010-05-15 13:27:56 ----A---- C:\Windows\SysWOW64\XAudio2_4.dll
2010-05-15 13:27:56 ----A---- C:\Windows\SysWOW64\D3DX9_41.dll
2010-05-15 13:27:56 ----A---- C:\Windows\SysWOW64\d3dx10_41.dll
2010-05-15 13:27:56 ----A---- C:\Windows\SysWOW64\D3DCompiler_41.dll
2010-05-15 13:27:55 ----A---- C:\Windows\SysWOW64\xactengine3_4.dll
2010-05-15 13:27:55 ----A---- C:\Windows\SysWOW64\X3DAudio1_6.dll
2010-05-15 13:27:55 ----A---- C:\Windows\SysWOW64\D3DX9_40.dll
2010-05-15 13:27:55 ----A---- C:\Windows\SysWOW64\d3dx10_40.dll
2010-05-15 13:27:55 ----A---- C:\Windows\SysWOW64\D3DCompiler_40.dll
2010-05-15 13:27:54 ----A---- C:\Windows\SysWOW64\d3dx10_39.dll
2010-05-15 13:27:54 ----A---- C:\Windows\SysWOW64\D3DCompiler_39.dll
2010-05-15 13:27:53 ----A---- C:\Windows\SysWOW64\D3DX9_39.dll
2010-05-15 13:27:52 ----A---- C:\Windows\SysWOW64\XAudio2_1.dll
2010-05-15 13:27:52 ----A---- C:\Windows\SysWOW64\XAPOFX1_0.dll
2010-05-15 13:27:52 ----A---- C:\Windows\SysWOW64\xactengine3_1.dll
2010-05-15 13:27:51 ----A---- C:\Windows\SysWOW64\X3DAudio1_4.dll
2010-05-15 13:27:51 ----A---- C:\Windows\SysWOW64\D3DX9_38.dll
2010-05-15 13:27:51 ----A---- C:\Windows\SysWOW64\d3dx10_38.dll
2010-05-15 13:27:51 ----A---- C:\Windows\SysWOW64\D3DCompiler_38.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\XAudio2_0.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\xactengine3_0.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\X3DAudio1_3.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\D3DX9_37.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\d3dx10_37.dll
2010-05-15 13:27:50 ----A---- C:\Windows\SysWOW64\D3DCompiler_37.dll
2010-05-15 13:27:49 ----A---- C:\Windows\SysWOW64\xactengine2_10.dll
2010-05-15 13:27:49 ----A---- C:\Windows\SysWOW64\d3dx10_36.dll
2010-05-15 13:27:49 ----A---- C:\Windows\SysWOW64\D3DCompiler_36.dll
2010-05-15 13:27:48 ----A---- C:\Windows\SysWOW64\xactengine2_9.dll
2010-05-15 13:27:48 ----A---- C:\Windows\SysWOW64\d3dx9_36.dll
2010-05-15 13:27:48 ----A---- C:\Windows\SysWOW64\d3dx9_35.dll
2010-05-15 13:27:48 ----A---- C:\Windows\SysWOW64\d3dx10_35.dll
2010-05-15 13:27:48 ----A---- C:\Windows\SysWOW64\D3DCompiler_35.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\xinput1_3.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\xactengine2_8.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\xactengine2_7.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\X3DAudio1_2.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\d3dx9_34.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\d3dx10_34.dll
2010-05-15 13:27:47 ----A---- C:\Windows\SysWOW64\D3DCompiler_34.dll
2010-05-15 13:27:46 ----A---- C:\Windows\SysWOW64\xactengine2_6.dll
2010-05-15 13:27:46 ----A---- C:\Windows\SysWOW64\d3dx9_33.dll
2010-05-15 13:27:46 ----A---- C:\Windows\SysWOW64\d3dx10_33.dll
2010-05-15 13:27:46 ----A---- C:\Windows\SysWOW64\D3DCompiler_33.dll
