Re: Olmarik.ZC
Napsal: 05 úno 2011 20:41
========== Files/Folders - Created Within 30 Days ==========
[2011/02/05 12:32:57 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Paťo\Desktop\OTL.exe
[2011/02/05 12:27:06 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Nero
[2011/02/05 10:33:54 | 000,000,000 | ---D | C] -- C:\Windows\TEMP
[2011/02/05 10:30:09 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/02/05 10:30:05 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\temp
[2011/02/05 10:14:59 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011/02/05 10:14:01 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2011/02/04 23:03:59 | 000,000,000 | ---D | C] -- C:\Users\Paťo\Desktop\Vykoupení z věznice Shawshank
[2011/02/04 15:31:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2011/02/04 15:30:02 | 000,311,312 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\4425226.sys
[2011/02/04 15:30:02 | 000,128,016 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\44252261.sys
[2011/02/04 15:30:02 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\44252262.sys
[2011/02/04 15:30:01 | 000,000,000 | ---D | C] -- C:\Program Files\Virus Removal Tool
[2011/02/03 20:59:45 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Malwarebytes
[2011/02/03 20:59:41 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/02/03 20:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/02/03 20:59:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/02/03 20:59:36 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/02/03 20:59:36 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/02/03 18:01:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2011/02/03 18:01:33 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2011/02/03 17:58:20 | 000,000,000 | ---D | C] -- C:\Program Files\Counter-Strike 1.6
[2011/02/01 17:38:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011/02/01 17:38:34 | 000,240,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2011/01/31 22:05:26 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/01/31 22:05:26 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/01/31 22:05:25 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/01/31 22:05:21 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/01/31 22:04:59 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/01/31 21:50:57 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011/01/31 13:15:25 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011/01/31 13:15:25 | 000,000,000 | ---D | C] -- C:\rsit
[2011/01/31 11:29:28 | 015,047,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2011/01/31 11:29:28 | 013,011,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2011/01/31 11:29:28 | 010,467,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2011/01/31 11:29:28 | 004,941,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2011/01/31 11:29:28 | 002,895,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2011/01/31 11:29:28 | 002,251,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2011/01/31 11:29:28 | 000,941,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322090.dll
[2011/01/31 11:29:28 | 000,837,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322040.dll
[2011/01/31 11:29:28 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2011/01/31 11:29:28 | 000,010,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd
[2011/01/31 01:07:05 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2011/01/30 20:50:09 | 000,000,000 | ---D | C] -- C:\Users\Paťo\Documents\Downloads
[2011/01/30 15:11:20 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2011/01/30 12:23:29 | 000,000,000 | ---D | C] -- C:\Program Files\Yamicsoft
[2011/01/30 12:23:29 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Manager
[2011/01/24 22:26:06 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\BuildAGadget Content
[2011/01/24 21:35:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
[2011/01/24 21:35:29 | 000,000,000 | ---D | C] -- C:\Program Files\FinalWire
[2011/01/23 17:18:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopCD
[2011/01/23 17:17:18 | 000,000,000 | ---D | C] -- C:\Program Files\FlatOut2
[2011/01/11 22:30:24 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011/01/11 22:30:22 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2011/01/11 22:30:22 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011/01/11 22:30:21 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/01/11 22:30:20 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2011/01/11 22:30:20 | 000,801,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2011/01/11 22:30:20 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/01/11 22:30:19 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2011/01/11 22:30:19 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/01/11 22:30:19 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2011/01/11 22:30:18 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2011/01/11 22:30:18 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011/01/11 22:30:18 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2011/01/11 22:30:18 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2011/01/11 22:30:18 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011/01/11 22:30:17 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011/01/09 08:45:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011/01/08 23:16:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Theft Auto IV - Episodes From Liberty City
[2011/01/08 18:45:21 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Sports Interactive
[2011/01/07 23:42:42 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2011/01/07 22:19:21 | 000,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe
[2011/01/07 22:18:36 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sports Interactive
[2011/01/07 22:16:11 | 000,000,000 | ---D | C] -- C:\Program Files\Sports Interactive
[2011/01/07 21:06:44 | 000,580,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\easyUpdatusAPIU.dll
[2011/01/07 21:06:34 | 003,597,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[2011/01/07 21:06:14 | 002,620,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2011/01/07 21:06:02 | 000,111,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
[2011/01/07 02:44:14 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\LogMeIn Hamachi
[2011/01/07 02:43:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2011/01/07 02:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2010/10/16 17:12:44 | 001,232,896 | ---- | C] ( ) -- C:\Windows\System32\lxddserv.dll
[2010/10/16 17:12:44 | 000,999,424 | ---- | C] ( ) -- C:\Windows\System32\lxddusb1.dll
[2010/10/16 17:12:44 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxddpmui.dll
[2010/10/16 17:12:44 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxddlmpm.dll
[2010/10/16 17:12:44 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxddinpa.dll
[2010/10/16 17:12:44 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxddiesc.dll
