Re: Málo místa na Disku C
Napsal: 01 led 2014 14:17
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[15 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014.01.01 13:03:42 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys.bak
[2014.01.01 13:03:25 | 000,005,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys.bak
[2014.01.01 13:01:48 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Asus\Plocha\RogueKiller.exe
[2013.12.31 15:13:39 | 000,000,000 | ---- | C] () -- C:\asc_rdflag
[2013.12.26 18:11:06 | 000,047,029 | ---- | C] () -- C:\Documents and Settings\Asus\Plocha\da82cddedd_67540840_o2.jpg
[2013.12.11 18:20:34 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.12.10 16:43:07 | 000,000,149 | ---- | C] () -- C:\extensions.ini
[2013.10.14 20:31:31 | 000,274,056 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.07.16 09:13:00 | 000,001,828 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2013.05.25 11:43:40 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\recently-used.xbel
[2013.05.24 13:32:26 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\fusioncache.dat
[2013.02.13 16:02:23 | 000,026,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013.01.30 14:29:34 | 000,016,304 | ---- | C] () -- C:\WINDOWS\System32\apl003.sys
[2013.01.30 14:29:01 | 000,013,232 | ---- | C] () -- C:\WINDOWS\System32\apf003.sys
[2013.01.28 22:56:24 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2012.11.18 13:52:18 | 000,015,432 | ---- | C] () -- C:\WINDOWS\Launcher.exe
[2012.09.16 14:46:48 | 000,944,168 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-2000478354-1284227242-839522115-1004-0.dat
[2012.09.15 23:15:28 | 000,272,174 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2012.09.05 19:25:17 | 000,000,060 | ---- | C] () -- C:\Documents and Settings\Asus\jagex_cl_runescape_LIVE.dat
[2012.09.05 19:25:17 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\Asus\random.dat
[2012.07.13 12:13:28 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.05.04 19:45:00 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.05.04 19:44:58 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Asus\Data aplikací\PnkBstrK.sys
[2012.05.04 19:44:35 | 000,270,240 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012.05.04 19:44:25 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012.04.22 10:42:48 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.22 10:14:55 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.04.20 15:22:48 | 000,230,752 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2012.04.20 15:22:47 | 000,118,176 | ---- | C] () -- C:\WINDOWS\patchw.dll
[2012.03.23 20:40:25 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2012.03.23 15:49:08 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.03.22 23:27:21 | 000,073,728 | ---- | C] () -- C:\WINDOWS\StkUnist.exe
[2012.03.22 22:53:38 | 000,004,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2012.03.22 22:41:23 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2012.03.22 22:41:22 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2012.03.22 22:41:22 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2012.03.22 22:41:21 | 001,478,656 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2012.03.22 22:41:21 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2012.03.22 22:41:21 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2012.03.22 22:41:19 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2012.03.22 22:36:38 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012.03.22 21:55:10 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.03.22 20:53:00 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.03.22 20:51:39 | 000,273,376 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.22 20:04:25 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.03.22 19:59:28 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ==========
[2012.04.05 14:51:49 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 04:21:55 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:05 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.04.17 15:52:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Battle.net
[2013.08.25 11:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BitRaider
[2013.09.24 16:59:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacks
[2013.09.24 16:59:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacksSetup
[2013.02.10 12:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2013.02.23 16:43:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Enkord
[2013.01.25 17:54:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Hi-Rez Studios
[2014.01.01 09:56:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2013.05.18 20:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\InstallMate
[2013.05.18 21:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2013.02.11 10:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LightScribe
[2012.06.03 09:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nexon
[2012.07.11 18:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NexonEU
[2012.07.06 10:13:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OptimizerPro
[2013.03.11 14:48:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Overwolf
[2013.07.30 20:13:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2013.01.28 17:43:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PopCap Games
[2013.12.26 20:05:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Razer
[2013.08.04 06:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Solid State Networks
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SYSTEMAX Software Development
[2013.05.18 20:20:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2012.04.28 17:14:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WEBZEN
[2013.02.13 14:52:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013.11.24 17:47:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.minecraft
[2013.09.08 08:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.mono
[2012.07.15 08:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.techniclauncher
[2013.07.31 18:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Avnex
[2013.01.25 17:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Awesomium
[2013.02.10 12:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\DAEMON Tools Lite
[2013.06.04 14:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\gbox
