DDS.txt
DDS (Ver_10-03-17.01) - NTFSX64  
Run by dawe at 17:32:11,54 on Łt 08.06.2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17
Microsoft Windows 7 Professional   6.1.7600.0.1250.420.1029.18.4095.2559 [GMT 2:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\MsgTranAgt64.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\TortoiseGit\bin\TGitCache.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\GetRight\GetRight.exe
C:\Windows\system32\DllHost.exe
C:\Downloads\dds.pif.pif
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
mLocal Page = c:\windows\syswow64\blank.htm
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~2\micros~1\office12\GR469A~1.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
uRun: [DAEMON Tools Lite] "c:\program files (x86)\daemon tools lite\DTLite.exe" -autorun
uRun: [PC Suite Tray] "c:\program files (x86)\nokia\nokia pc suite 7\PCSuite.exe" -onlytray
mRun: [ATKMEDIA] c:\program files (x86)\asus\atk media\DMedia.exe
mRun: [ATKOSD2] c:\program files (x86)\asus\atkosd2\ATKOSD2.exe
mRun: [HControlUser] c:\program files (x86)\asus\atk hotkey\HControlUser.exe
StartupFolder: c:\progra~3\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\progra~3\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\micros~1\office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~1\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~2\micros~1\office12\GRA32A~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~2\micros~1\office12\GR469A~1.DLL
{DBC80044-A445-435b-BC74-9C25C1C588A9}
TB-X64: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
mRun-x64: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun-x64: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun-x64: [RtHDVCpl] c:\program files\realtek\audio\hda\RAVCpl64.exe
mRun-x64: [Skytel] c:\program files\realtek\audio\hda\Skytel.exe
mRun-x64: [(Věchozˇ)] 
mRun-x64: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
================= FIREFOX ===================
FF - ProfilePath - c:\users\dawe\appdata\roaming\mozilla\firefox\profiles\h3uzj1xh.default\
FF - prefs.js: browser.search.selectedEngine - Hyperwords
FF - prefs.js: browser.startup.homepage - file://localhost/C:/moje/frstpage4/frstpage4.html
FF - plugin: c:\program files\divx\divx web player\npdivx32.dll
FF - plugin: c:\program files\mozilla firefox\plugins\nptidfusionplugin.dll
FF - plugin: c:\programdata\id software\quakelive\npquakezero.dll
FF - plugin: c:\users\dawe\appdata\local\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\windows\syswow64\macromed\flash\NPSWF32.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("capability.policy.default.XMLHttpRequest.channel", "noAccess");
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.jit.chrome",       true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("security.checkloaduri", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("bidi.characterset", 1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files (x86)\mozilla firefox\defaults\pref\channel-prefs.js - pref("app.update.channel", "release");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "
http://www.firefox.com");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [2010-1-16 218056]
R1 VWiFiFlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 59904]
R2 ASMMAP64;ASMMAP64;c:\program files\atkgfnex\ASMMAP64.sys [2009-10-4 14904]
R2 ekrn;ESET Service;c:\program files\eset\eset smart security\x86\ekrn.exe [2010-4-7 810120]
R2 epfwwfp;epfwwfp;c:\windows\system32\drivers\epfwwfp.sys [2010-4-7 50600]
R3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [2009-12-3 716872]
R3 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2010-4-7 163888]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit;c:\windows\system32\drivers\NETw5s64.sys [2009-9-15 6952960]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2010-5-29 86120]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2010-3-4 346144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 17920]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2009-12-30 35104]
S3 ENTECH64;ENTECH64;c:\windows\system32\drivers\Entech64.sys [2009-12-5 12744]
S3 GETPADD64;GETPADD64;c:\program files (x86)\asus\winflash\GETPADD64.sys [2007-9-4 13880]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista;c:\windows\system32\drivers\netw5v64.sys [2009-6-10 5434368]
S3 nmwcdcx64;Nokia USB Generic;c:\windows\system32\drivers\ccdcmbox64.sys [2009-10-6 25088]
S3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\ccdcmbx64.sys [2009-10-6 18944]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files (x86)\spyware doctor\pctsAuxs.exe [2010-1-16 359624]
S3 sdCoreService;PC Tools Security Service;c:\program files (x86)\spyware doctor\pctsSvc.exe [2010-1-16 1141712]
S3 StorSvc;Služba úložiště;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]
S3 SwitchBoard;SwitchBoard;c:\program files (x86)\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
S3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-21 1255736]
S4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\common files\macrovision shared\flexnet publisher\FNPLicensingService64.exe [2009-10-5 1038088]