[2010/10/16 17:12:44 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\LXDDhcp.dll
[2010/10/16 17:12:44 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxddprox.dll
[2010/10/16 17:12:44 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxddpplc.dll
[2010/10/16 17:12:43 | 000,700,416 | ---- | C] ( ) -- C:\Windows\System32\lxddhbn3.dll
[2010/10/16 17:12:43 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxddcomc.dll
[2010/10/16 17:12:43 | 000,425,984 | ---- | C] ( ) -- C:\Windows\System32\lxddcomm.dll
========== Files - Modified Within 30 Days ==========
[2011/02/05 12:33:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Paťo\Desktop\OTL.exe
[2011/02/05 12:27:32 | 000,000,113 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011/02/05 12:18:32 | 000,621,994 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/02/05 12:18:32 | 000,111,082 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/02/05 12:18:00 | 000,000,996 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/05 12:16:26 | 005,785,600 | ---- | M] () -- C:\Users\Paťo\Desktop\Gerry Rafferty - Baker Street.mp3
[2011/02/05 12:09:17 | 000,248,367 | ---- | M] () -- C:\Qoobox.rar
[2011/02/05 12:05:26 | 000,000,992 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/05 10:27:59 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:16:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/02/05 10:16:57 | 2012,717,056 | -HS- | M] () -- C:\hiberfil.sys
[2011/02/05 10:16:56 | 000,430,209 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2011/02/04 22:57:51 | 737,011,712 | ---- | M] () -- C:\Users\Paťo\Desktop\Mlceni jehnatek.avi
[2011/02/04 15:31:57 | 000,002,461 | ---- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_04.02.2011_08-53.lnk
[2011/02/03 20:59:41 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/03 18:01:36 | 000,000,994 | ---- | M] () -- C:\Users\Paťo\Desktop\Counter-Strike 1.6.lnk
[2011/02/03 13:52:54 | 004,263,406 | R--- | M] () -- C:\Users\Paťo\Desktop\ComboFix.exe
[2011/02/02 17:18:31 | 3554,057,131 | ---- | M] () -- C:\Users\Paťo\Desktop\HUDBA.rar
[2011/02/02 16:26:03 | 039,627,172 | ---- | M] () -- C:\Users\Paťo\Desktop\ZALOHOVAT.rar
[2011/02/01 17:39:45 | 000,002,154 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011/01/23 14:50:25 | 000,004,608 | ---- | M] () -- C:\Users\Paťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/19 21:22:06 | 000,000,896 | ---- | M] () -- C:\Users\Paťo\AppData\Local\SRDownloader.nast
[2011/01/19 18:45:18 | 000,004,896 | ---- | M] () -- C:\Users\Paťo\AppData\Local\SRDownloader.err
[2011/01/08 04:27:00 | 015,047,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2011/01/08 04:27:00 | 013,011,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2011/01/08 04:27:00 | 010,467,656 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2011/01/08 04:27:00 | 010,078,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll
[2011/01/08 04:27:00 | 005,653,096 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
[2011/01/08 04:27:00 | 004,941,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2011/01/08 04:27:00 | 002,895,976 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2011/01/08 04:27:00 | 002,251,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2011/01/08 04:27:00 | 001,965,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll
[2011/01/08 04:27:00 | 000,941,160 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322090.dll
[2011/01/08 04:27:00 | 000,837,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322040.dll
[2011/01/08 04:27:00 | 000,057,960 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2011/01/08 04:27:00 | 000,010,920 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd
[2011/01/08 04:27:00 | 000,004,756 | ---- | M] () -- C:\Windows\System32\nvinfo.pb
[2011/01/07 22:51:37 | 000,103,959 | -H-- | M] () -- C:\treeinfo.wc
[2011/01/07 21:06:44 | 000,580,200 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\easyUpdatusAPIU.dll
[2011/01/07 21:06:34 | 003,597,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[2011/01/07 21:06:14 | 002,620,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2011/01/07 21:06:02 | 000,111,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
========== Files Created - No Company Name ==========
[2011/02/05 12:27:05 | 000,000,113 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011/02/05 12:16:11 | 005,785,600 | ---- | C] () -- C:\Users\Paťo\Desktop\Gerry Rafferty - Baker Street.mp3
[2011/02/05 12:09:16 | 000,248,367 | ---- | C] () -- C:\Qoobox.rar
[2011/02/04 22:54:49 | 734,040,063 | ---- | C] () -- C:\Users\Paťo\Desktop\Na kridlech vazky.avi
[2011/02/04 22:51:43 | 737,011,712 | ---- | C] () -- C:\Users\Paťo\Desktop\Mlceni jehnatek.avi
[2011/02/04 15:31:57 | 000,002,461 | ---- | C] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_04.02.2011_08-53.lnk
[2011/02/03 20:59:41 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/03 18:01:36 | 000,000,994 | ---- | C] () -- C:\Users\Paťo\Desktop\Counter-Strike 1.6.lnk
[2011/02/02 16:24:46 | 3554,057,131 | ---- | C] () -- C:\Users\Paťo\Desktop\HUDBA.rar
[2011/02/02 16:24:46 | 039,627,172 | ---- | C] () -- C:\Users\Paťo\Desktop\ZALOHOVAT.rar
[2011/02/01 17:39:45 | 000,002,154 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011/02/01 17:38:44 | 000,001,857 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011/01/31 22:05:26 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011/01/31 22:05:26 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011/01/31 22:05:25 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/01/31 22:05:25 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/01/31 22:05:25 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/01/31 22:03:25 | 004,263,406 | R--- | C] () -- C:\Users\Paťo\Desktop\ComboFix.exe
[2011/01/09 08:45:01 | 000,001,298 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2011/01/02 23:23:59 | 000,004,896 | ---- | C] () -- C:\Users\Paťo\AppData\Local\SRDownloader.err
[2011/01/02 23:23:55 | 000,000,896 | ---- | C] () -- C:\Users\Paťo\AppData\Local\SRDownloader.nast
[2010/12/05 13:44:34 | 000,004,608 | ---- | C] () -- C:\Users\Paťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/15 16:54:18 | 000,000,321 | ---- | C] () -- C:\Windows\System32\Remover.ini
[2010/11/15 16:54:17 | 000,000,566 | ---- | C] () -- C:\Windows\System32\SP7302.ini
[2010/11/10 15:03:04 | 000,000,175 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/10/29 11:54:20 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2010/10/22 22:36:08 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI
[2010/10/16 17:15:48 | 000,000,867 | ---- | C] () -- C:\ProgramData\lxdd
[2010/10/16 17:12:44 | 000,286,720 | ---- | C] () -- C:\Windows\System32\LXDDinst.dll
[2010/10/16 17:12:43 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxddgrd.dll
[2010/10/16 12:54:09 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010/10/14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010/09/28 20:44:48 | 001,196,032 | ---- | C] () -- C:\Program Files\Game CD Key List 3.90.exe