[2013.10.14 14:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GeoVid
[2013.10.16 15:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GetRightToGo
[2013.09.22 08:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IGG
[2013.06.15 21:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IObit
[2012.07.26 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\KlLauncherST
[2012.07.12 08:29:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\LolClient
[2013.12.31 20:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Seznam.cz
[2012.04.28 07:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sony Online Entertainment
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\SYSTEMAX Software Development
[2013.02.20 21:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TeamViewer
[2013.06.26 12:33:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TS3Client
[2013.10.04 17:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unitech LLC
[2012.06.23 12:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unity
[2013.09.13 22:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Utherverse
[2013.12.21 07:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\uTorrent
[2013.08.30 20:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WebcamMax
[2012.07.17 13:19:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
========== Purity Check ==========
========== Custom Scans ==========
< >
[2012.03.22 20:00:16 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2012.03.22 20:06:02 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2012.03.22 23:22:09 | 000,000,464 | -H-- | C] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{F7D96075-AD59-4A91-A12C-8B26C7820E21}.job
[2012.07.13 12:14:04 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\Game_Booster_AutoUpdate.job
[2012.07.25 18:21:00 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.02.09 06:52:49 | 000,000,932 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.02.09 06:52:50 | 000,000,936 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.09.22 18:16:58 | 000,000,966 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2000478354-1284227242-839522115-1004Core.job
[2013.09.22 18:16:59 | 000,000,988 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2000478354-1284227242-839522115-1004UA.job
[2013.11.13 18:38:34 | 000,000,270 | ---- | C] () -- C:\WINDOWS\Tasks\Driver Booster Update.job
[2013.11.13 18:38:39 | 000,000,268 | ---- | C] () -- C:\WINDOWS\Tasks\Driver Booster Scan.job
[2013.11.19 18:27:34 | 000,000,396 | -H-- | C] () -- C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
< >
< MD5 for: AGP440.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.03.02 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2006.03.02 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
< MD5 for: CDROM.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2006.03.02 13:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2006.03.02 13:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2006.03.02 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 13:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: HAL.DLL >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 19:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2006.03.02 13:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
< MD5 for: CHANGER.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 19:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
< MD5 for: ISAPNP.SYS >
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2006.03.02 13:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2006.03.02 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.03.02 13:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2006.03.02 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2006.03.02 13:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2006.03.02 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2006.03.02 13:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=D9F19E78F98834CB411D6AD3C68D181A -- C:\WINDOWS\system32\drivers\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 13:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2006.03.02 13:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2006.03.02 13:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[49 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[39 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\3ff9393c9eae2c240878d0ad6a2f54a2\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\3ff9393c9eae2c240878d0ad6a2f54a2\*.tmp -> ]
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[3 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
[2013.02.03 19:57:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Hi-Rez Studios
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2013.11.24 17:47:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.minecraft
[2013.09.08 08:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.mono
[2012.07.15 08:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.techniclauncher
[2013.10.27 17:49:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Adobe
[2013.02.11 10:01:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Ahead
[2013.02.13 14:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Apple Computer
[2013.07.31 18:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Avnex
[2013.01.25 17:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Awesomium
[2013.02.10 12:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\DAEMON Tools Lite
[2013.06.04 14:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\gbox
[2013.10.14 14:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GeoVid
[2013.10.16 15:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GetRightToGo
[2013.02.16 21:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GRETECH
[2012.03.22 20:07:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Identities
[2013.09.22 08:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IGG
[2012.03.22 21:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\InstallShield
[2013.06.15 21:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IObit
[2012.07.26 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\KlLauncherST
[2012.07.12 08:29:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\LolClient
[2012.03.22 21:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Macromedia
[2013.12.31 16:40:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Malwarebytes