2010-05-15 13:27:45 ----A---- C:\Windows\SysWOW64\xactengine2_5.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\xactengine2_4.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\xactengine2_3.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\x3daudio1_1.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\d3dx9_32.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\d3dx9_31.dll
2010-05-15 13:27:44 ----A---- C:\Windows\SysWOW64\d3dx10.dll
2010-05-15 13:27:43 ----A---- C:\Windows\SysWOW64\xinput1_2.dll
2010-05-15 13:27:43 ----A---- C:\Windows\SysWOW64\xinput1_1.dll
2010-05-15 13:27:43 ----A---- C:\Windows\SysWOW64\xactengine2_2.dll
2010-05-15 13:27:43 ----A---- C:\Windows\SysWOW64\xactengine2_1.dll
2010-05-15 13:27:40 ----A---- C:\Windows\SysWOW64\xactengine2_0.dll
2010-05-15 13:27:40 ----A---- C:\Windows\SysWOW64\x3daudio1_0.dll
2010-05-15 13:27:40 ----A---- C:\Windows\SysWOW64\d3dx9_29.dll
2010-05-15 13:27:40 ----A---- C:\Windows\SysWOW64\d3dx9_28.dll
2010-05-15 13:27:40 ----A---- C:\Windows\SysWOW64\d3dx9_27.dll
2010-05-15 13:27:39 ----A---- C:\Windows\SysWOW64\d3dx9_26.dll
2010-05-15 13:27:39 ----A---- C:\Windows\SysWOW64\d3dx9_25.dll
2010-05-15 13:27:39 ----A---- C:\Windows\SysWOW64\d3dx9_24.dll
2010-05-15 13:17:08 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2010-05-15 12:52:08 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-05-15 12:46:43 ----D---- C:\Users\Michal\AppData\Roaming\DAEMON Tools Lite
2010-05-12 17:12:03 ----D---- C:\Program Files (x86)\Vitamini
2010-05-12 16:14:47 ----D---- C:\ProgramData\Adobe
2010-05-12 16:14:46 ----D---- C:\Program Files (x86)\Common Files\Adobe
2010-05-12 16:14:46 ----D---- C:\Program Files (x86)\Adobe
2010-05-12 15:36:28 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2010-05-12 15:35:23 ----D---- C:\Program Files (x86)\MSXML 4.0
2010-05-12 15:35:09 ----D---- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2010-05-12 15:32:16 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2010-05-11 19:31:59 ----A---- C:\Windows\WININIT.INI
2010-05-11 19:31:53 ----D---- C:\Program Files (x86)\Common Files\InstallShield
2010-05-11 16:17:57 ----A---- C:\Windows\SysWOW64\vbscript.dll
2010-05-11 16:17:55 ----A---- C:\Windows\SysWOW64\wmp.dll
2010-05-11 16:17:54 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2010-05-11 16:17:53 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2010-05-11 16:17:33 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2010-05-11 16:17:33 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2010-05-11 16:17:33 ----A---- C:\Windows\SysWOW64\secproc.dll
2010-05-11 16:17:33 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2010-05-11 16:17:33 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2010-05-11 16:17:32 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2010-05-11 16:17:32 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2010-05-11 16:17:32 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2010-05-11 16:17:31 ----A---- C:\Windows\SysWOW64\t2embed.dll
2010-05-11 16:17:31 ----A---- C:\Windows\SysWOW64\fontsub.dll
2010-05-11 16:17:31 ----A---- C:\Windows\SysWOW64\atmfd.dll
2010-05-11 16:17:30 ----A---- C:\Windows\SysWOW64\explorer.exe
2010-05-11 16:17:30 ----A---- C:\Windows\explorer.exe