[2010/04/06 17:33:10 | 000,025,864 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2009/07/14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2007/03/28 13:16:44 | 000,344,064 | ---- | C] () -- C:\Windows\System32\lxddcoin.dll
[2007/01/23 18:40:04 | 000,065,536 | ---- | C] () -- C:\Windows\System32\lxddcaps.dll
[2007/01/09 16:13:08 | 000,692,224 | ---- | C] () -- C:\Windows\System32\lxdddrs.dll
[2006/10/06 16:08:04 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxddcnv4.dll
[2006/05/18 01:47:12 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxddvs.dll
[2002/10/15 23:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\System32\unrar.dll
========== LOP Check ==========
[2011/01/07 11:30:50 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\AIMP
[2010/10/16 11:38:10 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\ESET
[2011/01/24 17:34:28 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\GetRightToGo
[2011/01/07 11:27:23 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\HandBrake
[2010/10/29 13:01:19 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\PC Suite
[2010/11/02 12:00:02 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\TuneUp Software
[2011/02/05 12:17:11 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\AIMP
[2010/10/16 14:38:39 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ashampoo
[2010/12/29 09:29:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Audacity
[2010/10/16 13:40:32 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\DAEMON Tools Lite
[2010/10/16 11:31:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ESET
[2010/10/16 15:14:21 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\GHISLER
[2011/01/05 12:59:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\HandBrake
[2011/01/29 01:37:13 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ICQ
[2010/10/16 15:55:50 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Leadertech
[2010/10/29 11:33:23 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PC Suite
[2010/10/16 15:45:31 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PhotoFiltre Studio X
[2010/12/30 23:44:08 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Publish Providers
[2010/11/28 19:52:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Screaming Bee
[2010/12/30 23:44:05 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Sony
[2010/11/01 22:51:10 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\TuneUp Software
[2011/02/04 23:44:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\uTorrent
[2011/01/07 23:42:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2010/11/18 15:55:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VSO
[2010/10/16 11:58:44 | 000,000,000 | ---D | M] -- C:\Users\Zorka\AppData\Roaming\ESET
[2010/10/29 13:15:49 | 000,000,000 | ---D | M] -- C:\Users\Zorka\AppData\Roaming\PC Suite
[2011/01/08 10:24:50 | 000,032,554 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2009/07/14 02:14:38 | 001,173,504 | ---- | M] (Microsoft Corporation)
< c:\windows\*.* /U >
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2010/11/21 16:02:59 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Adobe
[2010/11/03 22:21:17 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ahead
[2011/02/05 12:17:11 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\AIMP
[2010/10/16 14:38:39 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ashampoo
[2010/12/29 09:29:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Audacity
[2010/10/16 13:40:32 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\DAEMON Tools Lite
[2010/10/16 11:31:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ESET
[2010/10/16 15:14:21 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\GHISLER
[2010/10/22 15:48:18 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Hamachi
[2011/01/05 12:59:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\HandBrake
[2011/01/29 01:37:13 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ICQ
[2010/10/16 15:45:27 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Identities
[2010/10/16 15:55:50 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Leadertech
[2010/10/16 10:33:41 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Macromedia
[2011/02/03 20:59:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Malwarebytes
[2009/07/14 08:48:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Media Center Programs
[2011/02/01 17:37:32 | 000,000,000 | --SD | M] -- C:\Users\Paťo\AppData\Roaming\Microsoft
[2010/10/16 13:21:17 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Mozilla
[2011/02/05 12:27:06 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Nero
[2010/10/29 11:33:23 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PC Suite
[2010/10/16 15:45:31 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PhotoFiltre Studio X
[2010/12/30 23:44:08 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Publish Providers
[2010/11/28 19:52:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Screaming Bee
[2011/02/02 23:23:40 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Skype
[2011/02/02 16:23:54 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\skypePM
[2010/12/30 23:44:05 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Sony
[2010/11/01 22:51:10 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\TuneUp Software
[2011/02/04 23:44:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\uTorrent
[2011/01/07 23:42:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2010/11/18 15:55:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VSO
[2011/01/31 11:53:54 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Winamp
< %APPDATA%\*.exe /s >
[2011/01/07 22:18:36 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\ARPPRODUCTICON.exe
[2011/01/07 22:18:36 | 000,049,152 | R--- | M] (InstallShield Software Corp.) -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\editor_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/07 22:18:36 | 000,049,152 | R--- | M] (InstallShield Software Corp.) -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\fm2005segatest1_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/07 22:18:36 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\fm2005segatest_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ClickCleaner.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ContextMenuManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DesktopCleaner.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DiskAnalyzer.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DuplicateFilesFinder.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FileSecurity.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FileSplitter.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FreeMemory.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\IEManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\IPSwitcher.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\JumpListQuickLauncher.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\JunkFileCleaner.exe