[2012.05.04 19:47:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Media Player Classic
[2013.12.13 05:46:05 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Asus\Data aplikací\Microsoft
[2012.07.05 09:54:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Mozilla
[2013.12.31 20:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Seznam.cz
[2014.01.01 13:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Skype
[2012.04.28 07:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sony Online Entertainment
[2012.03.25 10:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sun
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\SYSTEMAX Software Development
[2013.02.20 21:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TeamViewer
[2013.06.26 12:33:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TS3Client
[2013.10.04 17:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unitech LLC
[2012.06.23 12:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unity
[2013.09.13 22:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Utherverse
[2013.12.21 07:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\uTorrent
[2013.08.30 20:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WebcamMax
[2012.03.22 21:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WinRAR
< %APPDATA%\*.exe /s >
[2013.10.27 06:47:04 | 001,392,469 | ---- | M] (TeamExtreme) -- C:\Documents and Settings\Asus\Data aplikací\.minecraft\minecraft launcher\Minecraft Launcher.exe
[2013.11.24 17:39:24 | 000,069,268 | ---- | M] () -- C:\Documents and Settings\Asus\Data aplikací\.minecraft\minecraft launcher\Uninstall.exe
[2012.04.19 09:05:26 | 000,128,888 | ---- | M] (IGG) -- C:\Documents and Settings\Asus\Data aplikací\IGG\Web3D\1.0.0.38\IGGWeb3DMan.exe
[2013.09.22 08:07:55 | 000,726,814 | ---- | M] () -- C:\Documents and Settings\Asus\Data aplikací\IGG\Web3D\1.0.0.38\unins000.exe
[2012.03.22 22:17:10 | 000,024,894 | R--- | M] () -- C:\Documents and Settings\Asus\Data aplikací\Microsoft\Installer\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}\_5af141bb.exe
[2013.10.08 19:27:49 | 000,915,368 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Asus\Data aplikací\Sun\Java\JRERunOnce.exe
[2013.08.01 08:00:00 | 001,130,576 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\utorrent.exe
[2013.08.01 08:00:00 | 001,130,576 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\updates\3.3.1_29988.exe
[2013.08.18 15:30:14 | 000,888,152 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\updates\3.3.1_30017.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2012.03.22 20:50:18 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012.03.22 20:50:18 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012.03.22 20:50:18 | 000,471,040 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\drivers\*.sys /3 >
[2013.12.31 14:07:32 | 001,691,480 | ---- | M] (Creative) -- C:\WINDOWS\system32\drivers\Ambfilt.sys
[2013.12.31 14:07:43 | 001,395,800 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\Monfilt.sys
[2013.12.31 14:07:50 | 005,620,440 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys
< %systemroot%\system32\*.* /3 >
[2013.12.31 14:07:31 | 000,285,288 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\ALSNDMGR.CPL
[2013.12.31 14:07:49 | 000,086,232 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\RtkCoInstIIXP.dll
[2013.12.31 14:07:57 | 000,891,976 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\RTSndMgr.CPL
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 04:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"Akamai NetSession Interface" = "C:\Documents and Settings\Asus\Local Settings\Data aplikací\Akamai\netsession_win.exe"
"Pando Media Booster" = "C:\Program Files\Pando Networks\Media Booster\PMB.exe" -- [2012.10.06 08:32:37 | 003,093,624 | ---- | M] ()
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 04:22:36 | 001,695,232 | ---- | M] (Microsoft Corporation)
"Facebook Update" = "C:\Documents and Settings\Asus\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver -- [2013.09.22 18:16:48 | 000,138,096 | ---- | M] (Facebook Inc.)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.11.14 16:42:42 | 020,584,608 | R--- | M] (Skype Technologies S.A.)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.01.01 13:55:05 | 000,000,512 | ---- | M] () MD5=E850ACBD480FAE17C9978FC06D47B7BA -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013.02.11 06:26:19 | 000,020,265 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\uTorrent\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7.rar.torrent
< *keygen* /s >
< *AntiWPA* /s >
< *loader* /s >
[2013.12.24 14:41:06 | 000,008,874 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\IObit\ASCDownloader\Downloader.log
[2009.05.15 08:03:12 | 000,000,232 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013.11.11 14:39:40 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2013.11.11 14:39:40 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2013.11.11 14:39:40 | 000,006,012 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.11.11 14:39:40 | 000,021,956 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_30fps.gif
[2013.11.11 14:39:40 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.16 15:04:13 | 000,000,000 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\GetRightToGo\FiestaDownloaderEN.data
[2012.06.07 20:16:04 | 000,010,145 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\modules\ExternalLibraryLoader.jsm
[2013.02.03 16:27:00 | 000,000,847 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ac\img\ajax-loader.gif
[2013.02.03 16:27:00 | 000,001,135 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ac\img\loader-icon.png
[2013.02.03 16:27:00 | 000,003,208 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ui\gf\img\loader.gif
[2013.02.03 16:27:00 | 000,001,849 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\wa\TWITTER\resources\ajax-loader.gif
[2013.08.04 16:27:21 | 000,000,370 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Unity\WebPlayerPrefs\files_2edeadfrontier_2ecom\prefdeadfrontier-df3d-deadfrontierloader_2eunity3d.upp
[2014.01.01 12:20:39 | 000,001,537 | ---- | M] () -- \Documents and Settings\Asus\Local Settings\Temporary Internet Files\Content.IE5\S3PZQCR3\AdLoader[1].htm
[2014.01.01 10:47:29 | 000,110,991 | ---- | M] () -- \Documents and Settings\Asus\Local Settings\Temporary Internet Files\Content.IE5\UKBE4M07\AdLoader-7b857a7be889bd57f92da60a9b6146bb.min[1].js