2010-05-11 16:17:29 ----A---- C:\Windows\SysWOW64\wow32.dll
2010-05-11 16:17:29 ----A---- C:\Windows\SysWOW64\user.exe
2010-05-11 16:17:29 ----A---- C:\Windows\SysWOW64\setup16.exe
2010-05-11 16:17:29 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2010-05-11 16:17:29 ----A---- C:\Windows\SysWOW64\instnm.exe
2010-05-11 16:17:25 ----A---- C:\Windows\SysWOW64\mshtml.dll
2010-05-11 16:17:25 ----A---- C:\Windows\SysWOW64\ieframe.dll
2010-05-11 16:17:24 ----A---- C:\Windows\SysWOW64\mstime.dll
2010-05-11 16:17:23 ----A---- C:\Windows\SysWOW64\wininet.dll
2010-05-11 16:17:23 ----A---- C:\Windows\SysWOW64\urlmon.dll
2010-05-11 16:17:23 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2010-05-11 16:17:23 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2010-05-11 16:17:20 ----A---- C:\Windows\SysWOW64\tzres.dll
2010-05-11 16:08:32 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2010-05-11 16:08:32 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2010-05-11 16:08:25 ----A---- C:\Windows\SysWOW64\msasn1.dll
2010-05-07 21:45:54 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2010-05-07 21:38:14 ----A---- C:\Windows\NeroDigital.ini
2010-05-07 19:46:49 ----D---- C:\Program Files (x86)\Common Files\Innovative Solutions
2010-05-07 19:46:48 ----D---- C:\ProgramData\Innovative Solutions
2010-05-07 19:21:06 ----A---- C:\LOGFILE.TXT
2010-05-07 19:20:40 ----A---- C:\Windows\WTRDCTM.INI
2010-05-07 19:18:22 ----D---- C:\TRANSLAT
2010-05-07 19:18:19 ----D---- C:\ProgramData\LangSoft
2010-05-07 19:17:53 ----D---- C:\Users\Michal\AppData\Roaming\LangSoft
2010-05-07 19:12:36 ----D---- C:\Users\Michal\AppData\Roaming\Nero
2010-05-07 19:03:20 ----D---- C:\Program Files (x86)\Nero
2010-05-07 19:03:07 ----D---- C:\ProgramData\Nero
2010-05-07 19:03:07 ----D---- C:\Program Files (x86)\Common Files\Nero
2010-05-07 19:02:52 ----A---- C:\Windows\SysWOW64\d3dx9_30.dll
2010-05-07 18:55:02 ----D---- C:\Program Files (x86)\Lavalys
2010-05-07 16:20:06 ----D---- C:\Program Files (x86)\Logitech
2010-05-07 16:19:57 ----D---- C:\Users\Michal\AppData\Roaming\Leadertech
2010-05-07 16:19:08 ----A---- C:\Windows\SysWOW64\LVUI2RC.dll
2010-05-07 16:19:08 ----A---- C:\Windows\SysWOW64\LVUI2.dll
2010-05-07 16:19:08 ----A---- C:\Windows\SysWOW64\lvcodec2.dll
2010-05-07 16:18:45 ----D---- C:\ProgramData\LogiShrd
2010-05-07 16:18:45 ----D---- C:\Program Files (x86)\Common Files\LogiShrd
2010-05-07 16:00:21 ----D---- C:\Users\Michal\AppData\Roaming\HP
2010-05-07 16:00:21 ----D---- C:\ProgramData\WEBREG
2010-05-07 15:48:42 ----D---- C:\ProgramData\HP Product Assistant
2010-05-07 15:47:38 ----D---- C:\Program Files (x86)\Common Files\HP
2010-05-07 15:47:19 ----D---- C:\Program Files (x86)\Common Files\Hewlett-Packard
2010-05-07 15:46:11 ----D---- C:\Program Files (x86)\HP
2010-05-07 15:44:18 ----D---- C:\ProgramData\HP
2010-05-07 15:37:17 ----D---- C:\Windows\.jagex_cache_32
2010-05-07 15:37:10 ----D---- C:\Windows\Sun
2010-05-07 15:36:55 ----D---- C:\ProgramData\Sun
2010-05-07 15:36:55 ----D---- C:\Program Files (x86)\Common Files\Java