[2011/01/30 12:23:32 | 000,005,430 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\LiveUpdate.exe
[2011/01/30 12:23:32 | 000,013,262 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\OptimizationWizard.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\PrivacyProtector.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ProcessManager.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryCleaner.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryDefrag.exe
[2011/01/30 12:23:32 | 000,304,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryTools.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RepairCenter.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RunShortcutCreator.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ServiceManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SmartUninstaller.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\StartupManager.exe
[2011/01/30 12:23:32 | 000,082,726 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SuperCopy.exe
[2011/01/30 12:23:32 | 000,014,534 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SystemFolder_msiexec.exe
[2011/01/30 12:23:32 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SystemInfo.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\TaskSchedulerManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\VisualCustomizer.exe
[2011/01/30 12:23:32 | 000,092,560 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\Windows7Manager.exe
[2011/01/30 12:23:32 | 000,013,262 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\WinUtilities.exe
< MD5 for: AGP440.SYS >
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
< MD5 for: CDROM.SYS >
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\drivers\cdrom.sys
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_db87d184bc84f910\cdrom.sys
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
< MD5 for: CNGAUDIT.DLL >
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: CRYPTSVC.DLL >
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\ERDNT\cache\cryptsvc.dll
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\System32\cryptsvc.dll
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
< MD5 for: EXPLORER.EXE >
[2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\ERDNT\cache\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009/08/03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: HAL.DLL >
[2009/07/14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\System32\hal.dll
[2009/07/14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll
< MD5 for: IASTORV.SYS >
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
< MD5 for: ISAPNP.SYS >
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\isapnp.sys
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\isapnp.sys
< MD5 for: LSASS.EXE >
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\ERDNT\cache\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\System32\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_a620e0e5be1ecda7\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_a61fe281be1fb177\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_a69eaf60d7456d32\lsass.exe
< MD5 for: NDIS.SYS >
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\ERDNT\cache\ndis.sys
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\System32\drivers\ndis.sys
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\ERDNT\cache\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVRAID.SYS >
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\drivers\nvraid.sys
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvraid.sys
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys
< MD5 for: NVSTOR.SYS >
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
< MD5 for: SMSS.EXE >
[2009/07/14 02:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\System32\smss.exe
[2009/07/14 02:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe
< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\ERDNT\cache\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
< MD5 for: TCPIP.SYS >
[2009/07/14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010/04/09 08:16:33 | 001,289,096 | ---- | M] (Microsoft Corporation) MD5=5D6A83E928F22AF5AC9868B162FFAD0D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_b38009a0e0d5a32d\tcpip.sys
[2010/04/09 08:24:54 | 001,285,000 | ---- | M] (Microsoft Corporation) MD5=63170B9EE1D0EF0032F0408605671D1A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_b30e0d41c7a5fe2f\tcpip.sys
[2010/06/14 07:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\ERDNT\cache\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\System32\drivers\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
< MD5 for: USERINIT.EXE >
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\ERDNT\cache\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\ERDNT\cache\winlogon.exe
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009/07/14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< MD5 for: WS2_32.DLL >
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\ERDNT\cache\ws2_32.dll
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\System32\ws2_32.dll
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010/10/24 21:25:38 | 000,043,392 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\drivers\MpNWMon.sys
[2010/10/16 12:54:09 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
No captured output from command...
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
No captured output from command...
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
No captured output from command...
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:16:56 | 000,430,209 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2011/02/05 12:18:32 | 000,111,082 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/02/05 12:18:32 | 000,621,994 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/02/05 12:18:32 | 000,738,000 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
========== Files - Unicode (All) ==========
[2011/01/31 18:06:02 | 010,541,705 | ---- | M] ()(C:\Users\Paťo\Desktop\Dj Next - ??? ???? _ SuMMeR HiT (2010).mp4) -- C:\Users\Paťo\Desktop\Dj Next - Хит Лета _ SuMMeR HiT (2010).mp4
[2011/01/31 18:02:49 | 010,541,705 | ---- | C] ()(C:\Users\Paťo\Desktop\Dj Next - ??? ???? _ SuMMeR HiT (2010).mp4) -- C:\Users\Paťo\Desktop\Dj Next - Хит Лета _ SuMMeR HiT (2010).mp4
< End of report >
[2011/02/05 12:32:57 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Paťo\Desktop\OTL.exe
[2011/02/05 12:27:06 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Nero
[2011/02/05 10:33:54 | 000,000,000 | ---D | C] -- C:\Windows\TEMP
[2011/02/05 10:30:09 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/02/05 10:30:05 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\temp
[2011/02/05 10:14:59 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011/02/05 10:14:01 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2011/02/04 23:03:59 | 000,000,000 | ---D | C] -- C:\Users\Paťo\Desktop\Vykoupení z věznice Shawshank