[2012.09.18 08:47:14 | 000,049,032 | ---- | M] () -- \IGG\twclient_us\gameloader.exe
[2013.11.08 21:48:39 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\331.82\WinXP\English\GFExperience\ExtensionLoader.dll
[2007.06.01 10:20:26 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2013.11.13 17:30:14 | 000,010,396 | ---- | M] () -- \Program Files\IObit\IObit Malware Fighter\adsremoval\Firefox\adsremoval@adsremoval.net\lib\downloader.js
[2012.11.01 08:32:14 | 000,057,224 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.09.04 22:34:12 | 000,083,848 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.01.09 11:41:56 | 000,030,608 | ---- | M] () -- \Program Files\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2006.03.02 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 19:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 19:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[15 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2013.09.05 10:43:36 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2013.09.13 00:53:56 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.dll
[2013.10.09 22:12:45 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.ni.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2006.03.02 13:00:00 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2013.05.24 13:31:48 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.12.30 15:29:43 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.09 22:25:43 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.12.30 15:30:01 | 000,086,016 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2013.01.09 22:04:02 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.08.17 10:11:59 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a95e0af6fa5d2e8ffd5e0091f6513271\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.08.14 23:32:57 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ba6670610621b25b1608e457ba0ef305\System.Runtime.Serialization.ni.dll
[2013.08.18 14:01:10 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.12 14:26:44 | 002,658,304 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2010.03.18 12:16:28 | 001,026,936 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\System.Runtime.Serialization.dll.x86
[2012.07.16 04:56:01 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.09 22:19:51 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.07.16 04:55:59 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.09 22:19:47 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2004.07.15 13:31:54 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 10:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2007.10.26 03:16:32 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 05:06:54 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 01:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 01:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 03:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2006.03.02 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[15 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2006.03.02 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2014.01.01 13:33:50 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak
[2006.11.22 17:35:00 | 000,982,272 | ---- | M] () -- \WINDOWS\system32\drivers\smserial.sys
[2014.01.01 13:33:52 | 000,982,272 | ---- | M] () -- \WINDOWS\system32\drivers\smserial.sys.bak
< *w7lxe* /s >
========== Files - Unicode (All) ==========
[2012.06.05 14:43:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
[2012.06.05 14:43:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
[2012.04.19 20:16:56 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
[2012.04.19 20:16:56 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
[2012.04.19 19:08:16 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
[2012.04.19 19:08:16 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
========== Alternate Data Streams ==========
@Alternate Data Stream - 145 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:373E1720
< End of report >
[15 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2014.01.01 13:03:42 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys.bak
[2014.01.01 13:03:25 | 000,005,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys.bak
[2014.01.01 13:01:48 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Asus\Plocha\RogueKiller.exe
[2013.12.31 15:13:39 | 000,000,000 | ---- | C] () -- C:\asc_rdflag
[2013.12.26 18:11:06 | 000,047,029 | ---- | C] () -- C:\Documents and Settings\Asus\Plocha\da82cddedd_67540840_o2.jpg
[2013.12.11 18:20:34 | 000,002,283 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.12.10 16:43:07 | 000,000,149 | ---- | C] () -- C:\extensions.ini
[2013.10.14 20:31:31 | 000,274,056 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\FontCache3.0.0.0.dat
[2013.07.16 09:13:00 | 000,001,828 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2013.05.25 11:43:40 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\recently-used.xbel
[2013.05.24 13:32:26 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\fusioncache.dat
[2013.02.13 16:02:23 | 000,026,084 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013.01.30 14:29:34 | 000,016,304 | ---- | C] () -- C:\WINDOWS\System32\apl003.sys
[2013.01.30 14:29:01 | 000,013,232 | ---- | C] () -- C:\WINDOWS\System32\apf003.sys
[2013.01.28 22:56:24 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2012.11.18 13:52:18 | 000,015,432 | ---- | C] () -- C:\WINDOWS\Launcher.exe
[2012.09.16 14:46:48 | 000,944,168 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-2000478354-1284227242-839522115-1004-0.dat
[2012.09.15 23:15:28 | 000,272,174 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
[2012.09.05 19:25:17 | 000,000,060 | ---- | C] () -- C:\Documents and Settings\Asus\jagex_cl_runescape_LIVE.dat
[2012.09.05 19:25:17 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\Asus\random.dat
[2012.07.13 12:13:28 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.05.04 19:45:00 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012.05.04 19:44:58 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Asus\Data aplikací\PnkBstrK.sys