============== File Associations ===============
txtfile="c:\program files (x86)\pspad editor\PSPad.exe" "%1"
=============== Created Last 30 ================
2010-06-08 13:00:56	0	d-----w-	c:\users\dawe\appdata\roaming\ESET
2010-06-08 12:59:53	0	d-----w-	c:\programdata\ESET
2010-06-08 12:59:53	0	d-----w-	c:\program files\ESET
2010-06-08 10:07:36	0	d-----w-	c:\users\dawe\appdata\roaming\Malwarebytes
2010-06-08 10:07:28	24664	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-06-08 10:07:28	0	d-----w-	c:\programdata\Malwarebytes
2010-06-08 10:07:28	0	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2010-06-08 08:44:07	0	d-----w-	c:\program files (x86)\Windows Installer Clean Up
2010-06-05 14:19:20	14352	----a-w-	c:\users\dawe\Windows XP Mode.vmc.vpcbackup
2010-06-04 07:15:31	0	d-----w-	c:\program files (x86)\Microsoft Chart Controls
2010-06-04 07:14:00	0	d-----w-	C:\games
2010-05-30 12:47:39	0	d-----w-	c:\users\dawe\.jnlp-applet
2010-05-29 15:24:28	0	d-----w-	c:\users\dawe\appdata\roaming\NVIDIA
2010-05-29 15:17:16	0	d-----w-	c:\programdata\Futuremark
2010-05-29 14:49:21	0	d-----w-	c:\windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2010-05-29 14:49:21	0	d-----w-	c:\program files (x86)\Futuremark
2010-05-29 07:42:25	0	d-----w-	c:\program files (x86)\NVIDIA Corporation
2010-05-29 07:32:20	0	d-----w-	c:\program files\NVIDIA Corporation
2010-05-29 06:58:55	86120	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2010-05-29 06:58:54	62976	----a-w-	c:\windows\system32\nvapo64v.dll
2010-05-29 06:58:54	22528	----a-w-	c:\windows\system32\nvhdap64.dll
2010-05-29 06:54:59	239208	----a-w-	c:\windows\system32\nvcod1910.dll
2010-05-29 06:54:59	239208	----a-w-	c:\windows\system32\nvcod.dll
2010-05-29 06:54:59	16061032	----a-w-	c:\windows\system32\nvcompiler.dll
2010-05-29 06:54:59	1299048	----a-w-	c:\windows\syswow64\nvapi.dll
2010-05-25 17:08:13	2048	----a-w-	c:\windows\syswow64\tzres.dll
2010-05-25 17:08:13	2048	----a-w-	c:\windows\system32\tzres.dll
2010-05-25 14:21:06	0	d-----w-	c:\users\dawe\appdata\roaming\UDC Profiles
2010-05-25 14:20:32	40824	----a-w-	c:\windows\system32\udcpm.dll
2010-05-25 14:20:24	0	d-----w-	c:\program files (x86)\Universal Document Converter
2010-05-21 08:44:21	14336	----a-w-	c:\windows\system32\drivers\sffp_sd.sys
2010-05-21 08:44:21	109056	----a-w-	c:\windows\system32\drivers\sdbus.sys
2010-05-21 08:44:03	0	d-----w-	c:\windows\syswow64\Wat
2010-05-21 08:44:02	0	d-----w-	c:\windows\system32\Wat
2010-05-21 08:43:33	223448	----a-w-	c:\windows\system32\drivers\fvevol.sys
2010-05-20 14:59:35	0	d-----w-	c:\program files (x86)\Lonely Cat Games
2010-05-12 07:55:25	976896	----a-w-	c:\windows\system32\inetcomm.dll
2010-05-12 07:55:24	740864	----a-w-	c:\windows\syswow64\inetcomm.dll
2010-05-10 19:06:35	0	d-----w-	c:\users\dawe\appdata\roaming\MiKTeX
2010-05-10 19:02:36	0	d-----w-	c:\program files (x86)\LEd
2010-05-10 19:02:19	1499	----a-w-	c:\users\dawe\gsview64.ini
2010-05-10 19:02:14	0	d-----w-	c:\program files\Ghostgum
2010-05-10 19:01:40	0	d-----w-	c:\program files (x86)\gs
2010-05-10 18:56:03	0	d-----w-	c:\programdata\MiKTeX
2010-05-10 18:52:51	0	d-----w-	c:\program files (x86)\MiKTeX 2.8
==================== Find3M  ====================
2010-06-08 09:50:08	636380	----a-w-	c:\windows\system32\perfh005.dat
2010-06-08 09:50:08	125676	----a-w-	c:\windows\system32\perfc005.dat
2010-05-12 09:21:16	270208	------w-	c:\windows\system32\MpSigStub.exe
2010-03-16 19:12:00	91240	----a-w-	c:\windows\system32\nvhotkey.dll
2010-03-16 19:12:00	159336	----a-w-	c:\windows\system32\nvvsvc.exe
2010-03-16 19:12:00	1515624	----a-w-	c:\windows\system32\nvsvcr.dll
2010-03-16 19:12:00	14829160	----a-w-	c:\windows\system32\nvcpl.dll
2010-03-16 19:12:00	116328	----a-w-	c:\windows\system32\nvmctray.dll
2010-03-16 19:12:00	1067624	----a-w-	c:\windows\system32\nvsvc64.dll
2010-03-16 19:11:42	95994	----a-w-	c:\windows\system32\nvcoproc.bin
2010-03-16 19:11:00	82024	----a-w-	c:\windows\system32\nv3dappshextr.dll
2010-03-16 19:11:00	165480	----a-w-	c:\windows\system32\nv3dappshext.dll
2009-07-14 15:17:52	36232	----a-w-	c:\windows\inf\perflib\0405\perfd.dat
2009-07-14 15:17:52	36232	----a-w-	c:\windows\inf\perflib\0405\perfc.dat
2009-07-14 15:17:52	292004	----a-w-	c:\windows\inf\perflib\0405\perfi.dat
2009-07-14 15:17:52	292004	----a-w-	c:\windows\inf\perflib\0405\perfh.dat
2009-07-14 04:54:24	174	--sha-w-	c:\program files\desktop.ini
2009-07-14 04:54:24	174	--sha-w-	c:\program files (x86)\desktop.ini
2009-07-14 01:00:34	291294	----a-w-	c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34	291294	----a-w-	c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32	31548	----a-w-	c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32	31548	----a-w-	c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 20:44:08	9633792	--sha-r-	c:\windows\fonts\StaticCache.dat
2010-01-23 10:43:43	245760	--sha-w-	c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-07-14 01:39:53	398848	--sha-w-	c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45	396800	--sha-w-	c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
============= FINISH: 17:32:47,09 ===============