[2011/02/04 15:31:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2011/02/04 15:30:02 | 000,311,312 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\4425226.sys
[2011/02/04 15:30:02 | 000,128,016 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\44252261.sys
[2011/02/04 15:30:02 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\Windows\System32\drivers\44252262.sys
[2011/02/04 15:30:01 | 000,000,000 | ---D | C] -- C:\Program Files\Virus Removal Tool
[2011/02/03 20:59:45 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Malwarebytes
[2011/02/03 20:59:41 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/02/03 20:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/02/03 20:59:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/02/03 20:59:36 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/02/03 20:59:36 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/02/03 18:01:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2011/02/03 18:01:33 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2011/02/03 17:58:20 | 000,000,000 | ---D | C] -- C:\Program Files\Counter-Strike 1.6
[2011/02/01 17:38:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011/02/01 17:38:34 | 000,240,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2011/01/31 22:05:26 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/01/31 22:05:26 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/01/31 22:05:25 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/01/31 22:05:21 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/01/31 22:04:59 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/01/31 21:50:57 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011/01/31 13:15:25 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011/01/31 13:15:25 | 000,000,000 | ---D | C] -- C:\rsit
[2011/01/31 11:29:28 | 015,047,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2011/01/31 11:29:28 | 013,011,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2011/01/31 11:29:28 | 010,467,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2011/01/31 11:29:28 | 004,941,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2011/01/31 11:29:28 | 002,895,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2011/01/31 11:29:28 | 002,251,368 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2011/01/31 11:29:28 | 000,941,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322090.dll
[2011/01/31 11:29:28 | 000,837,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322040.dll
[2011/01/31 11:29:28 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2011/01/31 11:29:28 | 000,010,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd
[2011/01/31 01:07:05 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2011/01/30 20:50:09 | 000,000,000 | ---D | C] -- C:\Users\Paťo\Documents\Downloads
[2011/01/30 15:11:20 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2011/01/30 12:23:29 | 000,000,000 | ---D | C] -- C:\Program Files\Yamicsoft
[2011/01/30 12:23:29 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Manager
[2011/01/24 22:26:06 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\BuildAGadget Content
[2011/01/24 21:35:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
[2011/01/24 21:35:29 | 000,000,000 | ---D | C] -- C:\Program Files\FinalWire
[2011/01/23 17:18:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TopCD
[2011/01/23 17:17:18 | 000,000,000 | ---D | C] -- C:\Program Files\FlatOut2
[2011/01/11 22:30:24 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011/01/11 22:30:22 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2011/01/11 22:30:22 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011/01/11 22:30:21 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/01/11 22:30:20 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2011/01/11 22:30:20 | 000,801,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2011/01/11 22:30:20 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/01/11 22:30:19 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2011/01/11 22:30:19 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/01/11 22:30:19 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2011/01/11 22:30:18 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2011/01/11 22:30:18 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011/01/11 22:30:18 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2011/01/11 22:30:18 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2011/01/11 22:30:18 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011/01/11 22:30:17 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011/01/09 08:45:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011/01/08 23:16:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Theft Auto IV - Episodes From Liberty City
[2011/01/08 18:45:21 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Sports Interactive
[2011/01/07 23:42:42 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2011/01/07 22:19:21 | 000,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe
[2011/01/07 22:18:36 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sports Interactive
[2011/01/07 22:16:11 | 000,000,000 | ---D | C] -- C:\Program Files\Sports Interactive
[2011/01/07 21:06:44 | 000,580,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\easyUpdatusAPIU.dll
[2011/01/07 21:06:34 | 003,597,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[2011/01/07 21:06:14 | 002,620,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2011/01/07 21:06:02 | 000,111,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
[2011/01/07 02:44:14 | 000,000,000 | ---D | C] -- C:\Users\Paťo\AppData\Local\LogMeIn Hamachi
[2011/01/07 02:43:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2011/01/07 02:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2010/10/16 17:12:44 | 001,232,896 | ---- | C] ( ) -- C:\Windows\System32\lxddserv.dll
[2010/10/16 17:12:44 | 000,999,424 | ---- | C] ( ) -- C:\Windows\System32\lxddusb1.dll
[2010/10/16 17:12:44 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxddpmui.dll
[2010/10/16 17:12:44 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxddlmpm.dll
[2010/10/16 17:12:44 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxddinpa.dll
[2010/10/16 17:12:44 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxddiesc.dll
[2010/10/16 17:12:44 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\LXDDhcp.dll
[2010/10/16 17:12:44 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxddprox.dll
[2010/10/16 17:12:44 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxddpplc.dll
[2010/10/16 17:12:43 | 000,700,416 | ---- | C] ( ) -- C:\Windows\System32\lxddhbn3.dll
[2010/10/16 17:12:43 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxddcomc.dll
[2010/10/16 17:12:43 | 000,425,984 | ---- | C] ( ) -- C:\Windows\System32\lxddcomm.dll
========== Files - Modified Within 30 Days ==========
[2011/02/05 12:33:07 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Paťo\Desktop\OTL.exe