[2012.05.04 19:44:35 | 000,270,240 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012.05.04 19:44:25 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012.04.22 10:42:48 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\Asus\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.22 10:14:55 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.04.20 15:22:48 | 000,230,752 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2012.04.20 15:22:47 | 000,118,176 | ---- | C] () -- C:\WINDOWS\patchw.dll
[2012.03.23 20:40:25 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2012.03.23 15:49:08 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.03.22 23:27:21 | 000,073,728 | ---- | C] () -- C:\WINDOWS\StkUnist.exe
[2012.03.22 22:53:38 | 000,004,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2012.03.22 22:41:23 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2012.03.22 22:41:22 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2012.03.22 22:41:22 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2012.03.22 22:41:21 | 001,478,656 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2012.03.22 22:41:21 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2012.03.22 22:41:21 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2012.03.22 22:41:19 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2012.03.22 22:36:38 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012.03.22 21:55:10 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.03.22 20:53:00 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.03.22 20:51:39 | 000,273,376 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.22 20:04:25 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.03.22 19:59:28 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== ZeroAccess Check ==========
[2012.04.05 14:51:49 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 04:21:55 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 11:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 04:22:05 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.04.17 15:52:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Battle.net
[2013.08.25 11:51:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BitRaider
[2013.09.24 16:59:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacks
[2013.09.24 16:59:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\BlueStacksSetup
[2013.02.10 12:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2013.02.23 16:43:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Enkord
[2013.01.25 17:54:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Hi-Rez Studios
[2014.01.01 09:56:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2013.05.18 20:47:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\InstallMate
[2013.05.18 21:05:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\IObit
[2013.02.11 10:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\LightScribe
[2012.06.03 09:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Nexon
[2012.07.11 18:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\NexonEU
[2012.07.06 10:13:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\OptimizerPro
[2013.03.11 14:48:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Overwolf
[2013.07.30 20:13:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PMB Files
[2013.01.28 17:43:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PopCap Games
[2013.12.26 20:05:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Razer
[2013.08.04 06:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Solid State Networks
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\SYSTEMAX Software Development
[2013.05.18 20:20:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\TEMP
[2012.04.28 17:14:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\WEBZEN
[2013.02.13 14:52:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013.11.24 17:47:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.minecraft
[2013.09.08 08:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.mono
[2012.07.15 08:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.techniclauncher
[2013.07.31 18:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Avnex
[2013.01.25 17:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Awesomium
[2013.02.10 12:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\DAEMON Tools Lite
[2013.06.04 14:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\gbox
[2013.10.14 14:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GeoVid
[2013.10.16 15:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GetRightToGo
[2013.09.22 08:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IGG
[2013.06.15 21:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IObit
[2012.07.26 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\KlLauncherST
[2012.07.12 08:29:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\LolClient
[2013.12.31 20:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Seznam.cz
[2012.04.28 07:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sony Online Entertainment
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\SYSTEMAX Software Development
[2013.02.20 21:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TeamViewer
[2013.06.26 12:33:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TS3Client
[2013.10.04 17:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unitech LLC
[2012.06.23 12:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unity
[2013.09.13 22:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Utherverse
[2013.12.21 07:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\uTorrent
[2013.08.30 20:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WebcamMax
[2012.07.17 13:19:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Data aplikací\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
========== Purity Check ==========
========== Custom Scans ==========
< >
[2012.03.22 20:00:16 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2012.03.22 20:06:02 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2012.03.22 23:22:09 | 000,000,464 | -H-- | C] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{F7D96075-AD59-4A91-A12C-8B26C7820E21}.job
[2012.07.13 12:14:04 | 000,000,276 | ---- | C] () -- C:\WINDOWS\Tasks\Game_Booster_AutoUpdate.job
[2012.07.25 18:21:00 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.02.09 06:52:49 | 000,000,932 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.02.09 06:52:50 | 000,000,936 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2013.09.22 18:16:58 | 000,000,966 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2000478354-1284227242-839522115-1004Core.job