2010-05-07 15:36:35 ----A---- C:\Windows\SysWOW64\javaws.exe
2010-05-07 15:36:35 ----A---- C:\Windows\SysWOW64\javaw.exe
2010-05-07 15:36:35 ----A---- C:\Windows\SysWOW64\java.exe
2010-05-07 15:36:35 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2010-05-07 15:36:27 ----D---- C:\Program Files (x86)\Java
2010-05-07 13:41:34 ----D---- C:\Users\Michal\AppData\Roaming\WinRAR
2010-05-07 13:41:03 ----D---- C:\Program Files (x86)\WinRAR
2010-05-07 13:23:28 ----A---- C:\Windows\SysWOW64\aswBoot.exe
2010-05-07 13:23:26 ----D---- C:\ProgramData\Alwil Software
2010-05-07 13:21:53 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-05-07 13:21:04 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-05-07 13:20:44 ----RD---- C:\Program Files (x86)\Skype
2010-05-07 13:20:44 ----D---- C:\Program Files (x86)\Common Files\Skype
2010-05-07 13:20:43 ----D---- C:\ProgramData\Skype
2010-05-07 13:16:51 ----D---- C:\Program Files (x86)\ICQ6Toolbar
2010-05-07 13:16:50 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2010-05-07 13:16:50 ----D---- C:\Users\Michal\AppData\Roaming\Mozilla
2010-05-07 13:16:50 ----D---- C:\ProgramData\ICQ
2010-05-07 13:16:23 ----D---- C:\Program Files (x86)\ICQ7.1
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\quartz.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\msyuv.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\msrle32.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2010-05-07 13:09:06 ----A---- C:\Windows\SysWOW64\avifil32.dll
2010-05-07 13:09:03 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2010-05-07 13:09:03 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2010-05-07 13:08:46 ----A---- C:\Windows\SysWOW64\jscript.dll
2010-05-07 13:08:44 ----A---- C:\Windows\SysWOW64\shell32.dll
2010-05-07 13:08:43 ----A---- C:\Windows\SysWOW64\sspicli.dll
2010-05-07 13:08:43 ----A---- C:\Windows\SysWOW64\secur32.dll
2010-05-06 23:49:45 ----D---- C:\Program Files (x86)\Google
2010-05-06 23:47:44 ----D---- C:\Program Files (x86)\Microsoft Works
2010-05-06 23:47:29 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2010-05-06 23:47:29 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2010-05-06 23:47:19 ----D---- C:\Windows\PCHEALTH
2010-05-06 23:47:19 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-05-06 23:46:02 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2010-05-06 23:45:39 ----D---- C:\Program Files (x86)\Microsoft Office
2010-05-06 23:45:38 ----D---- C:\ProgramData\Microsoft Help
2010-05-06 23:45:36 ----SHD---- C:\Windows\Installer
2010-05-06 23:35:54 ----A---- C:\Windows\SysWOW64\wintrust.dll
2010-05-06 23:35:53 ----A---- C:\Windows\SysWOW64\cabview.dll
2010-05-06 23:35:36 ----D---- C:\Users\Michal\AppData\Roaming\Macromedia
2010-05-06 23:35:12 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-05-06 23:35:11 ----D---- C:\Windows\SysWOW64\Macromed
2010-05-06 23:32:18 ----D---- C:\Users\Michal\AppData\Roaming\Identities
2010-05-06 23:31:59 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-05-06 23:31:59 ----D---- C:\Users\Michal\AppData\Roaming\Media Center Programs