[2011/02/05 12:27:32 | 000,000,113 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011/02/05 12:18:32 | 000,621,994 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/02/05 12:18:32 | 000,111,082 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/02/05 12:18:00 | 000,000,996 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/05 12:16:26 | 005,785,600 | ---- | M] () -- C:\Users\Paťo\Desktop\Gerry Rafferty - Baker Street.mp3
[2011/02/05 12:09:17 | 000,248,367 | ---- | M] () -- C:\Qoobox.rar
[2011/02/05 12:05:26 | 000,000,992 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/05 10:27:59 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:16:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/02/05 10:16:57 | 2012,717,056 | -HS- | M] () -- C:\hiberfil.sys
[2011/02/05 10:16:56 | 000,430,209 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2011/02/04 22:57:51 | 737,011,712 | ---- | M] () -- C:\Users\Paťo\Desktop\Mlceni jehnatek.avi
[2011/02/04 15:31:57 | 000,002,461 | ---- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_04.02.2011_08-53.lnk
[2011/02/03 20:59:41 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/03 18:01:36 | 000,000,994 | ---- | M] () -- C:\Users\Paťo\Desktop\Counter-Strike 1.6.lnk
[2011/02/03 13:52:54 | 004,263,406 | R--- | M] () -- C:\Users\Paťo\Desktop\ComboFix.exe
[2011/02/02 17:18:31 | 3554,057,131 | ---- | M] () -- C:\Users\Paťo\Desktop\HUDBA.rar
[2011/02/02 16:26:03 | 039,627,172 | ---- | M] () -- C:\Users\Paťo\Desktop\ZALOHOVAT.rar
[2011/02/01 17:39:45 | 000,002,154 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011/01/23 14:50:25 | 000,004,608 | ---- | M] () -- C:\Users\Paťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/19 21:22:06 | 000,000,896 | ---- | M] () -- C:\Users\Paťo\AppData\Local\SRDownloader.nast
[2011/01/19 18:45:18 | 000,004,896 | ---- | M] () -- C:\Users\Paťo\AppData\Local\SRDownloader.err
[2011/01/08 04:27:00 | 015,047,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2011/01/08 04:27:00 | 013,011,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2011/01/08 04:27:00 | 010,467,656 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2011/01/08 04:27:00 | 010,078,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll
[2011/01/08 04:27:00 | 005,653,096 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
[2011/01/08 04:27:00 | 004,941,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2011/01/08 04:27:00 | 002,895,976 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2011/01/08 04:27:00 | 002,251,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvenc.dll
[2011/01/08 04:27:00 | 001,965,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll
[2011/01/08 04:27:00 | 000,941,160 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322090.dll
[2011/01/08 04:27:00 | 000,837,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322040.dll
[2011/01/08 04:27:00 | 000,057,960 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2011/01/08 04:27:00 | 000,010,920 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvBridge.kmd
[2011/01/08 04:27:00 | 000,004,756 | ---- | M] () -- C:\Windows\System32\nvinfo.pb
[2011/01/07 22:51:37 | 000,103,959 | -H-- | M] () -- C:\treeinfo.wc
[2011/01/07 21:06:44 | 000,580,200 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\easyUpdatusAPIU.dll
[2011/01/07 21:06:34 | 003,597,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[2011/01/07 21:06:14 | 002,620,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2011/01/07 21:06:02 | 000,111,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
========== Files Created - No Company Name ==========
[2011/02/05 12:27:05 | 000,000,113 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011/02/05 12:16:11 | 005,785,600 | ---- | C] () -- C:\Users\Paťo\Desktop\Gerry Rafferty - Baker Street.mp3
[2011/02/05 12:09:16 | 000,248,367 | ---- | C] () -- C:\Qoobox.rar
[2011/02/04 22:54:49 | 734,040,063 | ---- | C] () -- C:\Users\Paťo\Desktop\Na kridlech vazky.avi
[2011/02/04 22:51:43 | 737,011,712 | ---- | C] () -- C:\Users\Paťo\Desktop\Mlceni jehnatek.avi
[2011/02/04 15:31:57 | 000,002,461 | ---- | C] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\setup_9.0.0.722_04.02.2011_08-53.lnk
[2011/02/03 20:59:41 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/03 18:01:36 | 000,000,994 | ---- | C] () -- C:\Users\Paťo\Desktop\Counter-Strike 1.6.lnk
[2011/02/02 16:24:46 | 3554,057,131 | ---- | C] () -- C:\Users\Paťo\Desktop\HUDBA.rar
[2011/02/02 16:24:46 | 039,627,172 | ---- | C] () -- C:\Users\Paťo\Desktop\ZALOHOVAT.rar
[2011/02/01 17:39:45 | 000,002,154 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011/02/01 17:38:44 | 000,001,857 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011/01/31 22:05:26 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011/01/31 22:05:26 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011/01/31 22:05:25 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/01/31 22:05:25 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/01/31 22:05:25 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/01/31 22:03:25 | 004,263,406 | R--- | C] () -- C:\Users\Paťo\Desktop\ComboFix.exe
[2011/01/09 08:45:01 | 000,001,298 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2011/01/02 23:23:59 | 000,004,896 | ---- | C] () -- C:\Users\Paťo\AppData\Local\SRDownloader.err
[2011/01/02 23:23:55 | 000,000,896 | ---- | C] () -- C:\Users\Paťo\AppData\Local\SRDownloader.nast
[2010/12/05 13:44:34 | 000,004,608 | ---- | C] () -- C:\Users\Paťo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/15 16:54:18 | 000,000,321 | ---- | C] () -- C:\Windows\System32\Remover.ini
[2010/11/15 16:54:17 | 000,000,566 | ---- | C] () -- C:\Windows\System32\SP7302.ini
[2010/11/10 15:03:04 | 000,000,175 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/10/29 11:54:20 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2010/10/22 22:36:08 | 000,000,042 | ---- | C] () -- C:\Windows\oodjobd.INI
[2010/10/16 17:15:48 | 000,000,867 | ---- | C] () -- C:\ProgramData\lxdd
[2010/10/16 17:12:44 | 000,286,720 | ---- | C] () -- C:\Windows\System32\LXDDinst.dll
[2010/10/16 17:12:43 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxddgrd.dll
[2010/10/16 12:54:09 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2010/10/14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010/09/28 20:44:48 | 001,196,032 | ---- | C] () -- C:\Program Files\Game CD Key List 3.90.exe
[2010/04/06 17:33:10 | 000,025,864 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2009/07/14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2007/03/28 13:16:44 | 000,344,064 | ---- | C] () -- C:\Windows\System32\lxddcoin.dll
[2007/01/23 18:40:04 | 000,065,536 | ---- | C] () -- C:\Windows\System32\lxddcaps.dll
[2007/01/09 16:13:08 | 000,692,224 | ---- | C] () -- C:\Windows\System32\lxdddrs.dll
[2006/10/06 16:08:04 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxddcnv4.dll
[2006/05/18 01:47:12 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxddvs.dll
[2002/10/15 23:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\System32\unrar.dll