[2013.09.22 18:16:59 | 000,000,988 | ---- | C] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2000478354-1284227242-839522115-1004UA.job
[2013.11.13 18:38:34 | 000,000,270 | ---- | C] () -- C:\WINDOWS\Tasks\Driver Booster Update.job
[2013.11.13 18:38:39 | 000,000,268 | ---- | C] () -- C:\WINDOWS\Tasks\Driver Booster Scan.job
[2013.11.19 18:27:34 | 000,000,396 | -H-- | C] () -- C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
< >
< MD5 for: AGP440.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2006.03.02 13:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: AUTOCHK.EXE >
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 04:22:10 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2006.03.02 13:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
< MD5 for: CDROM.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 19:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2011.05.09 23:48:16 | 000,062,592 | ---- | M] (Microsoft Corporation) MD5=7B53584D94E9D8716B2DE91D5F1CB42D -- C:\WINDOWS\system32\dllcache\cdrom.sys
[2006.03.02 13:00:00 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
< MD5 for: CRYPTSVC.DLL >
[2006.03.02 13:00:00 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 04:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll
< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 04:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2006.03.02 13:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 04:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2006.03.02 13:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: HAL.DLL >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 19:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 19:31:28 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2006.03.02 13:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
< MD5 for: CHANGER.SYS >
[2006.03.02 13:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 19:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
< MD5 for: ISAPNP.SYS >
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2012.03.22 23:40:33 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2006.03.02 13:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 03:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys
< MD5 for: LSASS.EXE >
[2006.03.02 13:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 04:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 20:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2006.03.02 13:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
< MD5 for: NETLOGON.DLL >
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 19:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2006.03.02 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 04:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2006.03.02 13:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2006.03.02 13:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 04:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 04:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
< MD5 for: TCPIP.SYS >
[2008.06.20 11:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2008.06.20 11:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 20:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2006.03.02 13:00:00 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[2008.06.20 12:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[2008.06.20 12:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=D9F19E78F98834CB411D6AD3C68D181A -- C:\WINDOWS\system32\drivers\tcpip.sys
< MD5 for: USERINIT.EXE >
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 04:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2006.03.02 13:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2006.03.02 13:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 04:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2006.03.02 13:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 04:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< >
< %systemroot%*.* /U /s >
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\AppPatch\*.tmp files -> C:\WINDOWS\AppPatch\*.tmp -> ]
[49 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[39 C:\WINDOWS\Installer\*.tmp files -> C:\WINDOWS\Installer\*.tmp -> ]
[1 C:\WINDOWS\SoftwareDistribution\Download\3ff9393c9eae2c240878d0ad6a2f54a2\*.tmp files -> C:\WINDOWS\SoftwareDistribution\Download\3ff9393c9eae2c240878d0ad6a2f54a2\*.tmp -> ]
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
[3 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp files -> C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< %ALLUSERSPROFILE%\Application Data\*. >
[2013.02.03 19:57:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Hi-Rez Studios
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2013.11.24 17:47:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.minecraft
[2013.09.08 08:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.mono
[2012.07.15 08:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\.techniclauncher
[2013.10.27 17:49:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Adobe
[2013.02.11 10:01:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Ahead
[2013.02.13 14:54:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Apple Computer
[2013.07.31 18:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Avnex
[2013.01.25 17:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Awesomium
[2013.02.10 12:11:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\DAEMON Tools Lite
[2013.06.04 14:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\gbox
[2013.10.14 14:55:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GeoVid
[2013.10.16 15:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GetRightToGo
[2013.02.16 21:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\GRETECH
[2012.03.22 20:07:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Identities
[2013.09.22 08:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IGG
[2012.03.22 21:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\InstallShield
[2013.06.15 21:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\IObit
[2012.07.26 17:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\KlLauncherST
[2012.07.12 08:29:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\LolClient