2010-05-06 23:30:32 ----SHD---- C:\Recovery
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Šablony
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Plocha
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Oblíbené položky
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Nabídka Start
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Dokumenty
2010-05-06 23:30:32 ----SHD---- C:\ProgramData\Data aplikací
2010-05-01 08:13:56 ----D---- C:\Windows\Panther
2010-05-01 08:13:50 ----H---- C:\Boot.BAK
2010-05-01 07:18:02 ----D---- C:\Windows\SoftwareDistribution
2010-05-01 07:15:14 ----D---- C:\Windows\Prefetch
2010-05-01 06:32:45 ----RASH---- C:\BOOTSECT.BAK
2010-05-01 06:32:42 ----SHD---- C:\Boot
======List of files/folders modified in the last 1 months======
2010-05-17 19:24:08 ----D---- C:\Windows\Temp
2010-05-17 19:21:24 ----SHD---- C:\System Volume Information
2010-05-17 19:17:32 ----RD---- C:\Program Files (x86)
2010-05-17 19:17:32 ----D---- C:\Windows\SysWOW64
2010-05-17 19:17:32 ----D---- C:\Windows\system
2010-05-17 19:17:32 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2010-05-17 18:47:32 ----SD---- C:\ProgramData\Microsoft
2010-05-17 18:43:02 ----D---- C:\Windows\debug
2010-05-17 18:43:02 ----D---- C:\Windows
2010-05-17 18:39:48 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-05-17 18:14:06 ----HD---- C:\Config.Msi
2010-05-17 16:19:15 ----D---- C:\Windows\System32
2010-05-17 16:19:15 ----D---- C:\Windows\inf
2010-05-17 15:39:18 ----D---- C:\Windows\SysWOW64\drivers
2010-05-17 15:39:17 ----HD---- C:\ProgramData
2010-05-16 19:49:23 ----D---- C:\Windows\Help
2010-05-16 19:48:49 ----RD---- C:\Program Files
2010-05-16 19:48:04 ----D---- C:\NVIDIA
2010-05-16 19:39:46 ----D---- C:\Windows\Downloaded Program Files
2010-05-16 17:03:32 ----RSD---- C:\Windows\assembly
2010-05-15 13:33:13 ----D---- C:\Program Files (x86)\Common Files
2010-05-15 13:27:41 ----D---- C:\Windows\Microsoft.NET
2010-05-15 13:26:56 ----D---- C:\Windows\Logs
2010-05-12 16:01:00 ----D---- C:\Program Files (x86)\Windows Mail
2010-05-12 15:54:56 ----D---- C:\Windows\winsxs
2010-05-12 15:52:59 ----D---- C:\Program Files (x86)\Windows Media Player
2010-05-12 15:52:59 ----D---- C:\Program Files (x86)\Internet Explorer
2010-05-12 15:52:58 ----D---- C:\Windows\SysWOW64\cs-CZ
2010-05-12 15:52:58 ----D---- C:\Windows\AppPatch
2010-05-12 15:52:57 ----D---- C:\Windows\ehome
2010-05-11 20:06:11 ----RSD---- C:\Windows\Fonts
2010-05-07 16:19:18 ----D---- C:\Windows\twain_32
2010-05-07 15:51:53 ----A---- C:\Windows\win.ini
2010-05-07 14:47:08 ----D---- C:\Program Files (x86)\Common Files\System
2010-05-06 23:50:07 ----D---- C:\Windows\Tasks
2010-05-06 23:47:33 ----D---- C:\Program Files (x86)\MSBuild
2010-05-06 23:47:28 ----D---- C:\Windows\ShellNew
2010-05-06 23:32:12 ----SHD---- C:\$Recycle.Bin
2010-05-06 23:31:59 ----RD---- C:\Users
2010-05-06 23:27:43 ----D---- C:\Windows\rescache
2010-05-01 08:13:50 ----RASH---- C:\Boot.ini.saved
2010-05-01 08:13:36 ----D---- C:\Windows\Setup
2010-05-01 07:15:40 ----D---- C:\Windows\CSC