========== LOP Check ==========
[2011/01/07 11:30:50 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\AIMP
[2010/10/16 11:38:10 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\ESET
[2011/01/24 17:34:28 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\GetRightToGo
[2011/01/07 11:27:23 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\HandBrake
[2010/10/29 13:01:19 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\PC Suite
[2010/11/02 12:00:02 | 000,000,000 | ---D | M] -- C:\Users\eL_Lucho\AppData\Roaming\TuneUp Software
[2011/02/05 12:17:11 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\AIMP
[2010/10/16 14:38:39 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ashampoo
[2010/12/29 09:29:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Audacity
[2010/10/16 13:40:32 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\DAEMON Tools Lite
[2010/10/16 11:31:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ESET
[2010/10/16 15:14:21 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\GHISLER
[2011/01/05 12:59:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\HandBrake
[2011/01/29 01:37:13 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ICQ
[2010/10/16 15:55:50 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Leadertech
[2010/10/29 11:33:23 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PC Suite
[2010/10/16 15:45:31 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PhotoFiltre Studio X
[2010/12/30 23:44:08 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Publish Providers
[2010/11/28 19:52:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Screaming Bee
[2010/12/30 23:44:05 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Sony
[2010/11/01 22:51:10 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\TuneUp Software
[2011/02/04 23:44:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\uTorrent
[2011/01/07 23:42:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2010/11/18 15:55:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VSO
[2010/10/16 11:58:44 | 000,000,000 | ---D | M] -- C:\Users\Zorka\AppData\Roaming\ESET
[2010/10/29 13:15:49 | 000,000,000 | ---D | M] -- C:\Users\Zorka\AppData\Roaming\PC Suite
[2011/01/08 10:24:50 | 000,032,554 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Sidebar" = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun -- [2009/07/14 02:14:38 | 001,173,504 | ---- | M] (Microsoft Corporation)
< c:\windows\*.* /U >
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2010/11/21 16:02:59 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Adobe
[2010/11/03 22:21:17 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ahead
[2011/02/05 12:17:11 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\AIMP
[2010/10/16 14:38:39 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Ashampoo
[2010/12/29 09:29:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Audacity
[2010/10/16 13:40:32 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\DAEMON Tools Lite
[2010/10/16 11:31:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ESET
[2010/10/16 15:14:21 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\GHISLER
[2010/10/22 15:48:18 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Hamachi
[2011/01/05 12:59:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\HandBrake
[2011/01/29 01:37:13 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\ICQ
[2010/10/16 15:45:27 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Identities
[2010/10/16 15:55:50 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Leadertech
[2010/10/16 10:33:41 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Macromedia
[2011/02/03 20:59:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Malwarebytes
[2009/07/14 08:48:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Media Center Programs
[2011/02/01 17:37:32 | 000,000,000 | --SD | M] -- C:\Users\Paťo\AppData\Roaming\Microsoft
[2010/10/16 13:21:17 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Mozilla
[2011/02/05 12:27:06 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Nero
[2010/10/29 11:33:23 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PC Suite
[2010/10/16 15:45:31 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\PhotoFiltre Studio X
[2010/12/30 23:44:08 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Publish Providers
[2010/11/28 19:52:45 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Screaming Bee
[2011/02/02 23:23:40 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Skype
[2011/02/02 16:23:54 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\skypePM
[2010/12/30 23:44:05 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Sony
[2010/11/01 22:51:10 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\TuneUp Software
[2011/02/04 23:44:48 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\uTorrent
[2011/01/07 23:42:42 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VitySoft
[2010/11/18 15:55:52 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\VSO
[2011/01/31 11:53:54 | 000,000,000 | ---D | M] -- C:\Users\Paťo\AppData\Roaming\Winamp
< %APPDATA%\*.exe /s >
[2011/01/07 22:18:36 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\ARPPRODUCTICON.exe
[2011/01/07 22:18:36 | 000,049,152 | R--- | M] (InstallShield Software Corp.) -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\editor_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/07 22:18:36 | 000,049,152 | R--- | M] (InstallShield Software Corp.) -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\fm2005segatest1_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/07 22:18:36 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{EC0AB585-B279-4A77-8BB5-64C403E43EE7}\fm2005segatest_EC0AB585B2794A778BB564C403E43EE7.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ClickCleaner.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ContextMenuManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DesktopCleaner.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DiskAnalyzer.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\DuplicateFilesFinder.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FileSecurity.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FileSplitter.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\FreeMemory.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\IEManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\IPSwitcher.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\JumpListQuickLauncher.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\JunkFileCleaner.exe
[2011/01/30 12:23:32 | 000,005,430 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\LiveUpdate.exe
[2011/01/30 12:23:32 | 000,013,262 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\OptimizationWizard.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\PrivacyProtector.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ProcessManager.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryCleaner.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryDefrag.exe