[2012.03.22 21:02:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Macromedia
[2013.12.31 16:40:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Malwarebytes
[2012.05.04 19:47:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Media Player Classic
[2013.12.13 05:46:05 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Asus\Data aplikací\Microsoft
[2012.07.05 09:54:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Mozilla
[2013.12.31 20:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Seznam.cz
[2014.01.01 13:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Skype
[2012.04.28 07:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sony Online Entertainment
[2012.03.25 10:31:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Sun
[2013.01.28 18:28:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\SYSTEMAX Software Development
[2013.02.20 21:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TeamViewer
[2013.06.26 12:33:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\TS3Client
[2013.10.04 17:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unitech LLC
[2012.06.23 12:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Unity
[2013.09.13 22:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\Utherverse
[2013.12.21 07:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\uTorrent
[2013.08.30 20:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WebcamMax
[2012.03.22 21:55:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Asus\Data aplikací\WinRAR
< %APPDATA%\*.exe /s >
[2013.10.27 06:47:04 | 001,392,469 | ---- | M] (TeamExtreme) -- C:\Documents and Settings\Asus\Data aplikací\.minecraft\minecraft launcher\Minecraft Launcher.exe
[2013.11.24 17:39:24 | 000,069,268 | ---- | M] () -- C:\Documents and Settings\Asus\Data aplikací\.minecraft\minecraft launcher\Uninstall.exe
[2012.04.19 09:05:26 | 000,128,888 | ---- | M] (IGG) -- C:\Documents and Settings\Asus\Data aplikací\IGG\Web3D\1.0.0.38\IGGWeb3DMan.exe
[2013.09.22 08:07:55 | 000,726,814 | ---- | M] () -- C:\Documents and Settings\Asus\Data aplikací\IGG\Web3D\1.0.0.38\unins000.exe
[2012.03.22 22:17:10 | 000,024,894 | R--- | M] () -- C:\Documents and Settings\Asus\Data aplikací\Microsoft\Installer\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}\_5af141bb.exe
[2013.10.08 19:27:49 | 000,915,368 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Asus\Data aplikací\Sun\Java\JRERunOnce.exe
[2013.08.01 08:00:00 | 001,130,576 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\utorrent.exe
[2013.08.01 08:00:00 | 001,130,576 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\updates\3.3.1_29988.exe
[2013.08.18 15:30:14 | 000,888,152 | ---- | M] (BitTorrent Inc.) -- C:\Documents and Settings\Asus\Data aplikací\uTorrent\updates\3.3.1_30017.exe
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2012.03.22 20:50:18 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012.03.22 20:50:18 | 000,638,976 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012.03.22 20:50:18 | 000,471,040 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\system32\*.dll /lockedfiles >
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\system32\drivers\*.sys /3 >
[2013.12.31 14:07:32 | 001,691,480 | ---- | M] (Creative) -- C:\WINDOWS\system32\drivers\Ambfilt.sys
[2013.12.31 14:07:43 | 001,395,800 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\Monfilt.sys
[2013.12.31 14:07:50 | 005,620,440 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys
< %systemroot%\system32\*.* /3 >
[2013.12.31 14:07:31 | 000,285,288 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\ALSNDMGR.CPL
[2013.12.31 14:07:49 | 000,086,232 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\RtkCoInstIIXP.dll
[2013.12.31 14:07:57 | 000,891,976 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\system32\RTSndMgr.CPL
[15 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %SYSTEMDRIVE%\*.exe >
< >
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 04:22:17 | 000,015,360 | ---- | M] (Microsoft Corporation)
"Akamai NetSession Interface" = "C:\Documents and Settings\Asus\Local Settings\Data aplikací\Akamai\netsession_win.exe"
"Pando Media Booster" = "C:\Program Files\Pando Networks\Media Booster\PMB.exe" -- [2012.10.06 08:32:37 | 003,093,624 | ---- | M] ()
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 04:22:36 | 001,695,232 | ---- | M] (Microsoft Corporation)
"Facebook Update" = "C:\Documents and Settings\Asus\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver -- [2013.09.22 18:16:48 | 000,138,096 | ---- | M] (Facebook Inc.)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun -- [2013.11.14 16:42:42 | 020,584,608 | R--- | M] (Skype Technologies S.A.)
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs
< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs
< >
< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect /usepmtimer
< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.01.01 13:55:05 | 000,000,512 | ---- | M] () MD5=E850ACBD480FAE17C9978FC06D47B7BA -- C:\PhysicalMBR.bin
< >
< *crack* /s >
[2013.02.11 06:26:19 | 000,020,265 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\uTorrent\[PC GAME MULTI] - Gran Theft Auto San Andreas + Crack NoCD - (Perfect DVD Version) - (Eng-Ita-Deu-Fra-Esp) - (By G-ADLVR_R7.rar.torrent
< *keygen* /s >
< *AntiWPA* /s >
< *loader* /s >
[2013.12.24 14:41:06 | 000,008,874 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\IObit\ASCDownloader\Downloader.log
[2009.05.15 08:03:12 | 000,000,232 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2013.11.11 14:39:40 | 000,072,638 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.gif
[2013.11.11 14:39:40 | 000,003,032 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\loader.png
[2013.11.11 14:39:40 | 000,006,012 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_15fps.gif
[2013.11.11 14:39:40 | 000,021,956 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\normal\loader_30fps.gif
[2013.11.11 14:39:40 | 000,009,772 | ---- | M] () -- \Documents and Settings\All Users\Data aplikací\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.16 15:04:13 | 000,000,000 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\GetRightToGo\FiestaDownloaderEN.data
[2012.06.07 20:16:04 | 000,010,145 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\modules\ExternalLibraryLoader.jsm