[2011/01/30 12:23:32 | 000,304,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RegistryTools.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RepairCenter.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\RunShortcutCreator.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\ServiceManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SmartUninstaller.exe
[2011/01/30 12:23:32 | 000,015,086 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\StartupManager.exe
[2011/01/30 12:23:32 | 000,082,726 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SuperCopy.exe
[2011/01/30 12:23:32 | 000,014,534 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SystemFolder_msiexec.exe
[2011/01/30 12:23:32 | 000,007,886 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\SystemInfo.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\TaskSchedulerManager.exe
[2011/01/30 12:23:32 | 000,017,542 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\VisualCustomizer.exe
[2011/01/30 12:23:32 | 000,092,560 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\Windows7Manager.exe
[2011/01/30 12:23:32 | 000,013,262 | R--- | M] () -- C:\Users\Paťo\AppData\Roaming\Microsoft\Installer\{F6E271A7-B642-4CCD-A501-5F8374E9C3CB}\WinUtilities.exe
< MD5 for: AGP440.SYS >
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
< MD5 for: CDROM.SYS >
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\drivers\cdrom.sys
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_db87d184bc84f910\cdrom.sys
[2009/07/14 00:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys
< MD5 for: CNGAUDIT.DLL >
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: CRYPTSVC.DLL >
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\ERDNT\cache\cryptsvc.dll
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\System32\cryptsvc.dll
[2009/07/14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
< MD5 for: EXPLORER.EXE >
[2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\ERDNT\cache\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe
[2009/10/31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009/08/03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: HAL.DLL >
[2009/07/14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\System32\hal.dll
[2009/07/14 02:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll
< MD5 for: IASTORV.SYS >
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
< MD5 for: ISAPNP.SYS >
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\isapnp.sys
[2009/07/14 02:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\isapnp.sys
< MD5 for: LSASS.EXE >
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\ERDNT\cache\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\System32\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_a620e0e5be1ecda7\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_a61fe281be1fb177\lsass.exe
[2009/07/14 02:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_a69eaf60d7456d32\lsass.exe
< MD5 for: NDIS.SYS >
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\ERDNT\cache\ndis.sys
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\System32\drivers\ndis.sys
[2009/07/14 02:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\ERDNT\cache\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVRAID.SYS >
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\drivers\nvraid.sys
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvraid.sys
[2009/07/14 02:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys
< MD5 for: NVSTOR.SYS >
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
< MD5 for: SMSS.EXE >
[2009/07/14 02:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\System32\smss.exe
[2009/07/14 02:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe
< MD5 for: SVCHOST.EXE >
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\ERDNT\cache\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
< MD5 for: TCPIP.SYS >
[2009/07/14 02:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2010/04/09 08:16:33 | 001,289,096 | ---- | M] (Microsoft Corporation) MD5=5D6A83E928F22AF5AC9868B162FFAD0D -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_b38009a0e0d5a32d\tcpip.sys
[2010/04/09 08:24:54 | 001,285,000 | ---- | M] (Microsoft Corporation) MD5=63170B9EE1D0EF0032F0408605671D1A -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_b30e0d41c7a5fe2f\tcpip.sys
[2010/06/14 07:06:58 | 001,288,576 | ---- | M] (Microsoft Corporation) MD5=A39EA325C081AD27461F630C8E3E56E0 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_b3b219fae0b0af43\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\ERDNT\cache\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\System32\drivers\tcpip.sys
[2010/06/14 07:12:30 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=BB7F39C31C4A4417FD318E7CD184E225 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_b33b1c29c7858b92\tcpip.sys
< MD5 for: USERINIT.EXE >
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\ERDNT\cache\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\ERDNT\cache\winlogon.exe
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009/10/28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009/07/14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< MD5 for: WS2_32.DLL >
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\ERDNT\cache\ws2_32.dll
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\System32\ws2_32.dll
[2009/07/14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
[2010/10/24 21:25:38 | 000,043,392 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\drivers\MpNWMon.sys
[2010/10/16 12:54:09 | 000,691,696 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\sptd.sys
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\*.dll /lockedfiles >
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
No captured output from command...
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
No captured output from command...
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
No captured output from command...
< %systemroot%\system32\drivers\*.sys /3 >
< %systemroot%\system32\*.* /3 >
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:25:43 | 000,014,224 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/02/05 10:16:56 | 000,430,209 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2011/02/05 12:18:32 | 000,111,082 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/02/05 12:18:32 | 000,621,994 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/02/05 12:18:32 | 000,738,000 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
========== Files - Unicode (All) ==========
[2011/01/31 18:06:02 | 010,541,705 | ---- | M] ()(C:\Users\Paťo\Desktop\Dj Next - ??? ???? _ SuMMeR HiT (2010).mp4) -- C:\Users\Paťo\Desktop\Dj Next - Хит Лета _ SuMMeR HiT (2010).mp4
[2011/01/31 18:02:49 | 010,541,705 | ---- | C] ()(C:\Users\Paťo\Desktop\Dj Next - ??? ???? _ SuMMeR HiT (2010).mp4) -- C:\Users\Paťo\Desktop\Dj Next - Хит Лета _ SuMMeR HiT (2010).mp4
< End of report >