[2013.02.03 16:27:00 | 000,000,847 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ac\img\ajax-loader.gif
[2013.02.03 16:27:00 | 000,001,135 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ac\img\loader-icon.png
[2013.02.03 16:27:00 | 000,003,208 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\ui\gf\img\loader.gif
[2013.02.03 16:27:00 | 000,001,849 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Mozilla\Firefox\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\chrome\CT3220468\content\tb\al\wa\TWITTER\resources\ajax-loader.gif
[2013.08.04 16:27:21 | 000,000,370 | ---- | M] () -- \Documents and Settings\Asus\Data aplikací\Unity\WebPlayerPrefs\files_2edeadfrontier_2ecom\prefdeadfrontier-df3d-deadfrontierloader_2eunity3d.upp
[2014.01.01 12:20:39 | 000,001,537 | ---- | M] () -- \Documents and Settings\Asus\Local Settings\Temporary Internet Files\Content.IE5\S3PZQCR3\AdLoader[1].htm
[2014.01.01 10:47:29 | 000,110,991 | ---- | M] () -- \Documents and Settings\Asus\Local Settings\Temporary Internet Files\Content.IE5\UKBE4M07\AdLoader-7b857a7be889bd57f92da60a9b6146bb.min[1].js
[2012.09.18 08:47:14 | 000,049,032 | ---- | M] () -- \IGG\twclient_us\gameloader.exe
[2013.11.08 21:48:39 | 001,168,672 | ---- | M] () -- \NVIDIA\DisplayDriver\331.82\WinXP\English\GFExperience\ExtensionLoader.dll
[2007.06.01 10:20:26 | 000,177,712 | ---- | M] () -- \Program Files\Common Files\Ahead\Lib\NeGuideStoreLoader.dll
[2006.10.26 13:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 13:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2013.11.13 17:30:14 | 000,010,396 | ---- | M] () -- \Program Files\IObit\IObit Malware Fighter\adsremoval\Firefox\adsremoval@adsremoval.net\lib\downloader.js
[2012.11.01 08:32:14 | 000,057,224 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2012.09.04 22:34:12 | 000,083,848 | ---- | M] () -- \Program Files\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.01.09 11:41:56 | 000,030,608 | ---- | M] () -- \Program Files\Seznam.cz\distribution\install\cz.seznam.software.libfoxloader-3.0.0-win32.zip
[2006.03.02 13:00:00 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 19:31:47 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 19:31:48 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[15 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2013.09.05 10:43:36 | 000,012,532 | ---- | M] () -- \WINDOWS\system32\Adobe\Shockwave 12\shockwave_Projector_Loader.dcr
[2008.04.14 04:21:39 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dllcache\dmloader.dll
< *minodlogin* /s >
< *tnod* /s >
< *AutoKMS* /s >
< *activator* /s >
< *serial* /s >
[2013.09.13 00:53:56 | 000,434,368 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.dll
[2013.10.09 22:12:45 | 001,164,288 | ---- | M] () -- \Program Files\Microsoft Silverlight\5.1.20913.0\System.Runtime.Serialization.ni.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2006.03.02 13:00:00 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2013.05.24 13:31:48 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.12.30 15:29:43 | 000,011,776 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.09 22:25:43 | 000,131,072 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.12.30 15:30:01 | 000,086,016 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2013.01.09 22:04:02 | 000,970,752 | ---- | M] () -- \WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.08.17 10:11:59 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a95e0af6fa5d2e8ffd5e0091f6513271\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.08.14 23:32:57 | 002,345,472 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ba6670610621b25b1608e457ba0ef305\System.Runtime.Serialization.ni.dll
[2013.08.18 14:01:10 | 000,311,296 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.12 14:26:44 | 002,658,304 | ---- | M] () -- \WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2010.03.18 12:16:28 | 001,026,936 | R--- | M] () -- \WINDOWS\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\System.Runtime.Serialization.dll.x86
[2012.07.16 04:56:01 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.09 22:19:51 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2012.07.16 04:55:59 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.09 22:19:47 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2004.07.15 13:31:54 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
[2008.07.25 10:17:00 | 000,131,072 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2007.10.26 03:16:32 | 000,011,776 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.09.27 00:12:26 | 000,970,752 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 05:06:54 | 001,039,040 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 12:16:28 | 000,122,264 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 01:33:16 | 000,017,840 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 01:33:16 | 000,099,208 | ---- | M] () -- \WINDOWS\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2008.04.14 03:17:25 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2006.03.02 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[15 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2006.03.02 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2006.03.02 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 03:21:08 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2014.01.01 13:33:50 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak
[2006.11.22 17:35:00 | 000,982,272 | ---- | M] () -- \WINDOWS\system32\drivers\smserial.sys
[2014.01.01 13:33:52 | 000,982,272 | ---- | M] () -- \WINDOWS\system32\drivers\smserial.sys.bak
< *w7lxe* /s >
========== Files - Unicode (All) ==========
[2012.06.05 14:43:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
[2012.06.05 14:43:47 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
[2012.04.19 20:16:56 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
[2012.04.19 20:16:56 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
[2012.04.19 19:08:16 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
[2012.04.19 19:08:16 | 000,000,000 | ---D | M](C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\㺀ˀ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\駠ʈ
(C:\Documents and Settings\Asus\??) -- C:\Documents and Settings\Asus\惠ɳ
========== Alternate Data Streams ==========
@Alternate Data Stream - 145 bytes -> C:\Documents and Settings\All Users\Data aplikací\TEMP:373E1720
< End of report >